Slashdot Mirror


User: gtwilliams

gtwilliams's activity in the archive.

Stories
0
Comments
40
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 40

  1. Forging IP Addresses on BusinessWeek Takes On the RIAA · · Score: 1

    More troublesome, sophisticated computer users can "spoof" IP addresses, or use one assigned to somebody else. They use a simple piece of software to forge the IP address on packets of information sent from their computer, much like someone who puts an address on the back of an envelope that isn't theirs. The people most likely to spoof are the very tech-savvy youngsters also mostly likely to be stealing music. Even if the RIAA had an IP address it believed belonged to Andersen, Lybeck thought, that wasn't necessarily the case.

    An otherwise good article got it wrong here.

    Sure you can place a forged source address in an IP packet that you send. But no conversation can take place because the Internet "knows" a route to that forged address (which isn't your machine) and it is not possible to change that.

  2. Why Use the ISP's DNS Servers? on Paraguay Telco Hijacks DNS Before Elections · · Score: 1

    Just run your own caching server.

  3. Re:A minor flaw? Tosh. on A Little .Mac Security Flaw · · Score: 1

    one thing that .Mac does give you ... is ... "Back to My Mac"
    sshd anyone?
  4. Re:Get a D-Link or a LinkSys, Routers r a commodit on Cisco To Develop Third-Party APIs For IOS · · Score: 1

    I wish unix had the command parameter prompting system that the shell in IOS has.
    zsh
    http://zsh.sourceforge.net/FAQ/zshfaq04.html#l44
  5. Re: Let's not forget also the TCP/IP unfixed flaws on Reflecting on the 20th Anniversary of NSFnet, Internet Origins · · Score: 1

    What we need is virtual circuits (VC) over IP that in turn open virtual circuits over layer 2 protocols
    What we have is MPLS.
  6. Re:Er, that's an OLD attack on Attacking Multicore CPUs · · Score: 1

    I think you meant 370/168.

  7. Re:Not a Vista bug on Vista Bug Costs Users In Swedish Town Their Internet · · Score: 1

    Yes, that's true. It seems Microsoft has found a way to break compatibility with foreign DHCP servers and be able to claim that they are conforming with standards. Clever.

  8. Re:Not a Vista bug on Vista Bug Costs Users In Swedish Town Their Internet · · Score: 1
    And the document says immediately before that,

    If a client does not have this limitation (i.e., it is perfectly able to receive unicast BOOTREPLY messages), it SHOULD NOT set the BROADCAST flag (i.e., it SHOULD clear the BROADCAST flag to 0).
  9. Re:...What the fuck? on Skype Linux Reads Password and Firefox Profile · · Score: 1

    That's part of the point. If a program uses $HOME instead of getpwent or whatever, that means I can have multiple config profiles for that program saved somewhere, assuming it doesn't support them by itself.

    Of course a programmer *could* design that behavior. More typically, programs are designed to look in the home directory (obtained though the POSIX getpwuid() function call designed for that purpose) or use the file specified in the -f option on the command line.

    Personally, I think it's silly to expect programs to rely on the /etc/profile or similar mechanism to set an environment variable to obtain the user's home directory instead of the API for that purpose. It certainly doesn't save anything -- getenv() vs. getpwuid(). And it could be wrong.

  10. Re:...What the fuck? on Skype Linux Reads Password and Firefox Profile · · Score: 1

    Of course, no one could ever modify his environment before running a program. That wouldn't be fair.

  11. Re:What a load of FUD on Skype Linux Reads Password and Firefox Profile · · Score: 1

    Now what exactly does skype need to know my or anybody else's account name for? I've got no clue, but I'd be very interested to find out.
    It probably doesn't. But it most certainly needs to know how to open its configuration file, which it expects in your home directory. To get the path to that file, it calls getpwuid(). That library routine, on a system configured without network files like NIS+ or LDAP, will open /etc/passwd to obtain, among other things, your home directory.
  12. Re:Why.. on Skype Linux Reads Password and Firefox Profile · · Score: 1

    It's probably better to simply getenv("HOME") to find $HOME. It's already in your process; why bother asking a file (or possibly a remote database)?

    But yes, there are other mundane and valid reasons for reading /etc/passwd.

    Only if you consider POSIX mundane. Many programs call getpwuid() to obtain the user's home directory. The user's environment cannot be trusted.
  13. Re:Why.. on Skype Linux Reads Password and Firefox Profile · · Score: 1

    I just searched the source of Pidgin (because it is open source) and found it does indeed access /etc/passwd through getpwuid(getuid())
    Yes, that's because it needs to know the user's home directory to find its configuration file. There are many applications that do the same (innocuous) thing.
  14. Re:Why.. on Skype Linux Reads Password and Firefox Profile · · Score: 5, Informative

    The most common reason these applications and others read /etc/passwd is that they call getpwuid() to obtain a struct that contains the user's home directory. Now the application knows where to find its configuration files.

  15. Re:Hrm... on Too Many Linux Distros Make For Open Source Mess · · Score: 1

    you can be using Kubuntu at home, and if you go over to your friend who's using Ubuntu unless you're familiar with Linux in general you might well be left scratching your head trying to figure out how to do what you want to do.

    Perhaps you could describe the differences between KDE and GNOME that would leave a KDE user "scratching his head" when looking at a GNOME desktop.
  16. Random PIDs on Any "Pretty" Code Out There? · · Score: 2, Informative

    Are there any operating systems out there that use random numbering of PIDs?
    Yes. AIX.
  17. Re:First Column! on Are 80 Columns Enough? · · Score: 1

    Each column of a punched card was one byte.
    Actually each column was a six-bit character using an encoding scheme called Binary Coded Decimal (BCD). Bytes came later.
  18. Re:I am starting to suspect... on Xandros CEO Doesn�t Agree Linux is Patent Violator · · Score: 1

    This has been said before: the BSD license allows proprietary use. It's not stealing.

  19. I Just Bought One on Dell Ships Ubuntu 7.04 PCs Today · · Score: 1

    I figured I'd vote with my wallet.

  20. Re:OK, here's an example on Mr. Ballmer, Show Us the Code · · Score: 1

    perfectly usable for copying a file from disk to disk in a non networked fashion

    From sendfile(2):

    Presently (Linux 2.6.9): in_fd, must correspond to a file which sup-
    ports mmap()-like operations (i.e., it cannot be a socket); and out_fd
    must refer to a socket.

    Applications may wish to fall back to read(2)/write(2) in the case
    where sendfile() fails with EINVAL or ENOSYS.
  21. Re:Seeing is believing. Conversely.... on Groklaw No Front for IBM · · Score: 1

    I think you mean quash.

  22. Re:Interesting Article on ESR's Desktop Linux 2008 Deadline · · Score: 1
    NetworkManager for GNOME has never worked on KDE for me.

    NetworkManager has always worked for me on KDE. First with the GNOME applet and now with knetworkmanager -- the KDE applet.
  23. Deleting a Sandbox -- Not the Repository on IBM Denies Destroying Evidence in SCO Case · · Score: 5, Informative

    This is old news.

    IBM instructed developers to purge their sandboxes. This, of course, has nothing to do with the source code in IBM's source control systems. It's just working copies on developers' machines.

  24. Re:Filter on Deconstructing a Pump-and-Dump Spam Botnet · · Score: 1
    this blocks most non-US static IPs as well
    It happens here (US), too. Even on very large ISPs. Some mail server operators or RBLs are ignorant.
  25. Re:Filter on Deconstructing a Pump-and-Dump Spam Botnet · · Score: 1
    I need access to port 25 for things like testing clients' servers sometimes.
    Then port forward with ssh.