They are the ones claiming that code execution is possible therefore they are the ones who should provide proof.
Every single vulnerability disclosure says "could result in code execution". It doesn't mean that they have any evidence or can even construct a plausible scenario in which code execution may theoretically result. It's just another box to tick and they tick it because the security is largely full of scaremongering, publicity seeking idiots in search of venture capital.
PS. Have you ever replied to a Usenet post with the words "Me too!"? Just wondering - your writing style makes me curious.
I have to agree, this is a very serious problem in Africa and not to be laughed at, many children are raped by HIV infected adults because of the same belief you have joked about.
Something that's even less funny is the way the US is giving money to fight AIDS in Sub-Saharan Africa.
Unfortunately because the US is a theocracy, portions of this money have to be earmarked for "abstinence" programmes.
These programmes also campaign against the use of condoms, because that's what Jesus would want. They sponsor billboards which point out that condoms don't offer 100% protection. Abstinence of course does, because there are a lot of other activities that the local population can engage in to distract themselves from their desires - hang out at the mall, go bowling or maybe just go for a drive in their SUVs.
The end result is that HIV infections in Uganda, which were down to 4% of the population, are now rising rapidly again.
Oh well, at least they'll still go to heaven when they die. Isn't that just swell?
Your analogy is so ridiculously flawed that it's hardly funny.
Of course it is. I just like winding up fanboys - mainly of the Apple variety, but the Nintendo ones seem so easily wound up that it's difficult to resist. The frothing and spitting is music to my ears.
But, hey, I'll humor ya anyway. I'll take the silent film that's actually good over a big-screen, flashy, noisy movie with no substance.
Yes, you certainly have humoured me.
Ask yourself this - who's still in business? The companies that stuck to silent movies or the ones that started producing "big-screen, flashy, noisy movie with no substance"?
So you'll see if it's really a bad analogy when the sales figures come in. Personally, I will have lost interest long before then.
If Linus talks down to other developers that contribute to Linux in such a primitive way, he shouldn't complain about Slashdot, as he did here: http://lkml.org/lkml/2005/8/20/95. Quote:
Gaah. I don't tend to bother about slashdot, because quite frankly, the whole _point_ of slashdot is to have this big public wanking session with people getting together and making their own "insightful" comment on any random topic, whether they know anything about it or not.
Congratulations! We have a winner! The 3rd Annual Slashdot unintentional irony award goes to titwurstman!
He beat all comers this year due to his use of a quote suggesting that people on Slashdot comment on things they know nothing about, to support his Slashdot comment on something he knows nothing about!
The Slashdot editors have now permanently closed the competition, as it is widely agreed that nobody will ever top this year's winner!
With the DS Nintendo have officially stopped playing Sony/Microsoft's game. They can clearly see that games are being put in a box now with nothing but graphics improving, so they picked up there ball and started a new game. Sony and Microsoft can stay with the graphics grind where as Nintendo will start making some intresting games and change the scene.
With their latest silent, black and white movies Nintendo have officially stopped playing Sony/Microsoft's game. They can clearly see that movies are being put in a box now with nothing but the sound and visuals improving so they picked up their ball and continued playing the same old game. Sony and Microsoft can stay with the Technicolor/Dolby Stereo grind whereas Nintendo will start making some really interesting slient, black & white movies and change the scene.
Just thought that would make an interesting analogy.
Also, on the iMac G5 Apple will extend coverage specifically for the capacitor issue, so even if your warranty coverage expires they will fix your machine at their expense (http://www.apple.com/support/imac/repairextension program/ [apple.com]).
Wow! Apple sure do give great customer service!
I think I'm going to go out and buy a faulty Mac with substandard parts just so I can experience it!
Instead, after trying everything under heaven and earth to revive the systems we finally noticed that the three 560uf caps in the processor VR had bulged.
We pulled the three old caps and replaced them with a pair of 1000uf units and viola! the machines were restored to their former glory.
Of course, the extra surge current at power on eventually led to spectacular failures of the PSU, leading to a fire which completely destroyed our business premises and all of our data.
How about the Acid2 test? Does it improve on it's performance in that area? With browsers like Safari and Konquerer passing it, are there any real efforts at Mozilla to get some standard compliance in that area?
