selan - Slashdot User

Comment Correction (Score 4, Informative) 379

by selan on Thursday December 31, 2009 @02:16PM (#30607916) Attached to: TSA Subpoenas Bloggers Over New Security Directive

This is an Associated Press story published on the New York Times site. The NY Times did not report this.

Comment Read the GPL FAQ (Score 2, Insightful) 174

by selan on Sunday July 19, 2009 @05:15PM (#28750237) Attached to: A GNU/Linux Distro Needing Windows To Install?

"If distributing GPL'ed software by means that completely preclude it from being used without Windows is not a violation of the GPL, should it not be?"

The GPL FAQ says no.
I would like to bundle GPLed software with some sort of installation software. Does that installer need to have a GPL-compatible license?
No. The installer and the files it installs are separate works. As a result, the terms of the GPL do not apply to the installation software.

Submission + - SquirrelMail Repository Poisoned (beskerming.com)

Submitted by

SkiifGeek

on Tuesday December 18, 2007 @11:05AM

SkiifGeek writes: "Late last week the SquirrelMail team posted information on their site about a compromise to the main download repository for SquirrelMail that resulted in a critical flaw being introduced into two versions of the webmail application (1.4.11 and 1.4.12).

After gaining access to the repository through a release maintainer's compromised account (it is believed), the attackers made a slight modification to the release packages, modifying how a PHP global variable was handled. As a result, it introduced a remote file inclusion bug — leading to an arbitrary code execution risk on systems running the vulnerable versions of SquirrelMail.

The poisoning was identified after it was reported to the SquirrelMail team that there was a difference in MD5 signatures for version 1.4.12.

Version 1.4.13 is now available."

Slashdot Top Deals