Slashdot Mirror


User: krischik

krischik's activity in the archive.

Stories
0
Comments
925
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 925

  1. Re:Without knowing much than what is in the articl on Major Security Hole In Samsung Linux Drivers · · Score: 1

    No, the problem come from the device driver for scanner devices which are raw scsi devices and therefore have some very restrictive security set.

    The hot plug manager should change the user id to the logged in user - but that is not reliable. Personal experience in 50% of cased it stays on root so only root can scan.

    And even if the user is changed - have 2nd user logged in and only one can scan.

    Martin

  2. Flawed Design... on Major Security Hole In Samsung Linux Drivers · · Score: 2, Informative

    Only when the little bugger of an hotplug-manager changes the user id for the scanner device to the logged on user. Which still only gives one user access to the scanner. Have my Wife remote logged in and only one of us can use the scanner.

    Unix security if just flawed and the flaw is called "root".

    Martin

  3. Linux security on Major Security Hole In Samsung Linux Drivers · · Score: 1

    Year that's the theory - in praxis I quite often have to start xsane as root because - for whatever reason - the scanner device security is set to:

    brw-rw---- root disk

    Unix security is just not up to today's desktop hardware with scanners, usb stick and whatever else. The inflexible root-centred security system is no good for hot-plugin.

    I like this little trivia: http://en.wikipedia.org/wiki/Unix#1970s - Multics - multi-user-os - unics - uni-user-os. And it is still that way - root is the only true user the rest are just cripple.

    Martin

  4. Re:How come an app can do that? on Major Security Hole In Samsung Linux Drivers · · Score: 0, Troll

    I expect that you install the drivers as root. The installation routine then sets suid to all applications which use a scanner.

    And somehow I understand it - quite often I had to start xsane as root because the current user just was not able to access the scanner device - and I wanted that bloody scan now and not in half an hour problem searching session.

    Martin

  5. Ups Grammar mistake on openMosix Is Shutting Down · · Score: 1

    Sorry my English (I am german). What I wanted to say was "hat seit" which (in German) means that a specific attribute has been attained somewhere in the past and continues to the present.

    Martin

  6. VMS ... on openMosix Is Shutting Down · · Score: 1

    ... had clustering for ~15 years (Note that VMS is ~10 years younger then Unix.). And it actually works.

    Martin.

  7. Re:Anti-virus can destroy any software... on Will Pervasive Multithreading Make a Comeback? · · Score: 1
    Indeed!

    Abuse any system and it WILL break, eventually.

    Remember my other post? The interesting one was the priority inversion on my Linux backup. An online backup should not abuse the system.

    A Real-Time OS might be helpfull here as it protect against that ans other problems. And a real time programming language like Ada. But that is a mute point as Ada's Real-Time-Annex will only (fully) work on a Real-Time-OS :-( . BeOS was particularly sensitive to memory shortfalls, for example. It didn't take much paging activity to make it grind to a halt, even right up to the end.

    That is strange. I never noticed when using BeOS but then I had memory without end at the time. But what I did notice was that BeOS needed a page file at least the size of physical memory - and I thougt that was so for speed optimization.

    Martin
  8. Re:I can remever it very well on Will Pervasive Multithreading Make a Comeback? · · Score: 1

    I got an 2000 at work and XP at home. The 2000 is worse - but that's probably because system department choose such a great virus checker. Still - in a proper MT system the virus checker should not bring the system to a standstill (only the one thread waiting for data to be checked should be affected).

    Martin

  9. I can remever it very well on Will Pervasive Multithreading Make a Comeback? · · Score: 1

    The Windows 2000 desktop I us at work locks on me on a regular basis. See my other post:

    http://ask.slashdot.org/comments.pl?sid=250527&cid =19884803

    Martin

  10. Not up to XP anyway. on Will Pervasive Multithreading Make a Comeback? · · Score: 1

    Well, my XP regularly hangs - that is:

    * Click with the Mouse - nothing happens.
    * Move the Mouse - nothing happens.
    * Type on the Keyboard - nothing happens.
    * Type Ctrl-Alt-Del - nothing happens.
    * Type Shift-Ctrl-Esc - Task manager does not appear.

    Especially the last one is bad as the task manager should enable you to kill evil jobs.

    Ah, at work especially the (on access) virus checker grinds the system to a hold.

    BTW: It it the same for Linux - with one difference - here it is the xfsdump backup utility which grinds the system to a hold. Probably a Priority Inversion [1].

    So, NO: neither Windows nor Linux have really good multi tasking.

    Martin

    [1] http://en.wikipedia.org/wiki/Priority_inversion

  11. US carriers on Open Source Linux Phone Goes On Sale · · Score: 1

    Luckily Sprint exists ony in the US and the remaining 95% of the world population use propper GSM carriers. I just shoff in the SIM card and it works.

