The Core Duo and Solo CPUs support no-execute. The vulnerability does not lie with the CPU, it lies with Apple failing to use that capability of the CPU.
I love it when people repeat what I said in attempt to argue:) See again what I said and compare it to what I quoted from you.
Having to rely on hacks from a 3rd party is a bit of a security risk itself. Sure it will be loads of fun to get Mac OS X running on a homebrew system, but these system will be novelties and fun topics of conversation, very rarely will they have serious users.
I'd say put your shit together. We're talking hackers here. You think they will be confused in installing and using OSX when there a simple quide with steps and installations all over the web? My dog can install it.
And you can bet that if they find an exploit in Safari from hacked OSX 10.4, it'll work on Safari from original OSX 10.4, since the hacked components are related to the BIOS support and the TPM chip, and nothing to do with 99.99% of the OS.
Bullshit. Buffer overflows are a software problem and have nothing to do with the CPU. The PowerPC would have been just as vulnerable, when running identical code.
PPC makes it much harder (thought not impossible) to run code after overflow since it'll clear the stack.
And building your own PC teaches you absolutely nothing about discovering vulnerabilities.
I'm saying they have (hacked) OSX compatible machines, where previously they didn't. The fact they are self assembled is just because they are cheap (which Apple computers are not).
I wish people don't just jump to quick conclusions and call "bullshit" without thinking through.
That seems like they are expecting an awful lot from Apple - certainly they want to take a few weeks to analyze their patch and make sure it doesn't break a bunch of things.
No shit, eh. I wonder how it's expecting an awful lot from Apple, but when Microsoft is in the same situation we have the default thread with posts about how Microsoft is slow and sucks.
Also isn't everyone sick of having the same discussion over and over and over when someone mentions "Microsoft" or "Apple" (or both).
They'll just release the patch when they release it.
Changing CPU architectures will have absolutely effect on security.
The FAQ says that people frequently get modded insightful just because they seem confident, and apparently you prove them right.
The truth is the Intel processor is a lot more prone to buffer overflow attacks, which is what most exploits on Windows are based on. This is why the no-execute command was introduced in later chips but OSX doesn't take a lot (if any) advantage of it.
Also don't forget: most hackers have self-assembled Intel/AMD machines... that certainly counts.
Did you notice how the title speaks about "upcoming" reversal and the article about "reversal in 2000 yr".. I don't know about you, but upcoming for me would mean at least while I'm ALIVE, no?
They say "not bad" because they know the only people who care about how "good" HTML is, usually are web dev nerds/geeks who read a site from right-click>view source.
They've had plenty of learning experience with standards zealots while updating IE7 (see the comments in the IE Blog and you'll see what I mean) and know that plenty of the web devs who are aware of what webs tandards is feel superior and try to doctrinate their knowledge to everyone by calling bullshit on everything that is slightly off what W3C might think on the issue (even if it's not necessarily a written down standard in all cases).
This can be easily seen on channels like #html and #css on Efnet, where if you come and ask for a help with a site that lacks DOCTYPE or uses a table for anything resembling a layout, you're likely to be banned, following long discussion about how stupid the user was and how "he doesn't get it".
In that light, MS not going long way to bragging about their improved HTML output was a correct choice as not to get too harsh reviews from the standards zealots.
But of course, this is Slashdot, so no matter what MS says or does, it can be made fun of.
Oh no! Jonh Dvorak created an account on Slashdot!
Wait I'm not done yet. End of 2009, Microsoft buys Slashdot, and bans all MS haters and makes Slashdot a nice friendly place where Windows users can share their great XPeriences.
You like playing all games on one machine don't you? This is certainly one of the greatest assets of Wii. How about this:
Nintendo releases its console early September for the price $200 shocking everyone with a low price and making for an incredible start, Nintendo barely manages to produce enough consoles for all people who wanna buy one.
PlayStation 3 starts selling November, and despite a good start sees its sales quickly decline as almost noone but the most hardcore PS devotees are willing to pay up the hefty $600 price for what is essentially a little better version of XBOX 360.
Sony's meeting huge financial difficulties with pricing and positioning Blue Ray, especially that PS3 turns out to be a massive failure and 6 months later is bought by Microsoft.
