Slashdot Mirror


User: chrysalis

chrysalis's activity in the archive.

Stories
0
Comments
604
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 604

  1. They are shooting themselves in the foot on Record Labels Push for iTunes Price Hike · · Score: 1

    Why don't people buy cds? Simple : they are expensive for what you get.

    Honestly, when you buy an album or a compilation, how many tracks do you _really_ like? Maybe 4 or 5, it's very rare to like the whole disc.

    Paying $20.00 + for something I don't enjoy that much is stopping me from buying records.

    But when I discovered iTunes I love loved it. With iTunes you _know_ what you are buying. You buy songs you like and at $0.99/song it is not that expensive.

    Music is nice for personnal pleasure, but you can live without it (or just listen to the radio). And I just can't afford to buy CDs or to buy iTunes tracks if the price is high. So instead of paying more (what majors want), I would have to stop buying.

    This is an old debate, but I honestly think that if software was affordable, there will be less piracy. The same thing applies to music.

  2. Gimp and Photoshop interoperability on The Gimp from the Eyes of a Photoshop User · · Score: 1

    Just like Office and OpenOffice, the problem with Gimp (even 2) is that it doesn't properly support the Photoshop's PSD format.

  3. If you wonder what a virus is : on New Windows Worm on the Loose · · Score: 2, Funny

    Here is an introduction to virus for non-windows users.

  4. Why swapping is _good_ (another article) on Tuning Linux VM swapping · · Score: 2, Insightful

    http://00f.net/item/14/
    describe why swapping is _good_.

  5. Use Mozilla and keyboard-based navigation on User Interface and Carpal Tunnel - Tech Solutions? · · Score: 1

    Surfing the web is sometimes that may cause serious injuries to your wrists.

    You must constantly try to click on very small links. In order to do so, you first move the pointer near the zone you need to click, and then you unintentionnally stress all your muscles in order to "slow down" the pointer and put it to the exact target location. _This_ is exactly what brings RSIs.

    If you have to work with browsers all day long, definitely use the Mozilla suite or Firefox. Instead of having to use the mouse, everything can be made through the keyboard. Type the beginning of a text link and the browser will highlight it. Hit Enter and the link will be followed. For broken, unaccessible web sites, a carret can be enabled in order to "click" on any area of a web page.
    Mozilla and Firefox also includes plenty of handy keyboard shortcuts and once you're familiar with them, you will never need the mouse any more.

    I had a RSI last year, and using keyboard-based navigation really helped.

  6. Re:JOE? How about JED? on JOE Hits 3.0 · · Score: 1

    Yes, Jed is indeed very light compared to Emacs and totally extensible.

  7. Waiting months for a new version? on Painlessly Update FreeBSD · · Score: 1

    "Unlike most Linux distributions it isn't necessary to wait months for a new version to be released for you to upgrade your system."

    Either this is a joke, or this guy never installed a Linux distro. Or maybe it was Debian Stable and he didn't realize what "stable" means.

    Sure, the BSD ports system is nice. But there's no need to make a blind comparative with "most Linux distributions" to justify it. It just feed trolls without actually helping anyone.

  8. HP48 GX was the best ! on HP Releases New RPN Scientific Calculator · · Score: 2, Insightful

    A while back I owned a HP 28S.

    Then a 48SX and it was really an amazing beast. Not as a calculator but as a geek machine. Programming in assembly language was a breeze. I really loved the Saturn CPU. In fact, I spent a lot of time at school coding on the calculator instead of listening to teachers :) A lot of other people were hacking on that calculator, there was a real scene, with a lot of good free software.

    Then the HP48GX was out. It rocked. It was twice faster as the HP48SX. More people joined the HP 48 scene, new tricks were found (like using interrupts for grey levels), minitel services were there to share and download code... well... it was just excellent.

    -HPdream.

  9. IT is nice when you don't have a real life on Appreciating Your Stressful IT Job? · · Score: 2, Interesting

    I'm exactly in the same situation, working as a xhtml/php developper and sysadmin.

    It used to be fun but I now fed up with the job because it never ends.

    When I leave off the bed, I read my emails and discover already mails from the job. For important stuff I immediately start working from home.

    Then I go to the office. Because there are tons of small but "very urgent" stuff to complete, I often have to eat in front of my computer instead of going out.

    I leave the office at a random time. I can't tell my girlfriend and my daughter "I'd be back at 6:30pm", I don't know, it depend on the work.

    Then, at home, I turn on the computer, review slashdot, read my professional email, complete some tasks that I couldn't complete before leaving the office, etc. Then I Google for hints on things I will have to do at work the next day. Then I keep an eye on servers, watch Cacti graphs to be sure that everything is ok on the network.