No released version of Safari passes it. I think what's happened is that the development team announced that they hope to pass it soon, but because you are wearing the rose tinted glasses that come free with every Mac, you have misinterpreted that statement as "Safari passes it!".
Interesting idea. I don't have anything like enough knowledge to asess whether it would actually be effective or practical (although I suspect not) but here's a few comments.
As for the cable attachment, some nets and cables stretching around the asteroid should handle this just fine.
If it's a large asteroid (like 10km across), and let's face it those are the ones we're worried about, I don't think the attachment is going to be quite as trivial as you think. How much would a net that size weigh? How difficult is it to net an asteroid?
Release the rocks into space, timing the release so that they shoot off in the same general direction.
Why not just build a probe that lands on the asteroid, digs up rocks and launches them into space? Wouldn't that take roughly the same amount of energy as your idea?
And one last point - would reducing the asteroid's rotation actually change its orbit?
I say we take off and nuke it from orbit. It's the only way to be sure.
That's why the ATI doesn't work. I think they're using the fact that there's a unified NVidia driver between Linux and Windows and that somehow make them able to use the Microsoft Direct X library directly.
Sorry, this is complete rubbish. The whole point of Cedega is that it translates Direct3D calls to OpenGL.
The problem is that ATI's shitty Linux drivers don't support the features necessary to map all of the Direct3D calls. Nvidias on the other hand generally do.
Although I hear that ATI's Linux drivers have vastly improved and can now run the GLX Gears demo with just slight display corruption and only the occasional kernel crash.
If you're still thinking about buying the game after reading this review, I urge you to download the demo and give it a try. The reviewer pinned down everything that was dissatisfying about the demo.
Absolutely, especially the weapons. They all feel like pea shooters. And I spent a good half an hour messing my sound settings trying to find out what was wrong with the sound effects. Reading this review confirms my eventual conclusion - they just suck.
to read all the comments of the *nix zealots making fun of MS but actually pissing in their pants fearing there will be less and less unique points to brag about their OS. Well, do not fear! There will be enough things left that windows can't do.
And what is it about us criticising MS that scares you?
I mean some of the people here might actually have contributed to Linux/BSD/whatever. They might actually have invested some time in trying to improve it. I can at least understand why they might be sensitive to criticism.
But you? You just bought a product from a corporation. They're not even paying you. And yet you leap to their defence? That is truly pathetic.
Do you dream about Bill himself stumbling upon some of your comments and thinking, "Wow this guy really knows how to market our products. I'll send my private jet for him right away and make him head of marketing."? Are the sheets all sticky when you wake up afterwards?
Do keep posting though. I like nothing better than to savour the fear of corporate cocksmokers. It's like a fine wine.
I know that was probably supposed to be ironic, but it is such a perfect comment. Mac users should use this as their default comment on all online forums from now on. It says the same thing that you're all going to say with a hundred times as many words anyway. And everyone else can use the bandwidth saved to discuss things that they do give a shit about.
Easy - it would take away their ability to send screen savers to each other.
Without screen savers they have nothing! They would sink into a pit of darkness and despair. Do you really want to be responsible for all the suicides?
This happens all the time. Which is why anyone with half a brain sets up their Snort box with a "one way" Ethernet cable - inbound traffic only, no ability for the Snort box to talk to anything else if compromised.
Of course, there are a lot of people running Snort on their home DSL line because watching the huge list of attacks bouncing off their firewall gives them a woody. They're probably screwed, but at least it will be educational for them.
Seriously, this really sounds like a load of bs to me. Perhaps auto-generated?
Indeed. It's the new craze for trolls who lack the humour and creativity to actually come up with anything themselves. Personally I have a lot of sympathy for them - it must be terrible for one's self esteem to have the desire to troll but to lack the ability to do so. A kind of trolling impotence if you will.
This will probably get bashed to high heavens, but Skype recently got their software reviewed by an independent security expert. Favourably.
ITYM Skype say that they recently got the encryption code that they say is part of their software reviewed by someone they say is an independant security expert.
And the "review" document was written by Skype based on the summary of the report. It says so on their site.
In other words, this will only make you trust their software if you already trust them.
Maybe you can tell us which encryption algorithm and key length they are using? What? It doesn't say? Oh well, I'll trust them anyway. It's not like they're out to make money or anything sordid like that.
