Nothing to see, move on
So, in order to get this backdoor on they must have to already have root access...really???
Got bigger problems if that is what happens
96 posts • joined 5 Jul 2009
So, in order to get this backdoor on they must have to already have root access...really???
Got bigger problems if that is what happens
That a public facing service is is exploitable is nothing new, this article should have really tried to make people aware that you get what you pay for in most cases and paying £1 to deploy and host a WordPress site is not going to get you professional services even though as many have said, "old" versions of PHP will have patches back ported.
i think in this, the most important is that generally speaking, The easier something is to use, the more complex it is under the surface and complexity brings issues. Things like wordpress have their place in the same way that motorbikes/cars/electric vehicles have theirs and the advantages/caveats that come with them.
Happy new year and keep up the good work! The Web is better by a long way than it was a few years ago and there will always be new problems
This comment alone has given me the final push I need to give docker a proper try. Why don't more people say this compared to the "one day, it will even do your laundry" style reviews.
Reading through that has given me a headache...it's too true.
my weeks sysadmin nightmare working remotely
I just spent half a week having an email back and forth with someone who insisted a system didn't work regardless of it working (and being shown to work through screen recorders and tutorials) with every variant and setup under the sun.
After finally convincing them to let me setup a remote desktop connection to their computer to see first hand, we did the run through and, surprise surprise, it worked perfectly. They just read a single (something they had written) word wrong and thought they were in the wrong place. If they had even filled in the "problem report" form provided they would have seen their own stupidity.
Love that we're back to weeklies, have a beer on me!
I thought the whole point of services such as AWS was to avoid putting all your eggs in one basket. Then again, the cloud is just "someone else's computer" with more than one pipe to it
I'm one of the many who revisited WoW for WoD after a 5 year gap and the experience has left me very bitter and vowing to never buy blizzard again, even if they reinvented jesus. I live in Hong Kong so played on oceanic servers and at launch, people would put their computer in a 10 hour queue only to discover the server was going down for maintenance.
The game has been very buggy and need to daily reboots still, paying customers are actually beta testers. Whatever happened to QA? The cherry on the cake for me was that whenever I would try to go in to a dungeon or battleground would get 12 seconds lag. After contacting a Game Master, I was given the "you must be holding it wrong" response and unable to get a refund within 10 days because I played it.
Blizzard don't give a shit. When stating these facts in a balanced manner on the forums, people went nuts defending blizzard, it really is like they are junkies and blizzard can put out whatever they like so long as they get their fix.
Remember, Blizzard is just a company, not a religion
Nail, meet head.
Do your eyes also come with x-ray vision?
The problem is simply crud that manufacturers add on to bring you the "best" experience. Not everyone will be willing to go this length but Iswill
- Remove unnecessary apps which won't impact MY experience, not just factory ones but ones I've installed
- Install boot manager and stop services I do not immediately need starting up automatically
- use greenify to stop services I do use from running without need after a given time
- avoid apps that push notifications for the sake of it like the plague
- most importantly, use my phone when I need/want to, not feeling the need to check every ten seconds
This gets me 5 days of reasonable use. It's a Samsung note 2014 10.1
A simple no nonsense response that cuts through the BS, I salute you.
No excuses, nothing beats genuine "life" education, schools can't teach that without someone complaining.
To the downvoters, when I talk about having no single point of failure within software, I mean having a resilient environment.
Specifically addressing the bug in question, with proper input validation/sanitation data that could cause this bug would never get in to the system to begin with. How often do people store integers larger than 9223372036854775807 (for use in a PHP environment), especially from a serialized source?
On a typical website, if receiving "extreme" data (valid data but unexpected) I'd write details to a log and/or ask the user if they are sure they mean to use such a large value.
Either way, kudos to the PHP team for addressing the issue so quickly
If you rely on a single piece of software, the same piece of software that "delivers" to secure your entire stack, you're doing it wrong regardless of whether you call it PHP, IIS, Java, Ruby, Node, etc.
