Remember almost everyone else has them too. Do you like the idea of people who HATE us and our allies having nukes and us (and our allies) not? I sure don't.
Second, this is not new stuff. Even our tank shells are depleted with uranium. Our newer missiles...all of them are what they called nuclear tipped...for some lovely explosive effects.:-)
Someone will always dominate the world militarily...unless men all around the world suddenly change their DNA patterns spontaneously. If you've got to pick from China, the U.S. and Pakistan, who would you rather it be?
To be honest,that's a bunch of crap. You should always assume the lowest amount of trust in an application's security, especially applications of this nature. If they didn't tell me what was wrong, I wouldn't believe for a second that they fixed it.
Well then you should be responsible enough to tell you users they need to upgrade and/or to do it for them. It's not that difficult, my little brother and sister do it all the time for me in linux when I'm away. I just say type this and this and this and ttyl. Not very difficult. But truly, how many of them use SSH? I somehow don't buy that absolutely clueless people are using some like SSH. The two are mutually exclusive it would seem to me.
If you had a T-1, I'm sure you know how. Since when does security focus distribute exploit code? Script kiddies scavenge ready made exploits, Security Focus doesn't provide that.
I'm going to disagree. Script kiddies don't look at security focus, they go looking for things to exploit the vulnerabilities written by well skills hackers/crackers. If they waiting any amount of time to upgrade, the only people who would have upgraded would have been people like me who download and install the latest version of EVERYTHING just because they can. The people with the bandwidth that need to upgrade wouldn't do it, because they can't afford the service outage. With full disclosure they'll be more or less forced into upgrading. I'm sure the multi-platform release will be done in a few hours also.
I'm sure it's more than the last three. Really, how many new features does SSH need? Bugs in an application of this type that is as mature as SSH tend to be security related. It actually makes me feel better that they're quickly responding to security bugs and doing new releases because of it.
Script kiddiesprobably has known about this for a while. Full diclosure is not only a way to get the word out so that it can be quickly patched (which apparently it already is) but also a way to kind of force people into an upgrade. That way no one with an old version of ssh is sitting there being unknowingly used for DDOS attacks because they didn't know he needed to upgrade.
Full disclosure has its downsides,but the upsides pretty much cancel them out.
This is just more proof that nothing is 100% secure.:-) How does that saying go, if it can be devise it what? Some want to finish that for me?
Regardless of that though, I get on my knees and thank God everyday for SSH. It's saved me many many many hassles from simply forgetting to turn it off on computers on my home's network.
I mean really, I'd see every movie that came out if it didn't cost me 8 dollars to see them! Really, they'd probably make MORE money if they'd cut prices!
This seems so dumb, we're making millions of dollars off of this amount, so let's raise ticket prices, pay movie theater employees next to nothing (they don't even have to make minimum wage and I know many who don't!) and tell people who are supportng us by buying DVDs that it is illegal for them to decrypt them so they can enjoy the product they paid for!
It's 3 dollars. Really folks, 3 Dollars.:-) That's one less bag of potatoe chips you can buy a month. Let's face it, there is such a thing as inflation, et cetera, eventually they had to increase the price. Three years without a price hike is pretty freaking good!
Hammer is definitely gonna be an interesting and very cool set of chips! Glad to see someone is working on enhancing linux for it. Especially since the big bad wolf in Redmond hasn't yet even done a beta of 64-bit XP for the Hammers.
Buddy boy is picky!:-) Doesn't like icons, doesn't like generally anything related to ease of use. Just get a pc, install some distro without X and deal if you want it to be difficult.;-) j/k
I can understand some of his gripes though. Configurability is definitely a virtue in an OS, and (while I doubt his accuracy) he descriptions hows it o be lacking such a virtue.
Did they really think people wanted to pay that much for memory? Why didn't they just engineer a nice DDR chipset in the first place? Seems like a no brainer to me. Uh gee, people like paying less per performance unit so...
I'm not a socialist...a socialist would fully support these insane patents. Since after all, in the socialist government, the government controls everything and eventually owns everything (communism.)
