Its just poorly translated.
on
Immortal Code
·
· Score: 1
Its the kind of translation they probably spent a hours doing with the NRF sources and an undergraduate "learning C/C++" text.
I always rewrote the code using their code as a model. I mean, the technique of QR decomposition, power-of-2 length FFT, these are not copyrightable. And there's only a few ways it can appear in C, with some variation in variable names. I especially did not appreciate their fortran-compatible array indexing. Quite cumbersome.
In any case, that's some code that needs to DIE. If they were going to make all the code from each edition to look the same, the should have just done pseudo-code like Cormen used in "Introduction to Algorithms"
You won't know why things aren't working until way after you can do damage control, and let everyone know what happened. Most of them will think you're ignoring them and become insulted.
And as long as we focus on a system where a hashed string is an index into a table, and that is the sole identifying feature of some communication (wanted or unwanted), there won't be a solution forthcoming.
I think a facet the current problem is there's no easy way to "clear your name" with ISPs. It's easy to harvest and build deny lists, but difficult to deal with those false positives; you know, human interaction. Not a strong point, especially among this crowd (myself included)
I think there's a large number of lamenting WinXP/Linux users who don't go out and by a mac because they have a cheap box and they aren't willing to pay that much for the hardware. These same people would drop $200 in a heartbeat for OSX on another platform. I know I would. All my coworkers would, I just asked them.
I also have this preverse fantasy of OSX on a Sun workstation. It is a shame to put such good (but expensive) hardware to such poor use under Solaris 8 or 9. I'm not advocating it for server use, but for the Ultras, OSX would be a serious kick in the pants. It'd be a dream.
And the hardware is pretty much comparable. ATAPI, external SCSI, firewire, USB keyboards, SDRAM, even OpenBoot firmware. The only big difference is the chipset and processor. It's a recompile away (endianness is even the same).::salivating::
I guess my point is that Apple is sitting on a crazy killer OS platform that at it's core is extremely portable, and they should be exploiting it to it's fullest extent. Their software tools are what defines them. They need to pimp it and make it their new mission. Provide powerful, useable, and unencumbered interfaces to high-end machines!
Their standards are too high, and the rely on their fervrent followers to support them.
Recipe for financial mishaps (ask the Roman Catholic Church, it happened to them too).
Apple needs to SELL OUT. I want 3rd party PPC motherboards. I want OSX on x86. Or they'd better introduce a heftier server line than the Xserve. That's too much money to spend on hardware which management equates with the cheap 1/2U Dells (which is WRONG but happens anyway).
Offtopic but Ms. Chawla...
on
SAUNAAB
·
· Score: 1
...is quite fine. I didn't know such there were such pretty astronauts. I mean look at Sally Ride!!! ^_^
In this light, I think it's safe to say I'm a shoe-in for the ISS program because I'm so goddamn cute. Please support my campaign: Rei in space in 2004.
And IEEE1394 is just serial SCSI, so why bother with that technology, just buy Ultra-LVD SCSI drives, operators are available right now.
The point is serial ATA is a simple ATA-style replacement. The drives will be cheap because the controllers will be cheap.
Firewire (or SCSI) are not cheap. They are not an equivalent product. Sure, it's BETTER, but it comes at a price some are not willing to pay for an desktop, MP3 server or what have you.
Lets consider: Microsoft is a major backer of the MPEG4 development project.
"Microsoft has made more than 100 formal contributions to the MPEG-4 standardization process and has patents that are relevant to MPEG-4 video implementations."
Clearly Microsoft values the MPEG4 effort. And yet they also offer their own standard which claims to be 15-50% better than MPEG-4.
I think Microsoft doesn't think the products will be in competetion with each other, hence it can price WMV down. I think they want to focus on WMV for streaming media, games, home PC applications, etc. (high-volume stuff) MPEG-4 seems to be more suitable for commercial applications, embedded devices, etc. and Microsoft wants to ensure that it is suitable for use on/with their software too. Those developers who buy MPEG4 wouldn't consider WMV anyway, because they probably aren't targeting desktop PCs. Hence the price difference may not mean that much. They get the added benefit that WMV may be eventually accepted for use in more consumer electronics because it offers some advantages over MPEG4. Additionally, the pricing difference would not be so extreme had not Apple bitched and moaned because they weren't going to be making enough per seat.
On the other hand, maybe Microsoft was taking a gamble investing in MPEG4, so that everyone would think they were all behind it, when meanwhile they were using the same technology they donated to come up with something better they could use to kill what they already knew a lot about (and the limitations of). Everyone else tied up in MPEG4 wouldn't be able to respond when WMV is released and costs less.
