If your software doesn't understand that the presentation of the time is simply a user preference, then your software has a more serious problem.
This is exactly the problem, the system cannot present the correct time in new zealand, because new zealand users will have their preferences set to NZST, and the system can't calculate NZST correctly anymore.
The 'software' in question that is 'broken' is glibc, because the timezone data it relies on is incorrect.
they will not release any updates that change the normal behavior of programs
By not rolling out the change they are changing the normal behaviour of programs.
Previously the normal behaviour of the system is that the system time will change in sync with daylight savings time.
But not rolling out this change they are changing the behaviour of the system, now, the system time will be out of sync with the actual time in new zealand.
In new zealand we use paper ballots, you tick the box you want with a marker pen. Polls close in the early evening, and the result of the election is usually known later that night.
The paper ballets are anonymous, transparent, reliable, and cheap.
Remind me, what problem do electronic voting machines solve?
EUA is already refusing to admit it could scrape together a few more dollars
If the funding is fixed in US dollars, what's the problem? The US has shown no ambition to curtail it's current account deficit. The EU can keep providing a fixed euro amount of funding, and as the US dollar keeps falling this will translate to those generous europeans providing increased funding.
AT&T will unlock phones for customers once they have fulfilled their contracts, which typically run one to two years. One big exception: Apple's iPhone, distributed exclusively in the USA by AT&T. "That's different," says AT&T spokesman Mark Siegel.
Be interesting to see how that goes when they launch in the UK shortly. In the UK the law requires the operators to provide an unlocking service.
You can get a freeview decoder in the UK for less than 20 quid retail.
This box decodes an MPEG stream out of the analog over the air broadcast. Decodes this MPEG stream and outputs it as an analog signal to plug into your analog TV. Provides tuner functionality to switch between channels / MPEG stream and decodes the 7 day over the air program guide plus a viewer for it and various other MPEG 'multimedia' functions.
Now if you've got digial cable you'll still need a box to do most of that, why wouldn't they include the analog TV encoder chip? And if not, a separate box to just do the analog NTSC encoding part, bought in very large quantities by the cable company has got to be cheap to do.
Why is it that the US, which is one country, apparently has so much more trouble to deploy some decent standards than Europe, which is a pretty loosely held together bunch of countries which couldn't be more different from each other?
Because the EU isn't afraid to regulate when the market fails its citizens?
I think the popularity is half x86 compatibility(windows users) and half retail cost / availability.
When i was building a linux based PVR, x86 compatibilty was not a deciding factor *. What i wanted was a cheap fanless board that could playback mpeg2 and divx, with a PCI slot for a tuner card, TV-Out, and SATA.
When i was looking there were hundreds of Via C3/C7 based boards from heaps of manufactures, with countless different options. There were one or two ARM and PPC boards, even one with a transmetta CPU, but they didn't have TV-Out, or they had TV-Out but no USB or PCI.
I would have loved to go with another architecture but the market for retail consumers just isn't there.
* Actually, now i've said that i imagine compatibilty of the tuner drivers with non-x86 could be an issue.
The gas company doesn't charge you for 10,000 cubic feet of gas and then come back and tell you that you can use only 1,000 cubic feet because they oversold.
If everyone suddenly turned on their heating, put a roast in the oven, and then ran a hot bath, i think you would find that sorry, they can't deliver enough gas because they have oversold their ability to deliver.
You still get your 10,000 cubic feet, you just have to wait a little longer for it to arrive
Comeon, come here for a hug, you obviously never got any from your mother.
None of the posts i responded to mentioned which API had the vulnerability. So i'd like to say there's been a wee addition of useful information to the discussion.
BTW if you're gonna be pedantic about english speeling then you really ought to avoid typos in your code also, it's javax.imageio.ImageIO
Now, i better grab some lunch, all this feeding the trolls is making me hungry.
Oh right, so what your saying, is this vulnerability is not in the core java API, and you'd have to be using a specific extenstion API that was introduced with 1.4 to be vulnerable. Thanks, useful information that wasn't included. As i said, i wasn't aware of any 'natively accelerated' image handling, seems my head is out of date. But it'd be useful to provide this info to people so that can know if they are vulnerable. It's not mentioned in any of the adviseries linked here, though i see today a CESA advisory that provides detail has made it to top spot on google.
