Turning on register_globals makes for more insecure code across the board. Yes they could have accounted for register_globals being on, but don't blame gforge for being insecure because of a "feature" of php. On a side note, who cares if you can read the source code of an open source project? The code is written in such a way as to not let you out of $_SERVER['DOCUMENT_ROOT'].
The PostgreSQL community is also migrating to GForge from GBorg. I'm pretty excited to see the outcome. There are some things I'd like to see in GForge, which can easily happen if enough people take the time to submit patches, such as modular support for revision control systems. Remember GForge is a fork of Sourceforge, maintained by one of the original architects and authors of Sourceforge.
This would seem to be more a function of how *PHP* on the gforge server is setup. If register_globals is on, this will happen, if register_globals is off, which it is by default in the recent (read at least 1 year or more) stock php tarballs, this would not occur.
Because I've been looking at BSD as a viable alternative should there come a point where I need to switch from Linux due to licensing issues. I originally wanted to know which BSD varient is the favored flavor for high volume pgsql databases and high-end hardware.
# 2004-01-20 20:09:27 On the receiving end of SCO threats (askslashdot,linuxbiz) (rejected) # 2004-01-20 20:16:12 What to say to SCO? (askslashdot,linuxbiz) (rejected)
/. editors hate me, not an approved submission since the year 2000.
Your response falls into the "who is the target audience?" question. For many of us who started with Linux 8 or 9 years ago, Mandrake and similar distros are a blight on the promise of Linux. Distributions that are so bloated, over-done, and frankly tacky are in direct conflict with what Linux was, at least when I started using it, and what it still is with distributions like Slackware and Gentoo. My target audience for Linux is different than Mandrakesofts. Both can get along, as long as we realize there is a need for both, and no one road, concept is ultimately correct, just correct for the ones that see fit to use it.
they didnt steal the *source* to play the game, they stole the code to exploit it. (Cheats, hacks, etc).
This is very bad news for the existing hl community. The hlds code that can run hl1 games is there for example. They can hack that to cheat.
The CD Key verification code is there. I dont think I need to comment on why that's bad.
The anti-proxy/aimbot obfuscation code is there. Most of this code could be legacy hl1 code or share common patches. This IS VERY BAD.
This isnt just bad for HL2 delay, this has negative ramificiations for the most popular game/game server engine out there right now (HL/HLSDS).
What I've not heard about being there is any steam code, *but* if steam client code is there, theres even a bigger problem now.
The GPL issue is actually a LGPL code snipped in the Havok engine which is a 3rd party licensed physics engine, and the LGPL allows its redistribution without the open source.
The registrant information was as follows prior to the domain update. The response that you are asking about was prepared by attorneys and does not represent the meat of my defense.
I've posted the details and fix to a very serious xp security flaw that will allow a link or embedded url delete any file off your computer. It can be found at
Imagine your Grandma getting the new AOL 10.0 CD in the mail. Grandma is excited to get on the Internet, as that's what everyone was talking about down in the geriatric ward at the local hospital, when she was there because she fell and broke her hip. She takes out the beverage coaster, with its shiny, sparkly, reflective surface and puts in into her WindowsXZ computer. She is given one of two options "Switch to AOL for this Session" or "Install AOL Operating System." The interface has more information about how the new AOL Operating System is easier to use, faster, free, and has all the same type of applications that she is use to in WindowsXZ. It also mentions that it makes AOL and the Internet easier to use. So she decides to go with the AOL Operating System. When she presses that fateful button her hard-drive is reconfigured. XZ is deleted like the infestation it is, while the new AOL Operating System converts her NTFS partition to ext3. When her computer boots up, she gets the friendly "You've Got Mail" chime, and when she checks it, it's an email from the Linux Counter project asking her to go signup. She's now just entered a world only 3 years ago dominated by pretentious youth and opinionated technical professionals. Go Grandma. But the thing is she doesn't know it. Not only does she not know it, if said pretentious youth, and/or opinionated technical professionals looked at her computer initially, they don't see GNOME 3.0 or KDE 4.0, they see America Online, with it's handy yet somehow amazingly lame ART format and colorful pictures arranged in a cluttered yet somehow aesthetically pleasing way.
