stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Glitch in C++ libraries allows a DoS attack against ISAPI







Glitch in C++ libraries allows a DoS
attack against ISAPI

Glitch in C++ libraries allows a DoS
attack against ISAPI
04/10/2004 06:24 AM

CNET Apr 10 2004 10:12AM GMT




This is a GrokNews Entry: (what is grok?)





Similar Items

Glitch in C++ libraries allows a DoS attack against ISAPI

Grok Headline matches for Glitch in C++ libraries allows a DoS attack against ISAPI

Tracing ISAPI Extension in IIS 6.0


Tracing ISAPI Extension in IIS 6.0 01/16/2004 01:02 PM

Woo.  I just found this gem of an IIS 6.0 feature while hopping around for info prior to writing an ISAPI Extension for IIS 6.0.  It's called IIS 6.0 Enterprise Tracing for Windows:

Windows Server 2003 includes Enterprise Tracing for Windows (ETW), a new framework for implementing tracing providers that can be used for debugging and capacity planning. IIS 6.0 implements a number of providers to trace key transitions and the progress that an HTTP request makes as it moves through the IIS service framework. These providers include the following:

  • HTTP Service Trace. This provider traces new connections, new HTTP requests from a given connection, HTTP kernel cache hits, application pool routing, and HTTP request completion.
  • IIS: WWW Server. This provider traces the transition of a request from HTTP.sys to the worker process, start and stop events surrounding Common Gateway Interface (CGI) requests, and the transition of a request back to HTTP.sys from the worker process. This information reveals the type of request that is being processed.
  • IIS: SSL Filter. This provider traces calls into and out of the SSL Filter, which is used for SSL traffic.
  • IIS ISAPI Extension. This provider traces the transition of a request into and out of ISAPI extension processing.
  • IIS ASP. Traces the start and completion of the execution of an ASP request.

These tracing providers allow you to follow a request through all of its phases. This information is very useful in the problem isolation phase of troubleshooting. For example, ISAPI filters can often cause delays or hangs in HTTP request processing. The tracing functionality can help to determine which ISAPI filter is causing the delay for a given request.

Nice!  It's a bit beastly to use and there isn't a GUI tool to display the trace logs prettily so my eyes won't cross, but it's will come in handy when I find myself up the creek wearing a blindfold.


The amount of office space that
corporations allocate to their libraries
has fallen by 8.36% over the past five
years, according to a new survey of
corporate libraries "Corporate Library
Benchmarks, 2004-05 Edition" ISBN:
1-57440-069-X.


The amount of office space that
corporations allocate to their libraries
has fallen by 8.36% over the past five
years, according to a new survey of
corporate libraries "Corporate Library
Benchmarks, 2004-05 Edition" ISBN:
1-57440-069-X.
09/03/2004 02:51 AM
Reports on results of a major survey of corporate and other business libraries. Gives extensive data on management policies and practices and details on spending trends for salaries, electronic and print materials, and library services. [PRWEB Sep 3, 2004]

Glitch, glitch, glitch, but not everyone
had complaints


Glitch, glitch, glitch, but not everyone
had complaints
07/25/2004 09:03 PM
SiliconValley.com Jul 26 2004 0:36AM GMT

Merge old iPhoto libraries on CD with
iPhoto 5 libraries


Merge old iPhoto libraries on CD with
iPhoto 5 libraries
03/19/2005 02:40 AM
I had several iPhoto libraries burned to CD backups from iPhoto 3 or 4 that I wanted to merge with my nearly complete iPhoto 5 library. However, because I burned the libraries directly to CD from the Finder or Toast, and not ...

""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." "


""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." "
04/13/2004 10:28 PM

It’s the Libraries, Stupid


It’s the Libraries, Stupid 06/09/2004 11:39 PM
Via Jeff Dillon, some insightful words on programming in Java and in the C#/.NET/Mono ecosystem. I hadn’t thought about it that way.

England Libraries May All Get Wi-Fi


England Libraries May All Get Wi-Fi 12/04/2003 01:07 PM
The majority of libraries in England already have broadband access but now the government is working on adding Wi-Fi: Most of the libraries in King County, outside of Seattle, have Wi-Fi. It's a great, low-cost way for libraries to offer Internet access without having to provide computers for everyone. My library always has a line of people waiting to get on its computers so perhaps with Wi-Fi some people could come in with their own computers to use the Internet. But I wonder how many of the people I see waiting in line there actually have laptops that they could bring with them instead....