The end of TinyURL is in sight. Yes, this is (probably) a clever hack. But this is a misuse of a really useful service.
You're scaremongering and being sensationalist. Have you considered a career as a Slashdot editor?
Seriously - this app encodes your data as URLs. Imagine splitting a DVD image into URL sized chunks and then submitting them one by one. Does that sound like a workable storage system to you?
And as for abusing TinyURL, you could do it with a tiny shell script generating and submitting random URLs. Much faster and more efficient and anyone could do it. So why do you think that this proof of concept code is more dangerous? Can you explain your reasoning? Or did you just get suckered by the Slashdot editors?
Yes, well done. That is exactly the point I was making. Perhaps you would benefit from a little less time watching DVDs and a little more working on your reading comprehension skills. Once you've got that licked, you could move on to more advanced subjects such as the use of capital letters and closing your mouth when you breathe.
The irony of Slashdot is that this will be modded "Flamebait" but you won't be modded "Idiot". Meanwhile, people will continue to speculate about why Slashdot is full of idiots.
Sony? Openness? I'll believe that when they'll release the specs for the various ATRAC formats.
Eeewww! Who wants them?
A 64kb mp3 usually provides a substitute in terms of sound quality.
I suppose anybody that bought a recent mp3 / minidisc player from Sony might be interested. But they're probably too busy arranging delivery of the bridge that someone just sold them to do anything with the specs.
Slashdot Mirror
Prove that you can't.
Dear AC,
They are the ones claiming that code execution is possible therefore they are the ones who should provide proof.
Every single vulnerability disclosure says "could result in code execution". It doesn't mean that they have any evidence or can even construct a plausible scenario in which code execution may theoretically result. It's just another box to tick and they tick it because the security is largely full of scaremongering, publicity seeking idiots in search of venture capital.
PS. Have you ever replied to a Usenet post with the words "Me too!"? Just wondering - your writing style makes me curious.
If you are refering to GNOME, it has a perfectly usabe menu editor.
It's nice to hear that they finally got around to that. Now when are they going to get the rest of the desktop working?
I have to agree, this is a very serious problem in Africa and not to be laughed at, many children are raped by HIV infected adults because of the same belief you have joked about.
Something that's even less funny is the way the US is giving money to fight AIDS in Sub-Saharan Africa.
Unfortunately because the US is a theocracy, portions of this money have to be earmarked for "abstinence" programmes.
These programmes also campaign against the use of condoms, because that's what Jesus would want. They sponsor billboards which point out that condoms don't offer 100% protection. Abstinence of course does, because there are a lot of other activities that the local population can engage in to distract themselves from their desires - hang out at the mall, go bowling or maybe just go for a drive in their SUVs.
The end result is that HIV infections in Uganda, which were down to 4% of the population, are now rising rapidly again.
Oh well, at least they'll still go to heaven when they die. Isn't that just swell?
Your analogy is so ridiculously flawed that it's hardly funny.
Of course it is. I just like winding up fanboys - mainly of the Apple variety, but the Nintendo ones seem so easily wound up that it's difficult to resist. The frothing and spitting is music to my ears.
But, hey, I'll humor ya anyway. I'll take the silent film that's actually good over a big-screen, flashy, noisy movie with no substance.
Yes, you certainly have humoured me.
Ask yourself this - who's still in business? The companies that stuck to silent movies or the ones that started producing "big-screen, flashy, noisy movie with no substance"?
So you'll see if it's really a bad analogy when the sales figures come in. Personally, I will have lost interest long before then.
If Linus talks down to other developers that contribute to Linux in such a primitive way, he shouldn't complain about Slashdot, as he did here: http://lkml.org/lkml/2005/8/20/95. Quote:
Gaah. I don't tend to bother about slashdot, because quite frankly, the whole _point_ of slashdot is to have this big public wanking session with people getting together and making their own "insightful" comment on any random topic, whether they know anything about it or not.
Congratulations! We have a winner! The 3rd Annual Slashdot unintentional irony award goes to titwurstman!
He beat all comers this year due to his use of a quote suggesting that people on Slashdot comment on things they know nothing about, to support his Slashdot comment on something he knows nothing about!
The Slashdot editors have now permanently closed the competition, as it is widely agreed that nobody will ever top this year's winner!