When posed the question "What is wrong with this?" I have to answer nothing at all. As a matter of fact this just did the one thing that we as a community have been trying to do for the last 9+ years. It has gained legitimacy for *our* movement. Sure it was at the cost of selling our souls, and giving in on what we thought was right, but hey, Now WindowsXZ has a run for its money. Even though when you boot it up, you start to fly around your room with Madonna. How can throwing our ideals out the window be good?
Remember my friend, Linux is not an operating system. It's an operating system kernel, and a way of doing things. By grandma running AOL Operating System based upon the Linux kernel, all that hard work that Linus has been doing for all those years has just hit the real mainstream. We're talking major support for devices, we're talking mass distribution the likes Linux hasn't seen before. That's because by this time, everyone has a computer. No I don't just mean those pesky white middle class folk, I mean everyone. See the government has pony'ed up and bowed to the pressure that the internet was a racist/bigoted/insert bad term here because the lower class individuals couldn't afford the equipment required to let them on the Internet. And Tom Dashill has decided that's America's fault. But enough of that. See these poor internet users can't afford the $200 license fee that M$ is now charging for Windows XZ Home. And instead of being anally raped by the Business Software Alliance, they choose to install the AOL Operating System. Get it?
Now on to the bad side of things; It's somewhat ironic that *the* company that bought all my favorite little companies may be bought by AOL. You see they went out and bought Hells Kitchen Systems, they made my credit card processing software CCVS. And then proceeded fuck it up beyond believe. Customer service became a thing of the past, and as soon as their contract allowed them, the developers got out of RedHat faster than a husband falls asleep after pulling out of his wife. But wait don't stop there, RedHat next on its acquisition trail through my technical life bought C2Net. ISP turned commercial Apache vendor. Having been a long time fan of C2Net for their commercialization of Apache, which benefited me greatly in my business I made good friends with much of the staff, of which a few remain now that Stronghold is a RedHat product. RedHat then in its next stage of becoming the M$ that the stock market wants them to become saw a hole in their enterprise level strategy, which was the RDBMS area. To compete with M$ they needed a database that could compete with SQL Server. Now, based upon the previous history you would think that they were ripe to pick up the PostgresQL startup Great Bridge. After all Great Bridge had 2 things going for it. One, their primary investor was the primary investor in RedHat when it started. Two, they had members of the PostgresQL development crew on staff! But instead of pursuing something to acquire Great Bridge, RedHat decides to put them out of business. In the summer of this year, less than 6 months after the announcement of the "Red Hat Database" which is PostgresQL, Great Bridge closes its doors. And my friends at Great Bridge are looking for jobs.
All that being said, why am I unhappy about the thought of AOL buying RedHat? It's pretty simple actually. In my head it lowers the already borderline esteem I have for the distribution which commonly gets referred to solely as "Linux." RedHat, for all its history, is primarily responsible for the legitimization of Linux in the business community. RedHat has been the torch bearer for our trusty UNIX variant. They've paid for open source programmers to program open source projects, they've co-sponsored conferences, and events. RedHat has, in fact, done for Linux, more than most other Linux related companies have done. Who's to say what their focus will become when they are more concerned about Grandma's ability to send email to her grandchildren then they are about making reliable, secure by default operating systems?
Just some feedback on the commercial front. I run a linux based server farm with win clients at work. Our accounting department, prior to me working there, chose mas90 which runs off an nt server in a multi-user environment. When I tried to serve mas90 off a linux samba server, mas90 choked. Apparently it will not run off Samba share without corrupting the data (this according to our MAS90 consultant). I ended up putting it on our head accountants win2k workstation and having all the other accounting people access her win2k share p2p. If anyone has worked around this problem, please let me know:D
I have to agree here. As a long time slackware user (6+ years), I am still on it today. I think every point you made above is true regarding Slack. Since I run it on higher-end dell boxen, I guess I'm the control freak side of things. I did try and switch to BSD for a while, but made my way back to Slack. I don't think it will die anytime soon. There are too many of us that will pick up the torch and carry it forward if anything happens to Patricks desire to keep it going.
a hip frood who really knew where his towel was. That being said, I must say his dying is totally uncalled for, and I am going to have to speak to someone about this. I will be registering a complaint. Not other series of books has impacted me as much as his did. No other series of books meant as much to me.