    Visit the parent in law - which live abroad - I just buy a local prepaied card - shove it in - and it works. Just like that - no trouble at all.

    Honestly: Whenever I read about Sprint I think: How can anybody ever subscribe to that sh...
    Martin

  12. UIQ3 phone on Sony Ericsson Shows Off Feature-Heavy Cell Phones · · Score: 1

    The W960i (like the W950i) is a UIQ3 phone so your problems won't be there. UIQ3 even plays ogg vorbis (via 3rd party applications see http://shop.my-symbian.com/PlatformProductDetail.j sp?siteId=695&productId=199474).

    Martin

  13. No ... on Evolution of the 'Captcha' · · Score: 1

    you are not alone!

  14. No Flash! on Evolution of the 'Captcha' · · Score: 1

    Since 99% of all Flash is advertising I am not interested in I have Flash deinstalled or deactivated.

    Martin

  15. not everdody is native english speaker on Evolution of the 'Captcha' · · Score: 1

    Your suggestion - which is also mentioned in the original article - turns the captcha into an language test - are you human and speak english (well)?

    Yes most people will know what a cat and dog is in english - but it won't stop there - how long until diffcult english terms are used because bot's (brute force) crack the (few) simple tests?

  16. failes once every four times? on Evolution of the 'Captcha' · · Score: 1

    Damm is he good - I pass once every four times.

    Is it a 0 or an O or prehaps a Q.
    Is it a 1 or an I or prehaps a l.
    Is it a s or a S or prehaps a 5.

    I damm well hate those bastards.

    Martin

  17. resentment on Why Music Really Is Getting Louder · · Score: 1

    What the marketing guys don't notice that over aggressive advertising creates resentments. I for once now have a "mute button reflex" which takes over when commertials begin (apart from an almost advert free pay tv substcription).

    So for any advertiser who has not booked the first 5 sec: I won't be listening.

  18. Multitasking support is not all that new. on Is Parallel Programming Just Too Hard? · · Score: 1

    The reality, however, is that these new languages which provide the newer and better paradigms for thinking and reasoning about concurrent code, just aren't going to get developer uptake. Programmers are too conservative and too wedded to their C, C++, and Java to step off and think as differently as the solution really requires. Programming languages with build in multitasking are not new. We have have them for quite a while now (see http://en.wikibooks.org/wiki/Ada_Programming/Taski ng - Ada was designed in the early 80'th). They where just ignored by PC programmers because there so heavy weight and difficult to learn. Both not realy true. And as you said: Quite a few programmers don't want to learn anything new :-( .

    Martin
  19. A little more. on Sun to Make Solaris More Linux Like · · Score: 1

    Who cares? Do they work? No, they are missing important features.

    I expect vi to be the same from platform to platform. grep as well. I expect Vim to be the same from platform to platform.

    grep as well. Right:


    Aufruf: grep [OPTION]... MUSTER [DATEI] ...
    Suche nach MUSTER in jeder DATEI oder der Standardeingabe.
    Beispiel: grep -i 'Hallo Welt' menu.h main.c

    Auswahl und Interpretation regul"arer Ausdr"ucke:
        -E, --extended-regexp MUSTER ist ein erweiterter regul"arer Ausdruck.
        -F, --fixed-strings MUSTER ist eine Menge Newline-getrennter
                                                            Zeichenketten.
        -G, --basic-regexp MUSTER ist ein regul"arer Standardausdruck.
        -P, --perl-regexp MUSTER ist ein regul"arer Ausdruck,
                                                            wie Perl ihn akzeptiert.
        -e, --regexp=MUSTER MUSTER als regul"aren Ausdruck verwenden.
        -f, --file=FILE MUSTER aus DATEI lesen.
        -i, --ignore-case Unterschied zwischen Gross- und Kleinschreibung
                                                            ignorieren.
        -w, --word-regexp MUSTER passt nur auf ganze W"orter.
        -x, --line-regexp MUSTER passt nur auf ganze Zeilen.
        -z, --null-data Eine Zeile endet mit Nullbyte, nicht Newline.

    Verschiedenes:
        -s, --no-messages Fehlermeldungen unterdr"ucken.
        -v, --revert-match Nicht-passende Zeilen anzeigen.
        -V, --version Versionsnummer ausgeben und beenden.
                --help Diese Hilfe ausgeben und beenden.
                --mmap Wenn m"oglich, Eingabe in den Speicher mappen.

