Slashdot Mirror


User: Mysteray

Mysteray's activity in the archive.

Stories
0
Comments
310
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 310

  1. My Experience on Are Alternative Sleeping Patterns Effective? · · Score: 1

    I tried it off-and-on for a couple of years without much success. In the end, it seems that my body firmly insists on at least 6 hours of sleep per 24, but that's a bit better than the 10 it would take if I let it. I eventually decided the schedule's disruptive effects and the incredible amount of effort it was taking didn't yield a net gain.

    Probably the best bit of advice I can offer is to avoid caffiene entirely. When I experimented with having a little diet soda over the nighttime hours is the only time I feel like it was something 'dangerous'.

  2. Re:What are WMF's used for... in Win 3.0 on WMF Vulnerability is an Intentional Backdoor? · · Score: 1
    since windows printer drivers on the clients do most of the formatting/raster work.

    Not if you uncheck the "print directly to printer" or do check the "enable enhanced printing features" on your printer setup.

    Would be nice if you could get a Windows NT server to execute your code by just printing a file on the network, completely wiping out any security.

    The Windows spooler print stream does, in fact, usually consist of an EMF-per-page wrapped in some other undocumented stuff. What you describe is entirely plausible.

  3. Re:I'm asking "Why?" on WMF Vulnerability is an Intentional Backdoor? · · Score: 1
    Dunno why no one points this out, but
    posted on Friday, January 13, 2006 11:57 PM by stepto

    Because you beat them to it.

    Thanks for the info, BTW.

  4. Re:Bugs don't have to be well-coded on WMF Vulnerability is an Intentional Backdoor? · · Score: 1
    How does that suddenly translate into "let's fire up a thread and start executing code that resides in the WMF file itself starting right here"?

    Example: WMF parsing code correctly handles declared length of 0. If (declared_len!=0), it goes on to process the first record (setabort) and increments its record pointer. If (p-basedeclared_len), process the next record. It realizes that the pointer is past the declared length. Is p==base+declared_len? No, must be an error, initate abort sequence. Is there an abort callback defined? Oh, yes, there is. Start a new thread to call it. What should the entry point of this new thread be? Dunno, this wasn't supposed to happen outside of the print driver context (GdiGetPrintJobAbortHandlerThreadCallerEntryPointE x(LPPROC) returns without setting its argument). I'll just use this random garbage here I have handy on the stack (which happens to be where the next MF record was supposed to be.)

  5. Re:Old coding practises, not conspiracy on WMF Vulnerability is an Intentional Backdoor? · · Score: 1
    NT Win32 is a fresh implementation of the Win32. This doesn't share Win16 code.

    Yes, but WMF is older than Win32 and it's structures and constants migrated via windows.h-included headers. I'd be surprised if none of the 16-bit file format handling code got copy&pasted.

    NT, and especially Win32 is written almost entirely in C++. Ever try to do self modifying code in C++?

    NT kernel-mode device drivers (which make up a big chunk of "GDI") are generally written in C, not C++.

    The security push from 2 years ago would have never let self modifying code pass. [] Nobody on the Windows team would seriously consider using it, ever, even if it is joked about on beer Friday. Any attempt to use it in reality would start with a flogging and end with a firing.

    You realize you're talking about the same people that moved the graphics drivers from user- into kernel-space aren't you?

  6. Re:I would not be suprised at all. on WMF Vulnerability is an Intentional Backdoor? · · Score: 1

    Metafiles are one of those things that have been deep in Windows so long that it's hard to know how to not to have them interpreted automatically. I heard Google's desktop search app became an infection vector because it was using GDI to scan all file's contents.

    Also, Windows network print servers usually use EMF (Enhanced MF structures) to transfer print streams (sometimes to kernel-mode drivers.) It's certainly possible for this to turn out to be a remote root exploit for any system with a shared printer.

  7. Re:I would not be suprised at all. on WMF Vulnerability is an Intentional Backdoor? · · Score: 1
    Are you sure this wasn't a measure put in place just in case we went to war with another country, we could disable all their systems running windows?
    Are you sure this wasn't a measure put in place by another country, in case they went to war with us, they could disable all our systems running windows?
  8. Re:Problems with Java on Choice of Language for Large-Scale Web Apps? · · Score: 1
    Can you possibly think of a more HLL than Java?

    Um, how about Haskell?

  9. Re:Just a few thoughts on OpenBSD Clashes with Adaptec In Quest for Docs · · Score: 2, Insightful
    I'm sorry if I impugned the younger crowd. I can relate to what you're saying.

    I'm posting this on my Windows XP Home notebook. I tried at least 5 Free OSs, but I couldn't find a kernel that could control the fan and do suspend/resume reliably.

    Over the last decade, the Free OSs have done surprisingly well at supporting hardware. But the last ten years have not yielded (to my knowledge) a hardware RAID card that can be fully-managed without closed binaries.

    Lately it's been Theo and OpenBSD who've gotten down-and-dirty with the vendors and taken the heat for it but made an astounding amount of progress in getting them to open their docs. People said it couldn't be done with the wireless chipsets because of FCC regulations and all that, but they did it.

    So I don't think people who are arguing for more of the same "please sir, may I have a closed binary for Linux x.xx.xx on Pentium 4s" have much of a position to argue from.

