If you RTFA (I know, this is slashdot, but still) you'll see that several of the fixes, in particular the apache vulnerability, apply to OSX server too
KDE added support with 3.4, for example the public file server advertises itself over zeroconf (same protocol, different name). So this is starting to look like a good technology for those in a heterogenous environment
Changing them and changing the layout in software too would defeat a hardware keylogger, at least until they run it through their table of keyboard layouts (there aren't too many). Might defeat loggers built into the keyboard drivers, which are the most insidious kind, too.
Oh yeah, so I can just turn off the service until the patch comes out. Sorry, that doesn't work for real servers actually doing something necessary. If the service was something unimportant I wouldn't be running it. I know testing is important, but pure security fixes - which is how they should be released, not bundled with upgrades - shouldn't break anything, and it's better to have a slightly unstable server than a stable 0wned one.
Except for unusual types, once a flaw is known an exploit can be done in 8 hours, easy. As for download-itis, it shouldn't require anything manual. I'm not too familiar with OSX but I know I can have my system update automatically.
Absolutely, but I thought the whole point of a *nix foundation was proper separation of root and non-root, there shouldn't be any remote roots. Looking at the list again I can't see any remote root - if apache's running as root there are bigger problems than these vulnerabilities, I don't see why root would be opening an image or help page, and the other vulnerabilities don't seem to be remote. Anyone care to set me straight on this?
Yeah, that's what I was thinking of. With a router from 10 years ago you'd have trouble, and routers work for ages so plenty of them could be in use. But modern ones tend to have a 3-figure mhz arm or similar, because it's just not worth getting a slower proc, they're hardly produced and wouldn't be any cheaper.
Firstly, remote root should never happen. Secondly, what were they doing leaving all these exploits open? I appreciate that a mega-patch may be easier to install, but vulnerabilities need to be patched immediately.
The teachings are irrelevant when Christians behave the way they do. The principles of communism as outlined in the communist manifesto are pretty good - but that didn't stop Stalin's regime being horribly evil.
All the f2f network routing protocols are designed for situations like this. Ordinary BGP might no longer be enough, but stuff like gnunet manages ok (you connect to 3 IP addresses you trust. No one tells anyone else who they are connected to. Yet information propogates quite well). That's layered over tcp, but there's no reason it couldn't be done in that layer. Takes a bit of cpu, but probably insignificant with a modern machine.
Re:Innovate, not copy
on
Gates on Google
·
· Score: 2, Informative
Huh? I'd never seen a GUI set up that way before. It was innovative, just horrible.
It's the same hardware and I'm using the nvidia binary drivers on linux, which are supposed to be pretty good. I know unreal tournament on linux native performs just as well as on windows on this system, wheras some programs, I'm thinking in particular C&C series, definitely run slower on wine. I suppose benchmarking UT native linux and windows version running under wine might be a good way to compare.
I know that's true theory. But playing games on wine it's patently not the case. Hopefully it's just a lack of optimization because the wine team are still busy implementing more API, but the slowdown is definitely there.
Some bioses are buggy and don't support random vesa modes they say they do. I've found mine will only do 960xsomething (I think, some odd mode anyway) with an AGP card, not a PCI card. This is, again, a problem apple doesn't have because they control the hardware. The monitor should be fine though, I have no idea why that would require a driver before it worked.
It's the difference between beta and alpha. A 0.9 release will be a lot more stable than cvs snapshots - try comparing firefox 0.9 with one of the developer snapshots or nightly CVS builds from around that time.
Evolution acts on genes rather than individuals. Behaviour which is beneficial to those around - even at a cost to the individual doing it - can be selected for if the overall benefit is significantly greater than the cost, because those around an individual, especially in early societies, are likely to be family and so have a high chance of carrying the same gene. Since it seems to require moral people to form a civilised society, and such societies can reproduce a lot more effectively than others, it makes sense that a level of morality would be selected for. Remember people are far from perfectly moral.
OK, I'm glad to have discussed it, it's good that this can happen without turning into a flamewar.
I agree with you on saying that God is real. But that's only because the existence of God, like morality, is not subject to empirical testing. We can't point a meter at the world and see how much God there is, just as we can't have a measuring device to tell us what is moral. I find that, according to my beliefs, what has been done using scientific methods has resulted in more good than nonscientific. So it still ultimately comes down to belief, but the beliefs which I rely on are generally accepted ones (UN declarations support the unacceptability of slavery, for example), wheras no religion enjoys majority acceptance (I think. Certainly not in my country, though Christianity comes very close). I can see even as I write it that this is a pretty weak argument, but I don't think there are any strong ones when it comes to trying to claim one set of beliefs is better than another.
It is an emulator. They claim it isn't because it doesn't have the delay associated with emulation, allegedly. In practice this doesn't seem to work out, just like JIT compilers are slow like interpreters.
Like debian, wine has been far too long without a stable release. By all means don't rush it, but you do need to actually release a working version once in a while. At the moment any stable version of wine is stable purely through luck - they're just cvs snapshots.
Slashdot Mirror
If you RTFA (I know, this is slashdot, but still) you'll see that several of the fixes, in particular the apache vulnerability, apply to OSX server too
So make a working background auto-update. It's not too hard.
