I have ripped all my CD to Ogg and it's much better than MP3 ^_^ Thanks for putting of that horrible Troll back in his place, it is a shame people can not appreciate such wonderful work. Hope to hear more of your wise posts on Slashdot soon;-)
I am not worrying about Windows so much as I am my FreeBSD and OpenBSD boxes; I assume they all utilise the same zlib functions, and thus would possibly be open to attaque as well. I only ask of Windows because I know many Windows softwares (such as Mozilla) use the zlib as well.
But will this affect other systemes using the zlib, such as FreeBSD or many open-sourced Windows softwares? This article is near empty of useful information. If a security-minded person is out there, please give us Slashdotters more information so we can protect our systemes!:-/
...but I do not think that perl is the "Write Once, Read Nowhere" langue you make it out to be ^_^ Just for a little fun, I thought I'd try out my rusting perl tricks and unroll your silly script.
Not very difficile, Mister shiny@rfl.pl, but I shall compliment you for at least trying to obfuscate with the silly "q//" perl operateur ^_^ For those who are onlooking, here is a short explanation of how his original code works:
$x=substr$q,q,0,,q,2,if$q=q,plfeY04jaJnYI,;
Firstly, one must recall that the q// operateur works with any delimiteurs, including the virgule (,). One need only replace q,<x>, with 'x' to see that the code becomes:
$x = substr $q, '0', '2', if $q = 'plfeY04jaJnYI';
Since perl automatically changes the strings into numbres, it is really substr $q, 0, 2 which extracts the salt from the crypt hash. The last virgule between the 2 and the if is just a ruse, since substr only uses three arguments ^_^ The "if" statement is another ruse; suffixed "if" is in fact called before the condition of the "if" statement, and he uses this to initialise $q apparently after it's been first used. The above code is in fact equal to this:
$q = 'plfeY04jaJnYI'; $x = substr $q, 0, 2;
And it makes itself apparent that $q is the crypt hash (henceforth called $crypt) and $x is the salt ($salt).
for (++$_..$_<<3){...}
Now you are just being silly:-) $_ is not used yet and thus is 0, and ++0 is of course 1. 1<<3 is 8. So the above is just a simple for loop:
for($i = 1; $i <= 8; ++$i) {...}
Which not only looks simpler, but runs faster too ^_^
qq,$q,eq crypt$_,$x and die qq,$_.$x,for q,a,x$_..q,z,x$_
This one's a bit tricker, but still not very difficile. One must simple look at the end where there is another "for" loop, once again overusing the q// operateur. This causes the $_ within the loop to be local and of a different value than the $_ outside of the loop (which we have renamed to $i for clairitie). Hence the loop morphoses itself to (with parentheses added for easier reading):
foreach(('a' x $i).. ('z' x $i)) { $crypt eq crypt($_, $salt) and die "$_.$salt"; }
The "and die" bit just is taking advantage of the short-circuit boolean operateur système. The "die" only is executing when $crypt (the origin hash) and the encrypted form of the current guess are equal, in which case the key has been found and we quit ^_^ I changed it to a nicer looking "print" statement for further clairitie.
Hopefully that wasn't too difficile to follow, my english is not perfect. Just remember, Mr. shiny@rfl.pl, no langue is completely impenetrable (except perhaps Intercal, but that's a small bit pathological:-)
I would hate to be seeing Linux be eaten by the AOL corporation. Such a melange does not sit well with my stomach. The Linux communitie has a histoiry of innovation and openess which stands starkly in contrast to the average Americain grande corporation. It would be a pity to see that openness be suppressed.
I was talking with my fiancé Yves about the possibilitie of a merger when I first heard the news on the Slashdot previous night. His words were along the lines of "It will do the Linux communitie good; perhaps the corporate supporting will help finally make Linux ready for the desque top." I do not buy this. Even if AOL does produce an excellent desktop systeme for Linux, one could be sure that it would be very, very proprietary and that it will be littered with advertissements for the AOL's services (much like their Netscape browsers are becoming now). What would be worse would be when other companies start to build their software systemes so that they only run on the most popular AOL distribution!!
No thanks to you, AOL. I am much happier with my KDE systeme ^_^
Thanks to you for the advice, however, I am afraid I am living in the south of France, which is quite the distance from the United Kingdom:) Hopefully if the service is already in UK, it will quickly spread to here!
These Tivo devices entrance me; there are many shows I would love watching more frequently, but my schechdule (is that how on spells the word?) often conflicts with the time-slots of my favourite programmes. However, as I looked into the getting of a DVR player, I was saddened to see that their services do not extend beyond the United States! Does anybody know when or maybe if the programming services these interesting devices will be available in Europe? I would love to have another Linux box on my TV to go with all the other ones I have around my house ^_^.
