Slashdot Mirror


User: pe1chl

pe1chl's activity in the archive.

Stories
0
Comments
1,875
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,875

  1. Re:Read or Die? on Cell Phone Owners Allowed To Break Software Locks · · Score: 4, Informative

    You must be new.
    It was quite usual to have a "SIM lock" on phones provided for free, especially with pre-paid contracts (where you pay a certain amount for a number of call minutes, can call for that amount of time, and then have to pay again to continue using the phone).
    As there is no fixed-term contract with monthly payment in this construction, the only way to cover the cost of the phone is/was for the provider to hope that you buy enough call minutes.
    To prevent you from changing the SIM to one of another provider (with cheaper call minutes, for example), they "had" to lock the phone to the SIM.
    However, after a certain amount of time you could request a code to release this lock. Or you could use a hack and have it released immediately.

  2. Re:Validate this on Malicious Injection — It's Not Just For SQL Anymore · · Score: 1

    I think it wasn't designed. It was started as a toy project for a Personal Home Page.

  3. Re:Email header injection attack on Malicious Injection — It's Not Just For SQL Anymore · · Score: 1

    Of course when you code safety-first, you both will avoid the use of variables in the headers (i.e. do not make the subject variable) and the parsing of the headers by the MTA (i.e. give the destination address to sendmail instead of calling it with the -t flag and find the addresses from the headers).

  4. Re:Ignorance on Malicious Injection — It's Not Just For SQL Anymore · · Score: 1

    I would call your second solution the only correct solution, and the first one a dangerous solution in the hands of the naive implementer.
    One should only attempt that when the language provides a quoting function like addslashes in php, so that you at least can leave the task of identifying the quotation marks to someone who knows a bit about thinks like UTF and other tricks to hide them.

  5. Re:Validate this on Malicious Injection — It's Not Just For SQL Anymore · · Score: 1

    I hope that most developers have the common sense to take the correct approach: avoid injection problems by proper quoting

    And I would hope that developers (especially language developers) would realize that the really correct approach is not to glue SQL statements together from fixed strings and quoted arguments, but to use prepared statements with placeholders and arguments passed as a list.

    This is no problem with languages providing a full API to SQL, but in kludges like PHP it has been difficult for a long time. That is why you see so many SQL injection problems in PHP pages. It is a problem of the language, which lures naive programmers into buggy solutions.

  6. Re:My rock-solid solution to the injection problem on Malicious Injection — It's Not Just For SQL Anymore · · Score: 1

    And then you hoped that the users do not manage to insert commas or newlines into your input fields?

  7. Re:Junctions on Vista's Limited Symlinks · · Score: 1

    Unfortunately making the file read-write does so for all links, which isn't what you'd expect from Unix experience

    This is what you expect from Unix experience! The only thing that can be different between two hardlinked files is the name. All the attributes are shared.

  8. Re:I don't think they get it on Vista's Limited Symlinks · · Score: 1

    And not on Windows 2000 either...

  9. Re:Junctions on Vista's Limited Symlinks · · Score: 1

    And when you copy a directory tree that contains a junction, then delete that copy in the explorer, you will delete the original.
    Very clever!
    Even more so because there is no warning about this, or any way to see (in the explorer) that this is going to happen. E.g. because of a different icon or color used for a junction, like for a hidden file or a compressed file.

    This stupid explorer is warning me that I want to delete a read-only file (as if anyone cared), but it smoothly deletes data it should not touch.

    Fortunately, the only junction in most systems is in the SYSVOL directory. Just remember to NEVER copy that!

  10. Re:How indeed ... on British "Secure" Passports Cracked · · Score: 4, Insightful

    This is because the encryption is not supposed to make the content inaccessible.
    The reader at the cutoms employee's desk has to be able to read the passport data. It has to know the key.
    Instead of installing a super-secret key in all readers around the world (and having to pray that it does not somehow leak out), the designers opted to use a separate key for each passport and have it printed on the passport itself, so that it can be used by the reader.
    This is only intended to protect against the "reading in the metro" scenario. Not to protect against reading your own passsport using an RFID reader.

    Also, many scenarios written after such discoveries assume that the readability of the data implies it can be modified to commit fraud. This is not true. The data is signed using public-key encryption, and modifications are easily detected by the reader.

  11. Re:Is this new? on Taking a Crack At Recycling E-Waste · · Score: 1

    When we see your president on TV, he is proclaiming that he does not care about the environment when saving it would hurt the US economy or American jobs.
    This makes others in the world angry because they are voluntarily doing things that may hurt their economy and help the environment.
    They constantly meet the fact that the country that burns the majority of the world's oil does the least to tune down that consumption. They complain about gas prices that are 1/2 to 1/3 of what they are in other parts of the world, for example.

    Of course you would have been much better off with Gore as president.

    About being not able to do right: this continues all the time. Why did the US veto a UN resolution to condemn the Israeli action against the Palestines? Normally the US is first in line to condemn terrorism, but when it is done by their friends in Israel there is no problem. They ivade Iraq for not complying with a single UN resolution, yet have no problem with Israel never complying with ANY UN resolution and even veto new resolutions.

    Small wonder that some people are hating you.

  12. Re:Is this new? on Taking a Crack At Recycling E-Waste · · Score: 1

    Some people can... they often have similar (letters-digit-letters) slashdot IDs.

  13. Is this new? on Taking a Crack At Recycling E-Waste · · Score: 2, Insightful

    Are the United States really so far behind in environmental issues?
    I understood from Bush that he does not really care about the environment (relative to other issues), but I would think that lower levels of government would already have acted more responsibly.

