Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?

+ - Sourceforge staff takes over a user's account and wraps their software installer-> 11

Submitted by Anonymous Coward
An anonymous reader writes: Sourceforge staff took over the account of the GIMP-for-Windows maintainer claiming it was abandoned and used this opportunity to wrap the installer in crapware. Quoting Ars:

SourceForge, the code repository site owned by Slashdot Media, has apparently seized control of the account hosting GIMP for Windows on the service, according to e-mails and discussions amongst members of the GIMP community—locking out GIMP's lead Windows developer. And now anyone downloading the Windows version of the open source image editing tool from SourceForge gets the software wrapped in an installer replete with advertisements.

Link to Original Source

Comment: Re:Who needed it? (Score 1) 70

There are lots of solutions:

  • JetDirect - print server listens on a TCP socket, clients treat the socket the way they would a serial port with the same printer model attached. No job management or anything, but very simple to implement.
  • AppleTalk PAP - printer requests data from client as it needs it, client polls printer for status. Printer status and job management are done in a standardised way for all printers. But it depends on obsolete protocols.
  • lpr/lpd - the UNIX equivalent to AppleTalk PAP. Runs over TCP/IP, provides standardised printer status and job management, easy to proxy/multiplex, supported out-of-the-box on most modern operating systems.
  • Windows Printing - kind of like AppleTalk PAP but using NetBIOS instead of AppleTalk. All the printer status and job management functionality, but a bit cumbersome to use. Works well on OSX and Windows clients.
  • IPP - a "modern" HTTP-based printing protocol. Should do anything the other solutions can do, but better. Used by CUPS, and supported on Windows since Win2k. Also used by iOS for printing.

As for standardised printer control languages, there's HP PCL (printer can be relatively dumb), HP-GL (vector protocol really intended for plotters), SPL (Samsung's equivalent to HP PCL), PostScript (requires fairly heavy runtime to render), and PDF (declarative page description language). A print server should be able to handle at least one of them.

The way it used to work was there were "workgroup printers" with a built-in NIC and print server. They'd usually be able to interpret PCL or PostScript so anyone could print to them with a driver for one of these languages. But they were expensive.

So you could connect a printer to a computer and get the computer to act as the print server and share it on the network. If you had a driver for the printer on this computer, you could make it translate PCL or PostScript to the printer's (probably proprietary) native language so clients still wouldn't need a special driver, only the print server would.

But using a computer as a print server looks overly complex, so you got dumb print server boxes. You can't install fancy print drivers on these boxes, so they just proxy a TCP port to the serial/parallel port the printer is connected to (JetDirect). Each client needs drivers for the specific printer(s), and it prints as though it had the printer attached locally to a serial port.

NetUSB is the next step in this devolutionary chain. It's like the dumb print server adapted to USB rather than serial/parallel. The client machines have a driver for the specific printer(s) and the USB I/O is redirected over the network.

Comment: Re:...unless you rule Australia (Score 1) 71

by _merlin (#49741345) Attached to: 'Logjam' Vulnerability Threatens Encrypted Connections

However, if recent history is any indication, Australians like to get screwed over by their government, hence they keep voting for anti-citizen politicians. Must be some kind of collective masochism going on down under.

All our major political parties (Liberal/National, Labor and Green) have anti-citizen policies. Much like the US Republicrat system, while you can choose who's going to be fucking you, you'll still have to bend over.

Comment: Uber isn't collecting GST? (Score 3, Insightful) 125

It makes no sense at all if Uber isn't collecting GST. The GST is essentially a value-add tax applied to all domestic sales of goods or services. It doesn't apply to hobbies, exports, and personal imports up to a certain value. But I can't see any way Uber should be exempt from GST. It's clearly provision of a service for money, and hence subject to GST. Yet another way these goons think they can just avoid the law.

Comment: Re:Already patched (Score 2) 89

by _merlin (#49567189) Attached to: New Zero Day Disclosed In WordPress Core Engine

It only applies security updates automatically if the user the PHP scripts run as has write access to the WordPress directory. I never allow that. I'd rather have the security of knowing a WordPress exploit can't modify the WordPress installation than the convenience of updates through the web UI.

This latest exploit also depends on a logged in administrator viewing the malicious comments to do the really nasty stuff. This is another very good reason to only ever log in as an administrator when you absolutely must. Use a non-admin user for writing content and moderating comments.

Comment: Really crappy article (Score 5, Informative) 28

by _merlin (#49525769) Attached to: How False Color Astronomy Works

I know I should've expected it given it's on medium, and it's been submitted to /. by its own author, but that's a really bad article. It's full of irrelevant details, stupid comparisons and misleading crap. I understand the concept of "science evangelism" but could you please do it without acting like a total buffoon?

Comment: Re:Poor Design... (Score 1) 73

by _merlin (#49525739) Attached to: Networking Library Bug Breaks HTTPS In ~1,500 iOS Apps

This is where the world is going with per-application library installations on Windows, things like Docker on Linux and application bundles containing libraries/frameworks on OSX. It guarantees that you don't get unexpected application breakage on a library update, but in means a library update requires work for every application using it.

news: gotcha