It's all going.NET with the new technologies based on that. They're ditching Win32, though there will be binary compatibility for older apps. The kernel will remain mostly unchanged; it's the overlying technologies that are being rewritten. Not only will this make things much safer (.NET is garbage-collected, type-safe, etc.), but it allows for much easier development (compare MFC to, say, WinForms).
Hate Microsoft or not, they're taking a step in the right direction with Longhorn by replacing all that "cruft" (my favorite term for such things). Of course, I still think Apple will just come out with something even better with Longhorn, but at the least, I'll be happy having the majority of people getting their computers into a managed memory environment where I don't have to worry as much about an app taking things down.
Instead of discussing the technology (which is actually pretty cool...they do have smart engineers at Microsoft), I have a feeling this will be a bunch of +5 Funny Microsoft-bash posts.
One third referencing some obscure GUI from the past where something almost like this has been done already, another third referencing some future project not released yet doing the same, and the rest a bunch of +5 Funny "jokes" rehashing old Microsoft jokes from the last eight years. Okay, I'm generalizing, but that's also what people will be doing about this.:)
Seriously, it looks like interesting stuff, and I can't wait to not only develop with it, but develop with the competing technologies that will also spring up as a result.
Oh, and for the record, before people say it--OS X does use the 3D card, but only for fast blitting. It is still 2D. Not actual 3D acceleration using hardware triangles like this, where you're dealing with a camera viewport and using meshes.
Personally, I find it disturbing and more than a little annoying that Michael feels the need to frame the issue by posting his opinion in the article like its his own personal first comment, instead of putting his opinion into a comment like the rest of us have to.
As for the hypocrisy on the part of Markos, just the other day he said, "We can assume all conservative pundits are on the payola rolls" of the White House. Meanwhile, he's on the Dean payolla roll. Even though he disclosed it, nobody knew it was THAT much. It's more than a little hypocritical.
Anyone remember the study from last year that showed people who slept more hours lived shorter lives than those who slept less? Yeah, I ignored it too, just like this one. Sleep less, get fat; sleep more, lose years in your life!
And yet, when Microsoft does nothing, people like you complain that "Microsoft is doing nothing because their 95% market share of OS dominance allows them not to care."
If people want to use Norton, they'll still use Norton. Nobody's holding a gun to people's heads.
Exactly. People have been wanting something like this for a long time, and now that it's out, expect some Slashdotters and the like to bitch that it exists. It seems no matter what Microsoft does, they're "shoving down our throats" or "adding cruft." There would be complaints if Microsoft did nothing.
I don't normally stoop to Microsoft Bashing, but security vulnerabilities in icons and cursors?!?!?
No, security vulnerabilities in the libraries that handle them, just like the libpng, imlib2, and Mozilla XMB vulnerabilities. It happens (even if it's not on the Slashdot front page...).
The problem is that Slashdot never makes that distinction and rarely do the posters. When a Microsoft shell vulnerability is announced, someone asks, "When was the last time Linux had a vulnerability like this?", and it seems most people rarely bring up that Linux is just a kernel and so the comparison doesn't apply.
Something I've noticed is that it's become okay to be a gamer, even a computer gamer. When I first got into computers in the seventh grade, you were a nerd if you chatted with your friends via text. A mere three years later, and it was hip to be chatting your friends on Yahoo or AIM. Jocks and trendy girls were sending e-mails to each other, and it was okay.
While it was kind of hypocritical, it is cool because the result since has been that the image of a gamer is more mainstream now. In fact, I've noticed a lot more older gamers these days, which is natural since the people who first played Super Mario Bros. in the 80s are grown adults now, often with families, who still follow gaming. But I think the barriers of age, social class, and so on have kind of broken down. Though you still have gamers even other gamers won't touch, like EQ2 players.;) The nerds of nerds.
All in all, though I think gaming companies are in trouble, the gamer is doing pretty well these days. And yes, we are human.
Isn't it funny how Linux kernel versions affected are explicity mentioned in Slashdot's articles on the subject? You'd think the fact SP2 fixed the other two vulnerabilities already would have been an important point to state. It's not like SP2 just came out or anything; what is it, over half a year now?
I love when Michael posts every little bulletin from Microsoft to make it appear that it's ridden with security holes. A lot of people here seem to only get their security news from Slashdot. What if Windows allowed arbitrary code execution just from viewing a PDF file? Slashdot would be all over it. And yet, it's one of today's Gentoo vulnerability announcements--Xpdf has a fatal flaw. But such stories get rejected by the editors in favor of more Microsoft.
LinuxSecurity keeps a running list of daily vulnerability announcements from all the distros. Just click on a distro and be amazed at all the buffer overruns, root exploits, code execution, and more that never get reported on this site.
