Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:"Unexploitable" sudo bug pre-1.6.3p6 (Score 3, Informative) 98

I've read a bit through the threads and think that the reason it took so long was because they decided to remove a feature to fix the problem:

I believe the current plan is to completely remove the transliteration
module support, as it hasn't worked for 10+ years.

The git commit message states the same. There were really some problems in that function: https://sourceware.org/ml/libc...

Comment Re:Summary is completely exagerated (Score 4, Informative) 98

I chose the word scepticism, and still I think it is. I agree that the word "unexploitable" was a bit exaggerated, but that was added by unknown lamer.

Florian Weimer said:

My assessment is "not exploitable" because it's a NUL byte written into malloc metadata. But Tavis disagrees. He is usually right. And that's why I'm not really sure.

Its however true that he corrects himself the same day a bit later:

>> if not maybe the one byte overflow is still exploitable.
>
> Hmm. How likely is that? It overflows in to malloc metadata, and the
> glibc malloc hardening should catch that these days.

Not necessarily on 32-bit architectures, so I agree with Tavis now, and
we need a CVE.

Comment Re:ugh (Score 1) 316

You can still raid several larger drives. The advantage: you can have full mirroring, and large storage space. I welcome the technological advancement, but still I've only occupied 50% of my 1.5 TB HDD, and I must note that I've copies of the kernel source, and mozilla-central.

Comment Re:Display server (Score 0) 826

X.org people themselfes admit wayland is better. X.org consists of lots of bloated stuff from the 1980s, where all modern support (OpenGL, you name it) is patched in through "extensions". Network transparency in X is also a big problem, there is the choice between using 1980s APIs and shuffling pixels around. X is broken. Do you see any disadvantages of wayland?

Comment Re:Linux could own the desktop... (Score 1) 727

OK, you convinced me, they didn't waste them in that particular release. But still I'm against too frequent redesigns: they make the life of those harder, who aren't too comfortable with computers and don't use it by understanding the labels, but by memorizing "clickpaths": lower left corner of the screen, third entry, second entry, in the window the icon with the computer screen, and so on.
Unfortunately these people are the majority.

Comment Re:Africa man... (Score -1, Troll) 74

You have forgotten the worst illness of all. Homo Sapiens. Its a parasite when it lives in its home, and tries not to destroy it. Its an illness when it lives without even caring for anything except for itself, not even recognizing the long term disadvantage it can endure by heavily damaging its host. Lets hope the illness becomes a parasite, and don't kill itself by phenomena called "third world war".

Comment Re:Linux could own the desktop... (Score 1) 727

True, its too hard for most new open source software to become accepted by debian. I like it rather this way than the microsoft app store way: full of scamware. That doesn't mean I like it the way it is right now. I agree think that desktop linux is only something for geeks and the only-mail-and-internet grandma. Still I use kubuntu.

KDE shouldn't waste their resources to redesign with every release, but they should rather work on exposing more system features through the GUI, and make it more stable. The average user shouldn't need to use the console.

Slashdot Top Deals

There are two ways to write error-free programs; only the third one works.

Working...