topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Tuesday November 11, 2025, 6:01 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Recent Posts

Pages: prev1 ... 37 38 39 40 41 [42] 43 44 45 46 47 ... 50next
1026
Living Room / Best Western Plays Down Security Breach
« Last post by Ehtyar on August 27, 2008, 04:36 AM »
The Best Western Hotel chain is countering claims that a security breach last week exposed millions of customer details to cyber criminals. It has been admitted by Best Western that there was indeed a security breach, however they are adamant that only a small number of customer details were accessed.
The article, which appeared on Sunday, claims that an Indian hacker with no prior cybercriminal background managed to get a Trojan-horse program installed on a key system inside Best Western's network. The malicious code reportedly recorded the login credentials of one of the hotel chain's employees, which the hacker proceeded to sell to a group of Russian cybercriminals.

Full Story

Ehtyar.
1027
Developer's Corner / Re: How to choose programming language?
« Last post by Ehtyar on August 27, 2008, 03:49 AM »
Hmm, strange, I didn't get an email that you replied, I came back to edit my last post and here you are :). I apologize if my post seems a bit rushed, but to be honest it was :P Anyway, now that I have some time I'll try to give you a better explanation.

Perl and Python are both very popular scripting languages. Each will run on just about any flavour of OS. Now being your stock standard scripting languages, neither has support for GUI applications (you can't create windows/buttons and such with them), so in comes wxWidgets (having done some research myself since I made that post, I am no longer recommending PyQT, PyGTK, or GTK2-Perl). wxWidgets is a cross-platform GUI framework that can be accessed by Perl and Python via addons called wxPython (for Python) and wxPerl (for Perl). The way this would work is you would download and install your choice of Python or Perl (I use both), then get a copy of wxPython or wxPerl with respect to which language you've chosen. With the combination of scripting language and wxWidgets, you can create cross platform applications with a GUI and simplified networking capabilities. Unfortunately, you'll probably be missing a bit of the skinning business with this solution, but so you know what you're getting into, here are some screenshots of wxPython on windows.

I've also done some further research on XUL, so I can give you a quick rundown. If you've used Firefox, then you're familiar with the way firefox addons work. Firefox addons are written in XUL (XML User Interface Language, which if you've ever done web development, is a lot like HTML) and javascript. The user interface is provided by XUL, and the functionality is provided by javascript. Mozilla (the organisation that maintains XUL and Firefox) maintain an application called XULRunner, which is a platform providing XUL and javascript functionality across Windows, Linux and MacOS, independent of Firefox and/or other Mozilla applications. You can find a tutorial on writing an XULRunner application here. The unfortunate side with XulRunner is that the documentation *sucks* and examples are near impossible to find, in sharp contrast to Python and Perl. This will severely inhibit your ability to quickly pick up the language as you won't have the benefit of others' work to help you along. Firefox addons are similar, so that may be your savior, however I haven't delved into that department much yet so I can't say either way.

Finally, my suggestion to you is to simply download what you're interested in and have a play. It is very important that you *like* the language you choose, otherwise writing in it will be a b*tch.

Hope this helped, Ehtyar.

P.S. The links in this post are used under the assumption you'll be using Windows to start development. Since I have little experience with Linux, I'm afraid I won't be much help unless that is the case.
P.P.S. I've found a package of Chatzilla for XULRunner. This is a very impressive example of a network centric application running in XULRunner. It also appears that it is only slightly modified from the Firefox addon version, which would seem to indicate that you can learn how to code for XULRunner from the abundant Firefox extensions available (which is also far better documented, has an excellent user support base, and tons of example code).
1028
Living Room / Interesting Article on CAPTCHA and OCR
« Last post by Ehtyar on August 26, 2008, 08:40 PM »
An interesting essay from those that broke the Yahoo CAPTCHA.
CAPTCHA - «Completely Automated Public Turing test to tell Computers and Humans Apart» [1]. Any problem that can be easily solved by a human, but cannot be solved by a computer (or which requires excessive computation), can be used as a Turing test. To protect against auto registration, mass mailing in forums and guestbooks, a text-based CAPTCHA was chosen (we will reference it as text-CAPTCHA below). Initially text-CAPTCHA was used in 1997 by AltaVista search system to protect against automated URLs (Uniformed Resource Locator) submitting. An example of a such CAPTCHA is shown on Figure 1. Since then, this type of protection was adopted by other resources: free mail services, blogs, social networks, etc.

