Slashdot Mirror


User: clang_jangle

clang_jangle's activity in the archive.

Stories
0
Comments
1,770
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1,770

  1. Re:Proof of Concept Slashdot Trojan on Two Trojans For Mac OS X · · Score: 1

    Because the ARDAgent vulnerability is really easy to patch... you can easily do it yourself and I'm sure Apple will have a patch any day.


    I'm not sure a patch is warranted. The reason this "vulnerability" doesn't exist on lots of machines is that the default permissions for /System/Library/CoreServices/RemoteManagement/ARDAgent.app are drwxr-xr-x, which means there is no vulnerability. I suspect MacPorts or some other commonly installed app is actually responsible for changing the permissions on ARDAgent.app, thus creating the vulnerability for some users. The night before it was announced I had done an rsync on MacPorts, after which I noticed some bugginess. So I used the install disc to fix permissions and the bugginess went away. Just a theory, of course, but it seems sound in light of my experience. In any event, I have no plans to ever use ARDAgent, so just to be extra sure I archived it to a zip file, and now it is inaccessible.
  2. Re:Proof of Concept Slashdot Trojan on Two Trojans For Mac OS X · · Score: 0, Flamebait

    And where's the comment playing down the seriousness of the first proof-of-concept? The one that uses an unpatched ARDAgent vulnerability?


    All I know is (1) it doesn't run on my Mac (or a lot of other people's Macs), I tried it, and (2) the workaround is terribly easy

    Some Mac users just can't face that they're not as invincible as Apple marketing wants them to think, and reject any evidence to the contrary.


    Maybe. But some Mac haters just can't face that they're far more vulnerable than we are and reject any evidence to the contrary.
  3. Raises tough questions on Blogger Launches 'Google Bomb' At McCain · · Score: 5, Insightful

    I find the practice of SEO to be a bit questionable in any event, but soliciting volunteers to essentially manipulate google search results in order to favor a given political agenda just leaves a really bad taste in my mouth. Sure, it can argued that the right fights dirty, but where is the honor in stooping to this sort of thing?

    Well, I am old enough to remember the sixties -- maybe I'm just becoming obsolete.

  4. Re:Huh? on Revitalizing an Aging Notebook On the Cheap · · Score: 3, Insightful

    Refurbished with warrantee != plain used

  5. Re:Insecure root-owned binaries on unix? on Mac OS X Root Escalation Through AppleScript · · Score: 1

    As I and others have posted, it doesn't work on our machines. But just yesterday I used Disk Utility from the installer DVD to fix permissions on this machine, as I was having a little bugginess after doing a MacPorts rsync and became suspicious about that. There were indeed some funky permissions corrected in /opt/local/bin,/opt/local/lib, and /usr/local/lib. Maybe that;s why it doesn't run on my machine? Mine is powerpc running 10.4.11.

  6. Nope, not here on Mac OS X Root Escalation Through AppleScript · · Score: 1, Informative
    Here's the output I get on my Mac (powerpc running os x Tiger version 10.4.11) :

    23:78: execution error: ARDAgent got an error: AppleEvent timed out. (-1712)


    Doesn't look too scary to me. Some kind of hoax maybe? :)
  7. Re:And unofficially... on Firefox Download Day To Start At 1 p.m. EST · · Score: 1

    Well, now I got it from the "official" page, but it crashes immediately after importing Safari's preferences. I was really hoping FF3 would be good enough to replace Safari on my Mac, but it apparently won't even run. Even the Moz crash reporter doesn't work, it says, "there was a problem submitting the report". That's a really bad start, Mozilla... I always liked it so much on Linux, but on my Mac it's just never quite worked right and on FreeBSD I always have to build it from source as they don't even bother to provide a binary. Is there some weird secret BSD grudge the Moz devs have?

  8. Re:And unofficially... on Firefox Download Day To Start At 1 p.m. EST · · Score: 1

    Hmm, scratch that -- I get a file called "Firefox 3.0.dmg", but it will not mount. Tried with Safari, FF2, and wget but alas, no joy.

  9. Re:And unofficially... on Firefox Download Day To Start At 1 p.m. EST · · Score: 2, Informative
  10. Re:Network Operators != Handset Manufacturers on How Nokia and Linux Can Live Together · · Score: 1

    It sounds like your big beef is with the Net Ops.


    Yes, I fired that one off while distracted and doing several other things -- frankly, I'm surprised I wasn't modded off-topic. Not that I mind of course. :)
  11. Doc Oc... on A 30-Picowatt Processor For Sensors · · Score: 5, Funny

    ...might want a Beowu ---- oh, forgive me. I know where the door is...

  12. Re:Overreactions on Geohashing Meets an Angry Rancher With Firearms · · Score: 1, Interesting

    Ironically, I am a natural blond and a female. And old, though people still tend guess my age as "mid 30's". No, I'm not available. :)

  13. Re:Overreactions on Geohashing Meets an Angry Rancher With Firearms · · Score: 5, Insightful

    I'm sure you have your own reasons for wanting those kids to get off your lawn, but we all live on this planet, why not share? Why not join them?


    Great idea! Why don't you start by leaving your door open and welcoming whomever wants in. After all, who are you to deny shelter, kitchen, and bathroom privileges to the homeless?

