Not necessarily, my aunt is on dialup and until recently she'd been patching herself up on SP1 because downloading a 290MB service pack just wasn't feasible. The monthly updates themselves can sometimes be big of a download.
I recently did a full reinstall of her system (at my place on cable) from a MS cd (managing to maintain her OEM activation), SP2, Firefox, Opera and IE7-beta3 and she's been good for ages now.
The annoying thing is, even on dialup with sparse on-off connectivity and surfing it's remarkeably easy to get infected. Don't underestimate the number of people who *CAN'T* keep upto date.
No, it makes sense to develop against the standard and you know, being Google, they could flick Mozilla some patches to implement anything from the standard that didn't work right.
Developing for the mainstream is the reason why we end up with shit being mainstream.
The WMV3/VC-1 specification is formal and out there and is going to be used on Bluray/HD-DVD. They aren't likely to break compatibility willy nilly, not in the video profiles people care about anyway.
The guys behind the ffmpeg/libavcodec implementation which mplayer, xine and VLC and a whole bunch of a/v media apps in Linux already make use of, already have a working and pretty good WMV3 (WMV v9 Video) implementation in CVS. Infact it'll probably trickle into distro's before the end of the year.
Except that it isn't over 80% any more. The latest stats I saw (July 2006 I think) put IE at 73-75% and falling
75% is optimistic (toward the opposition). Figures vary wildly and the only people likely to know the true figures are Microsoft from Windows Update logs (although I guess a few Firefox users might use WU using the IETab extension).
Whatever it may be, IE7 is a superficially a pretty solid browser, and if they truly have proven to nail security issues after release and go on to finish up CSS2/3, XHTML, SVG etc support in IE8. There won't be any further migration, infact the Firefox 2.0 release might give Microsoft an opportunity given that it won't anything exciting to the average Firefox user.
If you find an upload.php script and it's not password protected, or use some other method of authentication, then you can upload files and utilise that websites bandwidth. If it doesn't block uploads of *.php, *.cgi, *.pl and maybe other files, you could well end up with the ability to run whatever code you want on the webserver (at low privilege, but you can still explore the website files and work you way up, e.g. dump out script source code and look for vulnerabilities, or dump out configuration files looking for passwords).
...we won't be seeing any games that use DirectX10 for at least 2 years.
And what exactly is stopping game developers from writing their games with a DirectX 9 base and optional DirectX 10 functionality? DX 10 is a superset of DX 9 after all isn't it? You just detect when DX 10 is available and enable swaths of code...well, maybe it's not as easy as I make it sound but feasible, yes?
> Even 64 bit linux has problems with some 32 bit binaries - notably wrappers for video codecs originally from 32 bit MS windows.
What problem's? Microsoft don't have any 64 bit video libraries in Windows XP x64, they are 32-bit, as is Windows Media Player. Why would it be surprising that you need to use a 32 bit media player to utilise w32codecs?
The problem is the way the random digits from your security code are selected. I would guess that the digit indexes are indeed selected randomly and then sorted by their index for convenient input by the user, probably to lower tha number of mis-types (think of the user sliding their finger across some paper to mask digits as they go) and reduce call in's from user's who have been locked out. Whoever designed the system obviously missed the fact that this in sorting causes the user to unwittingly provide more clues to their security code via the keyboard.
It's a great hack, but has a trivial fix. It demonstates the convenience-security trade off well.
You're right of course that a larger data set means a much much higher certainty nd therefore fewer or no guesses needed on the attackers part.
Not necessarily, my aunt is on dialup and until recently she'd been patching herself up on SP1 because downloading a 290MB service pack just wasn't feasible. The monthly updates themselves can sometimes be big of a download.
I recently did a full reinstall of her system (at my place on cable) from a MS cd (managing to maintain her OEM activation), SP2, Firefox, Opera and IE7-beta3 and she's been good for ages now.
The annoying thing is, even on dialup with sparse on-off connectivity and surfing it's remarkeably easy to get infected. Don't underestimate the number of people who *CAN'T* keep upto date.
The difference is the Ubuntu slip up was fixed within hours, the Microsoft slip up ..is still counting...
No, it makes sense to develop against the standard and you know, being Google, they could flick Mozilla some patches to implement anything from the standard that didn't work right.
Developing for the mainstream is the reason why we end up with shit being mainstream.
