Forgot your password?
typodupeerror

+ - One week of OpenSSL cleanup ->

Submitted by CrAlt
CrAlt (3208) writes "After the news of heartbleed broke early last week, the OpenBSD team dove in and started axing it up into shape. Leading this effort are Ted Unangst (tedu@) and Miod Vallat (miod@), who are head-to-head on a pure commit count basis with both having around 50 commits in this part of the tree in the week since Ted's first commit in this area. They are followed closely by Joel Sing (jsing@) who is systematically going through every nook and cranny and applying some basic KNF. Next in line are Theo de Raadt (deraadt@) and Bob Beck (beck@) who've been both doing a lot of cleanup, ripping out weird layers of abstraction for standard system or library calls.

Then Jonathan Grey (jsg@) and Reyk Flöter (reyk@) come next, followed by a group of late starters. Also, an honorable mention for Christian Weisgerber (naddy@), who has been fixing issues in ports related to this work.

All combined, there've been over 250 commits cleaning up OpenSSL. In one week. Some of these are simple or small changes, while other commits carry more weight. Of course, occasionally mistakes get made but these are also quickly fixed again, but the general direction is clear: move the tree forward towards a better, more readable, less buggy crypto library.

Check them out at http://anoncvs.estpak.ee/cgi-b..."

Link to Original Source

Comment: Re:Open source shovels and hoes (Score 1) 136

by whistlingtony (#46796899) Attached to: Plant Breeders Release 'Open Source Seeds'
Yes. The giant Organic Farming lobby is making it illegal to use pesticides and herbicides. /eyeroll.

Let me be clear. GMO hasn't been linked to health effects. Yet..... :D I never argued that. I'm railing against stupid chemical usage instead of taking care of the land. Yes, some feeling is involved. I grew up on a farm.

And no, the farmer in the article did NOT use traditional methods. Tilling is traditional. He doesn't till. He plants a plethora of crop cover plants. He leaves his corn stalks to rot in the field. Basically, he's taking care of the land, and yes, sometimes he still uses chemicals... but it's FAR reduced. And he's doing better than his neighbors.

I read your study. Did you read the article at all, or did you just skim it? Or do you just not know anything about farming? I do. I grew up on a farm. I'm also NOT saying GMOs bad. I'm saying Stupid Farming Bad. I'm saying mass Pesticide and Herbicide use is lazy farming, and harmful to the soil and ecosystem.

I think you're assuming I'm a hippy. I think you're fighting a stereotype instead of what I'm saying.

Comment: Re:I'm liking how Russia is standing up these days (Score 1) 196

by whistlingtony (#46796851) Attached to: Russia Writes Off 90 Percent of North Korea Debt

http://www.nytimes.com/2013/11/01/world/middleeast/syria.html?_r=0
http://www.nytimes.com/2013/11/01/world/middleeast/syria.html?_r=0

"Syria’s ability to produce chemical weapons has been destroyed and its remaining toxic armaments secured, weapons inspectors said Thursday, as President Bashar al-Assad has offered unexpectedly robust cooperation".

Yes, I have evidence that this is true. That's because I listen to evidence before coming up with my opinion, instead of forming my opinion and then looking for evidence. That took me a 15 second google search to find. Should I look it up for Iran too? Nah. I'll let you do it. You need the practice. Also, there's a story ON SLASHDOT about Iran getting rid of their 20% uranium.

Ukraine? Sanctions are starting to have an effect. We'll see. Huh, weird, and just a few days ago, Russia and Ukraine signed a deal to let Crimea be it's own independant region... which it's always been anyway.

So, basically, you're wrong on every account, and a few minutes of googling would have told you that were you actually interested in the information and the context of the situation. I'd suggest not paying attention to mainstream news. They suck at context.

Comment: Re:I'm liking how Russia is standing up these days (Score 3, Insightful) 196

by whistlingtony (#46796807) Attached to: Russia Writes Off 90 Percent of North Korea Debt

Oh, PLEASE tell us all how the Arab Spring was Obama's fault... And Fuck Israel.

