Comment Slackware not affected (Score 4, Informative) 51
Slackware has never enabled CONFIG_SMB_SERVER in any kernel.
Comment three lines (Score 5, Insightful) 145
Thus spake the master programmer:
"Though a program be but three lines long, someday it will have to
be maintained."
-- Geoffrey James, "The Tao of Programming"
Comment Re:Who cares about the big bang (Score 1) 109
Clearly it's Large Hadron Colliders all the way down.
Submission + - All Firefox addons stop working
jettoblack writes: As of 12:00AM UTC on 2019-05-04 (9:00PM Eastern time or 6:00PM Pacific on May 3), all addons and extensions for Firefox suddenly stopped working for all users, due to an expired signing certificate. https://www.reddit.com/r/firef...
Bug tracked here: https://bugzilla.mozilla.org/s...
Bug tracked here: https://bugzilla.mozilla.org/s...
Comment Re:Does Anyone Use That? (Score 1) 474
Linus, is that you?
Comment COBOL programmers aren't all old (Score 1) 383
There's a COBOL shop in my small town that contracts for corporations and the government. I know several COBOL specialists in their 30s. It's actually an extremely lucrative field to get into these days, with good pay and job security.
Rewriting all that COBOL code in some other language would be bound to cause major problems.
Comment Firefox 52 works fine with ALSA (Score 4, Informative) 322
All you need is the --enable-alsa configure option. The resulting Firefox will prefer PulseAudio if it is present, but will use pure ALSA if it is not.
Comment "the libarchive maintainers have released patches" (Score 2) 82
Really? I've not been able to find anything other than a new release. The patches might be in git, but they are not easily found.
Submission + - Badlock Vulnerability Falls Flat Against Hype (threatpost.com)
msm1267 writes: Weeks of anxiety and concern over the Badlock vulnerability ended today with an anticlimactic thud.
Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block (SMB) protocol that provides file and print services for Windows clients.
As it turns out, Badlock was hardly the remote code execution monster many anticipated. Instead, it’s a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services.
SerNet, a German consultancy behind the discovery of Badlock, fueled the hype at the outset with a number of since-deleted tweets that said any marketing boost as a result of its branding and private disclosure of the bug to Microsoft was a bonus for its business.
For its part, Microsoft refused to join the hype machine and today in MS16-047 issued a security update it rated “Important” for the Windows Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD). The bulletin patches one vulnerability (CVE-2016-0128), an elevation of privilege bug in both SAM and LSAD that could be exploited in a man-in-the-middle attack, forcing a downgrade of the authentication level of both channels, Microsoft said. An attacker could then impersonate an authenticated user.
Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block (SMB) protocol that provides file and print services for Windows clients.
As it turns out, Badlock was hardly the remote code execution monster many anticipated. Instead, it’s a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services.
SerNet, a German consultancy behind the discovery of Badlock, fueled the hype at the outset with a number of since-deleted tweets that said any marketing boost as a result of its branding and private disclosure of the bug to Microsoft was a bonus for its business.
For its part, Microsoft refused to join the hype machine and today in MS16-047 issued a security update it rated “Important” for the Windows Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD). The bulletin patches one vulnerability (CVE-2016-0128), an elevation of privilege bug in both SAM and LSAD that could be exploited in a man-in-the-middle attack, forcing a downgrade of the authentication level of both channels, Microsoft said. An attacker could then impersonate an authenticated user.
Comment Re:I wish the seven of them a good time (Score 2, Funny) 104
MINIX is obsolete.
Comment Re:GPLv3 - the kiss of death (Score 1) 311
FLIF will never kill PNG anyway as long as it keeps linking to libpng.
Comment Re:Oblicatory (Score 4, Interesting) 397
I've had no issues with Soylent 1.4/1.5 producing the kind of room-clearing gas that earlier versions did. It's really rather disappointing.
Comment Re:Whats happening with Slackware now? (Score 1) 123
When's the last time it was every six months?
Hint: It was probably sometime back when the release was two CDs, and not 6 CDs and 2 double-sided DVDs.
Comment Plan to "license more outside brands"? (Score 5, Insightful) 369
If their plan is to get more third parties to go along with their DRM, then they haven't really learned a thing yet.
Global Carbon Dioxide Levels Reach New Monthly Record 372
mrflash818 writes: For the first time since we began tracking carbon dioxide in the global atmosphere, the monthly global average concentration of carbon dioxide gas surpassed 400 parts per million in March 2015, according to NOAA's latest results. “It was only a matter of time that we would average 400 parts per million globally,” said Pieter Tans, lead scientist of NOAA’s Global Greenhouse Gas Reference Network. “We first reported 400 ppm when all of our Arctic sites reached that value in the spring of 2012. In 2013 the record at NOAA’s Mauna Loa Observatory first crossed the 400 ppm threshold. Reaching 400 parts per million as a global average is a significant milestone."