    But seriously, after over 30 years of living in major cities (San Francisco, L.A., Philadelphia, Seattle, Atlanta) I've had enough and when I get home I want peace and quiet and I wish to be left alone. If you want to buy land and open it up to the public, you've got that right. Personally, I want my little forest and my little pond to remain pristine and undisturbed. I worked my butt off for 30 years to get it. Now I keep bees in my off time, and I don't want to have to lock all my tools and other belongings up to keep them, so no trespassing on my land. Is that okay with you?
  14. Re:Overreactions on Geohashing Meets an Angry Rancher With Firearms · · Score: 5, Insightful

    Just yesterday I had to run some people off my land. I have it posted "NO TRESPASSING" very clearly all around the perimeter, no way can anyone end up on my property and claim not to know (unless they don't read English, I guess). Though I don't grab my shotgun before setting off to confront stupid people like that, most of my neighbors do. I can't say I blame them. These geohashers (and anyone else who shows up unannounced on private property) are pretty much looking to become s statistic.

    To you city folks who think this is wrong, how would you like to wake up and find me in your living room?

  15. Re:this is the death knell on Verizon Cutting Access To Entire Alt.* Usenet Hierarchy · · Score: 1

    usenet is dead! long live usenet! from wikipedia: Usenet was the initial Internet community and the place for many of the most important public developments in the commercial Internet. It was the place where Tim Berners-Lee announced the launch of the World Wide Web, where Linus Torvalds announced the Linux project, and where Marc Andreesen announced the creation of the Mosaic browser and the introduction of the image tag, which revolutionized the World Wide Web by turning it into a graphical medium.


    I agree it's rather sad. I used to truly love usenet, but unfortunately for at least the last six years it's been nothing but a rotting corpse, consumed by spammers and trolls. I guess all that remains is for netcraft to confirm it.
  16. How Nokia and Linux can live together just fine... on How Nokia and Linux Can Live Together · · Score: 5, Insightful

    (1) Open the cell networks

    (2)Sell flat-rate or simple tiered access to the network

    (3)Sell a range of solutions, from bare bones "modems" to full-fledged gadgety smartphones

    (4)Stop trying to tell us what software and hardware we're allowed to fucking use on that network

    (5)Profit!!!

    It could all be so simple, were the bastards not so greedy . There are plenty of idiots who would still happily buy pink Razrs and crappy ring tones...

  17. Re:Finally, Some Linux News!! on Wall Street Becoming a Linux Stronghold · · Score: 4, Insightful

    I hope we return to the days when slashdot wasn't so political.


    It's these trying times, defined as they are by political extremism everywhere threatening our once-secure way of life. I'm sure many of us hope to return to a more relaxed atmosphere, so we can once again afford the luxury of political apathy. I know I do!
  18. Re:It was predictable on Why OLPC Struggles Against Educators, Big Business · · Score: 3, Informative
    From the first paragraph in TFA (which you clearly didn't bother to read):

    One by one, the children ran into the school yard, lining up in a grassy field next to a low-slung building of classrooms topped by a rusty steel roof. Most of these children in Luquia, a tiny, impoverished town 13,200 feet above sea level in the Peruvian Andes, wore ragged navy-blue uniforms, and many had not bathed in days. Their small adobe homes have dirt floors, no running water, and no bathrooms. They share sleeping space with dozens of squeaking guinea pigs, which scamper underfoot before becoming the family's rare meal of meat.



    Sounds to me like you shouldn't call me a troll, troll.
  19. Re:distribution on Why OLPC Struggles Against Educators, Big Business · · Score: 4, Funny

    Hackers like to think they can do everyone's job better even if it way out of their scope.


    That's because in theory, we can. :P
  20. It was predictable on Why OLPC Struggles Against Educators, Big Business · · Score: -1

    It was predictable enough, and many of us did point out the terribly obvious flaw in the OLPC plan -- that people experiencing shortages in food, potable water, basic shelter, education facilities, farmable land, etc, etc, need those survival basics covered far more than they need a laptop. I still don't really see how this was not obvious to Negroponte et al.

  21. Skynet precedes Terminator on Final Skynet Satellite Launched · · Score: 4, Informative

    The UK's use of the name Skynet precedes the Terminator movies.

  22. Re:Say what?!? on Nokia Urges Linux Developers To Be Cool With DRM · · Score: 4, Insightful

    I read it as a ransom note too, but I don't think the hostage is qt -- it's freedom to run our code on a phone, period. It isn't too hard to envision a time when hacking a device connected to a proprietary network becomes a criminal offense.

  23. Re:elimination program? on eBay's Plan to Force PayPal Rejected Down Under · · Score: 4, Interesting

    What's that ""Bad Buyer Experience" elimination program" ?


    If my personal experience is any indication, it's the process whereby upon reporting being victimised by an eBay "power seller" eBay threatens to find you guilty of being a "bad buyer" and threatens to place sanctions on your eBay and Paypal accounts unless you pay up. The workaround I found was to change all my eBay user info to the crooked seller's email address and a fictitious physical address and I canceled my paypal account. :P

    It probably helped that I did this within an hour of eBay finding in favor of the dishonest seller (item was a Chinese counterfeit and did not function properly, also they attempted to charge for two items when I only bought one item). This was about three months ago, I've not heard anything about the matter since. Obviously, eBay lost me as a customer.
  24. New Market Genius on Microsoft Applies For "Digital Manners" Patent · · Score: 1

    It's pretty smart, in an evil way. What to you do when you foresee the end of your days as a darling of the consumer? Create products for Big Brother!

  25. Re:Closest resources first on Safari "Carpet Bomb" Attack Code Released · · Score: 2, Insightful

    But it is a Safari flaw. If I wrote a browser and released it for multiple OSs I'd consider it my responsibility to eliminate all possible security breaches individually for each version. Though I am an Apple user and really dislike MS, it seems to me that Apple simply didn't finish the job on their windows version of Safari. True, windows is a real PITA to port software to, with all the poor security choices MS has made -- but a job worth doing is a job worth doing properly. Users of WinSafari have a right to be upset about this, and Apple should fix it straight away. After all, no one's forcing them to code for windows.