Full Story

Ehtyar.
1029
Living Room / Interview With MIT Subway Hacker
« Last post by Ehtyar on August 26, 2008, 08:37 PM »
A student from the group of MIT Boston subway hackers is interviewed by popularmechanics.
Its rare that a hacker convention makes national news, but three MIT students caused a whole lot of controversy when they planned a presentation about security holes in Boston's subway system for DefCon in Las Vegas earlier this month. They were forced to cancel the talk at the last minute by a 10-day federal restraining order, requested by Boston's Massachusetts Bay Transit Authority (MBTA). On Tuesday, a judge denied motions by the MBTA to issue a preliminary injunction aimed at keeping the students quiet for a further five months. Now, in his most extensive interview to date, MIT subway hacker Zack Anderson talks with PM about what's wrong with the Charlie Card, what happened at DefCon, and what it's like to tango with the FBI and the MBTA.

Full Story
Defcon Publication

Ehtyar.
1030
Desktops is using the Windows Desktop and Window Station API to switch between desktops, as opposed to the approach taken by most other application involving hiding designated windows and making other visible per virtual desktop. The windows desktop API uses a static heap of 48mb to be shared between desktops. The CreateDesktop API used by Desktops by default allocates 12mb for each desktop, thereby limiting the number of desktops to 4. This limitation can be overcome by using CreateDesktopEx which allows you to specify the initial heap size, but apparently Microsoft deemed this unnecessary, perhaps supporting the theory that this application was someone's first step into programming at Microsoft ;).

Ehtyar.
1031
General Software Discussion / Re: Delphi 2009 (And C++ Builder 2009) Released
« Last post by Ehtyar on August 26, 2008, 04:09 PM »
Being proprietary may not have been the issue. After all, they now have moved to Unicode practically overnight.
...
I also wonder what Unicodeization of Delphi is going to do to performance. There's a number of incredibly fast string handling libraries for Delphi, but not for widestrings. Oh, and since Codegear must have had to overhaul all their RTL and VCL, wonder what new bugs will start cropping up there.
I can't imagine how years of ignorance becomes "overnight". At the very least it's taken them 2 years, given that their last release was 2 years ago.
New bugs in the runtimes? Goodness, people can barely keep up with the pre-existing ones, I hope they have a good internet updating mechanism :P

Ehtyar.
1032
Living Room / Re: Viacom vs. Google
« Last post by Ehtyar on August 26, 2008, 04:03 PM »
Also, I wonder why Viacom is getting such logs, but not Google employees logs. If you work there, are you exempt of such tracking? Or perhaps Google thinks their employees are more important than their users? Hmmm.... Bah, the most probable answer is that some higher-up is looking at nasty things during his work :P
Naturally you make good points Lash man, though my theory here is that Viacom were planning to prove that Google employees were aware of copyright infringing content and did nothing about it, thereby winning their $1 billion case against them. I also believe that this was their motivation behind attempting to get a copy of YouTube source.

I also found this interesting bit from this article on Wired.
Viacom also requested YouTube's source code, the code for identifying repeat copyright infringement uploads, copies of all videos marked private, and Google's advertising database schema.

I'm afraid i can't express my opinion regarding this because it would contain far too many vulgar expletives.

Ehtyar.
1033
Developer's Corner / Re: How to choose programming language?
« Last post by Ehtyar on August 26, 2008, 12:34 AM »
Unfortunately, what you're asking for has been developed upon very little. What you're asking for is owner drawn interface support, simple networking libraries and multi-platform support. In my opinion, for a novice programmer, C++ is out, which removes most of our options right there (wx, qt, gtk etc). VB and C# unfortunately will not give you the multi-platform support you desire, thus those are also out.

