So you run a non-standard configuration, and then you complain when you run into bugs that no one else is encountering (and thus, software developers have no incentive to fix)? You really shouldn't be surprised: when you put yourself in a superminority with respect to your computer's configuration, you're going to break shit and no one's going to give a damn about your problems.
Because most web publishers are deployers, rather than developers, of web software. The overwhelming majority of this software is written in PHP and assumes the presence of MySQL. Even those packages that support other databases often treat them as second-class citizens; they tend to be much less developed and tested.
I am a sane person, and I care more about using the database that'll work best with the apps I want to use (such as phpBB), than I do about promoting tech for its own sake.
Larger private servers (250+ simultaneous players) generally have no choice but to disable vmaps. I'm the owner of www.itrwow.com, and we have long since discovered that both trinity and mangos suffer from *serious* stability issues when vmaps are enabled. Most of the time, it's impossible to keep it running for more than a few minutes without some kind of segfault if you have hundreds of people online at once.
And, no, this has nothing to do with hardware -- our machine has more than enough RAM and CPU capacity to handle it. The software just sucks.
Correct.. browsers use the MIME type sent by the server, rather than the file extension, to decide which parser to invoke.
So if you have an upload facility, all you have to do is be sure that you're using the jpeg MIME type for jpegs and the gif MIME types for gifs.. it shouldn't matter if the actual bits of the file are an image, an SWF, or even an EXE.. the browser should be invoking the handler that corresponds to the MIME type, not examining the bits of the file to try to guess what it is.
It really looks like the article is overstating things when it claims that forged files can be used with this flash vulnerability.
There's one thing I don't understand from the article.. how can this be triggered through files with other extensions that are served with a proper content type? I mean, let's say you have a phpBB3 (with attachments enabled) forum and some guy uploads a jpg. It's actually a swf in disguise, but phpBB's own checks miss that. Then it's served back to a user with a jpg extension and a jpeg content-type.
According to the article, the SWF can still be executed under these circumstances, but that seems implausible to me. I would think that the browser would simply invoke the jpeg handler, fail to parse the image data, and throw an error.
This actually isn't quite true. If you become a com/net registrar, most of the money goes to VeriSign (who controls the com/net registry). The registrar has to pay VeriSign roughly $7 per domain per year that they register. The 20 cents per domain you're thinking of is the ICANN fee, which definitely exists, but isn't the biggest cost. org/info is similar, but the money goes to PIR instead of VeriSign.
This class-action suit is ridiculous. They're making it sound like it's almost impossible to opt out of the content network, whereas the truth is that anyone savvy enough to run a profit-creating site, buy advertising, and analyze ROI measurements should be savvy enough to click on "edit campaign settings" for his advertising campaign and uncheck the plainly visible "content network" box.
No, I think you misunderstood. I was drawing a distinction between an issue with proxomitron itself, and an issue with a proxomitron filter. I suspect that your issue was the latter, which would make the problem specific to your particular filters. Since YOUR prox filters are different from MY prox filters, there's no reason to believe your particular glitch will affect me, or other prox users.
It's hardly fair to blame proxomitron itself, it sounds more like one of the filters you applied had interacted with Slashdot's scripts in a way you didn't expect. I've been using prox and reading slashdot for years and have never seen a problem.
Re:The only thing stopping me from using Opera
on
A Talk With Opera CEO
·
· Score: 1
Actually, Proxomitron is a perfect substitute for Adblock plus. It's essentially a personal web proxy that uses regular expression rules to rewrite web pages before you see them. It comes with a set of filters that'll drop most ads. If you want a better list of rules for it, you should get Sidki's filter set. Using this along with proxomitron gives me more ad protection than Adblock plus offers, along with *much* more flexibility on exactly what to filter and rewrite in web pages.
Don't forget JRiver Media Center! It has so many features that everything else seems like a joke by comparison, and its powerful smartlists work just like a database. Great product.