    Over here, the separated collection of waste, including separate places where electronic waste (computers, household electronics) has been in place for many years.
    We even pay a small fee on new equipment to pay for the recycling of old equipment.

    I think the US should change from "we only care about economics and hate to pay for others" into something more responsible.

  14. clocks? on NTP Gets a Taste of Its Own Medicine · · Score: 2, Funny

    Does that mean we can no longer keep our clocks synchronized without paying royalties?

  15. Re:The other 50% is the problem on Automatic Image Tagging · · Score: 1

    It is quite common to start building a system like this (image recognition, speech recognition, automatic translation, etc etc) and publish a press release stating that "the initial results are promising".
    That is because the coarse approach to the problem is relatively uncomplicated, and after building some framework and inputting some reference data it is easy to make the system do some things right. Like guessing keywords correct for 50% of the input.

    What is hard is to get it correct for close to 100% of the input. That is why you usually never hear again from such projects. The initial ramp-up in "promising results" quickly flattens and no noticable further progress is made unless a completely novel approach is taken.

  16. Re:How 'bout just a black hole on The Internet Black Hole That Is North Korea · · Score: 0, Troll

    Probably they are just more aware of the problem of http://en.wikipedia.org/wiki/Light_pollution

    Your country sending a big glow of light into the night sky really isn't something to be proud of.

  17. Re:This is NOT the same thing on The Netscaping of Symantec and McAfee · · Score: 1

    In the current market situation, AV vendors are forced to release new major versions every year, every time more bloated than before.
    This has pushed products like Symantec and McAfee beyond practical usability.
    A few smaller AV companies have been able to withhold themselves from going with this flow, and their products are usually much more usable and useful.
    But also less well known.

  18. Re:It's the same fee.. on Germany's New Internet License Fee · · Score: 1

    For what its worth, RTL is not a Germany station. It is Radio/Television Luxembourg.

    The parent company is from Luxembourg, and its name is a longstanding tradition, but RTL in fact is providing dedicated programming for Germany and Austria with its RTL Television channel and some others (RTL2)
    They also have channels for France (RTL9), Netherlands (RTL4/5/7) and maybe more that I don't know of.

    I would consider it a German station, just like I consider RTL4/5/7 Dutch stations.
    We have Dutch programs from Scandinavian Broadcasting System as well.

  19. Re:Still payable if TV/Radio streams firewalled? on Germany's New Internet License Fee · · Score: 1

    Well, there have been many changes in European TV to make it more like american (i.e. more based on what sells best than on programme variety and quality).
    Even the public broadcasters are victim of this.

    The problem with the original system is that it costs money, and needs protection from commercial wolves.

  20. Re:It's the same fee.. on Germany's New Internet License Fee · · Score: 5, Interesting

    The German TV companies are so generous (from your money :-) ) to transmit their programmes unencrypted on satellite for everyone to view.

    So I can receive German TV and can compare it with our Dutch programmes. What I think is:

    - the public TV programmes are of good quality. Maybe not appealing to all viewers, but it is clear that care has been put in making them.
    - some commercial TV programmes like RTL are not that bad, but the amount of commercials (and especially the length of commercial blocks) is awful.
    - other commercial TV programmes (on a lower budget) are just the re-runs of cheap crap that we have here as well.

    It is apparent, also when viewing Dutch public TV or the BBC, that public TV has a place. And also that it does not appeal to everyone.

  21. Re:German not the only ones on Germany's New Internet License Fee · · Score: 1

    They probably saw this coming here in the Netherlands.
    A couple of years ago, the separate license free for radio and TV (which we had for many years and was similar to that in the UK, Germany, Denmark etc) was abandoned.
    Now, the public radio and TV are paid from general tax income. So in fact, everyone is paying, even those who do not have a radio or TV or another method of receiving the public programmes.
    The number of people without radio or TV had become so low that this separately collected fee was no longer cost-effective because of the efforts required to collect it.

  22. Re:Still payable if TV/Radio streams firewalled? on Germany's New Internet License Fee · · Score: 4, Informative

    That's right. So here in the Netherlands, everyone has to pay even if he has no TV.
    That of course solves the problem of licensing PC and mobile phones as well.

  23. Re:SuperFetch uncool... on Samsung's Hybrid Hard Drive Exposed · · Score: 1

    This confirms that you need to study it a bit better. It seems that many think that virtual memory == swapping == slow and a bad thing, but this really is not true.

    A virtual memory (with demand paging) system actually makes a modern computer work much faster than the old "load program completely into memory and remove it when done" mechanism, especially for large programs with many features that are seldomly used.

    "Using virtual memory" is NOT the same as swapping, and no reasonable OS programmer would ever swap program code.

  24. Re:Ship time on Samsung's Hybrid Hard Drive Exposed · · Score: 1

    The post was meant as a reaction to just mounting a USB drive as swap in Linux, not a wise thing to do IMHO.

    I don't know the functionality of ReadyBoost, but I do have some experience with swapping/paging in the Linux system, and under what circumstances it does not work well.

  25. Re:SuperFetch uncool... on Samsung's Hybrid Hard Drive Exposed · · Score: 1

    Two things:

    1. when your set of files to search is larger than the amount of memory available for caching, it will have to read from disk every time.
    one could argue that the second grep should start from the last file and work back to the first, to use data cached from the previous time. but that would be tricky.

    2. Linux records last-accessed time for files (by default). So when you grep a large tree of files, there will be lots of disk writes to update those atime values.
    this usually does not make things slower, but it does make the LED blink.