KDE added support with 3.4, for example the public file server advertises itself over zeroconf (same protocol, different name). So this is starting to look like a good technology for those in a heterogenous environment
Changing them and changing the layout in software too would defeat a hardware keylogger, at least until they run it through their table of keyboard layouts (there aren't too many). Might defeat loggers built into the keyboard drivers, which are the most insidious kind, too.
Oh yeah, so I can just turn off the service until the patch comes out. Sorry, that doesn't work for real servers actually doing something necessary. If the service was something unimportant I wouldn't be running it. I know testing is important, but pure security fixes - which is how they should be released, not bundled with upgrades - shouldn't break anything, and it's better to have a slightly unstable server than a stable 0wned one.
Mach is unix-based (basically meant to be a unix-based accent), and freebsd is *nix.
Except for unusual types, once a flaw is known an exploit can be done in 8 hours, easy. As for download-itis, it shouldn't require anything manual. I'm not too familiar with OSX but I know I can have my system update automatically.
Absolutely, but I thought the whole point of a *nix foundation was proper separation of root and non-root, there shouldn't be any remote roots. Looking at the list again I can't see any remote root - if apache's running as root there are bigger problems than these vulnerabilities, I don't see why root would be opening an image or help page, and the other vulnerabilities don't seem to be remote. Anyone care to set me straight on this?
Yes, I would. When my system is vulnerable, I want the patch *right now*.
Yeah, that's what I was thinking of. With a router from 10 years ago you'd have trouble, and routers work for ages so plenty of them could be in use. But modern ones tend to have a 3-figure mhz arm or similar, because it's just not worth getting a slower proc, they're hardly produced and wouldn't be any cheaper.
Firstly, remote root should never happen. Secondly, what were they doing leaving all these exploits open? I appreciate that a mega-patch may be easier to install, but vulnerabilities need to be patched immediately.
Find me a child porn site that's been up for more than a few months and I'll believe you
Or, someone has tried it, got it working, and is making sure the authorities don't know about it by not posting about it on public news sites?
The teachings are irrelevant when Christians behave the way they do. The principles of communism as outlined in the communist manifesto are pretty good - but that didn't stop Stalin's regime being horribly evil.
All the f2f network routing protocols are designed for situations like this. Ordinary BGP might no longer be enough, but stuff like gnunet manages ok (you connect to 3 IP addresses you trust. No one tells anyone else who they are connected to. Yet information propogates quite well). That's layered over tcp, but there's no reason it couldn't be done in that layer. Takes a bit of cpu, but probably insignificant with a modern machine.
Huh? I'd never seen a GUI set up that way before. It was innovative, just horrible.
It's the same hardware and I'm using the nvidia binary drivers on linux, which are supposed to be pretty good. I know unreal tournament on linux native performs just as well as on windows on this system, wheras some programs, I'm thinking in particular C&C series, definitely run slower on wine. I suppose benchmarking UT native linux and windows version running under wine might be a good way to compare.
I know that's true theory. But playing games on wine it's patently not the case. Hopefully it's just a lack of optimization because the wine team are still busy implementing more API, but the slowdown is definitely there.
Some bioses are buggy and don't support random vesa modes they say they do. I've found mine will only do 960xsomething (I think, some odd mode anyway) with an AGP card, not a PCI card. This is, again, a problem apple doesn't have because they control the hardware. The monitor should be fine though, I have no idea why that would require a driver before it worked.
It's the difference between beta and alpha. A 0.9 release will be a lot more stable than cvs snapshots - try comparing firefox 0.9 with one of the developer snapshots or nightly CVS builds from around that time.
It emulates (imitates) the windows API. Something which emulates is an emulator.
Evolution acts on genes rather than individuals. Behaviour which is beneficial to those around - even at a cost to the individual doing it - can be selected for if the overall benefit is significantly greater than the cost, because those around an individual, especially in early societies, are likely to be family and so have a high chance of carrying the same gene. Since it seems to require moral people to form a civilised society, and such societies can reproduce a lot more effectively than others, it makes sense that a level of morality would be selected for. Remember people are far from perfectly moral.
I agree with you on saying that God is real. But that's only because the existence of God, like morality, is not subject to empirical testing. We can't point a meter at the world and see how much God there is, just as we can't have a measuring device to tell us what is moral. I find that, according to my beliefs, what has been done using scientific methods has resulted in more good than nonscientific. So it still ultimately comes down to belief, but the beliefs which I rely on are generally accepted ones (UN declarations support the unacceptability of slavery, for example), wheras no religion enjoys majority acceptance (I think. Certainly not in my country, though Christianity comes very close). I can see even as I write it that this is a pretty weak argument, but I don't think there are any strong ones when it comes to trying to claim one set of beliefs is better than another.
It is an emulator. They claim it isn't because it doesn't have the delay associated with emulation, allegedly. In practice this doesn't seem to work out, just like JIT compilers are slow like interpreters.
Like debian, wine has been far too long without a stable release. By all means don't rush it, but you do need to actually release a working version once in a while. At the moment any stable version of wine is stable purely through luck - they're just cvs snapshots.