Microsoft promises to build on the assets of Sony and tells PS gamers that PlayStation will continue to be sold and supported until further plans are announced.
Nintendo is doing great, but the Sony+MS merger is not something they can go against, Sony+MS start pouring billions of dollars advertising their consoles, a new PSP-XBOX-PS3 interoperability kit is developed and distributed.
Nintendo lacks the hard cash MS has, and soon the innovations of Wii are quickly drowned in the ad campaigns and promotions MS does.
Late 2007, Microsoft buys Nintendo.
Late 2008, a new console is released by Microsoft: the XWiiPlay, which uses an advanced version of the Wii-mote, packed with a standard controller extension, and can emulate all Sony, Sega, Microsoft and Nintendo consoles in existence, including Virtual Boy.
An year ago I discussed with friends how Nintendo is going the way of SEGA and soon they'll go out of the hardware biz and port Mario to other platforms.
Then I wondered why Nintendo chose to throw out the standard controller and move to something totally unorthodox, and thought that's a stupid move.
I also recently laughed about the Wii name and discussed with friends that it'll fail sales.
Now I know, Wii is THE console I will buy the moment it's out, because it provides an amazing value at a lower price and amazing innovation right in your living room. I may even buy one for my mother and grandmother, cause I always like to push technology down their throat, like any self-respecting geek should, and I think it'll be easier and more fun this time:)
BTW, did you notice the guy talking on the Sony pressconference sounded pretty depressed after the Wii presentation the previous day:) they've all the reasons to be.
There's only so much pressure a system can handle before it cracks and all the mess pours out.
If they severely limit or cripple Internet access, people will either start setting up proxies from home to tunnel traffic through, or use other proxies, or do something else unthinkable or just not use that access at all and go for something alternate.
RIAA and MPAA are learning this the hard way, but apparently others do not learn from their mistakes.
Dude, you were logged in when you responded. I've a gun, and as a libertarian, I believe I have the right to come sneak and shoot you in the back because you are obviously a menace to Society.
Because there will always be one sucker who is poerfectly willing to give up their spare processor cycles and demographic info in exchange for a taskbar icon that tells them what temperature it is outside.
What kind of an argument is that? First if he can't access the site because it's filtered how he will install anything.
And second, if 0.001% of a population prefers to be robbed and tortured for fun, does it mean that robbery and torture should be legal for the rest 99.999% ?
We have a central organisation that handles domain use and the arising domain disputes. Why we don't have a central organisation that bans spyware/malware sites? Unlike porn, where religious and all kinds of debates open, the worst cases of malware are obvious and good for nothing.
Wouldn't it seem odd to someone if drug dealers advertised their services in newspaper ads? Why isn't it odd they are allowed to reach audience via controlled ads on the search engines?
We also have Yahoo/Ask/Google's ability to filter and review their own ads and remove offensive ads. They also remove them now, but kinda sloow.. kinda lazy... you know... just enough not to hurt their revenue and not be blamed by the public they're doing nothing.
We also have Google eagerly promoting their typosquatting service for domains while saying they don't.
It's a nice example of what greed makes good companies do.
Slashdot Mirror
We know no country in the world misses a chance to be US's little bitch.
Those who do, get attacked.
The Core Duo and Solo CPUs support no-execute. The vulnerability does not lie with the CPU, it lies with Apple failing to use that capability of the CPU.
:) See again what I said and compare it to what I quoted from you.
I love it when people repeat what I said in attempt to argue
Having to rely on hacks from a 3rd party is a bit of a security risk itself. Sure it will be loads of fun to get Mac OS X running on a homebrew system, but these system will be novelties and fun topics of conversation, very rarely will they have serious users.
I'd say put your shit together. We're talking hackers here. You think they will be confused in installing and using OSX when there a simple quide with steps and installations all over the web? My dog can install it.
And you can bet that if they find an exploit in Safari from hacked OSX 10.4, it'll work on Safari from original OSX 10.4, since the hacked components are related to the BIOS support and the TPM chip, and nothing to do with 99.99% of the OS.