Now, how about all take a deep breath, get a cup of coffee, and call our dealers for some happy pills/powder?
For some reason, Big Blue seems to have decided to side with the public good rather than fear open-source as most corporations do
I don't think they are siding with the public good. More a case of enlightened self interest.
What's good for the industry is good for IBM. What's good for IBMs customers, is good for IBM.
Open standards make IT easier to implement and 'grow' the industry. If IBM is at the forefront of that movement, then they can grab a larger share of a large pie.
In addition to this, adopting opensource can lower their development costs. Witness the replacement of their own IBMHttpd server in Websphere with apache.
Therefore opensource and openstandards == more $$$ for IBM.
Previous "soft keywboards" i've used on touch screens like the sharp zaurii have been clunky and you needed a pointer thingy to tap on the keys for accuracy.
Will be interesting to see how good apples implementation is.
I think having web access so I can use a personal webmail account to send whatever I want out to anyone I want unfiltered by IT or corporate security[different from network security] is a bigger risk to my employers trade secrets.
do you allow people to take briefcases in and out of the building without first having corporate security[different from building security] search the contents?
Slashdot Mirror
Maybe you got some sort of international release?
I've only seen that that do not copy crap on some rental releases in the UK, not on any retail releases.
the human energy is part of what gives us transparency in the process. Waiitng a few hours for the result is a small price to pay.
If your software doesn't understand that the presentation of the time is simply a user preference, then your software has a more serious problem.
This is exactly the problem, the system cannot present the correct time in new zealand, because new zealand users will have their preferences set to NZST, and the system can't calculate NZST correctly anymore.
The 'software' in question that is 'broken' is glibc, because the timezone data it relies on is incorrect.
they will not release any updates that change the normal behavior of programs
By not rolling out the change they are changing the normal behaviour of programs.
Previously the normal behaviour of the system is that the system time will change in sync with daylight savings time.
But not rolling out this change they are changing the behaviour of the system, now, the system time will be out of sync with the actual time in new zealand.
Countries with lots of votes to count, have lots of people to count them. The ratio of counters to votes doesn't need to change.
Why do we need electronic voting?
In new zealand we use paper ballots, you tick the box you want with a marker pen. Polls close in the early evening, and the result of the election is usually known later that night.
The paper ballets are anonymous, transparent, reliable, and cheap.
Remind me, what problem do electronic voting machines solve?
You don't see many QNX or vxWorks, symbian, etc etc devices that support those operating systems on the desktop.
Likewise windows mobile devices require windows XP.
On the desktop they support the common desktop OSes, and that doesn't include linux.
EUA is already refusing to admit it could scrape together a few more dollars
If the funding is fixed in US dollars, what's the problem? The US has shown no ambition to curtail it's current account deficit. The EU can keep providing a fixed euro amount of funding, and as the US dollar keeps falling this will translate to those generous europeans providing increased funding.
AT&T will unlock phones for customers once they have fulfilled their contracts, which typically run one to two years. One big exception: Apple's iPhone, distributed exclusively in the USA by AT&T. "That's different," says AT&T spokesman Mark Siegel.
Be interesting to see how that goes when they launch in the UK shortly. In the UK the law requires the operators to provide an unlocking service.
What is so expensive about a converter box?
You can get a freeview decoder in the UK for less than 20 quid retail.
This box decodes an MPEG stream out of the analog over the air broadcast.
Decodes this MPEG stream and outputs it as an analog signal to plug into your analog TV.
Provides tuner functionality to switch between channels / MPEG stream and decodes the 7 day over the air program guide plus a viewer for it and various other MPEG 'multimedia' functions.
Now if you've got digial cable you'll still need a box to do most of that, why wouldn't they include the analog TV encoder chip? And if not, a separate box to just do the analog NTSC encoding part, bought in very large quantities by the cable company has got to be cheap to do.