    Finally I go to the bed. And no, I can't sleep quietly. If a server goes down I receive a SMS and I have to immediately bring it back up. And maybe go to the office, regardless of the day and the hour. In this very last case, I get some extra salary, but I'd prefer to not have that salary and be totally free of my job.

    This is fun for some time. But now I really dream of a work with fixed working hours. And a work that _really_ ends when I'm back home.

    I've been thinking about opening a shop to sell shirts. Yes, the salary would be minimal, but at least, when I'm back home, the job is finished. I can do anything else. If I would turn my computer on, it would be to have fun with it or to work on my own projects.

    I'm almost sure with such a life style I'd feel better, stressless and I'd better enjoy the life despite the minimal salary and the fact that my IT studies would be pointless.

  10. OpenBSD is not vulnerable on Secret Repairs Preceded TCP Flaw Release · · Score: 4, Informative

    No, everyone is not vulnerable to the recently published vulnerability in the TCP protocol that allows to shut down BGP routers. Because Cisco hardware is, stupid writers yell that the whole internet is vulnerable. Come on, Cisco is not the internet.

    As stated by Theo de Raadt and Henning Brauer, OpenBSD is not vulnerable because (quoting Henning) :

    Even without TCP MD5, bgpd on OpenBSD is not affected, because:

    we use random emphereal ports
    we do not use insanely hughe window sizes as Cisco does
    we require the RST sequence number to be right on the edge of the window

    (quoting Theo) :

    That is right. If you have a Cisco, you can tear down BGP sessions by spoofing:

    64K of

    SYN?s or RST?s sent to #.#.#.#:179 -> #.#.#.#:{1024,+512,+512,...}

    The SYN and RST methods are different, but the end effect is that a tiny little burst of packets will cause a flap.

    OpenBSD (and I am sure other systems too) have for some time contained partial countermeasures against these things.

    OpenBSD has one other thing. The target port numbers have been random for quite some time. Instead of the Unix/Windows way of 1024,1025,1026,... adding 1 to the port number each time a new local socket is established? we have been doing random for quite some time. That means a random selection between 1024 and 49151. This makes both these attacks 48,000 times harder; unless you already know the remote port number in question, you must now send 48,000 more packets to effect a change.

    We?ve made a few post-3.5 changes of our own, since we are uncomfortable with the ACK-storm potention of the solutions being proposed by the UK and Cisco people; in-the window SYN or RST?s cause ACK replies which are rate limited.

    It will have the most impact on vendors who do BGP over poor TCP stacks. In particular, Cisco.

    Cisco has not been teaching engineers to block SYN?s coming in; they have only been teaching them to block SYN-ACK?s from going out in return. And? well, you?ll see.

    Ehm, actually OpenBSD is vulnerable. To quote Mike Frantzen : The exploit has a one in 206,703,891,006,465 chance of succeeding. An exhaustive search would require 11,162,010,114,349,110 bytes of traffic which would take 962 days at a saturated gigabit per second. Or two hundred years on a T1. :)

  11. OpenBSD is _not_ vulnerable on TCP Vulnerability Published · · Score: 2, Interesting

    No, everyone is not vulnerable to the recently published vulnerability in the TCP protocol that allows to shut down BGP routers. Because Cisco hardware is, stupid writers yell that the whole internet is vulnerable. Come on, Cisco is not the internet.

    As stated by Theo de Raadt and Henning Brauer, OpenBSD is not vulnerable because (quoting Henning) :

    Even without TCP MD5, bgpd on OpenBSD is not affected, because: - we use random emphereal ports - we do not use insanely hughe window sizes as Cisco does - we require the RST sequence number to be right on the edge of the window

    (quoting Theo) :

    That is right. If you have a Cisco, you can tear down BGP sessions by
    spoofing:

    64K of
    SYN's or RST's sent to #.#.#.#:179 -> #.#.#.#:{1024,+512,+512,...}

    The SYN and RST methods are different, but the end effect is that
    a tiny little burst of packets will cause a flap.

    OpenBSD (and I am sure other systems too) have for some time contained
    partial countermeasures against these things.

    OpenBSD has one other thing. The target port numbers have been random
    for quite some time. Instead of the Unix/Windows way of
    1024,1025,1026,... adding 1 to the port number each time a new local
    socket is established... we have been doing random for quite some
    time. That means a random selection between 1024 and 49151. This
    makes both these attacks 48,000 times harder; unless you already know
    the remote port number in question, you must now send 48,000 more
    packets to effect a change.

