Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Why? (Score 1) 93

If you have root on a webserver, why do you need javascript to do the redirect?

Lets say you had root, to get a redirect in apache you'd need to:

* edit the config file, bounce the server as root, leaving a change in the config and a bounce record in the server log
  or
* create a .htaccess file, possibly edit the config to respect the .htaccess file and the subsequent bounce as root, leaving possibly a new file on the filesystem that can be detected
  or
* edit a javascript file that's likely to be around and edited anyway.

The latter is most likely to evade detection. Besides, no one said they had root.

Comment Apache bug? (Score 2) 93

From the comments on the announce page, since (almost) nobody will go over there.

The first site on compromise_1.txt seems to be running “Apache/2.2.26 (FreeBSD) DAV/2 mod_ssl/2.2.26 OpenSSL/0.9.8y”, which does not quite sound like it’d be running Linux at all. As others have already pointed out, I would not blame this on a Linux kernel bug yet.

So, it looks like the "old 2.6.x kernel releases" was really just a signal for "old nonupdated code".

BTW: for those who bitch about "well the 2.6 line was patched and maintained all the way to 2011" they do have a line where they imply the 2.6 kernels are early kernels, not the latter 2.6.20 whatever ones, but it's not a well written article and is easy to miss.

Comment Re:ok, so what was this idiot's fool-proof bet (Score 1) 76

... #ThankYouDayton...

I've been lucky enough to go to Dayton for a tournament. It was so loud they disrupted our cheerleaders. Even during off times they were still so loud our cheerleaders couldn't hear the beat to do their routines.

They're freaking nuts about basketball. I wouldn't have necessarily picked them to win over Ohio State, but I'm not too shocked that they did.

Comment Re:Probably Better Than My Method (Score 1) 76

So you bet against Michigan State? Good luck with that...

Whats the rule of thumb again? No directional schools (Northeastern Illinois?) or schools with hyphens in them - hyphens indicating the non-primary campus of a University system. Oh, you're University of North Carolina hyphen Charlotte.

Though that rule arguably would break down with UCLA which is more or less a hyphen school yet won a slew of championships and is usually somewhat competitive. Also, USC, which is a directional school, but has had a run or two. Hmm, UNLV? All right, a lot of exceptions...

Comment Re:well... (Score 1) 76

As an aside, I kind of like the idea of the bookie as the more or less opposite of crowdsourcing.

Crowdsourcing - take a bunch of guesses, amalgamate them together, you got a final answer.

Bookie guesses what the crowd will do, and comes up with an answer to that he thinks will split the crowd in roughly 50-50 (with eventual adjustments to keep them closer to 50-50).

Comment 63 games (Score 1) 76

I never submitted a bracket, partially because I didn't follow the schools this year, partially because I didn't want to get spammed by Quicken - you give a cell number voluntarily to them, now you have a "relationship" where they can call you.

Two random rants as a starting point for discussion.

1) I hate the "bigger than the group of 64" games. You can't even call them play-in games if you have two 11 seeds going at it - they don't need to "play" into the tournament as much as they'd push someone else out.
There used to be some poetry in "63 teams lose their last game, one team goes 6-0 and wins the championship". The current "67 teams lose their last game, one team goes 6-0 and wins the championship, well unless they were a play-in school and they need to go 7-0" is a but more unwieldy.

2) There's so much money generated by the games now, and the players get nothing. I'm not a lawyer, but I'm sure a player filling out a bracket would run afoul of NCAA rules and would have their eligibility threatened. And now there's talk of forcing players to play yet another year at college before going to the pros, delaying by another year when a player can get compensated for the skills that so many are willing to pay for. A good part of this is pressure from the NBA to get more mature players of predictable NBA skill level. I'm not sure that having millionaire/billionaire owners offload their uncertainty onto 18/19 year old freshman/sophomores is all that fair.

Comment Re:We've learned nothing? (Score 1) 290

I don't see poor people. I see solidly Republican voters getting exactly what they asked for.

But did they have a choice in asking? What industry is there besides coal? Obama takes that away you got nothing.