7 day EPG is transmitted with programming.
And the xmltv radiotimes feed has 14 days.
Similarly, I've been confounded more than once when a function or variable couldn't be found by the compiler
Why don't you right click on said function and choose Refactor -> Rename, or whatever the equivalent is in your IDE?
Why is it that the US, which is one country, apparently has so much more trouble to deploy some decent standards than Europe, which is a pretty loosely held together bunch of countries which couldn't be more different from each other?
Because the EU isn't afraid to regulate when the market fails its citizens?
I think the popularity is half x86 compatibility(windows users) and half retail cost / availability.
When i was building a linux based PVR, x86 compatibilty was not a deciding factor *. What i wanted was a cheap fanless board that could playback mpeg2 and divx, with a PCI slot for a tuner card, TV-Out, and SATA.
When i was looking there were hundreds of Via C3/C7 based boards from heaps of manufactures, with countless different options. There were one or two ARM and PPC boards, even one with a transmetta CPU, but they didn't have TV-Out, or they had TV-Out but no USB or PCI.
I would have loved to go with another architecture but the market for retail consumers just isn't there.
* Actually, now i've said that i imagine compatibilty of the tuner drivers with non-x86 could be an issue.
The gas company doesn't charge you for 10,000 cubic feet of gas and then come back and tell you that you can use only 1,000 cubic feet because they oversold.
If everyone suddenly turned on their heating, put a roast in the oven, and then ran a hot bath, i think you would find that sorry, they can't deliver enough gas because they have oversold their ability to deliver.
You still get your 10,000 cubic feet, you just have to wait a little longer for it to arrive
Comeon, come here for a hug, you obviously never got any from your mother.
None of the posts i responded to mentioned which API had the vulnerability. So i'd like to say there's been a wee addition of useful information to the discussion.
BTW if you're gonna be pedantic about english speeling then you really ought to avoid typos in your code also, it's javax.imageio.ImageIO
Now, i better grab some lunch, all this feeding the trolls is making me hungry.
Oh right, so what your saying, is this vulnerability is not in the core java API, and you'd have to be using a specific extenstion API that was introduced with 1.4 to be vulnerable. Thanks, useful information that wasn't included. As i said, i wasn't aware of any 'natively accelerated' image handling, seems my head is out of date. But it'd be useful to provide this info to people so that can know if they are vulnerable. It's not mentioned in any of the adviseries linked here, though i see today a CESA advisory that provides detail has made it to top spot on google.
Now, how about all take a deep breath, get a cup of coffee, and call our dealers for some happy pills/powder?
Remind me, which API did they say would make an application vulnerable to this bug?
Why don't you come over here and i'll give you hug, make you feel better yah?
thanks for the usefull information. I'll be sure to take your advice. have a nice day.
1. Impact
A buffer overflow vulnerability in the image parsing code in the Java
Runtime Environment
How did they manage to get a buffer overflow in java?
Is the bug lower down in the native C code? I didn't know they used native code for image rendering unless you used a special extended media API...
For some reason, Big Blue seems to have decided to side with the public good rather than fear open-source as most corporations do
I don't think they are siding with the public good. More a case of enlightened self interest.
What's good for the industry is good for IBM. What's good for IBMs customers, is good for IBM.
Open standards make IT easier to implement and 'grow' the industry. If IBM is at the forefront of that movement, then they can grab a larger share of a large pie.
In addition to this, adopting opensource can lower their development costs. Witness the replacement of their own IBMHttpd server in Websphere with apache.
Therefore opensource and openstandards == more $$$ for IBM.
Previous "soft keywboards" i've used on touch screens like the sharp zaurii have been clunky and you needed a pointer thingy to tap on the keys for accuracy.
Will be interesting to see how good apples implementation is.
i think we have a different definition of "work". Mine involves more than reading email.
I think having web access so I can use a personal webmail account to send whatever I want out to anyone I want unfiltered by IT or corporate security[different from network security] is a bigger risk to my employers trade secrets.
do you allow people to take briefcases in and out of the building without first having corporate security[different from building security] search the contents?