Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:the benefits of open source... (Score 1) 117

Quite frankly, having the source doesn't help exploits much, or at least nearly as much as it helps in correcting exploits. The reason for this is most of the common methods for injecting code into privileged apps are extremely complex and rely on several different parts of the code to be in a certain key state to take place. So save from 1) being a literal genius or 2) having a ton of experience in knowing where security problems in coding tend to pop up(and even here, you will miss most), code review doesn't help much in finding actual exploits.(although it can be instrumental in determining if the architecture of the code is exploit prone, so again, better for the whitehats than blackhats)

The easier way to look for exploits now is to automate the app and then find ways to make it crash or otherwise misbehave/not behave as intended. If you can find a way to make it crash, especially segfault etc, you have found a bug that is likely to be exploitable. Many security researchers and firms have clusters of automated programs crunching night and day trying to find ways to make them crash/trigger unusually high exceptions/looking for other signs of misbehavior.

Another good way is to look for certain patterns. For example, a .net app that makes lots of disorganized unsafe calls to unmanaged code is a good shot(probably a newb or incompetent programmer(disorganized) treading on dangerous ground), and you can monitor all of this just fine if not more easily sans-source, with standard debugging tools for the OS you are on(doesn't matter which).

Comment Re:wait for SP2 (Score 1) 156

For the 3rd generation of Natal, they will look at a much more precise version of control that has the minor inconvenience of requiring a physical effector and control surfaces to enhance sensitivity and prevent unintended actuations. The industry will be wowed by this amazingly accurate control system which is not confused by the dog walking in front of the TV again.

Comment Re:Yay! finally some accountability for all those (Score 2, Interesting) 205

I still think this is concerning. While this particular law is contingent on a sale, the overall point is that the Judge made a ruling based on his legal opinion of the fitness of software for a given application based on a law which could just as well not have required such a condition, as many don't require. Other laws not contingent on a sale having occurred but rather just the distribution of a product or service could therefore be applied to software in general based on this case.
And don't go pulling the "put some pseudo-legalese magic incantation in my code saying its not fit for even the reasonably-implied purpose and all the trouble will magically go away" card because that won't work in the exact high-liability suits(i.e. someone dies, the stock market crashes) it intended to defend the developer against, in the real world.

Comment Re:Requires .EXE Download (Score 2, Informative) 264

The exe is only necessary to allow Windows shell integration with the online Office service, i.e., so you can double click on a docx on your desktop and have it open in the web office.
If you want to go through the same hassle to open local files you go though with other online office suites, it is not required.

Comment Re:Nail on the head (Score 0) 249

1) WoW is not really purely GaaS, as the actual software itself is still both in reality and in concept purchased separately. The services is the actual service that allows the software to be useful. Think of this like your PC/OS(product) and ISP(service) combining to give you web access.
Games on Demand would be more like GaaS, but they aren't really that common, at least, where the consumer pays. Many flash games on the internet which are ad-supported are probably the biggest mainstream pure GaaS.
2) Pandora an Last.fm is not really MaaS, they are just analogues of radio. "Owning" CD's and digital files for music clearly had customer value in the Radio era and don''t address direct access to music libraries(I can listen to what I want when I want rather than something like X, often). A true example of MaaS would be something like ZunePass or Rhapsody, and both probably denote the failure of appeal of MaaS vs. the bigger iTunes and Amazon stores.
Books

Submission + - Matplotlib for Python Developers (sourceforge.net)

Craig Maloney writes: Ever since there was a collection of numbers, it seems that invariably someone will want a graph of those numbers. There's literally hundreds of different styles of graphs, and almost as many programs and tools to make those graphs. Matplotlib, a library and toolkit for the Python language, provides an easy and effective way to make some pretty impressive graphics with little more than a smattering of Python. Matplotlib for Python Developers is equally impressive at distilling the core set of features of Matplotlib in a way that shows the reader how to get the most out the Matplotlib toolkit.

Matplotlib for Python Developers begins with the customary introduction to the Matplotlib library. It includes where to download Matplotlib, as well as brief installation instructions for both Linux, Macintosh, and Windows platforms. The book then quickly moves to the next chapter, where the basic library functions are presented, via the interactive iPython shell. Each section of the chapter introduces a new part of the graph, with items like titles, grid lines, and labels being explained clearly and concisely. Also briefly presented are other useful libraries like numpy, as well as the various back-ends that Matplotlib supports. Chapter 3 continues the even pace, presenting more plot styles, and plot types, including polar graphs. These two chapters cover the fundamentals of Matplotlib very well, with each step clearly marked by what the graph should look like once completed.

The next chapter introduces more advanced plotting concepts that Matplotlib is capable of handling. The chapter begins with the three ways that Matplotlib may be used (The pyplot module, pylab, and the Object Oriented interface). From there, the book delves into subplots, multiple figures, additional axes, logarithmic axes, date plotting, contour plots, and image plots. Also included are sections on using LaTeX and TeX with Matplotlib, both for exporting graphs, as well as using TeX inside plots via Mathtext. By the end of the chapter, I felt very comfortable with the environment and the capabilities of Matplotlib, both as an interactive environment, and as a module for my own programs.