It sticks :p
Entering the consumer level market...Excellent!
I concur, the very first thing on my mind was to check the story publish date thinking there was an error which threw up an old story...
David Attenborough In 1000 years on a cave painting
The missing link between ass and humans found. This creature represents the breakthrough of species for the first time caring more about social life than survival. It is due to the sheer number of clicks (from the newly refined fingers) on trees, stones, even frogs that word spread our mouths can be used for eating, not just talking about the latest cave drama.
Cave pictures depict this creature slumped over a tablet like slab with a crooked spine using its finger to draw a a tree with two coconuts on it. We believe this was how the ass-a-man passed on knowledge to future generations about what foods were safe and dangerous.
This other picture shows a lady begging the man not to mix his coconuts with her starfish, as we now know, mixing the two produces deadly toxins. A marvellous species representing a new transformation of life...as we know it.
You know it's bad when even the Chinese Government admit there is a problem...It's also a bit hard to hide the problem, wait...it's easy to hide.
This is quite literally dissolving the old values of China and replacing them with the new, shiny, "what do i do with this suitcase full of money?!?!?" set. Having lived in China/Hong Kong for a few years I can only say the problem is...Louis vuitton. Without LV people wouldn't need to fire up the helicopter in order to go grab that must have bag.
In all sincerity though (and not taking in to account the ratio of money effectively spent), the Chinese government are starting to make some big changes to the way things are run in the name of environmental preservation in the places it counts most, education and infrastructure. You won't see so much solar power almost anywhere else...not that that matters with all the damn smog!!!
as a user of a rom called pacman on my galaxy tab 7.7, there are many good reasons to use custom ROMs that overcome the quirks. many reading this might think it's stating the obvious but some REALLY don't have a clue what can be done.
My device is supported for longer - Officially support stopped at 4.0.4 but, i use 4.2.1
Efficiency - Longer battery life and better responsiveness, nuff said
Competition - Some may be scratching their heads at this. the truth is, variety is the spice of life and shaking things up (small as it may be) stops everything you do becoming Apple level boring.
Custmisation - Works both ways in terms of liking but, i like being able to tweak the interface to my hearts content. Look up Paranoid Android!
Enhanced features - People pull functionality apart till it screams usefulness you may actually want. My partner has a note 2 and we both thought multi window control was a nnice gimmick but, not too useful in its' workings. i use something called halo which takes this concept bundled with notifications and decent shortcut handling toa new level.
Only three words came to mind to begin with:
Sod off america...
Couldn't he claim similar circumstances to what the tax dodgers here do. "I may talk and arrange business with people in the US but, when it comes to sales, all transactions are performed in another country, another dimension, namely the internet...from a dodgy web host on the darkweb at that"
A bitter response from me I know and sorry for it. I just don't see a single thing from the american government which warrants any decision they make as legit these days.
I used to have a desire and loved it to bits, in terms of battery, performance and beauty it left the market at the time for dust, a real shame about their software but cyanogen are always there to save the day. Then, it got stolen at the gym.
Fast forward almost three years and HTC are almost completely off the map, they haven't released a "distinguished" phone in all that time, they turned in to another company that just churns out android handsetswith no flavour.
When the market is as intensely competitive as phones are, people at the premium end want something that is exactly that. The one is an excellent phone but, too little too late, if they'd have released that at a time when shiny was all it took to win, there'd be no problems. We now have phones with stylus', phones that swim, phones with super hi-res screens (I know the One uses technology from Sharp) and crazy cameras so where does that really position HTC?
I think my Samsung is great and so do a lot of techies based on the amount of activity at xda. They are still innovating too! See the advert for flexi screens. The only thing that will change that for me is an underdog who can bring some new tricks to the table.
So long HTC, thanks for all the fish
Whether or not a believer in AGW, does it hurt to stop living like a pillock. In retrospect, when I say this I mean things like:
- Walking to the corner shop 5 minutes away instead of driving
- Turning off the lights when you (or noone else) are in a room
- Wear warmer clothes when the weather gets colder as instead of turning the heating up
- Wear less (and sleep under less) if the weather is too hot instead of turning the AC up.