Bullshit. Buffer overflows are a software problem and have nothing to do with the CPU. The PowerPC would have been just as vulnerable, when running identical code.
PPC makes it much harder (thought not impossible) to run code after overflow since it'll clear the stack.
And building your own PC teaches you absolutely nothing about discovering vulnerabilities.
I'm saying they have (hacked) OSX compatible machines, where previously they didn't.
The fact they are self assembled is just because they are cheap (which Apple computers are not).
I wish people don't just jump to quick conclusions and call "bullshit" without thinking through.
That seems like they are expecting an awful lot from Apple - certainly they want to take a few weeks to analyze their patch and make sure it doesn't break a bunch of things.
No shit, eh. I wonder how it's expecting an awful lot from Apple, but when Microsoft is in the same situation we have the default thread with posts about how Microsoft is slow and sucks.
Also isn't everyone sick of having the same discussion over and over and over when someone mentions "Microsoft" or "Apple" (or both).
They'll just release the patch when they release it.
Let's settle this debate.
No.
Changing CPU architectures will have absolutely effect on security.
The FAQ says that people frequently get modded insightful just because they seem confident, and apparently you prove them right.
The truth is the Intel processor is a lot more prone to buffer overflow attacks, which is what most exploits on Windows are based on. This is why the no-execute command was introduced in later chips but OSX doesn't take a lot (if any) advantage of it.
Also don't forget: most hackers have self-assembled Intel/AMD machines... that certainly counts.
Did you notice how the title speaks about "upcoming" reversal and the article about "reversal in 2000 yr".. I don't know about you, but upcoming for me would mean at least while I'm ALIVE, no?
When considering cases like this, it's not so simple as comparing a person to a major multinational corporation.
Voice in a desert. It's the same damn old discussion everytime an article about MS is posted. Maybe we should just ignore the little MS hater trolls.
The company should be disbanded, all its assets forfeited and sold at auction.
:(
You forgot the part where Microsoft should give free mony and blonde chicks to anyone who stood for Linux and OSS throughout the years.
Why won't Slashdotters just grow up, damn it
Our ancestors may have lived through this several times before but wont it affect us more as we are highly dependent on electricity and satalites etc?
And then they say movies have no bad effect on youth...
The results suggest that there may be a reversal of earth's magnetic field in about 2000 years.
Let the War on Polar Reversal begin!
They say "not bad" because they know the only people who care about how "good" HTML is, usually are web dev nerds/geeks who read a site from right-click>view source.
They've had plenty of learning experience with standards zealots while updating IE7 (see the comments in the IE Blog and you'll see what I mean) and know that plenty of the web devs who are aware of what webs tandards is feel superior and try to doctrinate their knowledge to everyone by calling bullshit on everything that is slightly off what W3C might think on the issue (even if it's not necessarily a written down standard in all cases).
This can be easily seen on channels like #html and #css on Efnet, where if you come and ask for a help with a site that lacks DOCTYPE or uses a table for anything resembling a layout, you're likely to be banned, following long discussion about how stupid the user was and how "he doesn't get it".
In that light, MS not going long way to bragging about their improved HTML output was a correct choice as not to get too harsh reviews from the standards zealots.
But of course, this is Slashdot, so no matter what MS says or does, it can be made fun of.
That's Jobs's, you fucking retard.
The correct way is Jobs'.
But what to expect from a retard calling everyone a retard.
Guess we know there's only one thing left for Microsoft to do... buy Google.
Nintendo has always owned the handheld market. They sold 80 million GBAs!
Mhm, well, isn't the DS an upgrade to the Advance? Extra touch screen, better chips with 3D ability? I thought it can play advance games or not?
Oh no! Jonh Dvorak created an account on Slashdot!
Wait I'm not done yet. End of 2009, Microsoft buys Slashdot, and bans all MS haters and makes Slashdot a nice friendly place where Windows users can share their great XPeriences.
Relatedly, regulators have cleared Vista of anti-competitive elements.
Nooooooo! That means the search box remains with MSN selected by default!
Why can't Microsoft be "fair" and set Google default like with the other browsers!
I'm devastated.
You like playing all games on one machine don't you? This is certainly one of the greatest assets of Wii.
