Slashdot Mirror


User: Red+Alastor

Red+Alastor's activity in the archive.

Stories
0
Comments
613
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 613

  1. Re:"theoretical" on OpenOffice.org Security 'Insufficient' · · Score: 1
    Guys. Last time I was taught about this, this came right down from the Latin language... In French, the singular is "scénario", and the plural may be "scénarios" (common) or "scénarii" (rare, direct from the Latin). Note the funny accent on the "E" which is no Latin sprach whatsoever !-)

    That would make it the only French word that ends in "ii". French is my main language and even though scenarii is used in France (fortunately, I'm not living there), it's bad French. And it sounds awful. I'm unsure if it's worse or not than their other perversion of the word : "scénar".

    P.S.: Grepping my French dictionary file, I do find ONE word ending in "ii" : impresarii. Never saw it before. I think it's bloody stupid.

  2. Re:"theoretical" on OpenOffice.org Security 'Insufficient' · · Score: 1

    I took this crap in the original document. Scenarii is as stupid in French as virii is in English so I left it intact.

  3. Re:"theoretical" on OpenOffice.org Security 'Insufficient' · · Score: 4, Informative

    I'm replying to my own post but the other was the translation and this is what I think of it. I think it's bullshit.

    Point number 10, what the fuck ? zip is just a comression format. Point number 11, trusted folders are defined by YOU. So most people don't even have them. But if it's convenient to you to define a folder where all macros are trusted how is it different from accepting every macro while you open the document ? It must be quite convenient for developers who want to test their macros. Most other points ? Way too vague to mean anything. Beside, if the danger for an office suite which isn't really attacked right now is "maximal", how should be classify MS Office ?

    And their famous proof-of-concept... they won't even tell us how they got it to run. My guess is that they defined a trusted folder and put it in.

    Until they reveal that, this document is worthless. Like that other proof-of-concept from I don't remember which AV vendor. Their macro (if you accepted it) would download a porn picture from the net and put it in the document. I guess it's much more dangerous than sending documents with the picture already in.

  4. Re:"theoretical" on OpenOffice.org Security 'Insufficient' · · Score: 4, Informative
    I speak French, let me translate.
    1. "Official" MS Office competitor.
    2. Share of the market rising.
    3. Cheap but...
    4. What about the real security of OpenOffice ?
    5. Viral analysis by proof of concept
    6. Numerous integrated programming languages : script shell, VBScript, Python, Perl, Asp, Java.
    7. Rich macro developing.
    8. Numerous existing hijackable execution points
    9. No protection mecanism for macros
    10. zip format is makes virus penetration easy.
    11. Macro security is easy to bypass. "Trusted" folders are defined. Any macro placed in those folders is by definition, trusted.
    12. Document signature do not really consider macros. Bypassing possibilities
    13. Macros can be linked to events or services.
    14. Other mechanisms : macro chaining, hypertext links, inter-application execution, OLE
    15. Many mechanisms are usable for an infection
    16. All known viral techniques known for Microsoft Office can be translated under OpenOffice.org
    17. Every kind of infection is doable. (Infection and auto-reproduction)
    18. Globaly, OpenOffice's suite is a bigger infection risk than Microsoft's suite.
    19. No real security concepts.
    20. Many functional viral roots were made as proof-of-concept
    21. Infection successful no matter the security setting of the user.
    22. Some senarii can act without alerting the user in any way (scenarii is a stupid plural in French too but they used it in the original)

    Then they go on to explain (still in powerpoint bullets) that they managed to write a macro that sends an e-mail with an attached file which then executed C code which modified dicOOo.

    And they conclude that infection risk under OOo is MAXIMAL and its use should be discouraged for security reasons.

  5. Re:They have to delete your history if you ask the on Google to Continue Storing Search Requests · · Score: 4, Informative

    They cleared that out. They said they'll keep them until they fall off the backup roll. What do you expect, that they nuke them from orbit the second you delete them ?

  6. Re:Other way around? on New Kind of Spam 'Un-Training' Filters? · · Score: 1

    Everybody have different non-spammy word. How are they going to find out that MY innocent words are Python and Linux related ? If they knew, they might spam ME but it wouldn't affect anyone else. Beside, there's headers that are also full of infos. Read A Plan for Spam by Paul Graham, it explains why such a scheme would not work.

  7. Re:Other way around? on New Kind of Spam 'Un-Training' Filters? · · Score: 1
    Either way, your spam filters become increasingly useless.
    Not at all. Random words have neutral meaning and spam words have spammy meaning. Unless they can fill their mails with words your own mails are filled with and your spam filter consider good, random words won't help them.
  8. Re:In my experience... on Proving Which Spam Filters work Best · · Score: 1

    Popfile does. It works extremely well as long as you don't change your mind about what each category means. If you do, reset the category and start training it again.

  9. Re:In my experience... on Proving Which Spam Filters work Best · · Score: 4, Informative
    I like popfile because it's a bayesian filter that sorts into any arbitrary categories you want, not just spam and ham.

    http://popfile.sourceforge.net/

  10. Not enough software for Linux ? on The Future of Closed Source Software and Linux · · Score: 4, Insightful

    If you find there isn't enough software for Linux, you haven't browsed your repositories. I'm not saying that "I miss software X" isn't valid but if you think there isn't enough new things to try in general, you are not trying very hard !

  11. Re:what about the lucky sevens? on The Next Three Days are the x86 Days · · Score: 3, Interesting
    Just curious...how many places do it d/m/y vs. m/d/y. I'd never seen the d/m/y thing till a couple of years ago....
    Every place that speaks French use d/m/y. It's because it's the way it's naturally spoken in French : 2 août 2006.
  12. Re:Is it just me? on Spanish Region Goes Entirely Open Source · · Score: 1
    It already exists.

    http://www.yoism.org/

    Warning, the website contains annoyances, turn off your sound before visiting.