I have two options I can think of, you can try Python or Perl (these will be scripting languages, each with extensive library support, and GUIs provided by PyQT/wxPerl/PyGTK/GTK2-Perl), or you can try Mozilla's XUL platform, which will be a markup language with javascript api (see the "Events and Scripts" section of this page). If you'd like a better overview of this kind of thing let me know and I'll see if I can find some examples or tutorials online for you (you can always look yourself too, I will be busy for the rest of today and most of tomorrow).

Hope this helps, Ehtyar.
1034
Living Room / Lego Minifig Videos
« Last post by Ehtyar on August 25, 2008, 08:57 PM »
For the 30th anniversary of Lego Minifigs (the mini Lego people), Lego hosted a video contest.
To mark the 30th Anniversary of the minifig, Gizmodo is celebrating a video contest with Lego. The objective: to create a movie in honor of the minifig. The short could be made using any technique you want as long as it's creative and fun (check the full rules after the jump). The prizes? Huge ones. First, the most amazing vintage sets ever: the Galaxy Explorer and the Yellow Castle—needless to say, the value of these sets, which are new in their original boxes, goes off the charts. The third prize will be a special set designed by Lego owner Kjeld Kirk Kristiansen, plus there will also be smaller vintage space and town sets, a whole bunch of the new vintage minifigure series, and some newer sets for the runner-ups. Yes, a whole brickload of incredible stuff.

And if those prizes weren't enough to run to get your camera out, we have asked the best Lego movie directors—Nathan Wells, David Pagano, and Nate Burr—to create three exclusive movies to inspire you. Even if you are not participating, you really have to watch these.


Screenshot - 26_08_2008 , 11_52_12 AM.png


Full Story

Ehtyar.
1035
Living Room / Re: Fedora Code-Signing Server Breached
« Last post by Ehtyar on August 25, 2008, 08:19 PM »
"It appears" - that could mean the attackers have clouded their tracks. And even if the passphrase hasn't been snatched, there's other nasty-stuffTM that could have been done. Pretty nasty when stuff like this happens :o
Indeed f0d man, but had I not phrased it like that, I would have been shot down by anyone other than you for being alarmist :P

Ehtyar.
1036
Living Room / Fedora Code-Signing Server Breached
« Last post by Ehtyar on August 25, 2008, 07:53 PM »
Fedora has reported a break-in on several of their servers, one of which was used to sign software packages. However, it appears the passphrase used to protect the key was not discovered during the breach.
Last week we discovered that some Fedora servers were illegally accessed. The intrusion into the servers was quickly discovered, and the servers were taken offline.

Security specialists and administrators have been working since then to analyze the intrusion and the extent of the compromise as well as reinstall Fedora systems. We are using the requisite outages as an opportunity to do other upgrades for the sake of functionality as well as security. Work is ongoing, so please be patient. Anyone with pertinent information relating to this event is asked to contact fedora-legal redhat com

One of the compromised Fedora servers was a system used for signing Fedora packages. However, based on our efforts, we have high confidence that the intruder was not able to capture the passphrase used to secure the Fedora package signing key. Based on our review to date, the passphrase was not used during the time of the intrusion on the system and the passphrase is not stored on any of the Fedora servers.

Full Report

Ehtyar.
1037
Living Room / Look Out Australia, We're Top of the List
« Last post by Ehtyar on August 25, 2008, 07:48 PM »
Australia's in hot water as far as IT security goes...
Bryan Sartin, head of Verizon's business investigative response team, says Australia is top of the list for organised criminals trawling for victims in countries with no data breach notification laws and a low rate of compliance with the payment card industry data security standard.
The biggest change in the past year had been the shift in data compromises as criminals sought targets that were lax about security, Sartin says.

