Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
BSD

Submission + - BSD: Bounties Offered for iPSEC Backdoor Evidence (blogspot.com)

badger.foo writes: "In response to the recent claims that the OpenBSD IPSEC stack contains backdoor code covertly added to the code base by developers working for the FBI, FreeBSD developer Dag-Erling Smørgrav is now offering triple $100 bounties for credible evidence to back up those claims. You have until New Year's Eve, 2012 to collect your bounties if you can find the backdoor code. See DES' blog at http://maycontaintracesofbolts.blogspot.com/2010/12/openbsd-ipsec-backdoor-allegations.html for details. You can even contribute your matching funds to make the bounties bigger!"

Comment An NDA that expires? I suspect a hoax. (Score 3, Interesting) 536

I'd be more than a little surprised if any part of the US government would in fact agree to let non-disclosure agreements expire automatically. That alone makes me suspicious that the truth content of these allegations is a little thin.

For those of you who are interested in finding out the facts, start by reading the whole thread on openbsd-tech (eg http://marc.info/?t=129236639300001&r=1&w=2 ), it's only a handful of messages so far and I find Damien Miller's response at http://marc.info/?l=openbsd-tech&m=129237675106730&w=2 particularly enlightening. (You're using Damien's code right now, in some other window -- he's been a major OpenSSH developer for quite a while).

Then again, I have to agree with Bob Beck (see http://marc.info/?l=openbsd-tech&m=129236730027908&w=2 ) that this is fairly likely to part of a personal vendetta of some sort, possibly against either the OpenBSD project or even something totally unrelated, using the OpenBSD project only as the attention-grabber in contexts such as /.

At this point we have only allegations with some finger pointing, I for one look forward to any real information to surface. The best way to draw out the real information behind this is to do what Theo did - publish the allegations and let the involved parties explain themselves in public.

Comment Some publishers do without DRM (Score 5, Informative) 88

- such as No Starch press (http://nostarch.com), and quite possibly others.

I find it's always worth mentioning that there are publishers out there who respect their customers enough to not do the DRM dance, and from the author's view (yes, I am one) the danger of people not reading your stuff is more scary than the danger of not getting paid for every last copy.

Full disclosure: I have a book out on No Starch, The Book of PF, 2nd ed.

Comment Clued publisher: No Starch Press (Score 1) 214

It's probably worth mentioning that there's at least one tech books publisher that publishes e-book versions in several formats (IIRC you get them all in a zip archive), with no DRM. That publisher is No Starch Press (http://nostarch.com).

I think for most of the writers who publish on No Starch, the thinking is that readers should have access to the material the form that's convenient to them, with as few restrictions as possible. For my own part, I see the bittorent trackers that turned up about four hours after the PDF version of the first edition of my book mainly as a sign that people appreciate my work.

Full disclosure: I have a title out on No Starch that's been available as ebook before the printed version is available (expected about Nov 10th), see http://nostarch.com/pf2.htm

Comment Re:How are upgrades handled? (Score 2, Informative) 176

Make sure you make a backup of your /etc/ directory beforehand and you are good to go. The upgrade process should keep your configuration intact, but it never hurts to be a bit cautious.

For /etc upgrades, there's sysmerge.

In fact, you can run sysmerge -x xetcNN.tgz -s etcNN.tgz and answer the friendly prompts before booting into the installer for the upgrade. Then after you've done the base system upgrade, set your PKG_PATH to something sensible and run pkg_add -u to upgrade your packages. Time needed is mainly a function of how good your connectivity to the packages mirror is.

Software

Submission + - BSD: The Finest Software Tool, A Creative Force (blogspot.com)

badger.foo writes: "After 30+ years, the BSD family of operating systems is still a creative force to be reckoned with. In his conference report Peter Hansteen writes: From mainframe replacements to firewall appliances, the BSD family of systems is a toolbox flexible enough to baffle insiders and newbies alike. EuroBSDCon 2010 was good fun. Read on for the full story."

Comment Repetition by hand is error prone (Score 1) 617

Repetition by hand, even by a skilled operator, is error prone. I think that's the main message in this article, and I couldn't agree more. The task at hand doesn't even have to be that complex. That's why, in a system administration context, tools like puppet (http://www.puppetlabs.com/) and cfengine (http://cfengine.com) make so much sense. Tools like those help you make sure that items that need to be the same stay the same, and make sure changes happen in sync across systems when need be (courtesy of your version control system). And of course, local variations can be catered to in a number of ways and maintained across global reconfigurations. If you're lucky enogh to be working on a Unix or BSD, that is. Not sure what's available in Cisco or Windows space.
NASA

Shuttle Reentry Over the Continental US 139

TheOtherChimeraTwin notes that the shuttle Discovery will land at Kennedy Space Center on Monday morning at 8:48 EDT. The craft will make a rare "descending node" overflight of the continental US en route to landing in Florida. Here are maps of the shuttle's path if is lands on orbit 222 as planned, or on the next orbit. Spaceweather.com says: "...it takes the shuttle about 35 minutes to traverse the path shown... Observers in the northwestern USA will see the shuttle shortly after 5 am PDT blazing like a meteoric fireball through the dawn sky. As Discovery makes its way east, it will enter daylight and fade into the bright blue background. If you can't see the shuttle, however, you might be able to hear it. The shuttle produces a sonic double-boom that reaches the ground about a minute and a half after passing overhead."

Comment It must be at least 10 years ago (Score 2, Insightful) 494

In Europe, checks are rare if not extinct, for something like the last 10 years at least. Direct transfers (IBAN) or similar just work and most people here do their banking mainly online anyhow.

Most likely you could talk your bank here into issuing a check for you if you ask them nicely, but it would almost certainly be more expensive than a straight electronic transfer.

On the other hand, somebody likely had fun and made a modest amount of money developing that check scannin app, so the effort I guess is not totally wasted.

Slashdot Top Deals

U X e dUdX, e dX, cosine, secant, tangent, sine, 3.14159...

Working...