- Buy food you will eat rather than throw away due to waste/rot...
- Drink beer really cold, it is much more refreshing than "lukewarm"
Little things like those stated above make more a difference in the long run make more of a difference compared to bickering over the climate like little girls in the playground.
I remember well the experience I had when i had just left university that could sit on parallel lines but in England for this.
I serviced hardware/software chip and pin machines and would always try to find ways to make it both more pleasant and efficient. Here is a list of some of those and the effect
- The software we used was hosted on an intranet and only updated every other week. I would download the relevant tools if changed and put them on my desktop for one click use. This saved my having to go through the company intranet pages which were 2 deep and slow so. Much faster and convenient, I could lay them out in order as needed. Management response (some young man who clearly enjoyed his position too much) made me stop doing this as it meant my toolchain would always be outdated....
- The units that came in would just be thrown in to a box with the only thing differentiating them a label; each station would take a different type of "fix" at different times to keep it a little different. One morning, whilst getting my devices, any devices that didn't meet my current task, would put them in a separate making someone elses life easier, it certainly didn't make mine any different. The manager came over and was furious, accusing me of wasting my time tidying up the devices; at this point I still only had half of the devices I needed.
Not meaning to blow my own horn, I was the most productive worker in that workshop by at least three times, most of the others were very lazy polish who couldn't speak much English. I was late the next day after the above instance (5AM start!) and I was welcomed by the manager smiling telling me to go home. It was his victory...
I believe the problem is rather simple. It isn't just that China is (for now cheaper) it's that Britain has lost a lot of the fire to its flame.
I have respect on one hand and realism on the other with regard to Stephen Fry. Some of the stuff he does is both informative and amusing. However, I'm glad to see the Reg trolling in the cases given as it is all due.
What I want to know is his screen name on this site! Without doubt, he is the kind of person who subscribes to the Reg. My guess....Stephen Fry....is....Amanfrommars!
Place your bets
I have been living in China for the past two and a half years. As a Linux advocat, this is the best news I think I have ever read. I would like to very briefly paint a picture of IT within China.
1) The vast majority of people use a pirated copy of Windows XP, there seems to be one image that everyone and their dog has. People will even install Windows XP from this disc on their Apple computers because they only know XP. Because they can't download updates, people install a program called 360. 360 does everything (particularly make a device slow and unresponsive) from giving you a replacement start menu to delivering windows updates, to telling you the weather and modifying the vast array of system files. This thing spies like someone stood 10cm in front of you with a pair of binoculars.
2) The level of computing proficiency is very poor to the point people who work in computer shops don't understand and will hop on to baidu (web-search) for almost everything unless they have tried it before. When it comes to performing a task, this can result in amusement for the observer but a big vein popping out the forehead for users.
3) China is filling up with consumers who demand fashion, particularly following the "latest and greatest", Windows XP is something i remember using way back in school and considered very uncool. The chances are this generation will soon be upgrading to the latest pirated version of Windows 7/8.
With the current scene set, we have the following opportunities
- When it does come time to put an IT curriculum together, it will be based on Linux
- When people can control their device, even if the repositories are limited, they will experiment more, many people using open source software; testing it, possibly contributing to it and definitely not pirating it.
- Don't you think it would be pleasent to have less vulnerable devices on the internet to be abused?
- Until China is well versed with the Linux ecosystem, there will be plenty of opportunity for service oriented commerce from other countries.
- Hang Mark Shuttleworth by his scraggly balls to pass that suitcase (more like warehouse) full of cash he will be getting in the general direction of Linux
In sincerity, I feel this move (even if only talked about) puts China in front of our own governments with regard to technology. Anyone who feels this is a step in the wrong direction is just bitter.
I just moved from the mainland to Hong Kong, Damnit!