If you were suddenly arrested by the federal polices, and held in jail for many months without being able to see your wife and very young child, I doubt you would give up the chance to see your family and native home again. He is no "weak-hearted coward" for putting his own dedication to his family above your silly anti-DMCA campaigning. He is just a regular person like you or myself, he does not wish to be the revolutionary or martyr for your cause.
I for one am happy to know he is free to be seeing his wife and children; I know if I were kept a long time from my soon-to-be-husband Yves for a great part of a year, I would do anything to see him again, and I think you would too.
I only suppose these games are quite possiblely more popular for the Americains than they are with we French. I have not met any game subscribers of this "Asheron's Call" in all the computer-knowing people I've met in my system administrator job, but I suspect that would be different if I worked in an Americain companie.
While I am not much of the gaming type (My fiancé Yves enjoys the Quake and similar shooting matches on occasion, but I cannot share his taste for bloody games), I have dabbled with some of the MS Gaming Zone games that are come with XP. Their service is terrible, I can assure you that. Server browsers and chat are slow and bulky; I cannot understand why anybody would use the Gaming Zone for any purpose. If you want to play the Chess or Draughts online, you can use the much better free chess services, and honestly bargain bin games like Mechwarrior and "Asheron's Call" don't interest me in the least bit.
This seems like it is merely Microsoft trying to get something to use their Passport systeme, since they cannot seem to sell it to any major service people are using. We should simply ignore their silly publicity tricks.
I, as a Linux user, am quite glad that the GNOME project continues to prosper as it is doing despite the constant turmoiling between them in KDE. While many people cast off GNOME the project since KDE appears more matur and featureful, this is mainly because GNOME is trying for more interesting features that in the long run will be best for Linux in the desktop.
This Bonobo architecture is exactly the extension of the classic Unix philosophie of small components that is long needed. My fiancé Yves, who works often programming for Windows, often complains of the oldness of the pipe and socket IPC systems in Unix, which while powerful, are dreadfully simple. When I try to convince him to look at Linux this is his grandest complaint. Unlike Microsoft's COM and GNOME's CORBA-based Bonobo systèmes, there is no handling of the interface, inheritance or other high-level object oriented structures necessary for advanced high-level programming.
KDE's DCOP and KParts are rather incomplete imitations of CORBA. While I can understand the need to avoid the overheading of CORBA, with modern ORBs like GNOME's ORBit this is negligible, and on modern 2GHz machines who cares about the tiny loss in performance? CORBA has far more of the flexibilitie, allowing for not only better network independence and component structure, but also very important Language independence! This makes Mono very easy to integrate for GNOME since it can already be programmed for any language in common usage. KDE's equivalents are no comparison.
I am really happy to see that Miguel and his GNOME project are getting such publicity even from the "evil" Microsoft. GNOME is really Linux's best bet for the desktop in the immediate future.
(You must forgive my english, it is not my best language ^_^)
Slashdot Mirror
I have ripped all my CD to Ogg and it's much better than MP3 ^_^ Thanks for putting of that horrible Troll back in his place, it is a shame people can not appreciate such wonderful work. Hope to hear more of your wise posts on Slashdot soon ;-)
I am not worrying about Windows so much as I am my FreeBSD and OpenBSD boxes; I assume they all utilise the same zlib functions, and thus would possibly be open to attaque as well. I only ask of Windows because I know many Windows softwares (such as Mozilla) use the zlib as well.
But will this affect other systemes using the zlib, such as FreeBSD or many open-sourced Windows softwares? This article is near empty of useful information. If a security-minded person is out there, please give us Slashdotters more information so we can protect our systemes! :-/
...but I do not think that perl is the "Write Once, Read Nowhere" langue you make it out to be ^_^ Just for a little fun, I thought I'd try out my rusting perl tricks and unroll your silly script.
.. ('z' x $i)) {
:-) $_ is not used yet and thus is 0, and ++0 is of course 1. 1<<3
.. ('z' x $i)) {
:-)
$crypt = "plfeY04jaJnYI";
$salt = substr $crypt, 0, 2;
for($i = 1; $i <= 8; ++$i) {
foreach(('a' x $i)
if($crypt eq crypt($_, $salt)) {
print "key $_, salt $salt\n"; exit 0;
}
}
}
Not very difficile, Mister shiny@rfl.pl, but I shall compliment you for at least trying to obfuscate with the silly "q//" perl operateur ^_^ For those who are onlooking, here is a short explanation of how his original code works:
$x=substr$q,q,0,,q,2,if$q=q,plfeY04jaJnYI,;
Firstly, one must recall that the q// operateur works with any delimiteurs, including the virgule (,). One need only replace q,<x>, with 'x' to see that the code becomes:
$x = substr $q, '0', '2', if $q = 'plfeY04jaJnYI';
Since perl automatically changes the strings into numbres, it is really substr $q, 0, 2 which extracts the salt from the crypt hash. The last virgule between the 2 and the if is just a ruse, since substr only uses three arguments ^_^
The "if" statement is another ruse; suffixed "if" is in fact called before the condition of the "if" statement, and he uses this to initialise $q apparently after it's been first used. The above code is in fact equal to this:
$q = 'plfeY04jaJnYI';
$x = substr $q, 0, 2;
And it makes itself apparent that $q is the crypt hash (henceforth called $crypt) and $x is the salt ($salt).
