Web-browsers being able to both open socket connections to arbitrary remote end-points, and be listening / processing data for incoming connections?

Worst idea ever. If anything ends up being responsible for destroying the internet - this is it. It's just going to be a giant mesh of infected browsers constantly doing battle, like the dust-clouds of dead nanites from the Diamond Age.

You fucking web guys. Take WebRTC, Flash, PHP, JSON, Flash, native browser plugins and all the other half-baked non-standard make-it-up-as-you-go-along "technologies" and go fuck yourselves.

Either they're so lazy they don't care or they don't know how to get rid of them.

If you feel bad about circumventing their terrible business model, just wait until they're broadcasting commercials directly into your dreams.

And they laughed at me for wearing the tinfoil hat! Who's laughing now!

... Yeah. Windows admins usually are the uncontested experts about OSX and Linux malware ...

If your program is 'the kernel' then that qualifies as 'as bad as the division bug' && 'it's a big deal'.

I think the answer is basically just 'yes', regardless of the veracity of any of the claims in the article, regardless of what you may think of their practices or the quality of their product.

If you work in intelligence and you don't encrypt your email, you are a joke.

Sarcasm aside, drawing the distinction between why one would do this on a printer vs. why one wouldn't want to do it on a desktop UI.

The reason printers have less and less buttons (when possible) can more accurately be attributed to a cost-cutting feature (less buttons == less hardware to manufacture, less moving parts to replace when they break in the field, less warranty problems, etc). If you don't get bothered by having to hold buttons down to get them to exercise new behaviors - this is all fine and good.

If I had to click and hold anything for 10 seconds in a UI I'd find a new UI. While pixels are finite on a desktop, they're still free.

Lieberman Software, a security and identification software vendor.

Yeah. Sounds like a completely scientific report with no bias to me.

How do you like them executables, I got her PE header!

I'm not quite sure what the 'bug' here is.. First off, Apple's LDAP is 'OpenLDAP'. So. Is this a flaw in OpenLDAP or Apple's configuration for OpenLDAP?

Also.. LDAP is kinda like DNS, except most places don't secure it. To see this in action, download Apache LDAP Studio, connect to your friendly local LDAP server and start browsing around (without authentication).. Most times you can get an almost full LDAP dump from a remote server without authenticating at all. Generally the only 'protected' elements are the passwords. You can enumerate users, groups, etc.

While I'm not a big fan, one of the mustache guys from Metallica put it the best:

"Yes, we do sell out, every single time, everywhere we play."

One of the reasons ARM has succeeded over Intel in the embedded platform is exactly because it's a hodgepodge in terms of implementation.. Arm just designs the chip, they don't make it, they leave that up to others, who then in turn support their own chips by providing kernel patches - which has been amazingly successful for Linux (and incidentally the non-linuxy iPhone as well)

Not to talk trash, he definitely understands the kernel and software but the nuances of hardware development and what makes hardware successful or unsuccessful aren't in his core skill set. After all, way back when he could have picked any position anywhere he picked Transmeta.

A lot has changed since then but ARM has done nothing but help Linux. If your chip vendor has a poopy Linux implementation they'll sell less. If they have a great one (and great documentation) they'll sell more. TI's a pretty good example of an awesome ARM / Linux implementation, and.. there are less awesome examples..

Well, we have confirmation that Steve Balmer reads slashdot at least.

Not that I'm a fan of the Joojoo, but it wasn't actually vaporware. They shipped product. It's just that Apple obliterated them a few months later with the iPad.

When the kids down the street asked to hook their scope up to my router I didn't even consider this as a potential explanation.

Thanks!!!!

I first met Window about 12 years ago, she was sharp and capable when it came to security. I doubt much has changed. In terms of achievement, not every achievement ends up being a big publicized event where implementors are handed plaques to commemorate the occasion. Security is a boring and incremental effort when you're trying to improve process.

So, I guess I'm a little biased with the (weak) personal connection, but don't hate just because you don't know who she is or what she's done.