2D Graphics Libraries


2D Graphics Libraries 05/05/2004 07:45 PM

While platforms these days have fairly good 2D graphics support like Quartz on OSX, GDI+ on XP, and , and Gnome Canvas, developers like me often have to use third-party libraries for whatever reasons.  On Win32, for example, GDI+ support is missing in legacy platforms which means either giving up on fancy graphics, redistributing GDI+ binaries, use a third party library, or writing one yourself.  Writing one yourself is fun (I have done it a couple of times over 20 years) but, unless it offers some unique features, you'll always end up migrating to a third party library.

BTW, Flash has an excellent 2D graphics engine but it's lacks an API so it's like a sports car without a driving wheel.  Yes, you can embed the Flash ActiveX and generate SWF on-the-fly but it's unwieldy for dynamic interaction and even handling gets tricky.  Embedding Adobe SVG ActiveX is just as unwieldy if not more.

While there are proprietary 2D engines out there, typically written by a few guys at a small company, they tend to disappear within a couple of years, either bought by companies (i.e. Apple, Adobe, Macromind, and Microsoft), or abandoned out of lack of interest or workable revenue model.  Besides, they charge fairly steep fees so I tend to avoid them.

Out of all the freely available 2D libraries out there, Libart stands out in features and quality. It offers fast anti-aliased rendering and it's use in Gnome Canvas over the years means most of the bugs have already been stepped on.  Libart is also used to drive librsvg, a SVG engine, and Java 2D, Java's graphics API, although Sun made extensive changes to tap hardware acceleration.  While Libart can and has been used cross-platform, it's not exactly cakewalk to use in non-Linix platofrms.  Cairo has some interesting features and rising interest could mean it will replace Libart someday, but it's still in development.

Third-party 2D graphics library I really like these days is Anti-Grain Geometry (AGG) which, although dormant for the last two years, has been rejuvenated with the released of version 2.1.  AGG is written in C++ and uses templates extensively like ATL does.  AGG is lightweight, very fast, flexible, and full of features.  It even comes with a partial implementation of SVG viewer as an example.  AGG supports Win32, X11, and SDL as is.  It doesn't yet support features variable stroke effects like Creature House's Expression 3 engine and Fractal Design's Painter support but then it's just me being unreasonable. :-)

I should note that subpixel graphics was first done 20 years ago in Word Handler to display 70 columns of hi-res text on Apple II.Silicon Valley Systems, the company that published Word Handler, was based just 5 minutes from where I live now and I enjoy fond memories of working there every time I pass by the old office on El Camino.  I guess everybody remembers their first job.  LCD screens were just starting to replace LED on calculators at the time, so Steve Gibson and Microsoft ClearType can claim to be the first to use subpixel graphics on LCD screen.  Lenny Elekman, where are you now?


Libraries and the Internet


Libraries and the Internet 12/19/2004 03:00 PM
Kudos to Google and its new university allies -- including my alma mater, the University of Michigan, as well as Harvard, Stanford, and Oxford -- for their exciting project to open the stacks (Wall Street Journal, via Paul Kedrosky). It's a great day for the dissemination of knowledge! Bloggers from these institutions are relaying the emails received from their administrators: ...

NB Parser Libraries


NB Parser Libraries 06/11/2004 09:55 AM
Project started

Merlin Libraries


Merlin Libraries 06/06/2004 05:02 AM
Merlin Libraries v0.1.103 (unstable) Released

Libraries 8, Amazon 0


Libraries 8, Amazon 0 12/09/2003 12:13 PM

Have You Ever Wondered....

"Have you ever wondered if the library were like Amazon.com?" [The J-Walk Blog]


slack-get 0.2 (Libraries)


slack-get 0.2 (Libraries) 05/04/2004 04:41 PM
A tool like 'apt-get' for Slackware.

New IM Record in Libraries


New IM Record in Libraries 03/14/2005 06:23 PM

I've been so short on time lately that I've been trying to avoid using what little blogging time I do have to simply repost what other library bloggers are already putting up. This one, however, was just too good to pass up.

when was the last time you had this kind of response to a new library service?

"Brian didn’t give me permission to publish a portion of his email, but I’m so excited about it I’m going to throw caution into the wind. He wrote [emphasis mine]:
'Rule number 1: Don’t send out IM reference fliers to every middle school and jr. high classroom on the same day!

Had to have been at least 100 IMs in the first 2 hours after the kiddies got home. For a while, I had about 20 IM windows up at once.' "

Someone recently observed that there are a lot of Eeyo res in the library community, but I think we can officially declare IM reference a Martha-Stewart-good-thing for (at least) public libraries and move it to Pooh status.

Cost of purchasing the AIM software: $0.
Cost of staff time to "man" the AIM service during those two hours: already paid for.
Satisfaction of having 100 kids respond positively and view the library in a new light: PRICELESS.


