Posts by Ramazan

Why you shouldn't trust a stranger's VPN: Plenty leak your IP addresses

Re: Tor browser.

TOR is just a TCP VPN, of course the same IP discovery via side channel methods apply, even to the greater degree.

"Blame the broswer makers for this"

There's no profit in doing so. Browser writers must not be blamed, they must be prevented from writing browsers.

Re: Tautological tautology

To the point. But it's not VPN who's to blame, it's JavaScript and browsers, every last of them. Even if a browser doesn't use WebRTC, it still has a lot of means to submit user's ID (MAC, geo etc) to Apple/Google/MS servers.

Linux kernel community tries to castrate GPL copyright troll

I'd very much preferred to see Google fucked by McHardy over Android, because some Nexus images don't build.

Samsung to let proper Linux distros run on Galaxy smartmobes

And a special guest is invited to this fest ... ta-da! Patrick McHardy, please come in and feel yourself at home. I mean, fuck Samsung hard.

Resellers on Surface: Yeah, go ahead and kill it. What do we care...

Microsoft told us previously that “Surface continues to drive category growth

continues to drive category growth down, fixed it for ya.

Foxit PDF Reader is well and truly foxed up, but vendor won't patch

Re: xpdf still works though

gentoo was tired of repeated xpdf's CVEs and dumped it. mupdf is recommended in its place.

https://security.gentoo.org/glsa/201402-17

Re: the whole screw-you-if-you're-not-running-Gnome attitude.

mupdf is quite small and depends on neither gnome nor systemd. It's the recommended pdf reader on Gentoo since xpdf's demise.

https://security.gentoo.org/glsa/201402-17

re: All these years of feature creep and Foxit still cannot send email?

When systemd incorporates PDF reader features, Foxit days are numbered. Systemd is light years ahead of anything in terms of bloat speed.

Re: Okular

is it a standalone viewer or does it depend on KDE/libs?

P.S. me uses mupdf on Gentoo...

Re: suggestions for whats the best pdf Reader

xpdf got kicked out of gentoo due to multiple vulnerabilities. mupdf is generally recommended as a replacement.

https://security.gentoo.org/glsa/201402-17

What code is running on Apple's Secure Enclave security chip? Now we have a decryption key...

What code is running on Intel's Management Engine chip?

Surfacegate: Microsoft execs 'misled Nadella', claims report

Re: Worse, with Apple, you at least get a decent UNIX system

kind of. It doesn't have systemd at the very least. Other than that there were better, lighter and thinner notebooks from Sony.

- "Apple has been shipping Powerbooks/MacBook[Pro]s for nearly two decades that have been thinner than any competing laptop, thinner for the first decade that was"

- "You know nothing, Jon Snow"

:)

Debian patches plenty in new version 9.1

Re: I'm fairly certain there is one patch ...

The same patch Gentoo applied to xpdf, only this time versus systemd.

https://security.gentoo.org/glsa/201402-17

Crazy bug of the week: Gnome Files' .MSI parser runs evil VBScripts

Re: try to gain root

on a properly configured grsec system gaining root won't give you much.

Re: Please tell me it doesn't have a dependency on WINE

on Devuan Linux there are basically 3 sorts of dependencies: Depends, Recommends and Suggests. Most probably gnome thumbnailer "Suggests" wine so wine won't even be installed by default.

Re: sudo apt-get purge gnome-exe-thumbnailer

if the package is a constant source of CVEs, the problem should be fixed on distro level, like this one for example

- https://security.gentoo.org/glsa/201402-17:

"Resolution: Gentoo has discontinued support for Xpdf. We recommend that users unmerge Xpdf"

Why can't you install Windows 10 Creators Update on your old Atom netbook? Because Intel stopped loving you

Re: When charging, it charges the display battery before the keyboard one.

