Wait, but I thought it was bad that Vista did that? How is it that it is okay in OS X but not in Vista?
I'm sure the OS X implementation will be better. But it will be funny to watch the backpedaling that ensues, because it was always the idea itself that was inherently flawed, it was argued. Users don't know what exactly they just downloaded does.
Luckily I had a helpful error box pop up and only had to pay $19.95 (plus VA 4.5% sales tax) to stop this heinous security oversight that is present in EVERY operating system on the Internet!
No, they aren't hidden per se, but the fact you can't enumerate them using built-in tools makes them semi-dubious in my eyes.
I dislike the use of.DS_store and stuff like thumbs.db or whatever, but at least they seem a little more transparent since they show up under conventional directory listings. If explorer or dir listed ADS's, I'd be more okay with them.
Except that Kaspersky most certainly does install itself into the kernel. After all, that is where those types of drivers need to be: living in a ring 0 world to truly protect the computer from malware, which is hopefully confined to ring 3. Also, the symptoms reported don't necessarily have to be kernel leaks. UI components not drawing correctly can occur if GDI resources are leaked for a long enough time, since there is only a finite amount of them available, even when you have 4GB of RAM installed. One application can't take all of them, but a leak in one along with several others taking some would make the symptoms occur.
The real problem is the handling of alternate data streams in a component used by Explorer. Read the KB article. Kaspersky stores information about each file in an alternate data stream, so it is little surprise that it exacerbates the problem. Alternate data streams are a highly dubious feature; I wouldn't be surprised if they become deprecated next Windows release. The idea of maintaining a parallel, but hidden filesystem is pretty bizarre, but more importantly, ripe for abuse by malware. Then again, this may be how MS implements file revision history in 2003 and Vista.
I can't say I'm surprised, really. Vista was rushed out the door and not ready for prime time. Unintended consequences of interactions like this were bound to occur. Maybe that is why I dislike running resident AV software on my machine. Stay out of my kernel, y'know?
...just aid and abet Highly Concentrated Forms of Evil, instead.
(Disclaimer: this post is a wake-up call to all who labor underneath naive good/evil views of corporate entities. I do not subscribe to such infantile views myself.)
a classic rock act enters the digital age by selling ringtones? Whatever it is they're selling, it's not music. - it's more like nostalgia. Nothing is wrong with that, except that they're no longer artists. Wait, slow down. How are they no longer artists? How is it that something they do now somehow revokes the whole artist status?
I'm not seeing the logic here. (I suspect there is none.)
It really is. Kudos to the original poster, I chuckled quite a bit.
Re:what about the DRM "feature"?
on
ZOMG New Zunes
·
· Score: 1
Exactly. The real CD doubles as a physical backup, which means you don't have to send emails off to your music service's tech support begging for the ability to re-download your tracks. (Why you have to ask for such rights is absolutely asinine. You've already paid for the track or the service. They're penny-pinching.) You can transcode to the most space-efficient format when sending files to devices. (I'm wishing my collection was in FLAC, right now it is in 220kbps VBR LAME.)
That said, it is extremely sad that companies get a free pass on spreading DRM on this site. Slashdot is home to nut-job religious OSS zealots who tolerate DRM because the company pushing it isn't Microsoft. This is the crowd that is fundamentalist in nature and it is somehow okay with the DRM on the iTunes store because it "isn't inconvenient." That is bullshit because partial acceptance of DRM is still acceptance. These technologies only die when no one is using them. In time, perhaps we can learn not to be dogmatic about our own choice of technologies. However, I am not holding my breath.
So do you wake up every night at precisely 2:43am in a cold sweat, and shake your fist in the general direction of Redmond, yelling, "CURSE YOU FOR RELEASING ZUNE! CURSE YOU!! I SHALL HAVE MY REVENGE!!"? Of course its an inferior product with limited capabilities. Why do you think it hasn't taken over the market? Along with 20 other me-too products that have one or two additions over the iPod. Except they aren't the subject of this "hate." You never hear about the little Samsung player or the crappy early Zen versions. There is no rationality here, only a herd mentality at work.