    Ausgabekontrolle:
        -m, --max-count=ZAHL Nach ZAHL "Ubereinstimmungen abbrechen.
        -b, --byte-offset Byte-Offset anzeigen.
        -n, --line-number Zeilennummer anzeigen.
                --line-buffered Jede Zeile einzeln (ungepuffert) ausgeben.
        -H, --with-filename Dateinamen bei jeder "Ubereinstimmung anzeigen.
        -h, --no-filename Dateinamen nicht anzeigen.
                --label=TEXT TEXT als Dateiname f"ur Standardeingabe ausgeben.
        -o, --only-matching Nur den Teil der Zeile anzeigen, die mit MUSTER
                                                            "ubereinstimmt.
        -q, --quiet, --silent Alle normalen Ausgaben unterdr"ucken.
                --binary-files=TYP Bin"ardateien als TYP annehmen. TYP kann
                                                            >>binary>text>without-match>read>write>always>neve r>auto.


    If you like a horse carriage fine - but I just want a automobile!

    Martin
  20. MMS on Iran to Filter 'Immoral' Mobile Messages · · Score: 1

    Did you not read the article? - it's MMS they are talking about.

  21. And all languages quoted unsuitable for ... on Secure Programming Exams Launched · · Score: 1

    for secure programming. But that not unusual. In fact that seems to be the Zeitgeist.

    Everybody speaks of secure programming but allays in combinations with unsuitable tools and programming languages.

    Reminds me a bit about the Addams Family. Remember the part where Gomez tries to make huge loss of money. In the end he start a venture in Chocolate-Diet - something he things will never work as chocolate is completely unsuitable for diet purpose and his hope is that people won't fall for such a stupid idea - hence he is going to loose money on the venture.

    Of course we now how it ended: Chocolate-Diet was a huge success! He made tons of extra cash. Because people love to go the easy way - even when it is blatantly clear that it won't work.

    And the same here: Instead of going to the pains of learning a programming language and/or tools suitable for secure programming you just go or be send my management to take a silly test [1]. Only difference: Unlike Gomez Addams the "Software Security Institute" knows very well how people (and especially managers with little technical knowledge) work and that there "Chocolate-Diet" will bring in the cash.

    Of course no ./ article of mine on secure programming without me mention that Ada [2] is well suited for secure programming and since PHP was mentioned: How about using the Ada Web Server [3] for truly secure your web applications? Yes, it will take longer to program for the AWS then quickly hacking together a PHP application. But the bitter truth is: quick hacking and secure programming are mutually exclusive.

    Martin

    [1] http://developers.slashdot.org/comments.pl?sid=228 589&cid=18530047
    [2] http://en.wikibooks.org/wiki/Ada_Programming
    [3] http://en.wikibooks.org/wiki/Ada_Programming/Libra ries/Web/AWS

  22. Ada is thread ready since 1983... on Multi-Threaded Programming Without the Pain · · Score: 2, Informative

    ...and Ada 2005 even supports Real-Time programming. It is possible - just not with C++.

    Find a short intro here:

    http://en.wikibooks.org/wiki/Ada_Programming/Taski ng

    Martin

  23. Ada 2005 on Multi-Threaded Programming Without the Pain · · Score: 2, Informative

    You forgot to mention that Ada 2005 now adds Interfaces to both protected and task objects. See:

    http://en.wikibooks.org/wiki/Ada_Programming/Taski ng

    Ada's multi-threadeding is not only without the pain but great fun!

    Martin

  24. No, you need debranding! on T-Mobile Bans Others' Apps On Their Phones · · Score: 1

    which is a more tricky - but still not impossible. Just de branded my P990i - took me half an hour and cost 6,--.

    The point is that branding is done on the firmware level - that is: the carrier supplies a specially modified operating system for your phone. With that they can switch on and off almost any feature they like.

    But this also means that every operating system update need to be re branded by the carrier. I suggest you have a look here: http://uiq3.sourceforge.net/wiki/index.php/CDA/P99 0i. Of course SEUS (Sony Ericsson Update Service) will check you Phone (by that magic CDA number) and only offer updates which have been authorised by by your carrier.

    Most branded P990i are now two or more versions behind the current release. For Joe Average this might be Ok - But Bill Poweruser might not like that. Note that nowadays even for (smart)phones version 1 of the operating system almost unusable. See http://my-symbian.com/forum/viewtopic.php?t=28242.

    Martin

  25. Re:Wikipedia never looses anything on Golfer Sues Over Vandalized Wikipedia Entry · · Score: 4, Interesting

    Interesting point. However, there are several resons why not:

    1) Page-Name typos - why keep them online?
    2) SPAM
    3) Illegal content
    4) Unwanded content - Each wikipedia project has a mission and will not accept content which is utside scope.

    If you disagree in a particular case you can file a "vote for undelete" and ask the adminstrators to make the content available.

    Martin