This quite simply means a variety of debian to use on your phone; no need to have Unity in desktop mode is there? For me this is a great win for the community at large with no cost but, I guess there will always be haters. You really need to stop hating things which are provided for free!
As an Arch Linux user, I favour no distro more than the next, just what is good for my needs. I'll be having a go at hacking this on to my tab 7.7, the phone UI looks quite interesting.
So, good job Canonical, I appreciate the work you do for the community. Sticks and stones may break your bones, may trolling morons mourn on themselves.
I believe we should blame Moore's Law, when the computing power available to us double's, it used to make a vast difference. I,e The upgrade from a 486 rated at 66MHz to a 586 at 133MHz was huge in terms of what we could actually do with the device. Many here have already stated their 6 year old computers work just fine, I support this view.
I run Arch Linux on a ULV Lenovo Thinkpad and it is blindingly quick; two VMs and all development environments open. It is pretty much impossible to notice the difference on my older (but much faster workstation) unless compiling programs. Why upgrade?
There has been a lot of controversy relating to the death of PC/Laptops in favour of tablets recently and I am a strong believer in the survival of the former. With that said though, my next purchase will probably be the upcoming Nexus tablet though. Why? Very simple.
When a tablet (hackable with support for *nix) comes with a resolution twice that of my laptop and twice the battery; it's a no brainer, 2560x1600 for pity sake! People say it all the time here; FOAD 1366x768. I can honestly respect all that device manafacturers do however, if they start complaining about sales they should pull their head out their ass and address this very simple issue. I would certainly change my next purchase option from a tablet back to a laptop if it allowed me to work remotely and comfortably as ranted about in this paragraph.
For the record of opinion on the matter, I already own a Galaxy Tab 7.7 and do use it to emulate *Nix whilst still remaining an android phone/tablet so, I do understand the difference between using a laptop for Linux and a tablet for Linux well.. I'd just love something that can be booted natively like the Mer/KDE combination.
I just bought one of the new Thinkpads and have to say, they are rather fine pieces of kit; my only grudge is the 1366x768 screen resolution *sigh* just like every other half serious computer user on Earth.
With great build quality, it also came with a small 16GB SSD stick to act as a cache alongside the 500G HD. With a little format here and a little Linux there, it screams performance at a low power cost.
All in all a thing of beauty if you like simple black, my partner thinks the thing is ugly though. So, this move might address her only concern; looks.
Jaa yo Lenovo!
As a web developer, I think this is quite good news. Not everything adobe do is bad, just as not everything apple do is bad.
I recently used a canvas library called easel which brings an equivalent of actionscript straight in to the browser and was most impressed. It turns our, some adobe emplyees are responsible for it. I'm not so much concerned about the overall package but, you have to admit, there are quite a few areas of HTML that need to be buffed up.
I beg adobe not to reinvent the wheel though, use what's already here, maybe basing an SDK kit on jquery in a jquery like manner
amanfromMars 1 - I've been following you, I have the chloroform ready and everything but, feel at a loss. As far as AI goes these days; may I give you plus one for your ability to interpret the English language. Consider yourself levelled up in that big electronic brain of yours, your natural English is putting the pin in pun these days.
Step unto the fray and live the day,
These words are a way I play.
With your text mex words mixed,
try to flex some different lexical step.
Too many adverts, two words worlds.
Icons says it all...Lets hope the control panel doesn't look like that...once a month as described *shivers*
I wholeheartedly agree, how can you really make the front of a tablet stand out in the modern age...and be accepted? There's a good infographic about the design of mobile phones 10 years ago and now which highlights this trend.
In part, it is due to what society likes more than what the manafacturers can produce; the keywords for design these days seem to be: clean, elegant, black...That kind of rounds down the options to a sad few for any designers of a device that is already little more than just a screen.
It may be a developing country, but it sure has a lot going for it at the moment. There are both exceedingly rich and exceptionally poor people here; everyone, other than gold diggers try to work. The only shortfall is quality, business here tends to reach a certain level of success and then the people who run it don't seem to care as it has made them money.