I have to agree. Like I stated in my other post, the Slackware philosophy (IMHO) revolves around keeping it simple. I've never had problems with Slackware, I've never been rooted, and I've never needed the hardware I run under Slack. Fact of the matter is Slackware runs faster (In my experience) than other distros, and is closer to "Secure by Default" than most others (Debian being the closest to that 2nd to Slack IMHO). Those who flame Slackware generally are those who don't want, or know how to truely admin a *NIX box.
Well I would not trust my servers to anything less. RedHat is a joke, Debian is nice but when your main philosophy is based upon the KISS methodology (Keep it simple stupid), Slackware is every bit as strong as it was when I first used it over 7 years ago. Fact of the matter is that RedHat, Mandrake, SuSE may be changing what popular culture thinks of linux as, but Slackware is what defined Linux as an OS. It is true to what Linux is, and will continue to be that way. While you may find it easier to use RedHat, I argue you'll find it easier to use Windows 2000. If you want to use Linux, use Slackware. If you want to try and use Linux without really knowing how it works, or having to practice the ART of Linux, use RedHat.
I followed your story closely, I don't know quite why, really, other than it struck a chord with me I guess. From what I remember you came out of it with little memory from before the accident. What was it like coming back into the Linux fold, did you have to re-learn or did it all come back? What did you think about Linux (if you did) when you couldn't remember what it was?
Slashdot Mirror
Turning on register_globals makes for more insecure code across the board. Yes they could have accounted for register_globals being on, but don't blame gforge for being insecure because of a "feature" of php. On a side note, who cares if you can read the source code of an open source project? The code is written in such a way as to not let you out of $_SERVER['DOCUMENT_ROOT'].
The PostgreSQL community is also migrating to GForge from GBorg. I'm pretty excited to see the outcome. There are some things I'd like to see in GForge, which can easily happen if enough people take the time to submit patches, such as modular support for revision control systems. Remember GForge is a fork of Sourceforge, maintained by one of the original architects and authors of Sourceforge.
This would seem to be more a function of how *PHP* on the gforge server is setup. If register_globals is on, this will happen, if register_globals is off, which it is by default in the recent (read at least 1 year or more) stock php tarballs, this would not occur.
It doesnt seem too far fetched now does it? How long until global mouse domination?
http://ehpg.net/~cradly/jpg/hudf-3200x1200.jpg
http://ehpg.net/~cradly/jpg/hudf-1600x1200.jpg
http://ehpg.net/~cradly/jpg/hudf-1280x1024.jpg
http://ehpg.net/~cradly/jpg/hudf-1024x768.jpg
http://ehpg.net/~cradly/jpg/hudf-800x600.jpg
Thanks, and sure, just fix the few typos before you send it out ;-)
Because I've been looking at BSD as a viable alternative should there come a point where I need to switch from Linux due to licensing issues. I originally wanted to know which BSD varient is the favored flavor for high volume pgsql databases and high-end hardware.
I do, for quite some time :).
I also contacted the various people mentioned, which resulted in lack of interest and a brush off.
# 2004-01-20 20:16:12 What to say to SCO? (askslashdot,linuxbiz) (rejected)
It was run by our lawyer and CEO :)
Your response falls into the "who is the target audience?" question. For many of us who started with Linux 8 or 9 years ago, Mandrake and similar distros are a blight on the promise of Linux. Distributions that are so bloated, over-done, and frankly tacky are in direct conflict with what Linux was, at least when I started using it, and what it still is with distributions like Slackware and Gentoo. My target audience for Linux is different than Mandrakesofts. Both can get along, as long as we realize there is a need for both, and no one road, concept is ultimately correct, just correct for the ones that see fit to use it.
For my GPL'ed PHP Captcha sofware:
http://sourceforge.net/projects/session-captcha/
they didnt steal the *source* to play the game, they stole the code to exploit it. (Cheats, hacks, etc).