YSL Coding Libraries


YSL Coding Libraries 12/11/2003 06:12 PM
Transfer of CVS repository in progress

PlanetaMessenger.org Libraries


PlanetaMessenger.org Libraries 11/01/2003 10:43 AM
JMML 0.4 released

slack-get 0.3 (Libraries)


slack-get 0.3 (Libraries) 05/26/2004 10:49 PM
A tool like 'apt-get' for Slackware.

Salon in Libraries?


Salon in Libraries? 03/19/2003 10:45 PM

Last year I said I thought Salon should look into licensing content to libraries, and now they're finally doing something about it. Adrienne Crew, their Content Licensing Manager, sent me the following:

"Thought you'd like to know that Salon's Premium Institutional Subscription program for libraries is finally up and running.... Currently we are offering a one year subscription in the $300-400 range and feeds all access to the articles on the site via an IP authentication system or a single password."

More details as I get them.


Essential in Libraries?


Essential in Libraries? 04/27/2004 10:48 PM
SMS an Essential Communication Tool

"The Mobile Data Association (MDA) reports that 2.1 billion text messages were sent in March 2004 in the U.K which is a 25% rise on the total from the same month last year.At present, on average, around 69 million text messages are sent each day in the UK.This article from the BBC states.'It is evident that in the last five years texting has grown from a popular craze among teenagers to an essential communication tool.'
Text messaging reaches new high" [Smart Mobs]


'UK libraries out of use by 2020'


'UK libraries out of use by 2020' 04/26/2004 09:46 PM
The public will stop using libraries if visitor numbers and book loans continue to fall, according to a new report.

Echidna Libraries


Echidna Libraries 07/15/2004 07:16 AM
Added 8Bit Targa Support

"http://p2p.libraries.psu.edu/"


"http://p2p.libraries.psu.edu/" 11/18/2003 03:32 AM

Computers in Libraries -- Wednesday


Computers in Libraries -- Wednesday 03/19/2005 02:36 AM
I went to four sessions yesterday in addition to the keynote and went to the dead technologies night session, and I wonder why I'm tired when I get to the...

Enlightenment Foundation Libraries


Enlightenment Foundation Libraries 08/02/2004 05:18 PM

Arran4's Libraries (A4lib)


Arran4's Libraries (A4lib) 08/20/2004 09:28 PM
Project registered

Forcing SQL Performance Libraries into
WMI


Forcing SQL Performance Libraries into
WMI
06/03/2004 03:15 PM

Trusting Libraries for Your Aggregator


Trusting Libraries for Your Aggregator 05/24/2004 01:41 AM

TV News in a Postmodern World: The Busine$$ of RSS

"Want a glimpse of tomorrow? Innovators Bill French and Harry Hayes are SmartStream Alliance™ and have a product that's so compelling that news executives of every sort will be scrambling to be first in their market with it....

RSxStream is a sophisticated and ingenious software engine that takes RSS, Atom, RDF, XML, any other sort of feed or data stream, or any other content that lives on the Internet and makes it available to the desktop via a contextual reader. End users are given a state-of-the-art reader — capable of grabbing anything from live TV to music to video-on-demand to simple RSS text feeds. If it's available via the Internet (today), it can be routed through the RSxStream engine. The end users have complete control of what sources they choose, as they would with any other RSS reader. The difference is those choices are drawn indirectly, through the RSxStream software....

What's crucial to understand with this is that whoever provides the reader to the public also owns the engine, and THAT is the business end of RSS. It means advertising can be crafted into the design of the reader and delivered based on the choices, habits and interests of the end user. It's contextual advertising nirvana. This type of business currently does not exist, but it's ideal for local media outlets. Why? Because we're in the information distribution business, and getting the reader onto the public's desktops is the key to its success. Moreover, if the local media entities don't do it, somebody else will, and they will take all those ad dollars with them." [DONATA Communications, via JD on MX]

I love the idea of providing the reader and even pre-populating it with feeds relevant to the intended audience,  but I hate the idea of some company monetizing it. I'd much rather get a grant and have libraries provide this information-centric software. We're in the "information distribution" business, too, except we're interested in people getting information without strings attached.


BBC NEWS | UK | 'UK libraries out of use
by 2020'


BBC NEWS | UK | 'UK libraries out of use
by 2020'
04/28/2004 11:04 PM
die britischen Bibliotheken im Jahre 2020 unbenutzt seien .. 'UK libraries out of use by 2020' .. failing users .. BBC

news.bbc.co.uk/1/hi/uk/3661831.stm
track this site | 5 links


Computers in Libraries: Keeping Up


Computers in Libraries: Keeping Up 03/19/2005 02:36 AM
Gary Price, Genie Tyburski, and Steven Cohen talked about keeping up in "Tips for Keeping Up: Expert Panel" that was the last item on Track A on Wednesday. (Track A...

