bcl

68 ms·

781.
by bcl 17y ago
Looks like it is using suid pulseaudio to load the exploit into the kernel. I don't think RHEL5 systems install pulseaudio by default. Also note that this is a local exploit, you need access to a user account on the system. ETA: I just trie
782.
by bcl 17y ago
Database portability isn't the only reason to use a DB abstraction layer. They provide a way to better integrate the data from the DB with your language's data types and development model. Not to mention making it easier to plug in caching
783.
by bcl 17y ago
Monty talked a little about Oracle at his talk at LinuxFest Northwest. Video can be found here - http://www.ustream.tv/recorded/1431407 Basically, he said Oracle owns MySQL in name only. Most of the brains behind it are already working wi
784.
by bcl 17y ago
The Atari wasn't just for games! Oh, my. Now we've gone and done it...
785.
by bcl 17y ago
The network diff feature looks especially useful.
786.
by bcl 17y ago
Interesting. The Apple MacBook Pro website makes no distinction between the models as to the color support. They all say "millions of colors", and as someone who doesn't deal with colors for a living I would expect them to have identical su
787.
by bcl 17y ago
You're contradicting yourself then. If it doesn't implement the backend then it isn't both.
788.
by bcl 17y ago
That's exactly what I'm asking. Is the backend also in Java then? So that debugging front and backend is all integrated? My impression from what I've read is that it is strictly front end Java to Javascript conversion, not both sides. (in m
789.
by bcl 17y ago
How does this make things easier? I find FF + FireBug to be a pretty good dev environment for the front end. The problem is integrated debugging with the back end of things, whether that is PHP, Python or whatever.
790.
by bcl 17y ago
The Museum of Flight in Seattle is alot of fun for the kids as well.
791.
by bcl 17y ago
How does a Twitter account become 'infected'? From reading the article this sounds like a Windows virus that has infected the user's computer and is using their Twitter credentials to spread it to their followers. So technically the account
792.
by bcl 17y ago
That's a pretty sad story. I thought everyone knew not to keep money in their PayPal account? As soon as I get a payment I transfer it out to my bank.
793.
by bcl 17y ago
I'm being lazy about the search, depending on the random distribution to keep work from overlapping too much instead of taking the time to keep track of what has been done, or implementing a systematic search of the possible combinations. M
794.
by bcl 17y ago
multiprocessing is also available in 2.5, which is what I used, just do: easy_install multiprocessing
795.
by bcl 17y ago
Here's a first pass at a python implementation for the Engineyard Challenge ( http://www.engineyard.com/blog/2009/programming-contest-win-... ). Note that it doesn't do any random chars at the end of the string and doesn't change the case o
796.
Engineyard Challenge Python Code(fpaste.org)
23 points by bcl 17y ago|27 comments
797.
by bcl 17y ago
I think that would only apply if the map is not freely accessible from the web.
798.
by bcl 17y ago
That is pretty incredible! I'm particularly impressed with the use of JTAG on all the chips to map their connectivity to each other.
799.
by bcl 17y ago
According to the rules you can append up to 5 random chars. But you don't have to. The potential for case changes in the words really makes the keyspace much larger, since we currently don't know the length of the words.
800.
by bcl 17y ago
This article isn't filled with as much detail as I had hoped. It is a photo-essay and doesn't really cover much in the way of the gadgets he invented and used.
801.
Aluminum Air Battery(exo.net)
1 points by bcl 17y ago|0 comments
802.
by bcl 17y ago
yes. And if I were a customer of theirs I'd work to obtain a more trusted copy of their key. But, FYI, I've had this copy of their key in my keyring for several years, I didn't just pull it off their website today.
803.
by bcl 17y ago
Looks good. gpg: Signature made Mon Jul 13 08:44:56 2009 PDT using DSA key ID 7D6F806C gpg: Good signature from "rsync.net <info@rsync.net>"
804.
by bcl 17y ago
Not to mention those are the first 7 places a thief looks while searching your house.
805.
by bcl 17y ago
You should submit patches and contact the vendors. But history has shown that many vendors will, in general, ignore you until a demonstrated exploit is available. They still believe that security by obscurity is a valid way to protect their
806.
by bcl 17y ago
The anti-sec 'movement' is a front for those who want to keep their exploits to themselves, trading them in secret and not contributing anything to improving the security of software. Full disclosure lets everyone learn from mistakes, as we
807.
by bcl 17y ago
If Apple would let the bluetooth built into the phone actually be USEFUL then you could do this without any need for an intermediary.
808.
by bcl 17y ago
Is this really micropayments? I've always thought that the goal of micropayments were fractions of a cent.
809.
by bcl 17y ago
The masking characters need to be more similar to the characters being typed. eg. ll is easily readable with letters like nrs, etc. in the background.
810.
OpenSSH update from Damien Miller(lwn.net)
62 points by bcl 17y ago|13 comments

More ›