This is very bad news for the existing hl community. The hlds code that can run hl1 games is there for example. They can hack that to cheat.
The CD Key verification code is there. I dont think I need to comment on why that's bad.
The anti-proxy/aimbot obfuscation code is there. Most of this code could be legacy hl1 code or share common patches. This IS VERY BAD.
This isnt just bad for HL2 delay, this has negative ramificiations for the most popular game/game server engine out there right now (HL/HLSDS).
What I've not heard about being there is any steam code, *but* if steam client code is there, theres even a bigger problem now.
The GPL issue is actually a LGPL code snipped in the Havok engine which is a 3rd party licensed physics engine, and the LGPL allows its redistribution without the open source.
The registrant information was as follows prior to the domain update. The response that you are asking about was prepared by attorneys and does not represent the meat of my defense.
---------------------
gamesnet (GAMESNET2-DOM)
1015 Hastings Ct
Lutz, FL 33548
US
Domain Name: GAMESNET.NET
http://www.gavinroy.com/fixxp.php
Cheers,
Gavin
Oh and it's reduced my inbound spam by 100% as well :)
It brought my 20-30 klez emails a day down to 0.
Imagine your Grandma getting the new AOL 10.0 CD in the mail. Grandma is excited to get on the Internet, as that's what everyone was talking about down in the geriatric ward at the local hospital, when she was there because she fell and broke her hip. She takes out the beverage coaster, with its shiny, sparkly, reflective surface and puts in into her WindowsXZ computer. She is given one of two options "Switch to AOL for this Session" or "Install AOL Operating System." The interface has more information about how the new AOL Operating System is easier to use, faster, free, and has all the same type of applications that she is use to in WindowsXZ. It also mentions that it makes AOL and the Internet easier to use. So she decides to go with the AOL Operating System. When she presses that fateful button her hard-drive is reconfigured. XZ is deleted like the infestation it is, while the new AOL Operating System converts her NTFS partition to ext3. When her computer boots up, she gets the friendly "You've Got Mail" chime, and when she checks it, it's an email from the Linux Counter project asking her to go signup. She's now just entered a world only 3 years ago dominated by pretentious youth and opinionated technical professionals. Go Grandma. But the thing is she doesn't know it. Not only does she not know it, if said pretentious youth, and/or opinionated technical professionals looked at her computer initially, they don't see GNOME 3.0 or KDE 4.0, they see America Online, with it's handy yet somehow amazingly lame ART format and colorful pictures arranged in a cluttered yet somehow aesthetically pleasing way.
When posed the question "What is wrong with this?" I have to answer nothing at all. As a matter of fact this just did the one thing that we as a community have been trying to do for the last 9+ years. It has gained legitimacy for *our* movement. Sure it was at the cost of selling our souls, and giving in on what we thought was right, but hey, Now WindowsXZ has a run for its money. Even though when you boot it up, you start to fly around your room with Madonna. How can throwing our ideals out the window be good?
Remember my friend, Linux is not an operating system. It's an operating system kernel, and a way of doing things. By grandma running AOL Operating System based upon the Linux kernel, all that hard work that Linus has been doing for all those years has just hit the real mainstream. We're talking major support for devices, we're talking mass distribution the likes Linux hasn't seen before. That's because by this time, everyone has a computer. No I don't just mean those pesky white middle class folk, I mean everyone. See the government has pony'ed up and bowed to the pressure that the internet was a racist/bigoted/insert bad term here because the lower class individuals couldn't afford the equipment required to let them on the Internet. And Tom Dashill has decided that's America's fault. But enough of that. See these poor internet users can't afford the $200 license fee that M$ is now charging for Windows XZ Home. And instead of being anally raped by the Business Software Alliance, they choose to install the AOL Operating System. Get it?