Multiple batteries are supported and most probably "charge BAT1 before BAT2" logic is implemented outside of OS, i.e. in firmware. Just boot a LiveCD image of any Linux distro you like from a USB thumbdrive and check what works and what doesn't.

Re: Similar to that, I have an Acer AspireOne

Does it blanks screen and freezes when on battery while working OK on PSU?

Dear racist Airbnb host, we've enrolled you in an Asian American studies course

Re: What she can't do is act on it to discriminate against someone.

Really? She can legally buy a gun and [illegally] kill every Asian she can aim on. Probably it will end exactly this way someday.

All your bass are belong to us: Soundcloud fans raid site for music amid fears of total collapse

will put us on our path to profitability

I'll be with you darling soon,

I'll be with you when the pigs start flying

We continue to be confident

the spokesperson told El Reg... "We continue to be confident that if we just flog this dead horse harder it will put us on our path to profitability and ensure SoundClowns' long-term viability."

BTW, guys, you didn't do a followup to this article:

https://www.theregister.co.uk/2008/11/06/ginger_nuts/

This had been covered on wikipedia: "Noko claimed that the money was a gift after she and Baker became lovers. Baker replied, "I've a scar that only a woman who had a thing with me would know. It's there and she doesn't know it's there".[18] Noko pled not guilty, but was convicted of fraud and in October 2010 was sentenced to three years of "correctional supervision," a type of community service. Baker responded to the sentence as "a travesty".[19]"

P.S.

Compare this: Cream - Sunshine of Your Love - Live Early Prototype - https://www.youtube.com/watch?v=elmtuLnmthQ

to this:

Cream - Sunshine of your love - Royal Albert Hall 2005 - https://www.youtube.com/watch?v=vyftaay-pFA

Looks like the Cream played it twice faster back in the days...

Speaking in Tech: What is a Windows 10 licence worth these days?

Does original X-Com / UFO work on Windows 10?

Apple building data centre in China to comply with tough cybersecurity laws

the same in Russia (WRT Apple and citizens' data)

Ubuntu Linux now on Windows Store (for Insiders)

Re: while it's in this frozen state, it's effectively marked as 'dirty'.

You know, if you mount frozen ext2/3/4, you'd screw it. That's why you MUST NOT mount / from initrd scripts when doing resume-from-hibernate.

Looks like only systemd-tainted distros get Microsoft approval

Trump backs off idea for joint US/Russian 'impenetrable Cyber Security unit'

Re: USSR was, in many ways, a lot less dangerous than Putin's nationalist Russia.

nationalist? Meh... Dangerous? Neither. ATM at least. But may become deadly dangerous soon enough, as they are scared shitless by NATO buildup and anti-ballistic missile deployments. Most probably they'll increase thermonuke warhead numbers to tens of thousands including medium range varieties specifically for Poland and other "friendly" neighbours.

Re: WTF is 'Obaka' supposed to mean anyway?

baka means "stupid" in japanese. O'baka is a honorific form, maybe smth along the His Stupid Majesty lines.

Re: @CrazyOldCatMan Hitler and Stalin had a nice pact

Hitler and Stalin fought a proxy war in Spain in 1936-1939 and USSR lost that war, clearly the pact (Molotoff-Ribbentrop) doesn't mean they were friends or allies.

Multics resurrected: Proto-Unix now runs on Raspberry Pi or x86

Re: OS designers were still unaware of the security implications,

"and threw away segments because of the performance issues"

https://en.wikibooks.org/wiki/Grsecurity/Appendix/Grsecurity_and_PaX_Configuration_Options:

PAX_SEGMEXEC

This implementation is based on the segmentation feature of the CPU and has a very small performance impact, however applications will be limited to a 1.5 GB address space instead of the normal 3 GB.

May the excessive force be with you: Chap cuffed after Star Trek v Star Wars row turns bloody

As a TV series, Babylon 5 beats all non-anime space operas hands down. Nothing is really close. If we add animated series to the question, Futurama may look better than B5 for some, and Knights of Sidonia is clearly the best space opera / sci-fi series of all times.