Full Story

Ehtyar.
1038
Living Room / 'Prespectives' Provides a Firefox Security Boost
« Last post by Ehtyar on August 25, 2008, 07:45 PM »
A new firefox extension from Carnegie-Mellon University provides protection from some recent web security threats.
Perspectives is a new approach to help clients securely identify Internet servers in order to avoid "man-in-the-middle" attacks. Perspectives is simple and cheap compared to existing approaches because it automatically builds a robust database of network identities using lightweight network probing by "network notaries" located in multiple vantage points across the Internet.
The extension provides two primary benefits:
   1. If you connect to a website with an untrusted (e.g.,self-signed certificate)*, Firefox will give you a very nasty security error and force you to manually install an exception. Perspectives can detect whether a self-signed certificate is valid, and automatically overrides the annoying security error page if it is safe to do so.
   2. It is possible that an attacker may trick one of the many Certificate Authorities trusted by Firefox into incorrectly issuing a certificate for a trusted website. Perspectives can also detect this attack and will warn you if things look suspicious.


Screenshot - 26_08_2008 , 11_40_35 AM.png


More Info Here
Install here

Ehtyar.
1039
General Software Discussion / Re: Delphi 2009 (And C++ Builder 2009) Released
« Last post by Ehtyar on August 25, 2008, 07:26 PM »
Robust Unicode support is one of the big things
It's amazing it's taken them until 2009 to do this, though? :-s
If it weren't a proprietary language it wouldn't have.

Ehtyar.
1040
Developer's Corner / Re: How to choose programming language?
« Last post by Ehtyar on August 25, 2008, 06:02 PM »
I would also recommend VB or C#, both for, as f0dder mentioned, ease of networking, and also for the GUI in particular.

Ehtyar.
1041
General Software Discussion / Re: Delphi 2009 (And C++ Builder 2009) Released
« Last post by Ehtyar on August 25, 2008, 06:00 PM »
At the risk of hijacking here, it's interesting when you watch presentations about developer tools, because you pick up pronunciation of words. For example, delphi has elongated 'i' sound, and enum has an elongated 'u'. I'm not sure whether this is universal, just a side note. Also, David I at the beginning of the videos looks like he should be working for GNU, are most of the guys at the top the same kind of person, or is this just a coincidence (sorry for stereotype)?

Ehtyar.
1042
Didn't look at code etc., but from reading the blurb it sounds like a laaaaaaaaaaaaaaaaaaaame pseudo-benchmark - basically over-theorizing and über-abstracting a problem. Who in their right mind would implement a fixed-size ring buffer as a linked list? (Yeah, I might've misread the blurb. I really hope I did.)
When i first started reading I thought.."I wonder if they posted source and binaries". Then I thought "hmm, what an arbitrary assortment of languages", like where the hell is C and Perl. Thank you for confirming my suspicions, I have no compulsion to read this article.

Ehtyar.
1043
Living Room / Viacom vs. Google
« Last post by Ehtyar on August 24, 2008, 08:15 PM »
Hi all.
Now before you read the rest of this post, a few warnings (in fact it should probably be more like a disclaimer so i don't get sued for wasting your time, but whatever). This post is going to be long, exhaustive, and very b&tchy. If you happen to have a heart condition, or your eyes suffer from RSI, please leave immediately. Also, i make no claim as to being unbiased in this rant, though I have done my best to source my claims with valid links.

Now onto the potentially interesting bits. For those of you who are unaware of the Viacom vs. Google shenanigan (josh said i can't use naughty words) not only do you *really* need to read the news more, but this post is for you. For those of you already familiar with this shenanigan, you can read the rest and perhaps find out more about it, or leave because your sciatica may flare up from sitting and reading this long.

During February last year, the managerial team at Viacom (who own a LOT of stuff) decided that they should have a blitz on takedown notices. This blitz included approximately 100,000 takedown notices to youtube demanding removal of material that Viacom deemed and infringement of their copyright (as a point of interest, these takedowns included a handful of false positives). Apparently Viacom will be last to aknowlege benefits of having their material spready via youtube[1][2][3][4][5].

So anyway, a few months down the track Viacom decide they want a piece of this pie (perhaps rightly so, but I'm biased) and thus launch their own free media website. Viacom concurrently decide that Google (who owns youtube) should be policing youtube content themselves to save Viacom the trouble of sending takedowns[1][2], despite the fact that the DMCA places the responsibility squarely on Viacom for doing so.

