 |
|  |
 |
|
mrmitchell
|
|
I thought the whole point with open source systems was that, if there was a bug, you could be assured hundreds of geeks had a patch out in about 5 minutes?
This would make most worries about bugs on those systems irrelevant, yes?
|
|
|  |
 |
|  |
 |
|  |
 |
|
Ari Rahikkala
|
 |
Unreported loss of streaming in atomic read operation
Oct 1999 time: 07:30
|
|
To split some hairs, it wasn't servers, it was a server. Open-source software has always been quite vulnerable to the servers that the software is distributed from being attacked... *****X and OpenBSD come to mind pretty quickly, and I know there are more cases like this. I guess it's due to the lack of resources of most of the members of the community. I mean, this system was cracked by a local user. For all I know, Paul Visscher (gnu.org's chief webmaster) could have an evil half-sister who convinced him to take a week's trip - she would feed the cat. And then use the exploit to be able to pose as Paul and tell his mother that he really did steal that yellow alligator toy when he was five. Exploits like this don't really tell much about how secure the software itself is... they tell about how essential these nice things called signed SHA1 checksums are and how every self-respecting software developer should use them and how every user should check them lest the fate of destruction befalls both! Ahem. It is regrettable that the security of such an important server as this one got breached, and not as much work was done for security as possible... one can only hope that this will get people to grep their logs with more vigour. Or get someone to donate some money to the FSF so that they can hire someone to take care of their security, since the foundation's members are more concerned with just happily hacking away at their software than obsessively watching top and grepping logs...
elijah, I'm a Gentoo user, and have been one for a good while. If you have trouble installing it, the most painless thing to do right now would be to just stop trying. Gentoo is quite complicated and not terribly mature (Portage still sucks if not for any other reason but lacking proper handling of reverse dependencies), and you will need to use undocumented features and understand Portage internals to make any real use of the distro. The installation is, unlike the other parts, quite easy and well documented. But in the case you do still happen to want to use it... the forums are your friend. Especially the forum search. Remember, no question is worth answering more than once.
Oh, and see my signature .
|
|
|  |
 |
|  |
 |
|
Asher
|
 |
Calgary, Alberta
Nov 1999 time: 22:30
|
|
And I'll spare the comments about people being so dumb they don't understand why most people prefer a mouse and graphical interface to commands like:
code: tar -xvf dfhs-204.123-42-build321-alpha.tar.gz | more readme.txt
Last edited by Asher on 17-08-2003 at 05:53
|
|
|  |
 |
|
blackice
|
 |
Canada where else...
Sep 2000 time: 00:30
|
|
Shatter Attacks - How to break Windows.
This paper presents a new generation of attacks against Microsoft Windows, and possibly other message-based windowing systems. The flaws presented in this paper are, at the time of writing, unfixable. The only reliable solution to these attacks requires functionality that is not present in Windows, as well as efforts on the part of every single Windows software vendor. Microsoft has known about these flaws for some time; when I alerted them to this attack, their response was that they do not class it as a flaw - the email can be found here
This research was sparked by comments made by Microsoft VP Jim Allchin who stated, under oath, that there were flaws in Windows so great that they would threaten national security if the Windows source code were to be disclosed. He mentioned Message Queueing, and immediately regretted it. However, given the quantity of research currently taking place around the world after Mr Allchin's comments, it is about time the white hat community saw what is actually possible.
|
|
|  |
 |
|  |
 |
|  |
 |
|  |
 |
|
Ari Rahikkala
|
 |
Unreported loss of streaming in atomic read operation
Oct 1999 time: 07:30
|
|
Viewports? Do you mean virtual desktops (which, as Asher has said approximately one divided by epsilon times, are included in Power Toys)? Viewports are areas of sight of some larger area and can be moved around. For example, you can set Eterm's background to be in viewport mode - this is cool but not useful. And if you set your X server's resolution higher than your screen's, moving the mouse cursor to the edge of the screen will scroll the area in view. Which is pretty damn frustrating and, I believe, useless for most purposes.
BTW, evilwm has virtual desktops, too. As does kwm (KDE's window manager), IceWM, Metacity... well, I'm not sure about Metacity... but pretty much any X11 window manager, anyway.
Last edited by Ari Rahikkala on 17-08-2003 at 18:15
|
|
|  |
 |
|
Asher
|
 |
Calgary, Alberta
Nov 1999 time: 22:30
|
|
quote: Originally posted by geeslaka
The other reason I use Linux: Viewports.
They are the best thing since sliced bread.
No windows box I have ever seen had them.
I know of two window managers that have them, Enlightenment and Sawfish.
Anyone who is confused by viewports must have serious problems in the spatial manipulation area of their brain. |
Gee, I wish I could have viewports (which are called "virtual desktops" by most) in Windows.
Oh, wait, I can. With a free MS download, too.
UR: That may be the case for you, but I can click on form fields far faster by clicking on them rather than tabbing through them, unless I'm entering in data sequentially. I use a hybrid keyboard/mouse.
I still fail to see your point, if you have one at all, because Windows allows you to do them both ways...
|
|
|  |
 |
|  |
All times are GMT. The time now is 05:30. Apolyton Time is 00:30. |
top of page
|
| archivepost |
|
Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is ON
vB code is ON
Smilies are ON
[IMG] code is ON
|
|
|
|
|
|