Nobody takes us seriously because we started two wars over bad intelligence. No one takes us seriously because we talk about democracy and freedom and then invade countries that don't do what we say. Nobody takes us seriously because we've overthrown democratically elected governments. No one takes us seriously because we're a f'in joke.... We're a child with a giant stick running around hitting other children

It's weird, but plenty of countries are taken seriously without waving their military around. Japan's taken seriously, and they don't even have a military to speak of! We wield enough economic and cultural power that we shouldn't even have to use our military. And strangely enough, when we DO use diplomacy and sanctions, stuff gets done.

Comment: Re:I'm liking how Russia is standing up these days (Score 2, Interesting) 196

by whistlingtony (#46795467) Attached to: Russia Writes Off 90 Percent of North Korea Debt

That weakling got Osama, has Iran giving up it's highly enriched Uranium to lift the sanctions, and cut a deal that got Syria to give up their chemical weapons. There are other measures of strength than blowing shit up. Diplomacy works.

Now, as a dirty lib, I do believe he is a weak president on the homefront. Dude hasn't even TRIED to fulfill his campaign promises and keeps trying to cut deals with the Republicans who clearly aren't going to give him squadoo even though he gives them 90% of what they wanted anyway. Sigh....

If you're going to hate on Obama, hate on him for real reasons. His foreign policy had strengthened us, not weakened us. Bush is the one that took us from having the whole world supporting us to having everyone revile us. Again....

Comment: Re:I'm liking how Russia is standing up these days (Score 2) 196

by whistlingtony (#46795445) Attached to: Russia Writes Off 90 Percent of North Korea Debt
I'm really weirded out by all the people who give accolades to Putin lately. Russia's a shithole man. It's an oligarchy, flat out. He's not standing up to anyone. Standing up would be helping people and NOT debt slaving them with the IMF. How is invading the Ukraine when it's down in any way brave or good?

Comment: Re:I'm liking how Russia is standing up these days (Score 2) 196

by whistlingtony (#46795433) Attached to: Russia Writes Off 90 Percent of North Korea Debt

Invading Syria would have worked as well as invading Afghanistan and Iraq did....

Everyone's all PO'ed at Obama for using diplomacy instead of War.

It's diplomacy that has Iran giving up their enriched uranium. It's (accidental) diplomacy that got Syria to give up their chemical weapons. Diplomacy works. War? Afghanistan and Iraq aren't going too well for us. There's no infrastructure, no democracy, tons of opium, and the Taliban are stronger now than they used to be.

There are other measures of strength besides blowing shit up.

That being said, Obama IS a weak president. :D

Security

Heartbleed Used To Bypass 2-Factor Authentication, Hijack User Sessions 56

Posted by timothy
from the bleeding-from-the-ears dept.
wiredmikey (1824622) writes "Security nightmares sparked by the Heartbleed OpenSSL vulnerability continue. According to Mandiant, now a unit of FireEye, an attacker was able to leverage the Heartbleed vulnerability against the VPN appliance of a customer and hijack multiple active user sessions. The attack bypassed both the organization's multifactor authentication and the VPN client software used to validate that systems connecting to the VPN were owned by the organization and running specific security software.

"Specifically, the attacker repeatedly sent malformed heartbeat requests to the HTTPS web server running on the VPN device, which was compiled with a vulnerable version of OpenSSL, to obtain active session tokens for currently authenticated users," Mandiant's Christopher Glyer explained. "With an active session token, the attacker successfully hijacked multiple active user sessions and convinced the VPN concentrator that he/she was legitimately authenticated."

After connecting to the VPN, the attacker attempted to move laterally and escalate his/her privileges within the victim organization, Mandiant said."

Comment: Re:Open source shovels and hoes (Score 1) 136

by whistlingtony (#46794645) Attached to: Plant Breeders Release 'Open Source Seeds'

Every time we do something to change the world and someone says "It's not a problem.", they're usually wrong.

Weeds don't leach nutrients. They make it hard for the farm machinery to do it's job. They also help support insects, slow evaporation, and support an ecological system that helps support the crop plants. Web of Life Good. There is a problem where we take too much from the soil, and we have to do crop rotation and let fields go fallow to get that back in. We have to fertilize. We have to grow some legumes and let them put nitrogen back into the soil... Frankly, we use herbicides because it's easier and we're lazy, not because they're a better solution.

