Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:CWDIllegalInDllSearch (Score 2, Informative) 178

Or, correction, the good DLL would have to go into a folder that is in the PATH and not in any of the higher priority system folders. And you would have to register a file handler and a new type... since the directory of the EXE has first priority. Oh well.

The priority list goes:

1. The directory from which the application loaded
2. The system directory
3. The 16-bit system directory
4. The Windows directory
5. The current working directory (CWD)
6. The directories that are listed in the PATH environment variable

And the patch + adding the new reg value disables #5.

The whole fix should be rolled up into a little switching program. We should not have to edit the registry to fix this vulnerability. And we should be able to turn the fix off easily if it causes problems.

Comment CWDIllegalInDllSearch (Score 1) 178

Has anybody written a test to verify that Microsoft's fix has been properly applied? It would be a simple DLL with that pops up a message, and simple EXE that loads the DLL (which has new unique name). Or even two versions of the DLL, one with a good message and one with a bad message. One goes in the system path, one goes in the same path as the EXE, a temp folder.

The MS kb patch has one typo, you add a new DWORD value to the registry, not a new key.
http://support.microsoft.com/kb/2264107

MS fixed the other typo mentioned here:
http://isc.sans.edu/diary.html?storyid=9445

Comment Re:Ok, Enigma machine ... what else (Score 1) 122

The Military Aviation Museum in Virginia Beach has an Enigma, along with a misinformed computer demo. There must have been thousands of Enigma machines captured. Wikipedia says 100,000 manufactured, including commercial ones. It also has a picture of the Enigma display at the Natl Cryptologic Museum: http://en.wikipedia.org/wiki/File:Enigmas.jpg

The machine was cool - no numbers, no punctuation - the narrated explanation was perfect, up until the demo, which was a simple substitution cipher: the same letter always meant the same other letter! Somebody's Dilbert boss took over in the media shop! The program had already explained the cipher did not repeat.

Comment Re:they're not spies, they're defectors (Score 1) 191

Or they have connections who got them their cushy US layabout jobs.

The net history of espionage is like the net profit history of the airline industry. Comes out to about zero on balance (going back to the Wright Brothers, or so they say). But in espionage, even though the topmost levels of the U.S. and British and probably Soviet spy agencies were infiltrated over and over again, I guess there is some argument you can't just unilaterally disband them unless the other side does too.

Comment Re:what are the chemical dispersants? (Score 1) 565

http://www.google.com/hostednews/ap/article/ALeqM5j7vkPPClc0lhglDZGwYrrcVS185QD9FGP13O1
Chemicals used to fight Gulf oil slick a trade-off
By JASON DEAREN and RAY HENRY (AP) – 2 hours ago

Environmental tests on Corexit indicate it can be stored in the tissue of organisms, or bioaccumulate...

When used on the surface, dispersants remove oil from where birds, turtles and other sea creatures could eat it or breathe in the poisonous fumes. Marine scientists say they also keep the oil balls suspended in the water, where they are eventually consumed by bacteria, which can pass toxins up the food chain.

"They're talking about using dispersants in the deep water where the oil is coming out that would prevent it from hitting shore, but would actually put it into the water column and possibly force it to the bottom of the ocean," said Cynthia Sarthou, executive director of the New Orleans-based Gulf Restoration Network.

"The environmental impact of that is totally unknown. It could end up killing everything at the bottom of the ocean."

Comment Sen. Mary Landrieu's buggers only got misdemeanors (Score 1, Interesting) 121

..for what were originally serious felonies of trying to bug a U.S. senator's office in broad daylight in New Orleans. Helped that the co-conspirator was the son of a U.S. Attorney in Louisiana, one suspects. The leader is the same creep who pretended to be a 1970s pimp in order to smear ACORN with a faked the video. Now he's getting off with a slap on the wrist for stuff the Watergate burglars went to prison for.
(They went into the Landrieu's office, in a federal building, and pretended to be a telephone repair crew. The receptionist became suspicious when they asked her where the equipment closet was.)
http://www.nola.com/crime/index.ssf/2010/04/arraignment_set_in_sen_landrie.html

Comment Re:First prevorb (Score 1) 85

Another problem is download size, at least for those few of us still on occasional dialup or slow 3G. The minified version of JQuery is 72K. Still that's better than the NYT home page, which makes 30 requests for JS files, though only 60K total.

Comment Re:Socialism Ruins Another Industry (Score 1) 410

When US airways were heavily regulated, before 1980, you could sell your seat to someone else, rebook at will, etc., IIRC. Security theater was brought to you largely by the free-marketeer GW Bush. Banana republic levels of social inequality and "federales" were also minted by that non "socialist" president. By contrast, there must have been socialists as well as conservatives involved in building the more sensible, and tougher, British and Israeli security procedures.

As for Southwest, it is friendly, inexpensive, great for one-way and last-minute bookings, etc., but has nothing to do with shutting down European airspace, including airports like London Heathrow that connect continents. Southwest is domestic, it does not even fly to Canada.

You did not get free hotel room at will, but the airlines have decided that is not feasible in volcano distress. Perhaps past regulation and subsidy do make airlines annoying, or maybe it is just corporate bloat.

Comment organ transport, etc. (Score 1) 410

As with traffic accidents, there is a cost-benefit trade-off to closing down the affected transportation way completely. Presumably people are not getting transplant organs delivered by air, etc. In a notorious Washington, D.C., case a few years ago, a jumper stood on the side of an interstate bridge that gets over 200,000 trips a day. So the authorities closed all traffic for hours, causing untold economic and health damage. (Bet you want to know if he jumped! No.) But it happens every day that responders keep accident scenes closed based of their own procedures and risk aversion, etc., because the trade-off is less tangible, and diminishes their own importance.

Long ago cops in raincoats on the side of the road at accidents waved their arms, "move along, move along, buddy!" You never see that anymore. (I saw it in a movie.)

Slashdot Top Deals

An authority is a person who can tell you more about something than you really care to know.

Working...