This whole patent mess is getting absolutely ridiculous! Any idiot could have designed the force feedback stuff, even Microsoft! How did that get a patent on something so simple???
This is a pathetically stupid way to throw away tax dollars (court costs), and lawyer's fees. There is hardly any doubt that they'll lose this one, it's an idiotic claim! Assuming they win though, we all lose - monetarily. Can you say, price hikes?
Games don't HAVE to use directx. In fact, directx is a fairly klunky api. SDL is much more simple and is multi platform (win32/directx is one of its many targets.) Then their are the john carmack's who insist on doing it all themselves.:-)
Seriously, game developers could make serious progress in the multi-platform arena by switching to.NET and someone doing an SDL.NET extension.
One might say that this will slow the code down...but if yout hink about it...it's calling outside of the interpretted code for the really time consuming stuff. So, really there would be a very minor slow down. And if game developers ever adopted this, it'd prolly be at a time when CPUs have become fast enough, that we don't even need to begin to worry about the speed loss. (Truthfully we probably don't now, so long as the machine has a good 3d accelerator in it.)
What i like about this, is that in the future it could well mean that i could use my windows application in linux, NOT via wine, simply because they are.NET based. This would save alot of hassle for me, because Windows crashes at a pathetically high rate, yet I have to use it!
Then,games...should games ever begin to use.NET (although, it wouldn't make much sense to most developer why they should) we'd get automatic cross-platform games...something most hard-core gamers would just love!
Bad thing: should Microsoft ever decide they don't like Mono...well the API will somehow become so that Mono can't reimplement it.
Slashdot Mirror
uh...I was referring to the fact that microsoft is hypocritical in that they criticize open-source software constantly yet, they use it.
I'm fully aware that it's a problem that was first found on the unices!
Which is actually something to be proud of. Microsoft and all of it's money didn't (while borrowing the code) find the security problem.
How does BSD prevent this problem where Linux can not? I'm genuinely curious as I am not a BSD user.
Well first off I've gotta say:
HA HA!!!!!
Are any of us REALLY surprised at this though? This is Microsoft afterall. Even my chemistry TA was complaining about them today...
Remember almost everyone else has them too. Do you like the idea of people who HATE us and our allies having nukes and us (and our allies) not? I sure don't.
:-)
Second, this is not new stuff. Even our tank shells are depleted with uranium. Our newer missiles...all of them are what they called nuclear tipped...for some lovely explosive effects.
Someone will always dominate the world militarily...unless men all around the world suddenly change their DNA patterns spontaneously. If you've got to pick from China, the U.S. and Pakistan, who would you rather it be?
To be honest,that's a bunch of crap. You should always assume the lowest amount of trust in an application's security, especially applications of this nature. If they didn't tell me what was wrong, I wouldn't believe for a second that they fixed it.
Well then you should be responsible enough to tell you users they need to upgrade and/or to do it for them. It's not that difficult, my little brother and sister do it all the time for me in linux when I'm away. I just say type this and this and this and ttyl. Not very difficult. But truly, how many of them use SSH? I somehow don't buy that absolutely clueless people are using some like SSH. The two are mutually exclusive it would seem to me.
How many clueless users are going to a) have a dedicate server and b) be using ssh in the first place?
If you had a T-1, I'm sure you know how. Since when does security focus distribute exploit code? Script kiddies scavenge ready made exploits, Security Focus doesn't provide that.
I'm going to disagree. Script kiddies don't look at security focus, they go looking for things to exploit the vulnerabilities written by well skills hackers/crackers. If they waiting any amount of time to upgrade, the only people who would have upgraded would have been people like me who download and install the latest version of EVERYTHING just because they can. The people with the bandwidth that need to upgrade wouldn't do it, because they can't afford the service outage. With full disclosure they'll be more or less forced into upgrading. I'm sure the multi-platform release will be done in a few hours also.
I'm sure it's more than the last three. Really, how many new features does SSH need? Bugs in an application of this type that is as mature as SSH tend to be security related. It actually makes me feel better that they're quickly responding to security bugs and doing new releases because of it.