Shortly afterward, the apparently overworked bean counters at Viacom are struck by the realization that this new free media website is likely to cost them some of their $12 billion revenue. "But why?" they ask themselves, we're pissed at youtube, why not sue them an 11th of our yearly revenue, otherwise known as $1 billion, that would sure save us some cash....

So anyway, bickering between the two companies continues in the court of public opinion eventuating in Viacom agreeing to better review its takedowns prior to sending them. During this period Viacom's CEO makes some (void sarcasm() {)very popular (}) speeches regarding the way that copyright should be handled by corporate America (sidenote). I also feel it is worth pointing out that whilst Viacom are happily suing Google for $1 billion for being in breach of Viacom's copyright online, apparently the writers of the content aren't entitled to any of the apparent profit garnered from online content.

Earlier this year, Viacom decided it also wanted punitive damages from Google for the copyright breaches. Fortunately U.S. District Judge Louis Stanton was good enough to educate Viacom's litigators in copyright law. It's also worth pointing out that applying punitive damages in this case would have cost an amount akin to the GDP of many-a midsized nation, or what this article refers to as "funny money territory" (I prefer "funny money territory", but I can't be running around infringing copyright like that now can i?).

Continuing the lawsuit, Viacom claim that Google/YouTube were active participants in the transmission of copyrighted content, and thus cannot have the safe harbor provisions of the DMCA applied to them. Meanwhile, Viacom and Universal agree that virtually everyone but themselves should be responsible for propping up their obsolete business model.

Last month, in a stunning display of hypocrisy, Viacom sent a takedown to youtube, demanding removal of a viral video started by artists working for one of Viacom's child companies to promote a new movie. Shortly afterward, another was started, by Viacom, this time on limewire. As a side note, Viacom was told shortly afterward that it would be better off if it lost the lawsuit.

Earlier this month, Viacom made an attempt to get hold of YouTube source, only to be shot down in court, with Judge Stanton upholding that YouTube source was a Google trade secret, and could not be revealed without risking loss of business. Perhaps we might add massive conflict of interest to that comment, given Viacom is currently trying to make good on their promise of a free media website. But this time, they came back kicking, and have demanded Google turn over logs of every video ever watched on YouTube, which would include the usernames and IP addresses of those concerned[1]. Fortunately, Google was granted the right to anonymize the data before handing it over to Viacom prior to the exchange taking place. In an interesting twist of fate, Viacom were in fact most interested in what Google employees were watching...information that Google was not intending to hand over under the prior arrangement. On a side note, as the lawsuit continues, Viacom continue to send bogus takedowns to YouTube, in breach of prior arrangement.

Now to hit the ball from the other side of the court. Can someone please explain to me why, as a company that apparently has user privacy at the core of its concerns here, Google happens to be retaining 12 terabytes of YouTube logs complete with IP addresses and user IDs? Now I know everyone gets upset when you rant about Google, either from the offensive side ("Oh, you're being naive.") or from the defensive side ("Duh, Google is out to get us!") but really, when you read that last sentence, do you really feel comfortable watching videos at YouTube anymore? What on earth could a company who seems to portray the ideal that the sun shines out of its servers be doing with 12 terabytes of server logs that might serve the greater good? I realize it is naive of me to expect them not to, but even so, does Google's defense here not sound in the least bit hypocritical to anyone?

As a final note, you can see the reactions of YouTubers to this lawsuit here, here and here.

Allow me to finally apologize if anyone has been offended in any way by this article, and to request that any information misrepresented in this article be pointed out to me in a reply.

Thanks for reading, Ehtyar.
1044
Developer's Corner / Re: C++0x: The Dawning of a New Standard
« Last post by Ehtyar on August 22, 2008, 03:46 PM »
Dunno about regex being a core part of the language; it's useful, but you won't know about the speed of implementations if you're doing cross-platform stuff, so you're probably better suited using a thing like PCRE...
I imagine unless they actually use PCRE for their implementation, it will be too little too late.