I'm sorry, but this is uninformed spouting of the mouth.
SSH private keys never even get near the ethernet stack. If the driver programmers are as lazy (or efficient...) as the article claims they are, these stray bytes are from other offsets in the stack, thus comprising parts of older (or perahps yet unhandled) frames, which incidentally, contains information from packets you could have sniffed wholly on that segment. Why they would randomly allocate memory right adjacent to user space data segments or the file buffer cache, i'll never know (hint: IT DOESN'T) Also, SSH takes care to overwrite old buffers containing the private key when it finishes with it too.
What no one has mentioned yet which is the real vulnerabiltiy is that this attack can be mitigated by any device which can reach a vulnerable client with an IMCP ECHO request and get a reply. Some network configurations allow IMCP to flow freely, including to the internet, thus machines inside may be at risk when they thought they might have been safe on a private network segment (using unencrypted protocols, telnet, etc.).
Solution? Block IMCP if you don't need it. Or ensure the firewall is using a non-vulnerable driver/device and have it "rewrite" all the packets (this may be imperative, but it could depend on implementation).
Washington DC Metro Area - Where I am. Lots of tech jobs, although some businesses are on the way out there is still low unemployment. We get a lot of government work out here. ^_^ w00t! Home of UUNET. Warning, half the jobs you want require a clearence, hope you kept your nose clean!!! Also the traffic is nearly as bad as Cali.
Central Jersey (Princeton, Somerset, Middlesex Counties) - A recently developed suburban area between Philly and NYC. There are a lot of pharmaceutical outfits there, newspapers, etc. There are a good number of tech jobs to be had. Housing prices are decent.
Atlanta - Don't know much about it except its cheaper there, and there's a number of technical jobs available.
Boston - Same thing goes as for Atlanta. More specifically, look into the area near Williamstown and North Adams. I understand is like a little Silicon Valley.
Do you play all the music that you want to listen to? Or did you just stop listening to music pretty much period. (This isn't meant to sound arrogant, I'm just curious)
As someone else had posted earlier, it's not likely iptables would notice. It would probably look like a web page request on the client computer, which would be legitamate as far as the firewall is concerned.
If this IS the case, thats cool because you could log the packets while the app runs after inserting the CD, and see how they talk to the server. Then using the logged data as a model, you could seed the database with misinformation, or "support" certain bands that you are partial to.
but cutting in a line is immoral and not illegal.
on
Google vs. Evil
·
· Score: 1
but cutting in a line is immoral and not illegal. Except in Singapore and themeparks operated by Disney.
But quite honestly, OSS people don't spend on... well... anything. Definitely not porn. They're what we call in the industry "leeches".
I think you mean we don't pay for anything we can otherwise get by without with or for free. Just because we aren't foaming at the mouth to drop $400 for the next release of Photoshop so we can color balance our digital photos doesn't mean we don't pay for other stuff.
Subscriptions to industry journals, CrossOver Office, video games, etc. You just need to give us a good reason.
There are some porn sites that OSS geeks would pay for because they have something unique to offer, which is often a community base atmosphere that is otherwise lacking in your typical site leech repro-run on the alt.binaries newsgroups.
But you're typical pay me $20 a month for my dinky collection of a few thousand images and movies that I didn't even produce myself deal doesn't fly.
While this isn't exactly eBay, this may give PriceWatch and Cnet a run for their money.
What's cool is that it snags stuff whenever it crawls. But I wonder if only updates every 28 days; if so, that may be a bit too infrequent for finding real gems. Of course sites can still explicitly submit new price information.
. I'm just an advocate for not blatantly charging forward and basing new things on old things that aren't much better than voodoo. It's ok to say "We don't really know".
Ummm... Mr.-Most-Important-Person-in-the-World, just because YOU don't understand it doesn't make it invalid, or useless. Without quantum physics (which IS incidentally the topic of discussion), you wouldn't have transistors and their elk, culminating in the computer with which you posted this backwoods tin-foil-hat-wearing drivel.
The tornado-in-a-can doesn't look too impressive compared to a 1/4 inch square chip that can simulate the folding of protein, or powers a Korg Triton.
An academic in his free time using a computer figured out why the shower curtain in a shower gets sucked in with a few days of his spare time. The guy who invented the tornado in a can took 15 years of on/off effort.
That is why we have academics working in institutions on that wacky shit, because we want to put the stuff it into practice ASAP.
You can't tell me you don't want warp drive, because that would be frickin' cool. We gotta slog through the simple stuff (GUT) before we can start bending the rules...:)
If you study Zen enough, I assure you, your brain will hurt as it never has before.