    Their holy book is already at version 0.2. You can join if you want and submit patches.

    And it's very modular, you can remove mysticism from it if you wishes.

  13. Re:reminds me of.... on ComputerWorld's Help Form Elicits Some Laughs · · Score: 4, Insightful
    Definition of programming. Programming is race between Programmers, to produce idiot proof apps, and God, to create better idiots. So far God is winning.

    Of course, since idiots get into programming too.

    Check the Daily WTF if you want exemples : http://thedailywtf.com/

  14. Re:Create your own question on How are 'Secret Questions' Secure? · · Score: 2, Funny
    Best is to allow the user to create their own question. The only issue here is that some people will choose questions that others could easily find the answer to. However, it is secure for those who know what they are doing.
    Sometimes you cannot write your own so either you type random junk on the keyboard if you are sure you'll never forget your password or you understand the question in a twisted way. What's your favourite animal ? Dubya !
  15. Re:dink,dink,dink ddd ddddd on Linus Speaks Out On GPLv3 · · Score: 1
    I feel like Schroder in "A Charlie Brown Christmas" having to dink-dink-dink on his little piano to get Lucy to recognize "jingle-bells". Another way of asking my question is "Does any version of the GPL allow (technically, not legally) non-signed software to run on a DRM device". The answer to that question is the same as asking if the GPL can circumvent DRM.
    No. And the GPL is only legal, not technical. And it cannot in any direct way affect software not covered by it.
  16. Re:Of Course That's the Point on Linus Speaks Out On GPLv3 · · Score: 1
    So the correct answer is that the GPL doesn't circumvent DRM.
    There is a mention in the license that the covered software cannot be considered DRM. So if its GPL, you can circumvent it and no court can hold you responsible. But the new GPL does not circumvent any DRM in software it does not cover. Unless the GPL app is so critical to you that you absolutely have to distribute it and thus remove the DRM in your hardware.
  17. Re:Of Course That's the Point on Linus Speaks Out On GPLv3 · · Score: 2, Informative
    That's intersting, but you didn't answer my question. Note that incentives and motivations have nothing to do with my question.
    No really, that's the answer. GPL is a license, not a contract. It cannot control use. My only GPL weapon is to prevent you to redistribute my work if you don't comply with the rules of my license. So the GPL says, either you remove that pesky DRM stuff or you write your own software to put in your own DRMed hardware because I do not give you permission to redistribute MY software as long as its in there.
  18. Re:Of Course That's the Point on Linus Speaks Out On GPLv3 · · Score: 1
    OK, so explain how GPLv3 is going to make it possible to circumvent the DRM.
    If you make DRM apply to GPLv3ed software in a way that prevents the user to run it or run modified versions, you lose your right to redistribute such software.
  19. Re:Suggestion ... on Resources for Programming Course TA? · · Score: 1
    Fully automatic grading breaks down quite badly if there is a possibility of students making small mistakes that cause large amounts of tests to fail (or, conversely, big mistakes that cause few tests to fail);
    It becomes less of a problem if you let students use the grading system. Write test cases and send them to students, they'll know in advance how many of them pass and will be able to modify their program appropriately.
  20. Re:Sony... on Sony Online Licenses Unreal Engine for DC MMOG · · Score: 1
    The only way they could ever "save" SWG would be to find a way to make the people worth playing with outnumber those who are not worth playing with, if they could do that the state of the gameplay would be highly irrelivant.

    I wonder if there could be a technical solution for this. Maybe a kind of Bayesian filter that would let you tag peoples as "friend" or "jackass". People would be splitted into servers with people they like. And maybe we could add "unlinkable" (if both people link each other as such, they move as a unit so groups of friends and guilds would not be splitted).

    We could even have elitists servers that really care about roleplaying that would be separated from the other players. All that automatically.

  21. Re:I suppose that the outcome on Google Antitrust Suit May Go Forward · · Score: 2, Insightful
    The reason their results dropped might be because they launched with hype and PR and people linked to them. Now that people lost interest, PageRank drops.

    What's funny is that this lawsuit might make their PageRank increase temporarily once again :)

  22. Re:The usual response on Cell Users As Bad As Drunk Drivers · · Score: 1
    Uh... roll back room? I'm a bit confused; here in the UK, one of the standard driving test procedures is the hill start; if you roll back at all, you fail. (At least when I took it. They might have changed things.)
    You have to allow roll back room and the person in front of you have not to roll back. That way, if it happens anyway, no one is damaged. Beside, I don't know how it is in the UK but in Canada you can drive with only a written exam if you are with someone owning a driver license.
  23. Re:Missing the point on Open Source Could Learn from Capitalism · · Score: 2, Insightful
    Whether FOSS is "capitalist" or "communist" or "volunteerist" is completely irrelevant, and quite frankly I think anyone who constantly tries to hammer the FOSS square peg into one of those round holes is doing so for their own purposes
    There is a very simple reason why you can fit FOSS in those holes. Capitalism, communism, volunteering and so on are all about managing scarcity. In FOSS, there is no scarcity.
  24. Re:PuppyLinux with 2.6? on Damn Small Linux Not So Small · · Score: 3, Informative
    What I like about Puppy is that it can save back to its own CD/DVD. If you burn it on a DVD, you almost have a hard drive. And like DSL, you can install more stuff on it automatically.

    Oh and it can be installed to hard disk to give a new life to old computer.

    http://www.puppyos.com/

  25. Re:Resignation. on Immaturity Level Rising in Adults · · Score: 1

    In french it's "couleur" and "saveur". And huh, why was 30% of english taken from french ?