"Three New Microsoft Bulletins?" Try 13 new Debian bulletins in the past week. Gentoo has announced 12 since last Sunday alone.
Why aren't these things announced like Microsoft bulletins are? Because Microsoft articles generate more page hits...which is great for the banner ads. They're using you guys.
This attitude of the flawless Linux is really, really dangerous, because Linux distros are just as ridden with software holes as Windows systems are accused of being, but you'd never know it if all you did was visit Slashdot...and we all know what a false sense of security leads to...
Of course, Slashdot shouldn't stop posting about Microsoft vulnerabilities. But snide comments like "security-is-number-one dept." make this place seem like a site of nothing but flamebait for Linux fanboys. There's more to security than just hating Microsoft and ignoring Linux security flaws.
I know I risk karma for this post, but I'm really shocked at the illogic and immaturity displayed on Slashdot, compared to when it began in the 90s. Laughing about Microsoft bulletins in some weird schadenfreude doesn't make the Linux kernel any less imperfect (see yesterday's article) or its distros (see LinuxSecurity any given day for pages of bulletins all collected together).
I've seen plenty of weird things in Linux distros, like privilege escalation in MPlayer. MPlayer, a video player! People really need to start paying attention to LinuxSecurity and witness all the monthly vulnerabilities for their distros. They rarely get mentioned on Slashdot (for whatever reason).
Random sampling from Gentoo's advisory list:
Gentoo: HylaFAX hfaxd unauthorized login vulnerability Date: Tuesday, 11 January 2005 HylaFAX is subject to a vulnerability in its username matching code, potentially allowing remote users to bypass access control lists.
Gentoo: o3read Buffer overflow during file conversion Date: Tuesday, 11 January 2005 A buffer overflow in o3read allows an attacker to execute arbitrary code by way of a specially crafted XML file.
Gentoo: imlib2 Buffer overflows in image decoding Date: Tuesday, 11 January 2005 Multiple overflows have been found in the imlib2 library image decoding routines, potentially allowing the execution of arbitrary code.
Gentoo: Kpdf, Koffice More vulnerabilities in included Xpdf
Date: Tuesday, 11 January 2005 KPdf and KOffice both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code if a user is enticed to view a malicious PDF file....and these were announced on one day! Notice Slashdot is silent.
Nice to know that all software is flawed, because it is made by flawed humans. Nothing is inherently better than the other, Linux or Windows. Don't forget yesterday's Linux security article. Just a friendly reminder before the regularly scheduled Microsoft-bashing...now have at it.:)
Re:Si-fi/fantasy
on
Top 50 DVDs
·
· Score: 2, Interesting
Maybe because sci-fi/fantasy geeks want to own the films and watch them over and over, and watch the extras. Other people (read: normal) most likely just rent movies now and then such as comedies and dramas. I can't imagine someone getting passionately excited about buying "The Terminal;" I'm sure many people just rent it, watch it, and don't want to see it again. But geeks will BUY freakin' Lord of the Rings, damn you.
The box set is probably up there because of the first movie included in it--it's a new digital transfer that beats the pants off the original. Totally worth it (and worth it for the DVD extras of the sequels, regardless of the quality of the films).
Wait a minute, why does an article critical of the security patch process of Linux equate to an attack on OSS and the "demise of Linux?"
To turn a specific criticism into such a universal attack is the result of turning Linux into some universal movement instead of just another OS. Is the userbase really so insecure that one criticism like this from developers is enough to bring out back-patting posts like the parent? Something to think about.
For entertainment, I do. But for archival purposes, I buy the CD and rip it to a FLAC file using EAC. I just want the absolute best format to be watching my movies in. I hate the idea that I'm missing out on so much visual detail in today's low-resolution, blurry DVDs, and I want the closest theatrical experience possible--whichever format permits the closest to that will be the one I want to support.
Your post illustrates part of the problem--what is the security process for Linux? We don't really know. It's unclear. Check out the discussion below the LWN article. It resorts to "check Google."
I read it best when someone said Linux is written for leverage to compete with Windows and other operating systems, while BSD is geared toward stability of the features already in it. That's why you get Linux supporting ten different filesystems while BSD is focused on getting one working right.
Neither is "better" because it's subjective, but I do think Linux needs someone in position of Security Officer like the BSDs do. I think 2.6 has been a rush to include beta code and implement new features in a production kernel, which has had disastrous effects. My switch from FreeBSD 4.x to 5.x has, however, been nothing but smooth so far.
Slashdot Mirror
Simple answer: No.