    We've made a few post-3.5 changes of our own, since we are
    uncomfortable with the ACK-storm potention of the solutions being
    proposed by the UK and Cisco people; in-the window SYN or RST's cause
    ACK replies which are rate limited.

    It will have the most impact on vendors who do BGP over poor TCP
    stacks. In particular, Cisco.

    Cisco has not been teaching engineers to block SYN's coming in; they
    have only been teaching them to block SYN-ACK's from going out in
    return. And... well, you'll see.

  12. Re:Edisson did not invent the film camera on A Movie From Before Movies Were Invented · · Score: 1

    Edison himself didn't invent anything.
    He was more a businessman and a mediatic man than anything else.
    Real guys under his employment like Tesla actually discovered amazing things, but Edison made his best to hide the facts.

  13. An introduction to viruses on Unprecedented level of Virus Alerts · · Score: 4, Funny

    A lot /. readers are not familiar with Windows and may ask what "virus" means in computer science. So in order to better understand this article, here's a short presentation.

    Virus are popular peer-to-peer sharing systems designed and optimized for Windows platforms.
    Great features of these systems over other P2P systems :
    - It's free software, although the license is often missing.
    - They are very well maintained. New versions are released almost every day.
    - They are easy to use : no need for a GUI, no need for a CLI, everything is fully automated.
    - Updates are also automatic.
    - No need to tweak your firewall, popular viruses can work on port 25 using a SMTP-like protocol.

    In order to join this community, you just have to run an installer called "outlook.exe". To improve your experience, the "internet explorer" add-on is also recommended.

    And how handy, the installer and its add-on are part of the vanilla "Windows" installation CD set. No need to download anything and no registration is required. Very convenient.

    Once the installer ("outlook.exe") has been started, an Evolution-like interface pops up. This is bloat, it can be safely ignored. Directly go to the "add contact" panel and fill in email addresses of friends you want to share executable with. Wait a few minutes (check the internet link is ok) et voila, viruses are automatically downloaded, installed and configured.

    You know understand why this p2p system is so popular in the Windows world : easy to install, easy to use, and the operating system keeps a lot of unfixed security holes in order to avoid breaking backward-compatibility with older viruses.

  14. Just like MacOS on Zero Install: The Future of Linux on the Desktop? · · Score: 1

    This is the way MacOS works since day one.

    This is the way Atari (TOS) computers are working since day one.

    In fact this is the way almost any non-Windows non-Unix operating system works.

  15. CARP also works on Linux, NetBSD and OpenBSD 3.5 on Firewall Failover With pfsync And CARP · · Score: 3, Informative

    Try UCARP a portable userland implementation.

  16. The flaw is in IE, not Yahoo / Hotmail on Yahoo and Hotmail Filter Flaw · · Score: 2, Informative

    The flaw relies on a proprietary extension of Internet Explorer.

    This extension has nothing to do with HTML specifications as documented by the W3C.

    Yahoo! did nothing bad. The Yahoo! filtering system works. Yahoo is not supposed to deal with every browser specific non-standard extension.

    If I release a patch for Mozilla that implements a tag that format your hard disk, should we immediately blame every webmail on the planet because there's a vulnerability here?

    No. And the fact that IE is widely used shouldn't mean that it should be a special case and that every program out there should care about its silly specific extensions.

  17. Re:FreeBSD5.1 PHP4 Apache2 on Apache 1.3.x vs. 2.0.x: The Debate Returns · · Score: 1

    The same combination has been a disaster for me.
    Under load, the box becomes unresponsive (not crashed, but the server is very long to answer).
    Tried FreeBSD-current with the same result.
    A Gentoo Linux box with the same hardware, same software installed from portage works flawlessly.

  18. This is mandatory for webmails on AOL Blocking Spammers' Web Sites · · Score: 4, Interesting

    The company I'm working for provides free web service ( http://www.skymail.fr ).

    This kind of service frequently gets abused by spammers. Two they abuse it :

    1) they open an account, just to have a valid address in order to bypass basic spam filters. Then, they send their spam through other servers using this address as the sender.

    2) they use scripts to send spam through the service, as any regular user would. This is extremely annoying.

    For 1) we publish SPF for all domains we send mail from. Now, it's up to people to enable SPF on their mail servers.

    For 2) we filter _all_ packets coming from China, Korea, Nigeria and addresses listed in Spews and Spamhaus databases. That's about 13000+ filtered networks. Thanks to OpenBSD packet filter, it's trivial to set up and it doesn't introduce any slowdown.

  19. An introduction to viruses on Virus Creators Sharing More Code · · Score: 5, Funny

    A lot /. readers are not familiar with Windows and may ask what "virus" means in computer science. So in order to better understand this article, here's a short presentation.