Now on to the bad side of things; It's somewhat ironic that *the* company that bought all my favorite little companies may be bought by AOL. You see they went out and bought Hells Kitchen Systems, they made my credit card processing software CCVS. And then proceeded fuck it up beyond believe. Customer service became a thing of the past, and as soon as their contract allowed them, the developers got out of RedHat faster than a husband falls asleep after pulling out of his wife. But wait don't stop there, RedHat next on its acquisition trail through my technical life bought C2Net. ISP turned commercial Apache vendor. Having been a long time fan of C2Net for their commercialization of Apache, which benefited me greatly in my business I made good friends with much of the staff, of which a few remain now that Stronghold is a RedHat product. RedHat then in its next stage of becoming the M$ that the stock market wants them to become saw a hole in their enterprise level strategy, which was the RDBMS area. To compete with M$ they needed a database that could compete with SQL Server. Now, based upon the previous history you would think that they were ripe to pick up the PostgresQL startup Great Bridge. After all Great Bridge had 2 things going for it. One, their primary investor was the primary investor in RedHat when it started. Two, they had members of the PostgresQL development crew on staff! But instead of pursuing something to acquire Great Bridge, RedHat decides to put them out of business. In the summer of this year, less than 6 months after the announcement of the "Red Hat Database" which is PostgresQL, Great Bridge closes its doors. And my friends at Great Bridge are looking for jobs.
All that being said, why am I unhappy about the thought of AOL buying RedHat? It's pretty simple actually. In my head it lowers the already borderline esteem I have for the distribution which commonly gets referred to solely as "Linux." RedHat, for all its history, is primarily responsible for the legitimization of Linux in the business community. RedHat has been the torch bearer for our trusty UNIX variant. They've paid for open source programmers to program open source projects, they've co-sponsored conferences, and events. RedHat has, in fact, done for Linux, more than most other Linux related companies have done. Who's to say what their focus will become when they are more concerned about Grandma's ability to send email to her grandchildren then they are about making reliable, secure by default operating systems?
Just some feedback on the commercial front. I run a linux based server farm with win clients at work. Our accounting department, prior to me working there, chose mas90 which runs off an nt server in a multi-user environment. When I tried to serve mas90 off a linux samba server, mas90 choked. Apparently it will not run off Samba share without corrupting the data (this according to our MAS90 consultant). I ended up putting it on our head accountants win2k workstation and having all the other accounting people access her win2k share p2p. If anyone has worked around this problem, please let me know :D
I have to agree here. As a long time slackware user (6+ years), I am still on it today. I think every point you made above is true regarding Slack. Since I run it on higher-end dell boxen, I guess I'm the control freak side of things. I did try and switch to BSD for a while, but made my way back to Slack. I don't think it will die anytime soon. There are too many of us that will pick up the torch and carry it forward if anything happens to Patricks desire to keep it going.
a hip frood who really knew where his towel was. That being said, I must say his dying is totally uncalled for, and I am going to have to speak to someone about this. I will be registering a complaint. Not other series of books has impacted me as much as his did. No other series of books meant as much to me.
I have to agree. Like I stated in my other post, the Slackware philosophy (IMHO) revolves around keeping it simple. I've never had problems with Slackware, I've never been rooted, and I've never needed the hardware I run under Slack. Fact of the matter is Slackware runs faster (In my experience) than other distros, and is closer to "Secure by Default" than most others (Debian being the closest to that 2nd to Slack IMHO). Those who flame Slackware generally are those who don't want, or know how to truely admin a *NIX box.
Well I would not trust my servers to anything less. RedHat is a joke, Debian is nice but when your main philosophy is based upon the KISS methodology (Keep it simple stupid), Slackware is every bit as strong as it was when I first used it over 7 years ago. Fact of the matter is that RedHat, Mandrake, SuSE may be changing what popular culture thinks of linux as, but Slackware is what defined Linux as an OS. It is true to what Linux is, and will continue to be that way. While you may find it easier to use RedHat, I argue you'll find it easier to use Windows 2000. If you want to use Linux, use Slackware. If you want to try and use Linux without really knowing how it works, or having to practice the ART of Linux, use RedHat.
I guess you can really say that this system sucks!
I followed your story closely, I don't know quite why, really, other than it struck a chord with me I guess. From what I remember you came out of it with little memory from before the accident. What was it like coming back into the Linux fold, did you have to re-learn or did it all come back? What did you think about Linux (if you did) when you couldn't remember what it was?