for (++$_..$_<<3){...}
Now you are just being silly
is 8. So the above is just a simple for loop:
for($i = 1; $i <= 8; ++$i) {...}
Which not only looks simpler, but runs faster too ^_^
qq,$q,eq crypt$_,$x and die
qq,$_.$x,for q,a,x$_..q,z,x$_
This one's a bit tricker, but still not very difficile. One must simple look at the end where there is another "for" loop, once again overusing the q// operateur. This causes the $_ within the loop to be local and of a different value than the $_ outside of the loop (which we have renamed to $i for clairitie). Hence the loop morphoses itself to (with parentheses added for easier reading):
foreach(('a' x $i)
$crypt eq crypt($_, $salt) and die "$_.$salt";
}
The "and die" bit just is taking advantage of the short-circuit boolean operateur système. The "die" only is executing when $crypt (the origin hash) and the encrypted form of the current guess are equal, in which case the key has been found and we quit ^_^ I changed it to a nicer looking "print" statement for further clairitie.
Hopefully that wasn't too difficile to follow, my english is not perfect. Just remember, Mr. shiny@rfl.pl, no langue is completely impenetrable (except perhaps Intercal, but that's a small bit pathological
It is sad, I still frequently am playing my copy of Tribes 2. Hopefully someone will take the Loki's place.
I was talking with my fiancé Yves about the possibilitie of a merger when I first heard the news on the Slashdot previous night. His words were along the lines of "It will do the Linux communitie good; perhaps the corporate supporting will help finally make Linux ready for the desque top." I do not buy this. Even if AOL does produce an excellent desktop systeme for Linux, one could be sure that it would be very, very proprietary and that it will be littered with advertissements for the AOL's services (much like their Netscape browsers are becoming now). What would be worse would be when other companies start to build their software systemes so that they only run on the most popular AOL distribution!!
No thanks to you, AOL. I am much happier with my KDE systeme ^_^
Thanks to you for the advice, however, I am afraid I am living in the south of France, which is quite the distance from the United Kingdom :) Hopefully if the service is already in UK, it will quickly spread to here!
These Tivo devices entrance me; there are many shows I would love watching more frequently, but my schechdule (is that how on spells the word?) often conflicts with the time-slots of my favourite programmes. However, as I looked into the getting of a DVR player, I was saddened to see that their services do not extend beyond the United States! Does anybody know when or maybe if the programming services these interesting devices will be available in Europe? I would love to have another Linux box on my TV to go with all the other ones I have around my house ^_^.
I am afraid my english is not so good, and unfortunately my poor phrasing is often causing silly double entendres. Please forgive me! :-)
I for one am happy to know he is free to be seeing his wife and children; I know if I were kept a long time from my soon-to-be-husband Yves for a great part of a year, I would do anything to see him again, and I think you would too.
I only suppose these games are quite possiblely more popular for the Americains than they are with we French. I have not met any game subscribers of this "Asheron's Call" in all the computer-knowing people I've met in my system administrator job, but I suspect that would be different if I worked in an Americain companie.
This seems like it is merely Microsoft trying to get something to use their Passport systeme, since they cannot seem to sell it to any major service people are using. We should simply ignore their silly publicity tricks.
This Bonobo architecture is exactly the extension of the classic Unix philosophie of small components that is long needed. My fiancé Yves, who works often programming for Windows, often complains of the oldness of the pipe and socket IPC systems in Unix, which while powerful, are dreadfully simple. When I try to convince him to look at Linux this is his grandest complaint. Unlike Microsoft's COM and GNOME's CORBA-based Bonobo systèmes, there is no handling of the interface, inheritance or other high-level object oriented structures necessary for advanced high-level programming.
KDE's DCOP and KParts are rather incomplete imitations of CORBA. While I can understand the need to avoid the overheading of CORBA, with modern ORBs like GNOME's ORBit this is negligible, and on modern 2GHz machines who cares about the tiny loss in performance? CORBA has far more of the flexibilitie, allowing for not only better network independence and component structure, but also very important Language independence! This makes Mono very easy to integrate for GNOME since it can already be programmed for any language in common usage. KDE's equivalents are no comparison.
I am really happy to see that Miguel and his GNOME project are getting such publicity even from the "evil" Microsoft. GNOME is really Linux's best bet for the desktop in the immediate future.
(You must forgive my english, it is not my best language ^_^)