To be fair, iTunes can't do what you want either. All of it is fine, except where you said "dance genre or the hip hop genre" -- iTunes Smart Playlists don't let you mix AND and OR conditions within a single smart playlist; it can either pull songs that match ALL of the given rules, or ANY of them.
J River's Media Center is the only app I know that lets you use grouping and combinations of AND/OR within smart playlists.
Gravity is apparently making an appearance at E3 this year, but I haven't heard anything about their upcoming mmorpg, Ragnarok Online 2. Since none of the gaming news sites seem to be covering it, I'm wondering if you guys know anything about it.
What I'd like to know is why Indymedia still trusts Rackspace with its hosting. If my colo was refusing to tell me what's going on in a situation like this, I would think about moving my servers elsewhere, preferably overseas. I realize Rackspace is probably under a gag order, but frankly that wouldn't make me feel much better.
As this thing gets hammered, it seems to be speeding up vastly. I downloaded at an average of 250 kB/s, and this thing has well over 2000 seeds. Simply amazing.
I've been using one of these 1 TB USB/firewire drives. It's a wonderful thing; entirely self-contained, with no cluster to manage or worry about. USB allows for 127 devices, so you should be able to acquire as much hard drive space as you need. They can be easily unplugged and stored, too.
Now that so many people have broadband, there's no reason to stick to smaller messages.
I doubt this will be a problem, as it will quickly give spammers away. Think about it: some people do use HTML email, for example, but no *real person* would write a script or java game for the sole purpose of emailing it to someone, except for spammers and virus writers. The technology may make it possible, but email will remain a communication medium that's almost entirely text based. I have no doubt that mailservers would be promptly configured to delete any emails that include interactive ad-games.
Damn right! When I want to hear new music, there are countless internet radio stations available. They serve no ads, and you can easily locate a station that plays the specific kinds of music you enjoy. With thousands of such stations available, I don't see why anyone would want to listen to the clearly inferior broadcast radio.
Slashdot Mirror
I'd love to try this, too.. Where do I go to get really good commentaries on Starcraft games?
So you run a non-standard configuration, and then you complain when you run into bugs that no one else is encountering (and thus, software developers have no incentive to fix)? You really shouldn't be surprised: when you put yourself in a superminority with respect to your computer's configuration, you're going to break shit and no one's going to give a damn about your problems.
Because most web publishers are deployers, rather than developers, of web software. The overwhelming majority of this software is written in PHP and assumes the presence of MySQL. Even those packages that support other databases often treat them as second-class citizens; they tend to be much less developed and tested.
I am a sane person, and I care more about using the database that'll work best with the apps I want to use (such as phpBB), than I do about promoting tech for its own sake.
Larger private servers (250+ simultaneous players) generally have no choice but to disable vmaps. I'm the owner of www.itrwow.com, and we have long since discovered that both trinity and mangos suffer from *serious* stability issues when vmaps are enabled. Most of the time, it's impossible to keep it running for more than a few minutes without some kind of segfault if you have hundreds of people online at once.
And, no, this has nothing to do with hardware -- our machine has more than enough RAM and CPU capacity to handle it. The software just sucks.
Correct.. browsers use the MIME type sent by the server, rather than the file extension, to decide which parser to invoke.
So if you have an upload facility, all you have to do is be sure that you're using the jpeg MIME type for jpegs and the gif MIME types for gifs.. it shouldn't matter if the actual bits of the file are an image, an SWF, or even an EXE.. the browser should be invoking the handler that corresponds to the MIME type, not examining the bits of the file to try to guess what it is.
It really looks like the article is overstating things when it claims that forged files can be used with this flash vulnerability.
There's one thing I don't understand from the article.. how can this be triggered through files with other extensions that are served with a proper content type? I mean, let's say you have a phpBB3 (with attachments enabled) forum and some guy uploads a jpg. It's actually a swf in disguise, but phpBB's own checks miss that. Then it's served back to a user with a jpg extension and a jpeg content-type.
According to the article, the SWF can still be executed under these circumstances, but that seems implausible to me. I would think that the browser would simply invoke the jpeg handler, fail to parse the image data, and throw an error.
