Tuesday, January 21, 2003


From the All-That's-Newsworthy Dept:

A lot of really interesting news happened today, and, per my custom, I link to some of it.

The thing I can't link to, of course, is that I'm renaming this blog. I got an email today from the president of this company, who (understandably) has a bit of an issue with the current name. Very polite, respectful, not nasty at all. So, in deference to him, I'm changing the name.

I've been thinking about renaming this site for the last month or so anyway, and here's my chance.

In the archives you may still see references to the old name, or RfR. It might be confusing to new readers, but I don't feel like going back and fixing them all. Plus I don't think my readership is big enough to justify it.

hacker = hacker + boy. I'd say that just about sums it up. (The pun actually was not intentional, but it works )





From the Free-As-In-Freedom Dept:

The GNU-Darwin Distribution 1.0: A Perspective from the Founder [kuro5hin.org]

The Gnu-Darwin Project mixes Free Software with Politics in a fairly vocal way. They've also made good progress on making Darwin a viable solution under x86.





From the For-The-Archive Dept:

Seth Dillingham: Thread-based Global Variables in UserTalk. [Scripting News]

Usertalk powers Radio, so it's cool that way. Posted here to help someone (possibly me) in the future.





From the More-Statistics Dept: Plan for Spam, Version 2 [Slashdot]

It's not the getting spam I mind (although my provider may think differently), it's the seeing it that annoys me.

My mail is filtered through the excellent SpamSieve. All of the spam goes into the trash - where I like to see it.





From the Got-Everybody-Fooled Dept:

Model Linux Geek an MS User Too?. By Robert McMillan. [Wired News]

Or maybe from the "Proving Microsoft Doesn't Think Of Everything" Dept, but that sounded too long.





From the Comments-Anyone? Dept:

Automated openness versus the script kiddies. [0xDECAFBAD]

An essay on flow vs (comment) openness. A popular website is probably popular for a reason, but that popularity probably comes with the price of too many idiots!

It's sometimes interesting living somewhat on the edge, here at blogland. It's still mostly undefined territory (although it's certainly more feature-rich then it was even a year ago), and interesting to watch what's coming around the next corner, how the next feature, the next killer idea will be implemented.

Read More About It:





From the Secure Dept:

Remote Root Exploit in CVS [Slashdot]

Mac OS X ships with version 1.10 (at least my version of the dev tools ships with that version. I was going to update to the latest version today, but it slipped my mind). The attack can be performed with CVS 1.11.4 or earlier running on BSD, Windows, Solaris or Linux.

The CVS commands "Update" and "Checkin" (I'm not sure if the author means "Add" or "Commit" here) are vulnerable.

If you have an CVS server that anonymous people can get to (such as an open-source project) it would be a good idea to patch your CVS. Of course, this also affects regular users on your CVS server - however, if you're working on a project with someone you should know and trust them enough to not do things of this nature.

Of course, this brings up the hairy issue. Since OS X is Unix, you could (in theory) download, configure, patch, make and install this yourself. In theory. Personally, I'm never sure what extensions Apple has added, or how much engineering time it takes to build and futz with.

Most of the unix packages I've tried to build from source were easy. Some, on the other hand, were very hard, given Apple's "unique" stance on some things (frameworks, dylibs, even where everything is in the filesystem). Frustrating on the one hand, but, on the other hand, somewhat understandable. Just means I have to learn more in order to be able to port the hard stuff

Summary: If your code is public, you should pay attention. If it's only available to a private team, then you should be OK.





From the I'm-Not-Dead-Yet Dept:

Chimera Not Dead Yet [MacSlash: A daily dose of Macintosh News and Discussion]

Wohooo!!!! Glad to hear it!





From the Cocoa Dept:

Evan Jones has posted RowResizableTableView, an LGPL package with subclasses for NSTableView and NSOutlineView that support variable-height rows...
[Michael Tsai's Weblog]

I haven't played with Cocoa in a long time. When I have time I've been working a little bit with AppleScript Studio. Almost ready to release an application that uses it, actually.





From the Taming-The-Jungle Dept:

Editing Safari Source in BBEdit [Daring Fireball]

The low down on Safari's scripting support is that it's ok but not excellent. At least it has scripting support, and that's nice.