(For the record, I could care less about the Zune, I use a 3G iPod that somehow still runs perfectly. I do enjoy pointing out these glaring logical inconsistencies and the backpedaling that people make to cover for them.)
Re:Refresh my memory...
on
ZOMG New Zunes
·
· Score: 2, Insightful
Brown? Most excellent! I will let you in on a secret: since brown is the same color as excrement, I shall make extremely witty remarks likening the Zune to excrement, despite never using the Zune myself!
Truly, AC, we shall swim in a sea of moderation points and live on brownies alone. Well, forget that last part. That was a bit much on my part. I apologize.
Refresh my memory...
on
ZOMG New Zunes
·
· Score: 5, Funny
Do we hate this irrationally still? I don't read the newsletter much, but I want to feel like I fit in.
Hate to break it to you but a great majority of people here don't really believe in logical arguments. Most posts are emotional appeals that try to appeal to the consensus in the hope that they too can receive positive moderation and hence be viewed as important.
Do you have a source of this statement? How many 4 digit account'ers have you employed? Seriously though, how does them having achieved more make them a better person? Or their opinion more worthy of being seen? And what happens if I've not achieved as much? Do I get kicked off the island?
Do yourself a favor and stop caring about such superficial drivel. Slashdot has enough noise as is, we don't need people trying to impose additional petty hierarchies on everything.
Which would result in a more entertaining and informative bit of text than your post. Thanks for playing Teh Intarnetz.
You are absolutely right. Why do you think I'm requesting that he write something? Certainly not to make light of the whole situation! That'd be egregiously irreverent! RD has shown itself to take matters of technology seriously, and that is a good thing. After all, technology is a very serious matter. In fact, choice of computing platform is going to be the deciding factor in the 2008 elections. The only reason you haven't heard about yet is because it sways the vote; candidates don't want to disqualify themselves too quickly.
We are lost without your fair and balanced coverage, RD!
I want to see a thorough defense of restricting user choice on the net by this time tomorrow. Your essay must have no less than 1,000 words, at least three Zune references, and at least one reference to Ballmer throwing chairs. Bonus points if you make a reference to the Borg.
Ah, crap, I manage to pick the worst of the bunch in terms of net connectivity. Hopefully they release a web browser for it...but I'm not holding my breath.
Exactly. When MS or Sony realizes this fact they will destroy the PC gaming market once and for all. OK, maybe not destroy, but seriously dampen it. I fully expect next-gen consoles to tout the bundled keyboard/mouse as an advantage, and ship with web browsers in so you can watch YouTube from your XBox 1080 eXtreme console. Developers will decide on a per-game basis whether to enable the keyboard/mouse combo or restrict players to gamepads. Most games would be fine on just the gamepad, but a few specialized genres would benefit from the mouse and keyboard. Notably, the RTS market could start shipping games for consoles.
All they need to do is figure out a good way to use the keyboard and mouse while sitting down. One idea that comes to mind is a simple lapboard designed for these uses.
Certainly. XSS is the web's buffer overflow vulnerability - extremely common, yet I don't see a whole lot of people that are really scared enough to learn how to mitigate it. Old habits die hard, I suppose.
I'm not sure where you're seeing Google/Gmail hate in the article. I see criticism of GMail, but that comes with the territory. Many regard them as the top webmail provider in terms of quality, so they should be held to a higher level of scrutiny as a result.
Security vulnerabilities in web-based services as common as email are extremely dangerous and do not deserve to be glossed over just because they are using old tricks. If they really are as common you imply, then I'm quite disappointed in GMail for not handling them appropriately before this. Also, you know damn well that the tone of the comments would be far more negative if this involved some other company. I don't believe in giving any company a free pass, and nor should you on matters of security.
The kids need a lunch lady to hate. Otherwise they do not feel they fit in.
Groupthink is quite amusing when you think about it. I just love seeing the vehement rants against a software company. So much wasted passion for a mostly inept, overly corporate software company. You'd think they were out killing babies or clubbing baby seals. Twitter is the most extreme example of this, and one of those people who I don't believe really exists.
Er, hate to break up your little rant but did you ever try actually troubleshooting your Windows problem? As in, checking the event log and other places to see why it restarted?
