similar to: Re: Programming ...

Many thanks to the moderator who pointed out errors and suggested the correct information on this post. Over half the ideas are due to him. ;) Don't forget this is about writing your own daemon or TCP program. Some of the ideas here will not happen with today's software that has been hardened. It is presented to prevent your software from being taken advantage of. Most often,

How does one ideally handle and display multidimenstional contingency tables in R v. 2.6.2? E.g.: > prob1<- data.frame(victim=c(rep('white',4),rep('black',4)), + perp=c(rep('white',2),rep('black',2),rep('white',2),rep('black',2)), + death=rep(c('yes','no'),4), count=c(19,132,11,52,0,9,6,97)) > prob1 victim perp

As will be seen from these code fragments (and experiment) a noclobber option in bash or pdksh (or ksh on AIX) will do limited clobbers. 1) They will clobber named pipes. (mknod /tmp/predicted p cat /tmp/predicted > $stolen cat $switched > /tmp/predicted ) & 2) They will clobber symlinks. ln -s /some/new/target /tmp/predicted 3) They can be raced.

Standard apology if old... This demonstrates a resource starvation attack on the setuid root passwd(1) program. In the case I tested it was the Red Hat Linux passwd-0.50-7 program without shadowing. #include <stdio.h> #include <sys/time.h> #include <stdlib.h> #include <unistd.h> #include <sys/resource.h> main () { struct rlimit rl, *rlp; rlp=&rl;

Hello, In a previous email, Matthias mentioned that register pressure estimates in the machine scheduler are not absolute; they only account for the registers that are used in the block.I assume that he meant that registers that are live-through (both live-in and live-out) are not accounted for in register pressure calculations. If a register is either live-in or live-out but not both, it must be

---------- Forwarded message ---------- Date: Tue, 30 Nov 1999 12:14:09 -0800 (PST) From: David Cantrell <david@slackware.com> To: slackware-security@slackware.com Subject: Security Patches for Slackware 7.0 Available There are several security updates available for Slackware 7.0. We will always post bug fixes and security fixes to the /patches subdirectory on the ftp site:

Dear All, I am sure this is a one-liner, but I cannot find the R command to generate the LaTex symbols \perp and \parallel. Consider for instance the figure (one can use any kind of data for the plot) pdf("friction_linear_chain_perpendicular.pdf") par( mar = c(4.5,5, 2, 1) + 0.1) plot(data[ ,1], data[

Kyle Ferrio: > Unfortunately, his last act was to rm -rf /var/log so I don't know > exactly how he got root. Definitely a remote exploit, though. > Does anyone have advice on mirorring syslog to "secret" locations, > preferably encrypted? Losing logs makes it hard to do a risk assessment. > For all I know, I'm still vulnerable after updating bind. As for safe

Hey, Does anyone know of an equivalent to the LaTeX \perp (perpendicular) symbol for adding to R plots? Parallel is easy enough ("||"), but I haven't been able to find a way of adding perpendicular. The plotmath documentation doesn't mention how to do it, so I'm inclined to think that it doesn't exist - but surely there must be some way of achieving the desired result,

After the recent attacks on the major servers on the web my ISP has decided to stop all ICMP messages from his ISP. I have red the RFCs and it seems that he cant do that... As a result pings and traceroutes will not work. I need a friendly person out there to tell me a way to break the news to him that he has to allow ICMP packets through his network... any suggestions would be helpfull [mod:

Dear R-list, Hi everyone, Im trying to make an analysis of multidimensional contingency tables using R. I' working with the Agresti example where you have the data from 3 categories. The thing is how can I do the analisys using the G2 statistics. Somebody can send me an Idea? I attach the program where you can find the data. Best Regards, > prob1<-

While sudo is used to give fairly trusted users the ability to run programs with root privs, there exists a hole in the one in the RedHat contrib directory (sudo 1.5.9.p4) which allows a minimally trusted user to obtain full root access and privilege. If a user is given the opportunity to run any program, that user can fool sudo and obtain any level of privilege for any executable. Assume

Hi, I am building my own TCP daemon for easing some routine admin stuff... I am no expert on security,. I would really appreciate it if someone sent me some pointers to writing TCP daemons that are hacker-proof( i know there is nothing like that...but I do not want to be making mistakes in coding that are well known.. ;) The daemon runs as root....so that is why I am woried.... Thx, Arni

I made a mistake in my previous email what I want to know about is the component called lli which is part of the LLVM compiler infrastructure. The command lli allow for programs compiled to bytecode to be run directly. 1. How does the lli keep itself from being overwritten by a misbehaving program? 3. does it support multithreading? 4. does lli allow for multitasking or do you just ran one VM

Hi, I am trying to draw a perpendicular line from a point to two points. Mathematically I know how to do it, but to program it, I encounter some problem and hope can get help. Thanks. I have points, A, B and C. I calculate the slope and intercept for line drawn between A and B. I am trying to check whether I can draw a perpendicular line from C to line AB and get the x,y value for the point D

Hi all, I just arrived in Italy from Cebit, qhere I spoke with digium and Beronet people. They told me to try to use the mISDN stack to drive beronet and the new upcoming digium ISDN Cards. SO I searched, find http://www.beronet.com/download/card_installation_guide.pdf, and I immediately got the error: asterisk01:~ # cd /usr/src/install-misdn/ asterisk01:/usr/src/install-misdn # make install

Greetings, I had downloaded c6 64 bits ISO, selected all packages to be installed. One dependency warning relating to Emacs appeared. I chose to continue. Unfortunately I was multitasking and did not note down the package name Twice this issue appeared -- first time around aborted install due to power cut. Did anybody else face this situation? Also is there a better way with just DVDs and not

I decided I wanted an "infinity" in some label text. Many of these symbols should probably be incorporated in a different way, but they don't seem to do any harm as is. *** plotmath.c.orig Fri Sep 25 17:21:33 1998 --- plotmath.c Fri Sep 25 17:46:57 1998 *************** *** 183,188 **** --- 183,232 ---- "psi", 121, "zeta", 122, + "therefore",

We run a third party application that creates an inordinate amount of subdirectories in a single directory. To speed up I/O, I wanted to set the T attribute on the directory that will hold the subdirectories. The "chattr +T /usr/local/lepus-bb/a-0607" command returns status 0, but when I verify the setting, the attribute isn't there: # lsattr -d /usr/local/lepus-bb/a-0607

Hi, I went ahead and implemented something. However: - I cannot garantie it gives correct results since, unfortunately, the data used in Syrjala 1996 is not published along with the paper. To avoid mistakes, I started by coding things in a fast and simple way and then tried to optimize the code. At least all versions given the same results. - As expected, the test is still quite slow