With the DS Nintendo have officially stopped playing Sony/Microsoft's game. They can clearly see that games are being put in a box now with nothing but graphics improving, so they picked up there ball and started a new game. Sony and Microsoft can stay with the graphics grind where as Nintendo will start making some intresting games and change the scene.
With their latest silent, black and white movies Nintendo have officially stopped playing Sony/Microsoft's game. They can clearly see that movies are being put in a box now with nothing but the sound and visuals improving so they picked up their ball and continued playing the same old game. Sony and Microsoft can stay with the Technicolor/Dolby Stereo grind whereas Nintendo will start making some really interesting slient, black & white movies and change the scene.
Just thought that would make an interesting analogy.
Besides, a non-HD Nintendo means beautiful frame rates ...
... and games with a cell-shaded look to them will look the same whether on HD or regular TV.
A non-HD Nintendo means almost exactly 30 frames per second in the US or 25 in most of the rest of the World.
I suspect that wasn't quite the point you were trying to make.
Yes, games with really low detail certainly won't look much better on HDTV.
Your advocacy has convinced me. I'm buying three.
How ironic. When somebody utters the words "broken application" in my presence, I find it hard not to think of SAP.
Hands up everyone that has worked for a company that nearly went bust while trying to migrate to SAP.
Also, on the iMac G5 Apple will extend coverage specifically for the capacitor issue, so even if your warranty coverage expires they will fix your machine at their expense (http://www.apple.com/support/imac/repairextension program/ [apple.com]).
Wow! Apple sure do give great customer service!
I think I'm going to go out and buy a faulty Mac with substandard parts just so I can experience it!
Instead, after trying everything under heaven and earth to revive the systems we finally noticed that the three 560uf caps in the processor VR had bulged.
We pulled the three old caps and replaced them with a pair of 1000uf units and viola! the machines were restored to their former glory.
Of course, the extra surge current at power on eventually led to spectacular failures of the PSU, leading to a fire which completely destroyed our business premises and all of our data.
But we felt really clever about it at the time!
How about the Acid2 test? Does it improve on it's performance in that area? With browsers like Safari and Konquerer passing it, are there any real efforts at Mozilla to get some standard compliance in that area?
No released version of Safari passes it. I think what's happened is that the development team announced that they hope to pass it soon, but because you are wearing the rose tinted glasses that come free with every Mac, you have misinterpreted that statement as "Safari passes it!".
Hope this helps.
Oops, sorry. I seem to have mis-spelled "Fuck you Sony, you rootkit spreading scum suckers". The keys are right next to each other.
Interesting idea. I don't have anything like enough knowledge to asess whether it would actually be effective or practical (although I suspect not) but here's a few comments.
As for the cable attachment, some nets and cables stretching around the asteroid should handle this just fine.
If it's a large asteroid (like 10km across), and let's face it those are the ones we're worried about, I don't think the attachment is going to be quite as trivial as you think. How much would a net that size weigh? How difficult is it to net an asteroid?
Release the rocks into space, timing the release so that they shoot off in the same general direction.
Why not just build a probe that lands on the asteroid, digs up rocks and launches them into space? Wouldn't that take roughly the same amount of energy as your idea?
And one last point - would reducing the asteroid's rotation actually change its orbit?
I say we take off and nuke it from orbit. It's the only way to be sure.
That's why the ATI doesn't work. I think they're using the fact that there's a unified NVidia driver between Linux and Windows and that somehow make them able to use the Microsoft Direct X library directly.
Sorry, this is complete rubbish. The whole point of Cedega is that it translates Direct3D calls to OpenGL.
The problem is that ATI's shitty Linux drivers don't support the features necessary to map all of the Direct3D calls. Nvidias on the other hand generally do.
Although I hear that ATI's Linux drivers have vastly improved and can now run the GLX Gears demo with just slight display corruption and only the occasional kernel crash.
If you're still thinking about buying the game after reading this review, I urge you to download the demo and give it a try. The reviewer pinned down everything that was dissatisfying about the demo.
Absolutely, especially the weapons. They all feel like pea shooters. And I spent a good half an hour messing my sound settings trying to find out what was wrong with the sound effects. Reading this review confirms my eventual conclusion - they just suck.
to read all the comments of the *nix zealots making fun of MS but actually pissing in their pants fearing there will be less and less unique points to brag about their OS. Well, do not fear! There will be enough things left that windows can't do.