The next four chapters cover integrating Matplotlib with GTK+, QT4, wxWidgets, and web-based environments. The chapters for GTK+, QT4, and wxWidgets each begin by presenting a basic overview of the toolkit, and why one might want to use that particular toolkit. Next, the book shows how to embed a Matplotlib figure in a window, both with static and real-time data input. The book then shows how to use the toolkit's builder with Matplotlib (Glade for GTK+, QT Designer for QT4, and wxGlade for wxWidgets. The chapter on web development veers slightly from this format by showing several examples of using CGI and mod_python with Matplotlib before showing how to use Matplotlib with Django and Pylons.

The last chapter pulls together some "real world" examples together for the grand finale. The examples clearly show how Matplotlib would work for such plotting Apache web logs, fitting curves, and plotting geographic data. The geographic data plotting uses an additional module called basemap, which allows for plotting precisely on a map. This example floored me with the amount of power that Matplotlib possesses.

Overall, I found this book to be informative, without a lot of fluff. The organization of the book sometimes dipped into a chaotic presentation of "oh, look at this", but overall the author kept a very even pace, with clearly defined goals and clean resolution of those goals. Matplotlib for Python Developers is definitely a book that I would pick up to refresh my memory for using Matplotlib. The asking price is a bit steep for book that is just shy of 300 pages, but overall I highly recommend it for anyone looking to get started with this exceptional library. I'd also recommend it for anyone looking for alternatives to some of the other plotting packages available. Matplotlib is quite powerful, and Matplotlib for Python Developers makes this power very accessible.

Apple

Submission + - Apple Haves and Have Nots (economist.com)

Rambo Tribble writes: As this story in in the Economist notes, Apple's policies regarding international sales are often confusing and out-dated. Apparently, Apple either hasn't been aware of political and social changes in the world over the last 20 years, or doesn't wish to acknowledge them.

Comment Re:Encryption (Score 1, Insightful) 151

Play dumb. One problem geeks seem to have in these situations is they are so high on their horse they have to act like freaking experts of everything all the time.
Just do exactly what the agent says, complying 100%, but don't offer any advice or claim any insight into what is going on at all beyond your legal responsibilities. If you use whole disk encryption, you are probably required to type in the key for that but beyond that ignorance will get you far. When they say "Oh, you run Linux?", say "Um, at my work we use something called U-buntu I think". If they ask you if you have any encrypted files or something, just respond with something like "I don't know much about encryption.". Make them do their job while remaining honest, and they will just leave you alone. Act like a smartass and they won't...

Comment Re:Regulation requires upkeep (Score 3, Insightful) 279

I don't think it makes much sense to allow anyone to dig all the lines they want. To the extreme, it just wouldn't work as it would become an unmanageable mess, and to the norm, it just makes no sense as one or two relatively cheap fibers to every home is all we will need for a decade or two. The current system works, except for the illusion that some company owns the lines connecting your home to the world, which doesn't work and requires oppression by either the provider or the government, neither of which is very desirable.
It should be a common community asset leased to service providers, much like the airwaves.

Comment Re:It's not that big of deal (Score 4, Insightful) 334

Umm, you realize you can do math on greater than 32 bits values in Matlab, just not using the 64-bit platforms's ability to natively handle 64 bit datatypes. After all, I can do make on 64-bit values on an 8-bit micro-controller just fine, it will just take more than a few instructions.
And as stated before, this matters little as it is a performance issue, and matlab still offers the best performance of its class, even vs. those who do have this feature.

Comment Re:Competing Isn't Cheap (Score 1) 317

Not to mention, Microsoft's online services probably serve as a pretty good dogfood, if not marketing, program for their servers and tools business, which does make money. I don't think as many people out there would have Silverlight or other MS technologies installed on their machines if it was not for MS's own services pushing them.

Comment Re:How can maintaining the status quo cause job lo (Score 1) 187

The Big ISP argument is probably that they can't expand into rural areas unless they can throttle/control bandwidth either through rate limits or charging by use, because to do so profitably(or equally profitably) would mean to offset the greater cost of connecting rural populations they'd need to reduce costs on routers and other backend hardware to service the same number of users, with means throttling by either policy or cost incentives.
That said, I think that case is BS. Companies in all sectors will take on unprofitable business for a minority of the market if it means stopping that share from going to the rivals or being a source of startup revenue for new entrants into their established market. After all, if the DSL and Cable companies leave rural areas alone long enough, it will only allow WiMax providers and other innovators to gain share through these customers to the point where they can become powerful enough to be a threat on the home urban turn of the bigger players. That is why this just isn't true, and the established companies will continue growing their networks no matter what, as soon as they can afford it again.

Slashdot Top Deals

"You don't go out and kick a mad dog. If you have a mad dog with rabies, you take a gun and shoot him." -- Pat Robertson, TV Evangelist, about Muammar Kadhafy

Working...