Ehtyar.
1045
Developer's Corner / Re: C++0x: The Dawning of a New Standard
« Last post by Ehtyar on August 22, 2008, 07:01 AM »
In response to your not being thrilled with C++0x, I must say if C# was portable to a similar to extent as C++, I'd be there in short order. However, as mouse man knows, I am greatly adverse to proprietary languages, and I refuse to be taken up on C# by Microsoft. Perhaps something like D may strike my fancy if/when they get their finger out.

Ehtyar.
1046
Developer's Corner / C++0x: The Dawning of a New Standard
« Last post by Ehtyar on August 22, 2008, 02:55 AM »
Hi all.
Some new stuff on C++0x (the next-gen C++) has been release since I've been away and since no one else has posted, here we go...
Here is an article from DevX about C++0x including:
->Overview: C++ Gets an Overhaul
->An Introduction to Concepts
->Simpler Multithreading in C++0x
->The State of the Language
There is also this paper by Bjarne Stroustrup (Inventor of C++) which mouse man tells me is very good reading due to both the ideas expressed, and the information regarding the management of development divulged in its pages.
For the ultra-brave and uber-interested, you can access the Committee's mailings here.

For those of you not quite interested enough to go rummaging around the web, the main benefits thus far are slated to be:
  • enhanced memory model supporting modern machine architectures
  • threading ABI
  • mutexes and locks
  • thread local storage
  • asynchronous message exchange
  • regex support
  • hash table support
  • tuple (ordered list) support
  • improved date and time support
  • miscellaneous improvements for library creators
  • static assertion support
  • variadic template support
  • alignment control
  • delegating and inheriting constructors
  • auto keyword for deducing a type from an initializer
  • decltype keyword as a way of using the type of an expression in a declaration
  • nullptr keyword to describe the null pointer
  • range-based for loops (foreach) (yay)
  • lambda functions (yay)
  • raw string literals
  • UTF8 literals
  • concepts (a type system for template arguments)
  • in-class member initializers
  • shared_ptr<> keyword

Ehtyar.
1047
General Software Discussion / Re: Which free burning software can you recommend?
« Last post by Ehtyar on August 20, 2008, 07:21 PM »
CDBurnerXP is reliant on .net and creates coasters at the drop of a hat. ImgBurn is incredibly good, but cannot create compilation discs. My vote goes to InfraRecorder, an open source GUI for an open source cross-platform commandline toolset, cdrtools.

Ehtyar.
1048
General Software Discussion / Re: Best Firefox security addons?
« Last post by Ehtyar on August 17, 2008, 02:35 AM »
Two extensions I consider to be useful, presuming they work as described ;) are BetterPrivacy ...
Didn't know about Flash LSOs, thank you. Here's a link to BetterPrivacy on Mozilla and an extension called Objection on mozdev which performs a similar function but is not automated.

Ehtyar.
1049
General Software Discussion / Re: Best Firefox security addons?
« Last post by Ehtyar on August 14, 2008, 01:22 AM »
Cookiesafe
https://addons.mozil...S/firefox/addon/2497
I prefer Cookie Monster. It works almost exactly like NoScript but for cookies (allows default deny) and allows you to permit session cookies only etc.
I prefer YesScript, it's a NoScript spinoff that allows JS globally but lets you blacklist invidual sites. I use it more as a performance enhancer coz I've noticed some JavaScript-heavy sites really bog FF down.
NOT a security addon. I can definately see the appeal though, and were I not so anal, I would most likely prefer YesScript.

Ehtyar.
1050
lucky for you guys. at some places, not only bandwidth is throttled but the (paying) end-users are chided for making a complaint. >:(
That's nothing. Over here, you'll find your total downloads are limited per month. For $80 a month on 'cable', we get 20 GB of downloads and uploads (I get 40gb of data usable between midnight and midday because we have cable tv and phone with the same operator), after which you are speed-limited or charged a small fee per excess mb. Admittedly I'd probably be better off if i upgraded to ADSL2 or something, however you will not find an ISP that does not limit your total data usage.

Ehtyar.
Pages: prev1 ... 37 38 39 40 41 [42] 43 44 45 46 47 ... 50next