And what is it about us criticising MS that scares you?
I mean some of the people here might actually have contributed to Linux/BSD/whatever. They might actually have invested some time in trying to improve it. I can at least understand why they might be sensitive to criticism.
But you? You just bought a product from a corporation. They're not even paying you. And yet you leap to their defence? That is truly pathetic.
Do you dream about Bill himself stumbling upon some of your comments and thinking, "Wow this guy really knows how to market our products. I'll send my private jet for him right away and make him head of marketing."? Are the sheets all sticky when you wake up afterwards?
Do keep posting though. I like nothing better than to savour the fear of corporate cocksmokers. It's like a fine wine.
Now that NTFS has UNIX filesystem semantics, when will UNIX/Linux filesystems get some NTFS features like multiple streams and reparse points.
Can you name a useful and widespread application for the multiple streams feature in NTFS?
A hiding place for viruses does not count. I eagerly await your reply, which I'm sure is only seconds away.
i have a mac.
I know that was probably supposed to be ironic, but it is such a perfect comment. Mac users should use this as their default comment on all online forums from now on. It says the same thing that you're all going to say with a hundred times as many words anyway. And everyone else can use the bandwidth saved to discuss things that they do give a shit about.
Why won't AOL do the same with AIM?
Easy - it would take away their ability to send screen savers to each other.
Without screen savers they have nothing! They would sink into a pit of darkness and despair. Do you really want to be responsible for all the suicides?
Hope everyone is safe..
This happens all the time. Which is why anyone with half a brain sets up their Snort box with a "one way" Ethernet cable - inbound traffic only, no ability for the Snort box to talk to anything else if compromised.
Of course, there are a lot of people running Snort on their home DSL line because watching the huge list of attacks bouncing off their firewall gives them a woody. They're probably screwed, but at least it will be educational for them.
Seriously, this really sounds like a load of bs to me. Perhaps auto-generated?
Indeed. It's the new craze for trolls who lack the humour and creativity to actually come up with anything themselves. Personally I have a lot of sympathy for them - it must be terrible for one's self esteem to have the desire to troll but to lack the ability to do so. A kind of trolling impotence if you will.
This will probably get bashed to high heavens, but Skype recently got their software reviewed by an independent security expert. Favourably.
ITYM Skype say that they recently got the encryption code that they say is part of their software reviewed by someone they say is an independant security expert.
And the "review" document was written by Skype based on the summary of the report. It says so on their site.
In other words, this will only make you trust their software if you already trust them.
Maybe you can tell us which encryption algorithm and key length they are using? What? It doesn't say? Oh well, I'll trust them anyway. It's not like they're out to make money or anything sordid like that.
The end of TinyURL is in sight. Yes, this is (probably) a clever hack.
But this is a misuse of a really useful service.
You're scaremongering and being sensationalist. Have you considered a career as a Slashdot editor?
Seriously - this app encodes your data as URLs. Imagine splitting a DVD image into URL sized chunks and then submitting them one by one. Does that sound like a workable storage system to you?
And as for abusing TinyURL, you could do it with a tiny shell script generating and submitting random URLs. Much faster and more efficient and anyone could do it. So why do you think that this proof of concept code is more dangerous? Can you explain your reasoning? Or did you just get suckered by the Slashdot editors?
then don't use it to play normal dvd's.
Yes, well done. That is exactly the point I was making. Perhaps you would benefit from a little less time watching DVDs and a little more working on your reading comprehension skills. Once you've got that licked, you could move on to more advanced subjects such as the use of capital letters and closing your mouth when you breathe.
The irony of Slashdot is that this will be modded "Flamebait" but you won't be modded "Idiot". Meanwhile, people will continue to speculate about why Slashdot is full of idiots.
Sony? Openness? I'll believe that when they'll release the specs for the various ATRAC formats.
Eeewww! Who wants them?
A 64kb mp3 usually provides a substitute in terms of sound quality.
I suppose anybody that bought a recent mp3 / minidisc player from Sony might be interested. But they're probably too busy arranging delivery of the bridge that someone just sold them to do anything with the specs.