.NET with the new technologies based on that. They're ditching Win32, though there will be binary compatibility for older apps. The kernel will remain mostly unchanged; it's the overlying technologies that are being rewritten. Not only will this make things much safer (.NET is garbage-collected, type-safe, etc.), but it allows for much easier development (compare MFC to, say, WinForms).
It's all going
Hate Microsoft or not, they're taking a step in the right direction with Longhorn by replacing all that "cruft" (my favorite term for such things). Of course, I still think Apple will just come out with something even better with Longhorn, but at the least, I'll be happy having the majority of people getting their computers into a managed memory environment where I don't have to worry as much about an app taking things down.
Instead of discussing the technology (which is actually pretty cool...they do have smart engineers at Microsoft), I have a feeling this will be a bunch of +5 Funny Microsoft-bash posts.
:)
One third referencing some obscure GUI from the past where something almost like this has been done already, another third referencing some future project not released yet doing the same, and the rest a bunch of +5 Funny "jokes" rehashing old Microsoft jokes from the last eight years. Okay, I'm generalizing, but that's also what people will be doing about this.
Seriously, it looks like interesting stuff, and I can't wait to not only develop with it, but develop with the competing technologies that will also spring up as a result.
Oh, and for the record, before people say it--OS X does use the 3D card, but only for fast blitting. It is still 2D. Not actual 3D acceleration using hardware triangles like this, where you're dealing with a camera viewport and using meshes.
Personally, I find it disturbing and more than a little annoying that Michael feels the need to frame the issue by posting his opinion in the article like its his own personal first comment, instead of putting his opinion into a comment like the rest of us have to.
As for the hypocrisy on the part of Markos, just the other day he said, "We can assume all conservative pundits are on the payola rolls" of the White House. Meanwhile, he's on the Dean payolla roll. Even though he disclosed it, nobody knew it was THAT much. It's more than a little hypocritical.
Even if MICHAEL doesn't think so.
-- Random Slashdot post from mid-1998.
For the most part, there wasn't a lot to report on related to Linux in 2004, other than SCO, SCO, SCO. And that was in the first six months.
Call it the iBrator.
Anyone remember the study from last year that showed people who slept more hours lived shorter lives than those who slept less? Yeah, I ignored it too, just like this one. Sleep less, get fat; sleep more, lose years in your life!
And yet, when Microsoft does nothing, people like you complain that "Microsoft is doing nothing because their 95% market share of OS dominance allows them not to care."
If people want to use Norton, they'll still use Norton. Nobody's holding a gun to people's heads.
Exactly. People have been wanting something like this for a long time, and now that it's out, expect some Slashdotters and the like to bitch that it exists. It seems no matter what Microsoft does, they're "shoving down our throats" or "adding cruft." There would be complaints if Microsoft did nothing.
I don't normally stoop to Microsoft Bashing, but security vulnerabilities in icons and cursors?!?!?
No, security vulnerabilities in the libraries that handle them, just like the libpng, imlib2, and Mozilla XMB vulnerabilities. It happens (even if it's not on the Slashdot front page...).
I'm labelled a "troll" for pointing facts out.
The problem is that Slashdot never makes that distinction and rarely do the posters. When a Microsoft shell vulnerability is announced, someone asks, "When was the last time Linux had a vulnerability like this?", and it seems most people rarely bring up that Linux is just a kernel and so the comparison doesn't apply.
Something I've noticed is that it's become okay to be a gamer, even a computer gamer. When I first got into computers in the seventh grade, you were a nerd if you chatted with your friends via text. A mere three years later, and it was hip to be chatting your friends on Yahoo or AIM. Jocks and trendy girls were sending e-mails to each other, and it was okay.
;) The nerds of nerds.
While it was kind of hypocritical, it is cool because the result since has been that the image of a gamer is more mainstream now. In fact, I've noticed a lot more older gamers these days, which is natural since the people who first played Super Mario Bros. in the 80s are grown adults now, often with families, who still follow gaming. But I think the barriers of age, social class, and so on have kind of broken down. Though you still have gamers even other gamers won't touch, like EQ2 players.
All in all, though I think gaming companies are in trouble, the gamer is doing pretty well these days. And yes, we are human.
Isn't it funny how Linux kernel versions affected are explicity mentioned in Slashdot's articles on the subject? You'd think the fact SP2 fixed the other two vulnerabilities already would have been an important point to state. It's not like SP2 just came out or anything; what is it, over half a year now?
I love when Michael posts every little bulletin from Microsoft to make it appear that it's ridden with security holes. A lot of people here seem to only get their security news from Slashdot. What if Windows allowed arbitrary code execution just from viewing a PDF file? Slashdot would be all over it. And yet, it's one of today's Gentoo vulnerability announcements--Xpdf has a fatal flaw. But such stories get rejected by the editors in favor of more Microsoft.