  10. Re:Just a few thoughts on OpenBSD Clashes with Adaptec In Quest for Docs · · Score: 2, Interesting
    First, Theo and the other developers, although making good points, are being quite rude to employees. I think that its important for them to push this issue, but I think they are handling it immaturaly. Flaming Adaptec (ex-)employees is not a good move, even if Scott did make a post on OSNews

    I think if you go back and check the archives you'll find that the great majority of the four-letter words are not coming from the OpenBSD group. Ref: that "post on OSNews".

    I mean, how many open-source Unix servers are using their raid cards? How many of those users, admins, etc. realize the importance of an open source driver so it can be maintained by the community, since most companies have been slow (to say the least) to update their binary drivers?

    And how many other kernel projects have rolled over for companies passing off binary-only drivers and management utilities? Seems the kids can't live without their hardware accelerated 3D shootem'-up games, eh?

  11. Re:Tried e-mailing the guy.... on OpenBSD Clashes with Adaptec In Quest for Docs · · Score: 1

    No, it happened to me too.

  12. "doesn't mean it's not aliens" on 13 Things That Do Not Make Sense · · Score: 2, Insightful
    The fact that hundreds of sweeps over the same patch of sky have found nothing like the Wow signal doesn't mean it's not aliens.

    Gotta love those wacky New Scientists . . .

  13. ISO/ANSI/Standardization on A Brief History of Programming Languages? · · Score: 1

    From the chart, it looks as if ISO and ANSI seem to mark the end of the line for most languages they standardize. Question is, are they executioners, vultures, or just plain slow?

  14. Re:Let's face it... on Senator Alleges White House Wrote Allawi's Speech · · Score: 1
    nobody writes their own speeches all the time any more.

    The last speech I heard of being completely attributed to a president was the Gettysburg Address.

    Not sure that's such a bad thing. Delegation is a big part of leadership, and I don't see a problem with someone who has a vision getting help with the presentation. It's the polished and charismatic politicians that concern me. But they seem to get the votes.

    Television (and radio and telegraph before it) has been a great detriment to political discourse.

  15. Re:log4c++ on Printf Debugging Revisited · · Score: 4, Interesting
    we have developed a C++ logging facility geared for debugging

    My first reaction to this was, who hasn't?

    I agree with some of the other posters that their code has some, well, "interesting" features. I have to say it never would have occurred to me to use strcmp on a compile-time constant in a member initialization.

    That they use, but don't derive from, std::ostream for this is another example. It's not exactly trivial to do so, but it's also hard to argue against not doing it for something like this without good reason. But since there's not a single comment in the source files except some revision control macros we're just left to wonder.

  16. Re:belmont club on Your Favorite Political Weblogs? · · Score: 1

    I agree, it's a fascinating read. More military than political analysis though. Watch out, there's no mercy for "the left" there.

  17. Soekris on Energy Efficient and Cheap Servers for Home Use? · · Score: 2, Informative
  18. Re:One thing to keep in mind. on Wind Power Falls Under $0.01/kwh · · Score: 1
    The energy cost in manufacturing the turbines is greater than the energy gain you get back from them.
    Incorrect. Well, I suppose that technically it depends on how long you run it, which is true of every generator, including gas and coal-powered ones.

    Ah, but there is no initial cost needed for a person to get struck by lightning.

  19. Re:The Problem Is... on Wind Power Falls Under $0.01/kwh · · Score: 1
    In any case as much of the US farmland is in the tornado belt, how does one deal with the inevitable of a tornado cutting a swath across the power production grid? There will likely still need to be some kinda of non-decentralized backup.

    Here in Florida we're getting used to weather taking millions of people off the grid for days or weeks. I doubt that wind generators would be any more at risk than the current centralized distribution system.

    I'll bet wind farms would be distributed more evenly than the current power stations concentrated in a few locations, which also provides less appealing targets for baddies to attack.

  20. Self-destuct countdown from 'Alien' on Home Defense, Geek Style? · · Score: 1

    I always thought the female-voice self-destuct countdown timer sequence was the scariest thing available. Wire that to your motion detectors (doesn't even have to wake the neighbors), some flashing red lights, and I bet any burglars would get out - quickly.

  21. Upgrade Mini-FAQ on OpenBSD 3.5 Released · · Score: 3, Informative
  22. Re:This is a Good Thing(TM) on Free Optimizing C++ Compiler from Microsoft · · Score: 1
    To establish a baseline I had to make comparisons on the Win32 platfrom. What really amazed me was the difference in efficiency and memory footprint between the VC++.NET 2003 compiler and gcc 3.3. Although gcc is an excellent compiler, I don't think anyone can argue that MS has the inside track on optimizing Win32 apps.

    Could you clarify for me which one you found to be better?

  23. Re:IBM DB2 on Searching by Shape... · · Score: 1

    Hey, thanks for filling me in on that "I wonder what ever happened to . . .". IBM seems to have misplaced more cool tech than most other companies have produced at all.

    I remember Pournelle writing in Byte about that time that he complained to the IBM booth at Comdex that they wanted hundreds of dollars for a device driver kit for OS/2, whereas if he went to the Microsoft booth they would be stuffing diskettes in his bag for nothing.

  24. IBM DB2 on Searching by Shape... · · Score: 1

    Does anyone else remember the ads about 10 years ago in Dr. Dobbs? IBM was claiming DB2 could do fuzzy image searching. The ad had a picture of a green wine bottle and a hand-drawn sketch of one of a similar shape.

  25. Fr7d on People with real l337 speak names? · · Score: 1

    I had a friend who told me he had a friend who changed his name from "Fred" to "Fr7d". The '7' was silent.