Slashdot Mirror


User: g-san

g-san's activity in the archive.

Stories
0
Comments
432
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 432

  1. Re:This is why NoScript should be a core feature on Firefox 3.5's First Vulnerability "Self-Inflicted" · · Score: 1

    > Adblock Plus still tops the list, however.

    Which doesn't annoy advertisers. In fact, it helps them by conserving their bandwidth!

  2. Re:Why didn't you post the (simple) fix??? on Firefox 3.5's First Vulnerability "Self-Inflicted" · · Score: 1

    That is not a simple fix, that is a temporary workaround. Turning off the JIT compiler has performance implications.

  3. Re:Say what? on ESRB Eyeballing Ratings For iPhone Games · · Score: 1

    If that's the case, I'm going to run a genetic code generator for a few thousand iterations, get some really meaningless routines, make a random main(), add some TicTacToe code, then submit it for review: HotTicTacToe as a 7MB binary... Let them figure it out.

  4. Re:Why can't we remove it? on The Birth and Battle of Conficker · · Score: 1

    > We now have Windows Defender... What is so special about Conficker..

    For one, conficker kills Windows Defender and keeps it from starting up on reboot.

  5. Re:Time to reconsider "anti-worms":? on The Birth and Battle of Conficker · · Score: 1

    Go for it. See if you can reverse engineer conficker's encrypted and digitally signed binaries. It's only RC4 and MD-6. MD-6 was only released a few weeks prior to the first wild sightings of version C. Still wanna mess with these guys? Then all you have to do is figure out which of the 50,000 domains spread across ~120 .tlds to register so you can put your binary on it for when conficker does it's daily payload check.

    Or if you want, you can try to infiltrate it via its own P2P network. You better be quick, if conficker detects it is being debugged, it quits. Can't look at the code? Hmmm, maybe look at the p2p protocol? Doh! you cannot run wireshark on an infected system, conficker process kills just about anything you would use for disinfecting every second (though I might change the .exe name of a tool i was using). But even then you have to figure out the digital signature before conficker will run your binary, it's a 4096 bit key, you better get started. Bonus points for breaking it before the authors update it.

    This worm is piece of work. It memory patches your dns resolver. It kills your security products. With it's encryption, every copy is different. It hides with random file name, in several locations, date same as your kernel, and the registry entries get pretty names most would overlook on a quick glance. The ports it opens are a function of your IP address, so you cannot just look for port xyz traffic, but a remote conficker can figure out which ports should be open for your IP. It does updates with a plain URL that no IDS could catch without red flagging genuine HTTP requests. It closes it's infection vector but opens another back door. It pokes holes in your firewall, and gives them pretty names too. But wait there's more! It tries to spread through network shares with weak passwords and copies itself to the modern sneakernet of USB drives. Its IP scanner even avoids unregistered address space.

    The authors of this worm seem to be a few steps ahead of everyone. It's weaknesses get patched, it's vulnerabilities get updated. As long as we have people running pirated copies of Windows, or people too afraid to auto-update for whatever reason, we better get used to things just "living" in the internet. Anti-worm? goodluckwiththat!

  6. Re:Look.... on Is China Creating the World's Largest Botnet Army? · · Score: 1

    Hopefully they haven't discovered spoofing.

  7. Re:It is a problem on Is China Creating the World's Largest Botnet Army? · · Score: 1

    No, because he said, "legitimate traffic."

  8. Re:Correct me if I am wrong... on Is China Creating the World's Largest Botnet Army? · · Score: 1

    Fine then, cut both of China's internet connections.

    Problem Solved!

  9. Re:Quite on What Free IDE Do You Use? · · Score: 1

    Everyone forgets it because you only type it once. Then you can't type worth a darn anymore and you just join the circus.

  10. Re:a way to make money on Apple Quietly Recommends Antivirus Software For Macs · · Score: 1

    That's called Ctrl-Cmd-D'oh!

  11. Re:a way to make money on Apple Quietly Recommends Antivirus Software For Macs · · Score: 1

    My hat goes off to you sir.

  12. Re:Epic Fail! (Couldn't resist) on EMA Suggests Point-Of-Sale Game Activation To Fight Piracy · · Score: 1

    > 1) What happens 10 years down the line when the game is abandonware? Can I still install it, even though the Key can't verify, and the company doesn't exist anymore?

    I found out what happens. The CD stops working. If you remove it from the drive and look close, there are black squiggles where the aluminum substrate has dissolved. I thought fading magnetic bits on 5.25" floppies was bad. At least those didn't dissolve. I'm stickin' with stone tablets.

    Besides, if these guys really want to stop piracy, they should get off their asses and send some warships to the Gulf of Aden and Somalia. Put up or shut up guys. Sheesh.