LinuxSecurity keeps a running list of daily vulnerability announcements from all the distros. Just click on a distro and be amazed at all the buffer overruns, root exploits, code execution, and more that never get reported on this site.
"Three New Microsoft Bulletins?" Try 13 new Debian bulletins in the past week. Gentoo has announced 12 since last Sunday alone.
Why aren't these things announced like Microsoft bulletins are? Because Microsoft articles generate more page hits...which is great for the banner ads. They're using you guys.
This attitude of the flawless Linux is really, really dangerous, because Linux distros are just as ridden with software holes as Windows systems are accused of being, but you'd never know it if all you did was visit Slashdot...and we all know what a false sense of security leads to...
Of course, Slashdot shouldn't stop posting about Microsoft vulnerabilities. But snide comments like "security-is-number-one dept." make this place seem like a site of nothing but flamebait for Linux fanboys. There's more to security than just hating Microsoft and ignoring Linux security flaws.
I know I risk karma for this post, but I'm really shocked at the illogic and immaturity displayed on Slashdot, compared to when it began in the 90s. Laughing about Microsoft bulletins in some weird schadenfreude doesn't make the Linux kernel any less imperfect (see yesterday's article) or its distros (see LinuxSecurity any given day for pages of bulletins all collected together).
At least it's not in the kernel...
...and these were announced on one day! Notice Slashdot is silent.
I've seen plenty of weird things in Linux distros, like privilege escalation in MPlayer. MPlayer, a video player! People really need to start paying attention to LinuxSecurity and witness all the monthly vulnerabilities for their distros. They rarely get mentioned on Slashdot (for whatever reason).
Random sampling from Gentoo's advisory list:
Gentoo: HylaFAX hfaxd unauthorized login vulnerability
Date: Tuesday, 11 January 2005
HylaFAX is subject to a vulnerability in its username matching code, potentially allowing remote users to bypass access control lists.
Gentoo: o3read Buffer overflow during file conversion
Date: Tuesday, 11 January 2005
A buffer overflow in o3read allows an attacker to execute arbitrary code by way of a specially crafted XML file.
Gentoo: imlib2 Buffer overflows in image decoding
Date: Tuesday, 11 January 2005
Multiple overflows have been found in the imlib2 library image decoding routines, potentially allowing the execution of arbitrary code.
Gentoo: Kpdf, Koffice More vulnerabilities in included Xpdf
Date: Tuesday, 11 January 2005
KPdf and KOffice both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code if a user is enticed to view a malicious PDF file.
Yesterday.
Nice to know that all software is flawed, because it is made by flawed humans. Nothing is inherently better than the other, Linux or Windows. Don't forget yesterday's Linux security article. Just a friendly reminder before the regularly scheduled Microsoft-bashing...now have at it. :)
Maybe because sci-fi/fantasy geeks want to own the films and watch them over and over, and watch the extras. Other people (read: normal) most likely just rent movies now and then such as comedies and dramas. I can't imagine someone getting passionately excited about buying "The Terminal;" I'm sure many people just rent it, watch it, and don't want to see it again. But geeks will BUY freakin' Lord of the Rings, damn you.
The box set is probably up there because of the first movie included in it--it's a new digital transfer that beats the pants off the original. Totally worth it (and worth it for the DVD extras of the sequels, regardless of the quality of the films).
Wow, 600,000. So, I take it we're all over the Bnetd fiasco then?
Wait a minute, why does an article critical of the security patch process of Linux equate to an attack on OSS and the "demise of Linux?"
To turn a specific criticism into such a universal attack is the result of turning Linux into some universal movement instead of just another OS. Is the userbase really so insecure that one criticism like this from developers is enough to bring out back-patting posts like the parent? Something to think about.
For entertainment, I do. But for archival purposes, I buy the CD and rip it to a FLAC file using EAC. I just want the absolute best format to be watching my movies in. I hate the idea that I'm missing out on so much visual detail in today's low-resolution, blurry DVDs, and I want the closest theatrical experience possible--whichever format permits the closest to that will be the one I want to support.
Your post illustrates part of the problem--what is the security process for Linux? We don't really know. It's unclear. Check out the discussion below the LWN article. It resorts to "check Google."
I read it best when someone said Linux is written for leverage to compete with Windows and other operating systems, while BSD is geared toward stability of the features already in it. That's why you get Linux supporting ten different filesystems while BSD is focused on getting one working right.
Neither is "better" because it's subjective, but I do think Linux needs someone in position of Security Officer like the BSDs do. I think 2.6 has been a rush to include beta code and implement new features in a production kernel, which has had disastrous effects. My switch from FreeBSD 4.x to 5.x has, however, been nothing but smooth so far.