And the genes for producing pesticides get out into the wild and the insects develop resistances. It IS happening. Refuges help, but... Then there's the side effects. :D Most pesticides mess up the neurological systems of bugs. Including all the beneficial bugs....

GM crops absolutely produce more food per acre than Dumb Farming. Smart farming however? http://www.motherjones.com/env...

No tilling and good usage of cover crops does wonders... We only ever tilled because it made it easier to drop seeds in, and we thought it would help mix fertilizer into the soil. turns out it just disrupts the systems in the soil and makes fields prone to erosion.

I don't think it's fear mongering to point to what we KNOW is happening, and what WILL happen. I don't think it's fear mongering to point to alternative methods that work just as well and have less side effects and say "Hey! this is way better!". And we don't have a problem producing food. Famines are a food distribution problem, not a food production problem. If you want to fight famine, educate small farmers in poor countries on sustainable methods. Or, you could sell them patented seeds, and then patented chemicals, and then put them in debt forever.

Read the link.

Comment: Re:Open source shovels and hoes (Score 1) 136

by whistlingtony (#46793217) Attached to: Plant Breeders Release 'Open Source Seeds'

Sock Puppets? /looks around. Uh dude? My name's on every comment. The rest of them are telling me I'm an idiot. :D No sock puppets... And yes, I did have my own Moran moment. Sigh.... I'm still right though. :D

I'm not against GM food. I am against Monsanto. They're a chemical company. The seeds are just there to help them sell chemicals. I'm an ex farmer man. I know the industry, and I know what they've done to it.

Comment: Re:Open source shovels and hoes (Score 1) 136

by whistlingtony (#46792375) Attached to: Plant Breeders Release 'Open Source Seeds'

Ah. I see. Wwwwoooosh! Yes. I mispoke. ha!

Well, let it not be said that I don't acknowledge my own stupid mistakes.

Roundup is an Herbicide, which yes, kills plants, not insects. Farmers spray it on their fields so only the plant they want grows, and not all the weeds (which would probably provide cover for the ground and help reduce evaporation, but oh well.)

Despite my Tongue Twisting Error, the stupid WEEDS are becoming resistant to Roundup, because evolution.

We have a similar issue with INSECTS becoming resistant to PESTICIDES.

Both of these scenarios leave us with farmers who can't reuse seed, have to buy expensive seed, and now that the weeds and insects are growing resistant, the expensive chemicals they bought don't work there either. Then there's the environmental effects of spraying herbicide and pesticide all over, which usually runs off into your drinking water, etc.

Sorry I misspoke. My Apologies. Despite my very stupid brain fart, what I am saying is still accurate.

Comment: Re:Open source shovels and hoes (Score 1) 136

by whistlingtony (#46792345) Attached to: Plant Breeders Release 'Open Source Seeds'

Citation? Do a google search for "Get a brain morans". :D

Ah, sorry. You're right. We're just way more educated by Liberal Training Camps, I mean universities. Where we learn stuff. Everyone is welcome, but oddly enough learning stuff seems to turn people Liberal. It's really weird.

OK... I'm being an ass. Everyone? I'm sorry. Not sorry enough to NOT push the button, but... Sorry. So much vitriol on Slashdot lately.....

Comment: Re:Shame this happened (Score 1) 136

by whistlingtony (#46792321) Attached to: Plant Breeders Release 'Open Source Seeds'
Uh, Linux IS awesome.
MS is a convicted monopolist. Yes, they're evil. Oh, apple gets plenty of hate, I don't know where you got that?
I would LOVE for you to prove global warming false. Please do. http://www.wolframalpha.com/in... And, yes, it IS science.
Electric cars ARE awesome, but no, we don't want to fuck Elon Musk. He is pretty awesome for what he's done though and deserves accolades.
NASA gets about 0.5% of the federal budget. Yes. I think we all think they should get more.
OSS software is pretty awesome sometimes, for obvious reasons.

So... why the !@#$ are you on Slashdot, News for Nerds? Cultural Groups tend to think alike. Film at Eleven...

While money can't buy happiness, it certainly lets you choose your own form of misery.

Working...