  13. Not Reading, but here is a good tool to play with on Reading Guide To AI Design & Neural Networks? · · Score: 1

    Well once you have read a bit and want to play, may I suggest you look into Breve for your experimenting. Think of it as your AI simulation Expert Lego set. Lots of tools to visualize your algorithms. Cheers.

  14. Neptune's Domain on US Supreme Court Allows Sonar Use · · Score: 0, Redundant

    No captain of any seagoing vessel that does not respect the ocean upon which he sails ever escapes the wrath of Neptune. The sea will ultimately get it's revenge.

    p.s. I'd like to believe usul294's post below, citing references would help. How do you see a whale underwater with binoculars? Seems like everyone in this thread bought the lie that we need the govt to protect us at all costs.

  15. Re:Well... on AVG Virus Scanner Removes Critical Windows File · · Score: 4, Insightful

    Now, this is a product that can sometimes detect a virus but can't remove it, whatsoever.

    Ah yes... Windows. The only system where I can be logged in as the super user only to be told I can't delete a file. Access Denied. I always feel like Windows reserves the higher system privileges for people attacking your system, or malicious software already running on your system. /sigh

  16. Re:Well... on AVG Virus Scanner Removes Critical Windows File · · Score: 1

    Just make sure to wash your Virii before placing it around your neck.

  17. Re:Well... on AVG Virus Scanner Removes Critical Windows File · · Score: 1

    Redundancy. I don't think this word means what you think.

    Try: Circular Reference. ;)

  18. Re:WPA2 is NOT broken on Researchers Crack WPA Wi-Fi Encryption · · Score: 1

    For you slashdotters that don't know what an attic is, it's just like your room under the house, only it's above the house. Careful, there might be windows up there that could let sunlight in.

  19. Re:Who uses TKIP instead of AES? on Researchers Crack WPA Wi-Fi Encryption · · Score: 2, Funny

    LOL! Is there a patch for that? He probably just needs to pull the UDP plug out the bottom and let all the dropped packets drain out. Where do you think they go when they are "dropped?" Dropped packet buildup has killed more routers than I can count.

  20. Author is a Jackass on The State of Game AI · · Score: 1

    I liked the article. Some good bits in there, lacking in detail or a good algorithm like any AI article.

    But I am going to euphemistically call the author a Jackass for the following:

    For example, inside a classroom there would be one specific set of social norms if it's full, a different set if it's empty, and wholly unrelated reactions when being shot at.

    Thanks. I've got this idea in my head about always think about your characters animating with adverbs. I'm feeling mildly inspired. Then you give me a visual of a classroom being shot at? Find another example quickly, you insensitive clod.

  21. Re:Other countries (or: Is it over please?) on Discuss the US Presidential Election · · Score: 1

    I find this interesting. I am amazed at how much other countries cover US elections. Canada had elections a few weeks back, they are one of our two neighbors and I saw nearly zero coverage in US media. We never hear about other countries elections, maybe the UK. Last time before that was something in Israel, something about Hamas being terrorists.

    I can imagine few in any other country gives a rats ass about our election. But it gets pushed so much. Is that media conglomeration pushing agenda? Does it matter to someone in Australia, or Tanzania, or India, or France, or Netherlands, that much? Why don't we get bombarded over here with other countries and their politics and elections? Is it just that I am reading the english language version of those sources and only seeing stories about US? I hear non-Americans having an opinion on which candidate they like! I never overhear discussions on who the next King of Belgium or Italy is going to be, much less anyone over here having an opinion or even being informed.

    At any rate, I apologize. We are just as tired of it as you are. It is broken beyond our control, has taken on a life of its own, and is rapidly getting worse. Our only hope is that it will collapse on itself.

  22. Re:ATM machines... on Discuss the US Presidential Election · · Score: 1

    We do millions of financial transactions per day with all the things you mentioned and it works pretty well. Diebold even makes ATM machines for crying out loud. The only reason voting doesn't work flawlessly is because someone doesn't want it to, and the people don't care.

  23. Re:solarcells in the netboot/laptop lid on Portable Solar Power For Portable Hardware? · · Score: 1

    I wire does not transmit all of a charge. Unless you are using some thick cables, you will encounter more resistance with the longer the cable run. You are looking at 0.04 Ohms per 10ft for AWG 16 wire. You have 60ft of cable, so you are already looking at 0.24 ohms, v = i x r, 5A x 0.24 = 1.2V lost in your cable run. For 10 AWG, you are still losing 0.3V for the same run and amperage. This is a inefficient system to begin with, so details like this come into play.

  24. Re:This isn't "green" on Portable Solar Power For Portable Hardware? · · Score: 1

    You are forgetting the case of wind powered boats. I know a few companies that sell those and are doing quite well. You cannot tell me a sail will not produce more energy in its lifetime than went into making it.

  25. Re:Solar and handcranked are the way to go on Portable Solar Power For Portable Hardware? · · Score: 1

    sound like a fucktard.

    Fixed that for you. File the mod system bug under working as designed.