How about this:
Nintendo releases its console early September for the price $200 shocking everyone with a low price and making for an incredible start, Nintendo barely manages to produce enough consoles for all people who wanna buy one.
PlayStation 3 starts selling November, and despite a good start sees its sales quickly decline as almost noone but the most hardcore PS devotees are willing to pay up the hefty $600 price for what is essentially a little better version of XBOX 360.
Sony's meeting huge financial difficulties with pricing and positioning Blue Ray, especially that PS3 turns out to be a massive failure and 6 months later is bought by Microsoft.
Microsoft promises to build on the assets of Sony and tells PS gamers that PlayStation will continue to be sold and supported until further plans are announced.
Nintendo is doing great, but the Sony+MS merger is not something they can go against, Sony+MS start pouring billions of dollars advertising their consoles, a new PSP-XBOX-PS3 interoperability kit is developed and distributed.
Nintendo lacks the hard cash MS has, and soon the innovations of Wii are quickly drowned in the ad campaigns and promotions MS does.
Late 2007, Microsoft buys Nintendo.
Late 2008, a new console is released by Microsoft: the XWiiPlay, which uses an advanced version of the Wii-mote, packed with a standard controller extension, and can emulate all Sony, Sega, Microsoft and Nintendo consoles in existence, including Virtual Boy.
Aaaah... dreams, dreams.
An year ago I discussed with friends how Nintendo is going the way of SEGA and soon they'll go out of the hardware biz and port Mario to other platforms.
:)
:) they've all the reasons to be.
Then I wondered why Nintendo chose to throw out the standard controller and move to something totally unorthodox, and thought that's a stupid move.
I also recently laughed about the Wii name and discussed with friends that it'll fail sales.
Now I know, Wii is THE console I will buy the moment it's out, because it provides an amazing value at a lower price and amazing innovation right in your living room.
I may even buy one for my mother and grandmother, cause I always like to push technology down their throat, like any self-respecting geek should, and I think it'll be easier and more fun this time
BTW, did you notice the guy talking on the Sony pressconference sounded pretty depressed after the Wii presentation the previous day
There's only so much pressure a system can handle before it cracks and all the mess pours out.
If they severely limit or cripple Internet access, people will either start setting up proxies from home to tunnel traffic through, or use other proxies, or do something else unthinkable or just not use that access at all and go for something alternate.
RIAA and MPAA are learning this the hard way, but apparently others do not learn from their mistakes.
Dude, you were logged in when you responded. I've a gun, and as a libertarian, I believe I have the right to come sneak and shoot you in the back because you are obviously a menace to Society.
I already have eyes on my back though.
Because there will always be one sucker who is poerfectly willing to give up their spare processor cycles and demographic info in exchange for a taskbar icon that tells them what temperature it is outside.
What kind of an argument is that? First if he can't access the site because it's filtered how he will install anything.
And second, if 0.001% of a population prefers to be robbed and tortured for fun, does it mean that robbery and torture should be legal for the rest 99.999% ?
As a libertarian I think any sponsored link is acceptable.
I've a gun, and as a libertarian, I believe I have the right to come sneak and shoot you in the back.
As my reputation goes bad, people will get used to growing eyes on their back to see me coming.
As a libertarian, you shouldn't care if someone's selling rat poison as viagra.
Yea, who needs a centralized protection. It's all natural. See AIDS for example. It's not as if having no immune system affects your life or anything.
We have a central organisation that handles domain use and the arising domain disputes.
Why we don't have a central organisation that bans spyware/malware sites? Unlike porn, where religious and all kinds of debates open, the worst cases of malware are obvious and good for nothing.
Wouldn't it seem odd to someone if drug dealers advertised their services in newspaper ads? Why isn't it odd they are allowed to reach audience via controlled ads on the search engines?
We also have Yahoo/Ask/Google's ability to filter and review their own ads and remove offensive ads. They also remove them now, but kinda sloow.. kinda lazy... you know... just enough not to hurt their revenue and not be blamed by the public they're doing nothing.
We also have Google eagerly promoting their typosquatting service for domains while saying they don't.
It's a nice example of what greed makes good companies do.
MPAA needs dogs that can detect the smell of crappy movies.