Forgot your password?
typodupeerror

Comment: Technical Background (Score 5, Insightful) 156

by Light303 (#38525830) Attached to: Microsoft Issuing Unusual Out-of-Band Security Update

Just to make it clear - this affects a whole lot of systems and is based on a flaw in the design of hash-tables:

http://packetstormsecurity.org/files/108209/n.runs-SA-2011.004.txt

Basically you can pre-calculate a huge set of POST parameter names which will all be hashed to the same value. Since these are stored in a hash-map by most web-frameworks - this will lead to a o(n) lookup time instead of a o(1) lookup time, when testing the hash-map for a given parameter name.
This will max out your cpu quite quickly depending on how many lookups you perform per request.

Since the attack has "script kiddie" difficulty, this needs to be patched ASAP by all vendors ... or we will see a lot a downtime on many public servers.

Moon

Microwave Map of Entire Moon Revealed 82

Posted by samzenpus
from the quickest-route-mode dept.
Zothecula writes "The first complete microwave image of the Moon taken by Chinese lunar satellite Chang'E-1 has been revealed. Chang'E-1 is China's first scientific mission to explore planetary bodies beyond Earth and the on-board Lunar Microwave Radiometer has made it possible for the first time to globally map the Moon in microwave frequencies. Radar observations of the Moon are unable to provide thermal information, and microwave observations taken from Earth cannot reach the far side of the moon. So Chang'E-1's (CE-1) orbit was conducted at an altitude of 200km (124 miles) and allowed it to observe every location of the moon with a nadir view and at high spatial resolution."

Comment: html 5 is not ready yet (Score 1) 541

by Light303 (#28067841) Attached to: HTML 5 As a Viable Alternative To Flash?

i wonder that nobody yet pointed to this webpage: http://ishtml5readyyet.com/ ...

in this way flash is a lot like google gears. We get the features of tomorrow delivered today (or even earlier considering the age of flash)... and in the case of flash on 97% of browsers with the small cost of being a plugin.

So all the flash bashing folks should think a second about the bad plugin management of todays browsers. maybe html 5 should also define a better way to handle browser and plugin interaction. this would make copy+paste/drag and drop from plugin to html content much easier.

Comment: Anyone here actually tried it? (Score 2, Informative) 123

by Light303 (#25209391) Attached to: Google Lively To Be an Online Gaming Platform

I read about lively quite a time ago ... but tried it just now to see how it feels.

And i must say ... it sucks ... big time!

If they do really want to make anything fun of it ... it looks like starting from scratch would be a good idea.

Why ?

- Its slow (on a dual core system that runs cyrsis just fine)
- Loading takes ages
- Controll via point and click not well done
- Camera controll annoying
- Overall usability far away from google standards

Only through hard work and perseverance can one truly suffer.

Working...