Forgot your password?
typodupeerror

Comment: Re:Question about how this works (Score 2) 236

by pantaril (#48001177) Attached to: First Shellshock Botnet Attacking Akamai, US DoD Networks

I'm still waiting for an example of how to get to this so-called vulnerability, without using a different security hole to get to it. Either some moron letting the web server call bash directly, or someone not sanitizing his inputs.

I disagree that using shell CGI scripts should be considered security hole any more than using CGI scripts written in any other language, but if you want other examples of exploiting this bug you can do it via malicious DHCP responses processed by dhcpclient or by env. variables passed when loging in via SSH.

Comment: Re:Question about how this works (Score 3, Informative) 236

by pantaril (#48001145) Attached to: First Shellshock Botnet Attacking Akamai, US DoD Networks

but if you don't do something stupid like eval your those environment variables it doesn't turn into such a mess.

Your CGI script doesn't need to do anything at all. The rogue code injected into the env. variables is parsed and executed by bash when it sets-up the environment for your script.

Comment: Re:Emma Watson is full of it (Score 1) 590

by pantaril (#47991039) Attached to: Emma Watson Leaked Photo Threat Was a Plot To Attack 4chan

Of course, now you have your "wage gap", which in reality is a "work gap".

This is not true. Any sane methodology used to compare wages excludes over time hours (which are paid separately, at least in EU). See for example the Methodology paragraph on this site, which describes how they do it in UK.

Comment: Re:Why wouldn't they? (Score 1) 67

by pantaril (#47799239) Attached to: The Apache Software Foundation Now Accepting BitCoin For Donations

No, they accept USD, or whatever fiat currency they specify, with a transaction processor like Bitpay converting BTC to fiat on the spot.

I think you missunderstand the meaning of the word 'accept'. From merriam-webster dictionary:

accept
verb \ik-sept, ak- also ek-\

: to receive or take (something offered)

: to take (something) as payment

: to be able or designed to take or hold (something)

I think that it is clear that to 'accept' something as payment you don't need to hold it afterwars. You are free to convert it to something else or use it in any other way you see fit. To give you some example, few people would argue that steam, google play or blizzard online store is not accepting euros because they convert it to dollars after the purchase.

Comment: Re:Why wouldn't they? (Score 2) 67

by pantaril (#47799201) Attached to: The Apache Software Foundation Now Accepting BitCoin For Donations

I can think of one downside: People might be less willing to pay with Bitcoin if they don't get the protections that they'd get from their bank's credit or debit card

Accepting bitcoins doesn't mean that you stop taking other forms of payments so this is no valid downside for merchant who start to accept bitcoins in addition to existing forms of payments.

Comment: Re:And this is the same for copyrights. (Score 1) 240

by pantaril (#47654485) Attached to: Patents That Kill

For copyrights, the content creator's remaining natural life plus ten years, or 40 years total, which ever is longer.

Reasonable limit would be 10 years initialy + 10 year extension if the creator wishes so. The best solution would be to abolish copyright completely and provide money for creators in some other way without artificial limits on content distribution. Current copyright doesn't help creators, it is tailored for the needs of distributors because it is a mean to control distribution. Creators don't need distribution limits (it is actualy bad for them as it lowers their exposure to potential audience), they need money.

Patent law is more complex and i think that the current model is not so bad, the problem is the patent office which is not competent in patent aplication review and juridical system which makes invalidation of bogus patents expensive and lengthy and which enables patent trolls to thrive.

Comment: Re:Certainly yes (Score 1) 225

by pantaril (#47645365) Attached to: Do Dark Matter and Dark Energy Cast Doubt On the Big Bang?

Gravitational lensing does not require either dark matter or dark energy. I find it odd that the NASA link discusses Einstein as the person that came up with the theory, yet fails to mention that Einstein did not theorize these two "dark" things. Gravitational lensing is a result of having curved space and obviously gravity. Dark * is not required nor expected..

Einsteins theory doesn't use gravity at all. It works with mass and energy which cause curved spacetime which then causes gravitational lensing. The dark matter is predicted by this effect because we can't detect enough normal matter to justify the level of light-bending we can observe. Dark matter is also predicted by several other observable phenomena like the speed galaxies rotate around each other or cosmic microwave background.

Comment: Re:So? (Score 1) 101

by pantaril (#47630681) Attached to: Network Hijacker Steals $83,000 In Bitcoin

It's a blockchain. It's know what portions were stolen. Send a message out to all people involved in this scheme to not accept them.
Oh right - that would undermine the illusion of "freedom".

Please try to send the message and let us know how it worked. I think that you'll discover that your "illusion of freedom" is very far from actual reality.

Comment: Try jitsi (Score 1) 194

by pantaril (#47595215) Attached to: Ask Slashdot: Bulletproof Video Conferencing For Alzheimers Home?

Jitsi looks realy nice. I want to try it myself when i need videoconferencing later this year. There is also Jitsi videobridge which you can deploy on your server and use Jitsi meet web client to connect to it. Or you can use 3rd party maintained instalation of videobridge available at https://meet.jit.si/

Work continues in this area. -- DEC's SPR-Answering-Automaton

Working...