I hope this service takes off, as competition between iTunes and other services only means less DRM, higher quality songs, and better selection for all of us. Amazon just needs to land some deals with record labels...
Slashdot Mirror
Wait, but I thought it was bad that Vista did that? How is it that it is okay in OS X but not in Vista?
I'm sure the OS X implementation will be better. But it will be funny to watch the backpedaling that ensues, because it was always the idea itself that was inherently flawed, it was argued. Users don't know what exactly they just downloaded does.
Everyone's worried they're going to find out they use a cracked version of WinRAR, probably. ;)
Dear God, not again!
Luckily I had a helpful error box pop up and only had to pay $19.95 (plus VA 4.5% sales tax) to stop this heinous security oversight that is present in EVERY operating system on the Internet!
No, they aren't hidden per se, but the fact you can't enumerate them using built-in tools makes them semi-dubious in my eyes.
.DS_store and stuff like thumbs.db or whatever, but at least they seem a little more transparent since they show up under conventional directory listings. If explorer or dir listed ADS's, I'd be more okay with them.
I dislike the use of
Except that Kaspersky most certainly does install itself into the kernel. After all, that is where those types of drivers need to be: living in a ring 0 world to truly protect the computer from malware, which is hopefully confined to ring 3. Also, the symptoms reported don't necessarily have to be kernel leaks. UI components not drawing correctly can occur if GDI resources are leaked for a long enough time, since there is only a finite amount of them available, even when you have 4GB of RAM installed. One application can't take all of them, but a leak in one along with several others taking some would make the symptoms occur.
The real problem is the handling of alternate data streams in a component used by Explorer. Read the KB article. Kaspersky stores information about each file in an alternate data stream, so it is little surprise that it exacerbates the problem. Alternate data streams are a highly dubious feature; I wouldn't be surprised if they become deprecated next Windows release. The idea of maintaining a parallel, but hidden filesystem is pretty bizarre, but more importantly, ripe for abuse by malware. Then again, this may be how MS implements file revision history in 2003 and Vista.
I can't say I'm surprised, really. Vista was rushed out the door and not ready for prime time. Unintended consequences of interactions like this were bound to occur. Maybe that is why I dislike running resident AV software on my machine. Stay out of my kernel, y'know?
...just aid and abet Highly Concentrated Forms of Evil, instead.
(Disclaimer: this post is a wake-up call to all who labor underneath naive good/evil views of corporate entities. I do not subscribe to such infantile views myself.)
I'm not seeing the logic here. (I suspect there is none.)
It really is. Kudos to the original poster, I chuckled quite a bit.
Exactly. The real CD doubles as a physical backup, which means you don't have to send emails off to your music service's tech support begging for the ability to re-download your tracks. (Why you have to ask for such rights is absolutely asinine. You've already paid for the track or the service. They're penny-pinching.) You can transcode to the most space-efficient format when sending files to devices. (I'm wishing my collection was in FLAC, right now it is in 220kbps VBR LAME.)
That said, it is extremely sad that companies get a free pass on spreading DRM on this site. Slashdot is home to nut-job religious OSS zealots who tolerate DRM because the company pushing it isn't Microsoft. This is the crowd that is fundamentalist in nature and it is somehow okay with the DRM on the iTunes store because it "isn't inconvenient." That is bullshit because partial acceptance of DRM is still acceptance. These technologies only die when no one is using them. In time, perhaps we can learn not to be dogmatic about our own choice of technologies. However, I am not holding my breath.
So do you wake up every night at precisely 2:43am in a cold sweat, and shake your fist in the general direction of Redmond, yelling, "CURSE YOU FOR RELEASING ZUNE! CURSE YOU!! I SHALL HAVE MY REVENGE!!"? Of course its an inferior product with limited capabilities. Why do you think it hasn't taken over the market? Along with 20 other me-too products that have one or two additions over the iPod. Except they aren't the subject of this "hate." You never hear about the little Samsung player or the crappy early Zen versions. There is no rationality here, only a herd mentality at work.
(For the record, I could care less about the Zune, I use a 3G iPod that somehow still runs perfectly. I do enjoy pointing out these glaring logical inconsistencies and the backpedaling that people make to cover for them.)