The Hunger Games needed a bleak locale with people with no hope... Appalachia was chosen for a reason.

Comment Re:We've learned nothing? (Score 1) 290

My counter to this, is how many people say Government Is The Problem. How many times did Obama say that we need to cut coal, and then everyone in Appalachia, rich and poor alike, say "get your regulatin' hands out of here". The issues will continue until people have other choices besides laying in bed with a corporation that has shown it doesn't care about health.

My bigger issue is with the corporation who decided that profits here are more important than lives there. For everyone who jumps up in arms any time there's a shooter and says "those 3 people died because of music/videogames/sunspots" do they jump up 1000x as hard when a toxic spill kills 3000? The CEO is just as much as a sociopath, caring not about lives, but bottom line.

People who say "corporations are people" should allow them to be categorized as mass murderers in certain cases, and they should be allowed to be put on death row.

Comment Re:We've learned nothing? (Score 1) 290

A lot of the comments about the issue hitting Charleston, W.VA's water is pretty much this - rich white folks in Charleston are getting affected, not just poor (mostly white) folks. Some of these rich white folks in Charleston are lawyers with connections.

One podcast I listen to (forgot which one, can't properly attribute) had a couple families rent an apartment just outside of the affected area. They'd go, shower, get a bunch of tapwater in bottles, and rotate the other family in after a few days. Obviously a poor family can't do this.

Comment Re:I'm not sure I understand the difference (Score 1) 263

I'm not really deep on Bitcoin, so this probably needs to be proofread....

Think of bitcoin as a ledger. Any time you get bitcoins (mining, giving bitcoins) the transaction goes in the ledger. "5000 BitC => wallet 0x748a53cb56" or whatever. There's fairly good crypto making sure it's a valid ledger ("mining" is actually you proving the crypto work to make it valid - you get paid in coins for validating the blockchain). There's no "unique file" per se. There's no single bitcoin.com/blockchain that everyone supports. You have a copy of it, and the crypto makes sure its the same as everyone elses. (interesting issue if the blockchain gets so big that its too big for mobile/embedded devices). There's some edge cases as far as timing (including the "transaction malleability" flaw) that mostly seem to be worked out, if you pay attention to Best Practices.

So, the ledger says you have 5000 BitC. When you put them in MtGox. You in effect hand this to the 'Bank'. They now have your BitC. Now, they do their thing - they made money on processing. Think like PayPal transaction charges more than any bank loans.

Now, something happens that takes away those bitcoins. Can be fraud, can be "transaction malleability" (but in this case, was unlikely to be that). Either way, their BitC stash is gone, meaning yours are gone too. Can you track them? Theoretically, since everyone can see the ledger. In theory i can track numbers or BitC moving in and out, but not "your" BitC.

So... you went from having 5000 BitC to "having nothing but trust" once you gave it to MtGox. You truly lost it, once MtGox had its wallet emptied, either internally by fraud or externally by attacks, because at that point there's zero value in that trust - the coins are gone. In some ways, i don't know how anyone gave their money to an exchange. There's no guarantee they'd ever pay you, either in BitC nor cash. The fact it worked as well as it did is a shock to me.

Comment Regulations vs libertarianism (Score 1) 263

I know regulations can't solve everything. we're all human. We're fragile, stupid, and too easily bought. Regulators and regulation writers are all those.

But through all of this, i think of "the sign on the bar that says no backpacks on the bar".

Whenever you see a sign at a place, that says "no something_or_other" its probably from experience. For a while everyone had their backpacks onthe bar. They took up space, and then people started knocking food on everyone else. At some point, we realized this "liberty" to have backpacks there sucks for everyone, and there was a sign.

So.. a "bank" that has no internal controls? Those internal controls there for a reason. Sarbannes Oxley? Maybe poorly written, but there for a reason. Glass/Steagal was there for a reason. Regulations on who can open accounts are there (usually) for a reason. People who say "aww the rules suck, we'll be much better off with no rules" get burned easily.

Slashdot Top Deals

This restaurant was advertising breakfast any time. So I ordered french toast in the renaissance. - Steven Wright, comedian

Working...