The same could be said for MPEG-1,2 and 4. Didn't stop that
> I've heard that within the last week VC-1 decoding has been improved in ffmpeg to allow WMV decoding natively
Yeah, anyone could think Real made this announcement now to steal their thunder and get some cheap publicity...
No, this has squat to do with Real Alternative :) But it's always nice to give it some linkage for karma.
The WMV3/VC-1 specification is formal and out there and is going to be used on Bluray/HD-DVD. They aren't likely to break compatibility willy nilly, not in the video profiles people care about anyway.
The guys behind the ffmpeg/libavcodec implementation which mplayer, xine and VLC and a whole bunch of a/v media apps in Linux already make use of, already have a working and pretty good WMV3 (WMV v9 Video) implementation in CVS. Infact it'll probably trickle into distro's before the end of the year.
Yeah so, move along... nothing to see here.
Except that it isn't over 80% any more. The latest stats I saw (July 2006 I think) put IE at 73-75% and falling
75% is optimistic (toward the opposition). Figures vary wildly and the only people likely to know the true figures are Microsoft from Windows Update logs (although I guess a few Firefox users might use WU using the IETab extension).
Whatever it may be, IE7 is a superficially a pretty solid browser, and if they truly have proven to nail security issues after release and go on to finish up CSS2/3, XHTML, SVG etc support in IE8. There won't be any further migration, infact the Firefox 2.0 release might give Microsoft an opportunity given that it won't anything exciting to the average Firefox user.
I think the Roman's have prior art on that one mate.
nano?
Give me a break, emacs has supported whatever it is this article is about for too long now.
> If I come up with a kick-ass idea for my employer, I'll stand to benefit much more than simply $10,000.
Thats right, you get to keep your job
It depends how well written the upload script is.
If you find an upload.php script and it's not password protected, or use some other method of authentication, then you can upload files and utilise that websites bandwidth. If it doesn't block uploads of *.php, *.cgi, *.pl and maybe other files, you could well end up with the ability to run whatever code you want on the webserver (at low privilege, but you can still explore the website files and work you way up, e.g. dump out script source code and look for vulnerabilities, or dump out configuration files looking for passwords).
...your definition of Europe obviously excluses the UK.
Ah, that'd be because it's keyworded "-amd64". Doesn't build as 64 bit at all :|
That may well explain why Gentoo, a *source distro*, hasn't got anything but a binary package of Open Office. Apparently it's hell to compile.
...we won't be seeing any games that use DirectX10 for at least 2 years.
And what exactly is stopping game developers from writing their games with a DirectX 9 base and optional DirectX 10 functionality? DX 10 is a superset of DX 9 after all isn't it? You just detect when DX 10 is available and enable swaths of code...well, maybe it's not as easy as I make it sound but feasible, yes?
blog dude, the word you're looking for is blog.
One of my old favourite's oopsies are upload scripts that don't prevent you from uploading PHP or other web script files.
It's amazing how many webmasters leave little scripts in their public directories not stopping to think search engines may find them.
Actually the free version has a 30 day MPEG-2 functionality.
The MPEG-2 encoder built in TMPGenc is 30 day trialware, after 30 days it stops working.
Also, DVDShrink also only takes MPEG-2 input and reuses the stream. Is absolutely no use to the poster.
Doom9 is simply the best community to discuss the posters needs, there are people there that will encode your socks off.
> Even 64 bit linux has problems with some 32 bit binaries - notably wrappers for video codecs originally from 32 bit MS windows.
What problem's? Microsoft don't have any 64 bit video libraries in Windows XP x64, they are 32-bit, as is Windows Media Player. Why would it be surprising that you need to use a 32 bit media player to utilise w32codecs?
The problem is the way the random digits from your security code are selected. I would guess that the digit indexes are indeed selected randomly and then sorted by their index for convenient input by the user, probably to lower tha number of mis-types (think of the user sliding their finger across some paper to mask digits as they go) and reduce call in's from user's who have been locked out. Whoever designed the system obviously missed the fact that this in sorting causes the user to unwittingly provide more clues to their security code via the keyboard.
It's a great hack, but has a trivial fix. It demonstates the convenience-security trade off well.
You're right of course that a larger data set means a much much higher certainty nd therefore fewer or no guesses needed on the attackers part.