Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Excuses are false. This is a severe flaw. (Score 1) 830

Security. Consider the following scenario

1. Super-secure process opens private.txt 2. Super-secure process truncates private.txt 3. Super-secure process closes the file. 4. O/S re-allocates those disk blocks just freed by the truncate. 5. Nosy process opens a new file using the recently-reallocated blocks. 6. Nosy process reads through the undeleted data left by Super-secure process and sends them over a network connection to someplace bad. 7. Nosy process writes some random noise to the blocks. 8. O/S deletes the data on disk and then writes the data supplied by Nosy.

Ext4 does not make any guarantees about the erasure of file contents on disk. Even truncation as ext4 is doing it right now, doesn't actually overwrite truncated blocks with zeroes. So your whole point doesn't make sense at all.

Comment Re:Excuses are false. This is a severe flaw. (Score 1) 830

There's probably some way the FS could finesse this issue -- e.g., don't actually schedule truncation until you see the first write or close -- but it would be a workaround for buggy applications, not a FS bugfix.

There's no benefit of NOT delaying deletion on disk until actual writes of new content. It's not too much to expect from a filesystem to behave reasonably.

Comment Re:Alarmist and ignorant article - not a "problem" (Score 1) 830

You did not understand the bug. It's not that people expect actual writes without calling fsync(). It's that ext4 decouples file deletions caused by opening files with the O_TRUNC flag from the actual writes of the files' new contents. This is not necessary. Ext4 could delay deletion on disk until it actually writes any changed contents to disk.

Comment Re:Excuses are false. This is a severe flaw. (Score 2, Insightful) 830

That's not true. KDE is not "*DELETING*" any of its files. It's just opening them with the O_TRUNC flag (expressing an intent to overwrite its contents). That's perfectly safe for a copy-on-write filesystems (as ZFS) but not for ext4. So calling all "modern" filesystems at risk is pure ignorance. Ext4 could delay content deletion of open files until write time and write both within a single transaction.

Comment Excuses are false. This is a severe flaw. (Score 3, Interesting) 830

There are several excuses circulating: 1. This is not a bug, 2. It's the apps' fault, 3. all modern filesystems are at risk.
This is all a bunch of BS! Delayed writes should lose at most any data between commit and actual write to disk. Ext4 loses the complete files (even their content before the write).
ZFS can do it: it writes the whole transaction to disk or rolls back in case of a crash, so why not ext4? These lame excuses that this is totally "expected" behavior is a shame!

Comment Actually that's good for society! (Score 5, Funny) 166

Rich kids buying themselves out of good education increases the probability for wasting their families fortune when they grow up. Honest, hardworking fellows will be happy to fill in the space.

Rich people getting richer with each generation aren't a good thing for any economy. Deterring work ethics of descendants, who never had to work in their live, have corrected this for centuries.

Comment Mercurial vs. Git (Score 5, Interesting) 346

I'm working on the OpenJDK source tree through Mercurial. I couldn't be more satisfied. The tools are well structured, very easy to use, stable, fast and well documented. I don't miss any feature. Could anybody, who tried both and prefers Git, list some advantages of it over Mercurial? To me it just seems like a Git done right without the hype and too complex UI.
Security

Submission + - Mac OS X Leopard's firewall wide open! (heise-security.co.uk)

rpp3po writes: German tech magazine Heise analyzed Leopard's new firewall and made some shocking discoveries. Even when you set it to "block all incoming connections" at least 4 ports are left wide open (ntpd, netbios, mdns). Additionally "Apple uses ntpd 4.2.2, the current version is 4.2.4. It is not clear whether any of the bug fixes are relevant in this scenario and if Apple back-ported fixes from more recent versions."
Java

Submission + - No Java 6 in Leopard Retail! (blogspot.com)

An anonymous reader writes: Remember how they baited developers to the Mac platform by announcing most comprehensive Java support? How they advertised true interoperability for developers, which just happend to look much sexier on a Mac? All BS! They are following Microsoft's path now and try tie you to their flashy XCode platform. That's a great tool if you're developing for a Mac — as Visual studio is for Windows... But I'll dump both happily anytime for a fully loaded Eclipse — supported and steadily improved by a tremendous community!
OS X

Submission + - Mac OS X Leopard leaked to P2P networks (insanelymac.com)

An anonymous reader writes: To prevent this happen Apple even withheld the gold master from ADC select members, who pay multi $1000 for access to prereleases. Trackers like The Pirate Bay and several Usenet groups carry the full dvd image as of today. ADC members are going to be upset that their expensive premium payments are not even worthy enough to get prereleases before filesharers. This http://forum.insanelymac.com/index.php?showtopic=66936 forum entry contains numerous successful reports, but no warez links.

Slashdot Top Deals

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (5) All right, who's the wiseguy who stuck this trigraph stuff in here?

Working...