And then, you will understand that pain is only a temporal effect, and it will cease to seem displeasant. And the pain will be gone, suddenly. ^_^
and you're also supid
on
Taken?
·
· Score: 1, Flamebait
I've never even SEEN AN AD ON TV for this "Taken", and I've got DirectTV. How often do I have to suffer through the watered-down crap on Sci-Fi to know about these kinda things?
ElcomSoft Managing Director Vladmir Katalov took the stand after Sklyarov. He testified that ElcomSoft, which also makes password-retrieval software, has many major customers for its products, including Adobe and the U.S. Department of Justice.
Now this is an interesting twist. I didn't know anything about ElcomSoft itself. This is like blaming the guys who make the tools used to extract keys from locked cars. Everyone curses the wind wishing they're around when you get locked out.
Who here has not scrambled for a NT Admin password recovery disk, or a ZIP password cracker, or swapped NVRAM chips between Suns?
They don't hide behind pretenses... they expose the poor security and help you when you are hindered by said annoyances! I believe there is insufficient evidence to make Sklyarov appear malicious, and he had little to gain personally. He exposed the information that would only be profitable within the confines of the company and his product to the public. Moreover, he warned potential publishers that the protected PDFs weren't safe. Therefore, the only person that loses out is the lazy programmers at Adobe. And he claims to be ignorant of the legal ramifications. AND WHY SHOULD HE, HE'S A FRIGGIN RUSSIAN CITIZEN (Spare me the IN SOVIET RUSSIA... replies).
I hope to GOD that the DMCA doesn't get used to uphold lazy habits.
Sandy just needs a new wardrobe.
on
New Mad Max Film
·
· Score: 2
Then she'd have a hand up over Lara Croft. Hell, all girls from Texas are lookers, you know that.
This phenomenon is widespread. Cartoons are just as accessable any hottie movie or recording star... they aren't! So the obsession has nothing to do with "getting out". The possibilities of realizing the fantasy are of the same magnitude. Hell, most guys find me attractive for no reason at all. I'm NOT REAL!!!! Oedipus complex I guess. I'm a mental fuck toy for the whole otaku crowd. So the cartoon squirrel, that's not even a stretch. I'd be more worried about obsession with REAL inanimate objects, like automobiles, stereo equipment, or pies and canned meats.
There was that one episode where S.Bob and Patrick were fighting in a wrestling match and then hugged at the end when they realized they were wearing matching boxers. They touched each other's asses, crying.
It's corrupting America's youth, I say! Excellent...
I suspect the moon is a much greater affector of the speed of the earth's rotation. It would be swamped by the slowdown effect responsible by it's receding from the earth.
Slashdot Mirror
Its the kind of translation they probably spent a hours doing with the NRF sources and an undergraduate "learning C/C++" text.
I always rewrote the code using their code as a model. I mean, the technique of QR decomposition, power-of-2 length FFT, these are not copyrightable. And there's only a few ways it can appear in C, with some variation in variable names. I especially did not appreciate their fortran-compatible array indexing. Quite cumbersome.
In any case, that's some code that needs to DIE. If they were going to make all the code from each edition to look the same, the should have just done pseudo-code like Cormen used in "Introduction to Algorithms"
You won't know why things aren't working until way after you can do damage control, and let everyone know what happened. Most of them will think you're ignoring them and become insulted.
And as long as we focus on a system where a hashed string is an index into a table, and that is the sole identifying feature of some communication (wanted or unwanted), there won't be a solution forthcoming.
I think a facet the current problem is there's no easy way to "clear your name" with ISPs. It's easy to harvest and build deny lists, but difficult to deal with those false positives; you know, human interaction. Not a strong point, especially among this crowd (myself included)
I think there's a large number of lamenting WinXP/Linux users who don't go out and by a mac because they have a cheap box and they aren't willing to pay that much for the hardware. These same people would drop $200 in a heartbeat for OSX on another platform.
::salivating::
I know I would.
All my coworkers would, I just asked them.
I also have this preverse fantasy of OSX on a Sun workstation. It is a shame to put such good (but expensive) hardware to such poor use under Solaris 8 or 9. I'm not advocating it for server use, but for the Ultras, OSX would be a serious kick in the pants. It'd be a dream.
And the hardware is pretty much comparable.
ATAPI, external SCSI, firewire, USB keyboards, SDRAM, even OpenBoot firmware. The only big difference is the chipset and processor. It's a recompile away (endianness is even the same).
I guess my point is that Apple is sitting on a crazy killer OS platform that at it's core is extremely portable, and they should be exploiting it to it's fullest extent. Their software tools are what defines them. They need to pimp it and make it their new mission. Provide powerful, useable, and unencumbered interfaces to high-end machines!