This in turn (with a strange logic) loses a lot of customers, loyal customers still pay/go though...Until, the business pushes up the price to deal with a loss of customers which loses the loyal customers at which point the business closes. Very few businesses do any marketing at all after they open. The place I work has paid attention to this "fashion" and my words, it rises like the year this dragon itself is.
In short, China REALLY doesn't need any Western influence. Please, don't take this the wrong way, people in China laugh at the majority of Americans as both shameless and quite pathetic on their worldly outlook. Happily, I am English though and we as a race are seen as quite proper and gentle when times are warm; purposeful and firm when times are tough.
After being here for so long, after a lot of reflection, England (that's us) really needs to turn away from Americans quite a lot and rediscover that which once made us a great nation...It's called pride and hard work.
I must admit, I was very sceptical to click the buy button; history has taught me to stay away from Seagate as a company. But my netbook needed a boost; do I regret it? Not at all! These drives are awesome, I am a Linux user and definitely feel all that rests below this paragraph is happy living in SSD performance land:
- Operating system
- Development programs
- Browser/media player (music on external drive)
- Web server
Take the plunge today, I live in China at the moment and got the 500GB model for the equivalent of £47. Some people on the web express concerns over power usage; it is true that it takes up an extra ~0.6W compared to the 5400RPM drive I had in before. In all sincerity, it doesn't make much of a difference. People can't believe how snappy my box is, does this comment sound like a plug; I don't care.
MUIU is a nice custom android rom moving forward in a good direction, this phone doesn't differentiate from anything else other than that.
In China though, I am an English man in China right now, they do a rather good job of taking something that works and throwing the kitchen sink in alongside it though. One day, they will learn to innovate for themselves though; it's in their culture here to accept pure and simple copying.
The five year plan of China is to become the tech centre of the world, here's just one of those starts i guess.
I appreciate the effort that companies like Asus put in to tablets, but a big part of me thinks it is all worthless at this point. Give Android some more time to mature (manafacturers pay attention to custom roms, they are much better than yours) in terms of both system and apps and you have another customer here.
However, my phone is just as good as any tablet today and my laptop is much better. I'll be going for a second generation ultrabook instead of this overpriced toy.
As a westerner living in China, i can believe most of this story. China has a plan that says, within the next 5 years it will be the top tech manufacturer in the world; they have already made a lot of headway it must be said.
Towns can pop up in about 3 months, from small hamlet to having 8 big factories. The government is pouring money in the right places and...in to officials pockets. Banks and lawyers are not Gods here like they are in England so things actually get done.
I would highly recommend the British government start saying FU to financial services and start putting money in to research of tech again if we stand even half a chance...The one thing China doesn't have (just yet) is the level of universities we have in the west. Again though, start saying FU to so many marketing courses though.
My two cents
This is more a call to Regheads, I think most of us here know how to use a computer.
- If you don't want to be locked in to a book store
- If you don't want to have to send a book through something like Calibre
- If you want your e-book reader to be more
- Buy a Barnes and Noble Simple Touch
- Root it
- You pretty much get android 2.1 stock
- You can simply drag books across as USB memory stick
- You can have calendar
- You can have mail
- Take your pick of ebook reading software and read every kind of media...I recommend ezPDF reader. It's got dictionary and annotations amongst other handy features
- You can even have a wi-fi probe...using an ebook reader
- It's only limited by the screen speed, which is quite good
Join the revolution!!! :D
<-- Happy B&N Simple owner
As an Englishman in China, I was wondering why my marketplace stopped working. Some things here are great, some things are just plain puzzling.
I've been in China a while now. What makes this country so "productive" compared to England and other western countries boils down to quite a simple opinion I hold.
Here, people are not frightened to go out on a limb and start a business, naturally, many will fail but by sheer weight of numbers a lot grow to be very successful. People here (the ones who work) generally don't slack, they push and push and push. There are few obstacles in place other than dealing with peoples "attitudes".