This actually isn't quite true. If you become a com/net registrar, most of the money goes to VeriSign (who controls the com/net registry). The registrar has to pay VeriSign roughly $7 per domain per year that they register. The 20 cents per domain you're thinking of is the ICANN fee, which definitely exists, but isn't the biggest cost. org/info is similar, but the money goes to PIR instead of VeriSign.
The registrars' profit margin is quite thin.
Source: http://www.verisign.com/domain-name-services/become-registrar/com-net-registrar/index.html
This class-action suit is ridiculous. They're making it sound like it's almost impossible to opt out of the content network, whereas the truth is that anyone savvy enough to run a profit-creating site, buy advertising, and analyze ROI measurements should be savvy enough to click on "edit campaign settings" for his advertising campaign and uncheck the plainly visible "content network" box.
No, I think you misunderstood. I was drawing a distinction between an issue with proxomitron itself, and an issue with a proxomitron filter. I suspect that your issue was the latter, which would make the problem specific to your particular filters. Since YOUR prox filters are different from MY prox filters, there's no reason to believe your particular glitch will affect me, or other prox users.
It's hardly fair to blame proxomitron itself, it sounds more like one of the filters you applied had interacted with Slashdot's scripts in a way you didn't expect. I've been using prox and reading slashdot for years and have never seen a problem.
Actually, Proxomitron is a perfect substitute for Adblock plus. It's essentially a personal web proxy that uses regular expression rules to rewrite web pages before you see them. It comes with a set of filters that'll drop most ads. If you want a better list of rules for it, you should get Sidki's filter set. Using this along with proxomitron gives me more ad protection than Adblock plus offers, along with *much* more flexibility on exactly what to filter and rewrite in web pages.
Don't forget JRiver Media Center! It has so many features that everything else seems like a joke by comparison, and its powerful smartlists work just like a database. Great product.
It already exists, and it's called Sealand.
Boobs are a myth. They don't actually exist.
---
Warning: the above material may present a choking hazard.
Your sig fits the message well.
Here's the link to the list of Moore's browser exploits, the ones that the article is talking about.
J River's Media Center is the only app I know that lets you use grouping and combinations of AND/OR within smart playlists.
Gravity is apparently making an appearance at E3 this year, but I haven't heard anything about their upcoming mmorpg, Ragnarok Online 2. Since none of the gaming news sites seem to be covering it, I'm wondering if you guys know anything about it.
Or you could just download the PC Gamer issue from BitTorrent.
Ferengi Rule of Acquisition #40: She can touch your lobes, but never your Latinum.
What I'd like to know is why Indymedia still trusts Rackspace with its hosting. If my colo was refusing to tell me what's going on in a situation like this, I would think about moving my servers elsewhere, preferably overseas. I realize Rackspace is probably under a gag order, but frankly that wouldn't make me feel much better.
As this thing gets hammered, it seems to be speeding up vastly. I downloaded at an average of 250 kB/s, and this thing has well over 2000 seeds. Simply amazing.
Just buy one of these external USB/Firewire terabyte drives for $1200. No fuss, and you can plug in a few of them to a single machine if you want.
I've been using one of these 1 TB USB/firewire drives. It's a wonderful thing; entirely self-contained, with no cluster to manage or worry about. USB allows for 127 devices, so you should be able to acquire as much hard drive space as you need. They can be easily unplugged and stored, too.
I doubt this will be a problem, as it will quickly give spammers away. Think about it: some people do use HTML email, for example, but no *real person* would write a script or java game for the sole purpose of emailing it to someone, except for spammers and virus writers. The technology may make it possible, but email will remain a communication medium that's almost entirely text based. I have no doubt that mailservers would be promptly configured to delete any emails that include interactive ad-games.
Damn right! When I want to hear new music, there are countless internet radio stations available. They serve no ads, and you can easily locate a station that plays the specific kinds of music you enjoy. With thousands of such stations available, I don't see why anyone would want to listen to the clearly inferior broadcast radio.