Script kiddiesprobably has known about this for a while. Full diclosure is not only a way to get the word out so that it can be quickly patched (which apparently it already is) but also a way to kind of force people into an upgrade. That way no one with an old version of ssh is sitting there being unknowingly used for DDOS attacks because they didn't know he needed to upgrade.
Full disclosure has its downsides,but the upsides pretty much cancel them out.
This is just more proof that nothing is 100% secure. :-) How does that saying go, if it can be devise it what? Some want to finish that for me?
Regardless of that though, I get on my knees and thank God everyday for SSH. It's saved me many many many hassles from simply forgetting to turn it off on computers on my home's network.
I mean really, I'd see every movie that came out if it didn't cost me 8 dollars to see them! Really, they'd probably make MORE money if they'd cut prices!
This seems so dumb, we're making millions of dollars off of this amount, so let's raise ticket prices, pay movie theater employees next to nothing (they don't even have to make minimum wage and I know many who don't!) and tell people who are supportng us by buying DVDs that it is illegal for them to decrypt them so they can enjoy the product they paid for!
dude...potatoe IS a correct spelling of the word.
It's 3 dollars. Really folks, 3 Dollars. :-) That's one less bag of potatoe chips you can buy a month. Let's face it, there is such a thing as inflation, et cetera, eventually they had to increase the price. Three years without a price hike is pretty freaking good!
Hammer is definitely gonna be an interesting and very cool set of chips! Glad to see someone is working on enhancing linux for it. Especially since the big bad wolf in Redmond hasn't yet even done a beta of 64-bit XP for the Hammers.
Buddy boy is picky! :-) ;-) j/k
Doesn't like icons, doesn't like generally anything related to ease of use. Just get a pc, install some distro without X and deal if you want it to be difficult.
I can understand some of his gripes though. Configurability is definitely a virtue in an OS, and (while I doubt his accuracy) he descriptions hows it o be lacking such a virtue.
Did they really think people wanted to pay that much for memory? Why didn't they just engineer a nice DDR chipset in the first place? Seems like a no brainer to me. Uh gee, people like paying less per performance unit so...
I'm not a socialist...a socialist would fully support these insane patents. Since after all, in the socialist government, the government controls everything and eventually owns everything (communism.)
This whole patent mess is getting absolutely ridiculous! Any idiot could have designed the force feedback stuff, even Microsoft! How did that get a patent on something so simple???
This is a pathetically stupid way to throw away tax dollars (court costs), and lawyer's fees. There is hardly any doubt that they'll lose this one, it's an idiotic claim! Assuming they win though, we all lose - monetarily. Can you say, price hikes?
I was wrong, so I'm now playing down my stance. :-)
That was jsut for the people not familiar with RMS who has been known to be openly confrontational.
For those of you following the development, this was brought up because of Transgaming, several weeks ago. Although, at that time, the plan was GPL.
Personally, I'm not bothered by it. They have a right to do as they wish with the project they created, and LGPL prolly won't harm to much else.
Games don't HAVE to use directx. In fact, directx is a fairly klunky api. SDL is much more simple and is multi platform (win32/directx is one of its many targets.) Then their are the john carmack's who insist on doing it all themselves. :-)
.NET and someone doing an SDL .NET extension.
Seriously, game developers could make serious progress in the multi-platform arena by switching to
One might say that this will slow the code down...but if yout hink about it...it's calling outside of the interpretted code for the really time consuming stuff. So, really there would be a very minor slow down. And if game developers ever adopted this, it'd prolly be at a time when CPUs have become fast enough, that we don't even need to begin to worry about the speed loss. (Truthfully we probably don't now, so long as the machine has a good 3d accelerator in it.)
I have Windows XP Pro thank you very much. Please keepy our ignorance to yourself.
What i like about this, is that in the future it could well mean that i could use my windows application in linux, NOT via wine, simply because they are .NET based. This would save alot of hassle for me, because Windows crashes at a pathetically high rate, yet I have to use it!
.NET (although, it wouldn't make much sense to most developer why they should) we'd get automatic cross-platform games...something most hard-core gamers would just love!
Then,games...should games ever begin to use
Bad thing: should Microsoft ever decide they don't like Mono...well the API will somehow become so that Mono can't reimplement it.