Brown? Most excellent! I will let you in on a secret: since brown is the same color as excrement, I shall make extremely witty remarks likening the Zune to excrement, despite never using the Zune myself!
Truly, AC, we shall swim in a sea of moderation points and live on brownies alone. Well, forget that last part. That was a bit much on my part. I apologize.
Do we hate this irrationally still? I don't read the newsletter much, but I want to feel like I fit in.
Thanks!
Hate to break it to you but a great majority of people here don't really believe in logical arguments. Most posts are emotional appeals that try to appeal to the consensus in the hope that they too can receive positive moderation and hence be viewed as important.
I'm betting you're going to get 1 or 2 troll moderations by the end of the day.
News for Dorks, indeed.
I don't know many other places on the web where people care so much about things that matter so little. It is quite amusing, really.
Do you have a source of this statement? How many 4 digit account'ers have you employed? Seriously though, how does them having achieved more make them a better person? Or their opinion more worthy of being seen? And what happens if I've not achieved as much? Do I get kicked off the island?
Do yourself a favor and stop caring about such superficial drivel. Slashdot has enough noise as is, we don't need people trying to impose additional petty hierarchies on everything.
You are absolutely right. Why do you think I'm requesting that he write something? Certainly not to make light of the whole situation! That'd be egregiously irreverent! RD has shown itself to take matters of technology seriously, and that is a good thing. After all, technology is a very serious matter. In fact, choice of computing platform is going to be the deciding factor in the 2008 elections. The only reason you haven't heard about yet is because it sways the vote; candidates don't want to disqualify themselves too quickly.
We are lost without your fair and balanced coverage, RD!
I want to see a thorough defense of restricting user choice on the net by this time tomorrow. Your essay must have no less than 1,000 words, at least three Zune references, and at least one reference to Ballmer throwing chairs. Bonus points if you make a reference to the Borg.
Also, don't forget the graphs and sound bites.
Ah, crap, I manage to pick the worst of the bunch in terms of net connectivity. Hopefully they release a web browser for it...but I'm not holding my breath.
Exactly. When MS or Sony realizes this fact they will destroy the PC gaming market once and for all. OK, maybe not destroy, but seriously dampen it. I fully expect next-gen consoles to tout the bundled keyboard/mouse as an advantage, and ship with web browsers in so you can watch YouTube from your XBox 1080 eXtreme console. Developers will decide on a per-game basis whether to enable the keyboard/mouse combo or restrict players to gamepads. Most games would be fine on just the gamepad, but a few specialized genres would benefit from the mouse and keyboard. Notably, the RTS market could start shipping games for consoles.
All they need to do is figure out a good way to use the keyboard and mouse while sitting down. One idea that comes to mind is a simple lapboard designed for these uses.
Certainly. XSS is the web's buffer overflow vulnerability - extremely common, yet I don't see a whole lot of people that are really scared enough to learn how to mitigate it. Old habits die hard, I suppose.
I'm not sure where you're seeing Google/Gmail hate in the article. I see criticism of GMail, but that comes with the territory. Many regard them as the top webmail provider in terms of quality, so they should be held to a higher level of scrutiny as a result.
Security vulnerabilities in web-based services as common as email are extremely dangerous and do not deserve to be glossed over just because they are using old tricks. If they really are as common you imply, then I'm quite disappointed in GMail for not handling them appropriately before this. Also, you know damn well that the tone of the comments would be far more negative if this involved some other company. I don't believe in giving any company a free pass, and nor should you on matters of security.
The kids need a lunch lady to hate. Otherwise they do not feel they fit in.
Groupthink is quite amusing when you think about it. I just love seeing the vehement rants against a software company. So much wasted passion for a mostly inept, overly corporate software company. You'd think they were out killing babies or clubbing baby seals. Twitter is the most extreme example of this, and one of those people who I don't believe really exists.
Er, hate to break up your little rant but did you ever try actually troubleshooting your Windows problem? As in, checking the event log and other places to see why it restarted?
I hope this service takes off, as competition between iTunes and other services only means less DRM, higher quality songs, and better selection for all of us. Amazon just needs to land some deals with record labels...