Their standards are too high, and the rely on their fervrent followers to support them.
Recipe for financial mishaps (ask the Roman Catholic Church, it happened to them too).
Apple needs to SELL OUT. I want 3rd party PPC motherboards. I want OSX on x86.
Or they'd better introduce a heftier server line than the Xserve. That's too much money to spend on hardware which management equates with the cheap 1/2U Dells (which is WRONG but happens anyway).
...is quite fine.
I didn't know such there were such pretty astronauts. I mean look at Sally Ride!!! ^_^
In this light, I think it's safe to say I'm a shoe-in for the ISS program because I'm so goddamn cute. Please support my campaign: Rei in space in 2004.
And IEEE1394 is just serial SCSI, so why bother with that technology, just buy Ultra-LVD SCSI drives, operators are available right now.
The point is serial ATA is a simple ATA-style replacement. The drives will be cheap because the controllers will be cheap.
Firewire (or SCSI) are not cheap. They are not an equivalent product. Sure, it's BETTER, but it comes at a price some are not willing to pay for an desktop, MP3 server or what have you.
Clearly Microsoft values the MPEG4 effort. And yet they also offer their own standard which claims to be 15-50% better than MPEG-4.
I think Microsoft doesn't think the products will be in competetion with each other, hence it can price WMV down. I think they want to focus on WMV for streaming media, games, home PC applications, etc. (high-volume stuff) MPEG-4 seems to be more suitable for commercial applications, embedded devices, etc. and Microsoft wants to ensure that it is suitable for use on/with their software too. Those developers who buy MPEG4 wouldn't consider WMV anyway, because they probably aren't targeting desktop PCs. Hence the price difference may not mean that much. They get the added benefit that WMV may be eventually accepted for use in more consumer electronics because it offers some advantages over MPEG4. Additionally, the pricing difference would not be so extreme had not Apple bitched and moaned because they weren't going to be making enough per seat.
On the other hand, maybe Microsoft was taking a gamble investing in MPEG4, so that everyone would think they were all behind it, when meanwhile they were using the same technology they donated to come up with something better they could use to kill what they already knew a lot about (and the limitations of). Everyone else tied up in MPEG4 wouldn't be able to respond when WMV is released and costs less.
Oh that's deliciously evil. But speculation...
I'm sorry, but this is uninformed spouting of the mouth.
SSH private keys never even get near the ethernet stack.
If the driver programmers are as lazy (or efficient...) as the article claims they are, these stray bytes are from other offsets in the stack, thus comprising parts of older (or perahps yet unhandled) frames, which incidentally, contains information from packets you could have sniffed wholly on that segment. Why they would randomly allocate memory right adjacent to user space data segments or the file buffer cache, i'll never know (hint: IT DOESN'T)
Also, SSH takes care to overwrite old buffers containing the private key when it finishes with it too.
What no one has mentioned yet which is the real vulnerabiltiy is that this attack can be mitigated by any device which can reach a vulnerable client with an IMCP ECHO request and get a reply. Some network configurations allow IMCP to flow freely, including to the internet, thus machines inside may be at risk when they thought they might have been safe on a private network segment (using unencrypted protocols, telnet, etc.).
Solution? Block IMCP if you don't need it. Or ensure the firewall is using a non-vulnerable driver/device and have it "rewrite" all the packets (this may be imperative, but it could depend on implementation).
Cisco's Status/Statement
and
Full CERT Advisory
OK. I feel sorry for you... ^_^
7513 Colshire Drive
McLean, VA 22102-7508
Bring contraceptives.
Do you play all the music that you want to listen to? Or did you just stop listening to music pretty much period.
(This isn't meant to sound arrogant, I'm just curious)
As someone else had posted earlier, it's not likely iptables would notice. It would probably look like a web page request on the client computer, which would be legitamate as far as the firewall is concerned.
If this IS the case, thats cool because you could log the packets while the app runs after inserting the CD, and see how they talk to the server. Then using the logged data as a model, you could seed the database with misinformation, or "support" certain bands that you are partial to.
but cutting in a line is immoral and not illegal.
Except in Singapore and themeparks operated by Disney.
But quite honestly, OSS people don't spend on... well... anything. Definitely not porn. They're what we call in the industry "leeches".
I think you mean we don't pay for anything we can otherwise get by without with or for free. Just because we aren't foaming at the mouth to drop $400 for the next release of Photoshop so we can color balance our digital photos doesn't mean we don't pay for other stuff.
Subscriptions to industry journals, CrossOver Office, video games, etc. You just need to give us a good reason.