While USA is distracted by its President's antics, China is busy breaking another fusion record

Re: just like you get from the French, the Americans, the Russians, Microsoft, etc.?

"As member nations, they all have equal access to the shared pool of 3 finger salutes developed by the project".

Perl devs solve ancient Riddle: 'What's a vuln we caught from Oracle?'

Re: I remember *other people's* perl with the puzzled expression

s/perl/code/

Create a user called '0day', get bonus root privs – thanks, Systemd!

what to do with buggy packages

https://security.gentoo.org/glsa/201402-17

PCs will get pricier and you're gonna like it, say Gartner market shamans

PC will get pricier if you value your privacy

https://libreboot.org/suppliers.html

https://minifree.org/product/libreboot-d16/ -- €5,350.00–€7,500.00 depending on configuration

Re: 1080p....

When I run Xorg with VESA driver and Xorg with intel driver on the same PC, they use different display DPI settings (and therefore different default font sizes). So I had to edit xorg.conf and set screen size manually. Maybe it's possible to do the same in Microsoft Windows, if you don't like how Microsoft figures out display scaling on 13" 1080p screen...

Watch: Armed Ukrainian cyber-cops raid MeDoc in NotPetya probe

http://www.bbc.com/future/story/20170704-the-day-a-mysterious-cyber-attack-crippled-ukraine -- please note the "government mandated software" phrase there. This "government mandated software" is MEDoc. So the title of this theregister article should be read as "Ukraine authorities raid government mandated s/w maker in NotPetya investigation".

Re: accounting company of such a size that doesn't care

Tax office in the Ukraine stopped accepting "paper" tax declarations around 2012 and only takes them in digital format with crypto signature. The law was instated by them, but software was none of their concern, so several underqualified companies appeared on the scene with their proprietary paid accounting/tax "suites" or subscriptions. There are some s/w with limited functionality which are free, but they are closed source too. No opensource tax software exist in the Ukraine that's able to send tax declarations in the format as required by law, and this is a root of the problem.

Tax office does have a web site, but they don't accept tax declarations via web. You have to install closed source s/w to be able to send your tax declaration. And each time you need to do it (every year or every quarter-year), you must update your tax s/w first because some forms have been changed or whatever.

Basically proprietary s/w with mandatory quarterly update cycles was forced onto users by the Ukrainian govt, and the govt found nothing better than to lay blame on proprietary s/w devs when shit hit the fan.

Kaspersky repeats offer: America can see my source code

Re: and German rocket scientists

Nazi scientists to be precise. The same's true for USSR, they also employed all the talented nazis they could get their hands on. World hadn't stop spinning, and all the exterminated jews made an extra spin in their graves for that.

Linux 4.12 kernel lands: 'Go forth and use it' quoth Linus Torvalds

Re: It is utterly ridiculous that drivers ship with a kernel. Even Windows...

I've got a great idea. Don't ship any drivers with Windows. That way nobody will be able to install it on anything and the poor cripple will die the sooner the better.

Virus (cough, cough, Petya) goes postal at FedEx, shares halted

Re: More likely is a substantion bonus and as much vodka as the authors could drink

as much vodka as the authors could drink in GULAG. If the authors are known, it's still possible for USA or Ukraine to get them jailed or extradited and jailed or caught abroad and jailed.

Kaspersky Lab US staff grilled by Feds in nighttime swoop

Re: Trump will not even be able to say "Hi boss" when he meets Putin

it's time to either drain your medicine cupboard or at least change the dosage. What an idiot.

Don't panic, but Linux's Systemd can be pwned via an evil DNS query

Re: VM and container users where they need to shutdown and reboot rapidly

Are they running a reboot farm?

Re: HOWEVER, this is just a bug

The same could be said in defence of xpdf in Gentoo, but they removed it from their repo.