    Virus are popular peer-to-peer sharing systems designed and optimized for Windows platforms.
    Great features of these systems over other P2P systems :
    - It's free software, although the license is often missing.
    - They are very well maintained. New versions are released almost every day.
    - They are easy to use : no need for a GUI, no need for a CLI, everything is fully automated.
    - Updates are also automatic.
    - No need to tweak your firewall, popular viruses can work on port 25 using a SMTP-like protocol.

    In order to join this community, you just have to run an installer called "outlook.exe". To improve your experience, the "internet explorer" add-on is also recommended.

    And how handy, the installer and its add-on are part of the vanilla "Windows" installation CD set. No need to download anything and no registration is required. Very convenient.

    Once the installer ("outlook.exe") has been started, an Evolution-like interface pops up. This is bloat, it can be safely ignored. Directly go to the "add contact" panel and fill in email addresses of friends you want to share executable with. Wait a few minutes (check the internet link is ok) et voila, viruses are automatically downloaded, installed and configured.

    You know understand why this p2p system is so popular in the Windows world : easy to install, easy to use, and the operating system keeps a lot of unfixed security holes in order to avoid breaking backward-compatibility with older viruses.

  20. Great for cross-platform on Virus Creators Sharing More Code · · Score: 3, Funny

    That's great news.

    Viruses is closed-source, proprietary software that only runs on Windows.

    A lot of nice guys are trying all day long to send me ".pif" files so that I can have fun, but I keep clicking and clicking again, nothing happens on my OpenBSD box. It's so disappointing.

    Thanks to these opensource virus, I will probably soon be able to enjoy a /usr/ports/virus/ directory with viruses that will run natively on my operating system.

    Great, I will now be able to chat with friends "hey what ? You still don't have Baggle 8.3XP ? Haha sucker, I got it for 3 days !".

  21. Why not Unix ? on Protecting Our Parents' PCs? · · Score: 1

    My girlfriend knows very little about computers. In fact she even hadn't used a computer before we met.

    Now, she uses my computer to send email, browse the web, paint pictures, connect to icq/jabber, play card games, write letters, etc.

    All under OpenBSD.

    She doesn't find the system complicated. She isn't lost because she didn't use Windows before. KDE is just perfect for her.

    She had to use Microsoft Office once at her daily job. And she was totally lost : "what is this? why are there tons of buttons and toolbars everywhere? why is it so ugly? where are virtual desktops?".

  22. More critical vulnerability in FreeBSD on New Linux Kernel Vulnerability · · Score: 4, Interesting

    Another kernel vulnerability was recently found in all FreeBSD (4.X and 5.x) versions.

    The TCP/IP stack can be stopped by sending unordered TCP fragments.

    This is a serious remote vulnerability, and any FreeBSD with an open TCP port should be patched ASAP.

    Here's a link to the official advisory :

    ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisorie s/ FreeBSD-SA-04:04.tcp.asc

    Regardless of the operating system you are running, always keep everything up to date.

  23. Nothing about the freebsd tcp/ip stack flaw? on Local Root Vulnerability in passwd(1) on Solaris 8, 9 · · Score: 4, Insightful

    It's nice to have Slashdot posts about important security flaws.
    But why is there nothing about the highly more critical and remotely exploitable tcp/ip denial of service discovered in all versions of FreeBSD ?

  24. HTML = next gen ? It should be netiquette. on Next Generation Mail Clients Reviewed · · Score: 4, Insightful

    Sorry, but I really don't think that HTML bloated email is next gen.

    It pisses me off to waste time understanding how people are quoting emails in order to find what they actually wrote. I especially like people who quote everything and then insert replies with a supposed different color. Very convenient when I answer with mutt.

    It pisses me off to fight with Mozilla Thunderbird in order to remove decorative bloat with pictures added to every mail sent by my boss.

    It pisses me off to removely download a 10 Mb large email through a 128Kb link just to see that it's a BMP screenshot send through outlook instead of writing text.

    It pisses me off to receive mail with no subject. And then people reply to it and the subject becomes "Re: Tr: Tr: Re: Re: Tr:".

    It pisses me off to receive mail that was actually a "reply to" a message that was 2 years old and that has nothing to do with the previous thread.

    It pisses me off to receive mails whose content is in the subject with an empty body.

    It pisses me off to receive fully quoted emails, including attachments (even when it's BMP screenshots) just when the real text added by the sender is "ok".

    The next generation email is probably when people will respect the netiquette again.

  25. Re:Can DRM actually work? on DRM Technology To Be Added To MP3 Format · · Score: 1

    They can force hardware manufacturers to implement in in hard disks or controlers.