There are some porn sites that OSS geeks would pay for because they have something unique to offer, which is often a community base atmosphere that is otherwise lacking in your typical site leech repro-run on the alt.binaries newsgroups.
But you're typical pay me $20 a month for my dinky collection of a few thousand images and movies that I didn't even produce myself deal doesn't fly.
While this isn't exactly eBay, this may give PriceWatch and Cnet a run for their money.
What's cool is that it snags stuff whenever it crawls. But I wonder if only updates every 28 days; if so, that may be a bit too infrequent for finding real gems. Of course sites can still explicitly submit new price information.
I like the name too. "Froogle" == frugal. Ha!
. I'm just an
advocate for not blatantly charging forward and
basing new things on old things that aren't much
better than voodoo. It's ok to say "We don't
really know".
Ummm... Mr.-Most-Important-Person-in-the-World, just because YOU don't understand it doesn't make it invalid, or useless. Without quantum physics (which IS incidentally the topic of discussion), you wouldn't have transistors and their elk, culminating in the computer with which you posted this backwoods tin-foil-hat-wearing drivel.
The tornado-in-a-can doesn't look too impressive compared to a 1/4 inch square chip that can simulate the folding of protein, or powers a Korg Triton.
An academic in his free time using a computer figured out why the shower curtain in a shower gets sucked in with a few days of his spare time. The guy who invented the tornado in a can took 15 years of on/off effort.
That is why we have academics working in institutions on that wacky shit, because we want to put the stuff it into practice ASAP.
You can't tell me you don't want warp drive, because that would be frickin' cool. We gotta slog through the simple stuff (GUT) before we can start bending the rules...
If you study Zen enough, I assure you, your brain will hurt as it never has before.
And then, you will understand that pain is only a temporal effect, and it will cease to seem displeasant.
And the pain will be gone, suddenly. ^_^
I've never even SEEN AN AD ON TV for this "Taken", and I've got DirectTV. How often do I have to suffer through the watered-down crap on Sci-Fi to know about these kinda things?
I KNEW THAT! Mother of Pearl!! I'm wearing the friggin t-shirt right now.
By the way, I smell a smelly smell that smells smelly, and it's that 1/2 child of yours rotting in the basement.
j/k.
The sign says, clearly, don't feed the trolls.
Apparently I can't read.
ElcomSoft Managing Director Vladmir Katalov took the stand after Sklyarov. He testified that ElcomSoft, which also makes password-retrieval software, has many major customers for its products, including Adobe and the U.S. Department of Justice.
Now this is an interesting twist. I didn't know anything about ElcomSoft itself. This is like blaming the guys who make the tools used to extract keys from locked cars. Everyone curses the wind wishing they're around when you get locked out.
Who here has not scrambled for a NT Admin password recovery disk, or a ZIP password cracker, or swapped NVRAM chips between Suns?
They don't hide behind pretenses... they expose the poor security and help you when you are hindered by said annoyances! I believe there is insufficient evidence to make Sklyarov appear malicious, and he had little to gain personally. He exposed the information that would only be profitable within the confines of the company and his product to the public. Moreover, he warned potential publishers that the protected PDFs weren't safe. Therefore, the only person that loses out is the lazy programmers at Adobe. And he claims to be ignorant of the legal ramifications. AND WHY SHOULD HE, HE'S A FRIGGIN RUSSIAN CITIZEN (Spare me the IN SOVIET RUSSIA... replies).
I hope to GOD that the DMCA doesn't get used to uphold lazy habits.
Then she'd have a hand up over Lara Croft. Hell, all girls from Texas are lookers, you know that.
This phenomenon is widespread. Cartoons are just as accessable any hottie movie or recording star... they aren't! So the obsession has nothing to do with "getting out". The possibilities of realizing the fantasy are of the same magnitude.
Hell, most guys find me attractive for no reason at all. I'm NOT REAL!!!! Oedipus complex I guess. I'm a mental fuck toy for the whole otaku crowd. So the cartoon squirrel, that's not even a stretch.
I'd be more worried about obsession with REAL inanimate objects, like automobiles, stereo equipment, or pies and canned meats.
There was that one episode where S.Bob and Patrick were fighting in a wrestling match and then hugged at the end when they realized they were wearing matching boxers. They touched each other's asses, crying.
It's corrupting America's youth, I say! Excellent...
^_^
Sandy Squirrel and Spongebob Squarepants
So when you draw the heart on a tree or scrawl it in the bathroom, it's S.S. + S.S., which looks real confusing.
I suspect the moon is a much greater affector of the speed of the earth's rotation. It would be swamped by the slowdown effect responsible by it's receding from the earth.