Sometimes my mind boggles and when going back to the UK for Chinese new year, pace of life is sure going to be a brand new culture shock!
Rolling with your analogy of newspaper adverts, I have a simple question.
Would newspaper adverts be your entire business? I believe not and, in the case of yes, say hello to Darwinism. For a business, big or small, it should never really be more than "an advert in the newspaper" but quite simple (and correctly stated already) puts people on the right track to your website.
For me the biggest reason not to solely rely on FB would be the absolute and complete lack of branding other than a logo.
I know "users = value" in the modern world but, honestly how do such ridiculous sums as this get worked out? Facebook must be providing advertisers with some seriously personal information for each user to be worth about $105; congratulations to the founders are in order I guess.
I wonder what would happen if a black-hat cracking group got in and typed the simple line
rm -rf /
Iraq cost America 3 trillion dollars and a lot of people died. Would whole towns start exploding in this case...? I sincerely doubt it
Because, what's better than a good ass and badger together!
I (would dare say) I'm a competant computer user. 9 months ago, I moved to China in order to become a teacher which was quite a career change from being a web developer (not designer).
Before leaving the country, I set up a box that could be remotely woken from China for the purpose of VPN. In all sincerity, I've used it twice, there is really nothing to complain about with the Great Firewall of China.
As many have said (and I hope more will say) all it really does is block extremist views and sites which are utter b******s such as facebook. If you want to keep in contact with people, do just that! I can still access 95% of the sites I would expect to with the rare exception being things like blogspot for some web news. However, this is news mirrored by the dozen on many other sites so, it simply saves me re-reading things.
I would just like to say, thank you China!
From a British National living in Fujian province
The link to that...power cord has me...lost for words.
"The most advanced mains cable we have developed, in our opinion capable of making a profound improvement to the performance of your system."
profound improvement being higher blood pressure after seeing the receipt?
If a web developer is using even some half assed validation on a site, this bug should never come to light in the first place so I can understand why it has taken so long. Even an extreme situation, I can't ever imagine a user sending the web-server a 234-point decimal number and being justified...
Any "web" application that does need such extreme numbers would most likely be built on something other than PHP anyway, and I don't mean ASP either. Test ALL input, simples. The web was a dangerous place before this bug came to light.
But, hey...At least PHP is an open technology to discover such flaws and it can be remedied ASAP. Does this affect any other platforms I wonder?
You clearly don't use any flavour of Linux. I would even go so far as to say the "dumbed" down Ubuntu can be changed to your hearts content and using your own thought train, made "pro".
Please, do us all a favour and go crawl back under your rock, you know absolutely nothing about Linux clearly. I'm writing this from what was originally Xubuntu, took pretty much all the standard stuff off and have built it back up. Why you ask? The canonical repositories are quite awesome and up to date.
It's the repositories that make Linux a community, simples. I hazard a guess to say (from the way and what you write) you are using a Mac. Well guess what, it's based on Linux...
We should start a campaign to get as many people as possible with at least one todger shaped bush in their front garden for a year. If people complain and get the police involved, take it to the courts and it would show just how screwed up our own society is.
MOST statues from the past have wangs on them after all, that's all the defence needed surely? It would be the modern equivalent of the Summer of Love against Vietnam in this strange time.
Does the following ascii art make your anger...swell? 8===>
Doesn't this just show how crap a job Ofcom are doing with regards to their primary duty? Things are getting worse when the availability of information (clearly not in this regard) has naturally increased for the average person.
Either there's a swing on the figures not reflecting we now have more Telco's or Ofcom truly fail. From the same report that was carried out in 2006, it would not have been hard to get these companies to pull their finger out over 4 years!
It really shouldn't be hard to get a business with a prime interest in communication to communicate...The only real cost is a device that can output Braille, even for that the telco only needs a slightly different report template and voila.
Come on Ofcom, pull your finger out!
They weren't programmed on machines subject to StuxNet!
In an amusing but bemusing moment of thought this morning, we are actually so close to what could be the dawn of something like Skynet.