Building Testing Libraries


Building Testing Libraries 05/07/2004 07:22 PM
Save time, test more, and use what the CPAN has made available to enhance your development. Casey West demonstrates examples of good techniques when testing Perl-based software.

Java Atomic Libraries


Java Atomic Libraries 09/10/2004 05:05 PM
First checkin!

Islamic Tools and Libraries 0.6


Islamic Tools and Libraries 0.6 08/29/2004 03:47 AM
Islamic tools and applications, including an Islam-centric library.

Ham Radio Control Libraries


Ham Radio Control Libraries 02/16/2004 08:07 PM
Hamlib 1.2.0 released

Ham Radio Control Libraries 1.2.0


Ham Radio Control Libraries 1.2.0 02/18/2004 01:18 PM
Shared libraries for HAM radio equipment control.

Who's Hot Today? Nashville; All U.S.
Libraries


Who's Hot Today? Nashville; All U.S.
Libraries
06/24/2005 10:01 PM
Nashville, Tenn., has 600 computers in its Metro library system and waiting lines: Adding Wi-Fi is a natural for their patrons who can bring their own laptops. The system will cost just under $70,000 across the system through 50-50 federal and local money. The AP reports on an library study showing 99.6 percent of libraries connected to the Internet: Almost of those offer Internet access to their patrons. This number from the American Library Association is up from 20.9 percent in 1994, when the commercial Internet was brand-spanking new. (I founded a Web site development firm in 1994, and had a T-1 to the Net that August--when it was pretty rare.) Eighteen percent of libraries offer Wi-Fi, but a whopping 21 percent plan to offer it in the next year. Only 42 percent of libraries have high-speed connections, and often broadband is coupled with Wi-Fi: sharing a single dial-up modem over Wi-Fi isn't much of an incentive over home dial-up to library patrons. Public libraries' biggest problem is having enough computers to go around....


Anarchists, Libraries and Freedom


Anarchists, Libraries and Freedom 05/17/2004 08:50 PM

Siva Vaidhyanathan is in town today to promote his new book, The Anarchist in the Library, which I've read and highly recommend. I'll explain why in an upcoming posting.


portal: Libraries and the Academy


portal: Libraries and the Academy 02/10/2004 02:49 AM
portal: Libraries and the Academy
http://muse.jhu.edu/journals/portal_libraries_and_the_academy/

A journal that presents research findings and provides regular coverage of issues in technology, publishing, and periodicals, portal is written by librarians for librarians. Peer-reviewed articles address subjects such as library administration, information technology, and information policy. The journal examines the role of libraries in meeting institutional missions, explores how technology affects librarianship and scholarship, and conveys this research to academic librarians in a timely manner. Through the highest-quality research and news about librarianship in higher education institutions, portal provides a much needed, fresh perspective. portal earned recognition as the runner-up for the best new journal of 2001, awarded by the Council of Editors of Learned Journals.

SSTTR Java Libraries 1.1


SSTTR Java Libraries 1.1 05/09/2004 04:42 AM
Miscellaneous Java libraries for XML, crypto, and other things.

Libraries and culture, from a trench


Libraries and culture, from a trench 07/02/2004 01:28 PM
Today (July 1, 2004) marks a new chapter for many libraries across the US of A. Today is the first day of mandatory Internet filtering, if your library accepts federal telecommunications funds. Mine does.
Grok Description matches for Glitch in C++ libraries allows a DoS attack against ISAPI
GrokA matches for Glitch in C++ libraries allows a DoS attack against ISAPI

Glitch in C++ libraries allows a DoS attack against ISAPI

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Rugged PCs unfazed
by life's spills

Between the pit and
PCs, traders find
middle ground

The high-tech life:
Living the future
now

Uzbeks Say Blasts
Killed 19 People

Virtual Universe
0.43 (Unaverse
Server)

Bochs-Tools 1.6.4
dvd::rip 0.50.17
(Stable)

GtkLife 2.1
Dane Bowers in drink
drive arrest

Teachers support
strike ballot

Golf: Rose keeps
calm

US offers truce to
Falluja fighters

Helping your
brainchild play well
with others

More than 10
worldwide e-gov case
studies to be
presented at GCC
E-Government and
Telecom Forum

Fat Cat Hunger
Strike After
Meat-Feeding Owner
Goes (Reuters)

Soaring Steel Prices
May Cost Consumers
(AP)

Women Gun Lovers
Gather for
Conference (AP)

Iraqi Cleric's
Movement Gains Steam
(AP)

MacMinute Executive
Briefing: April 10

R45s phpBB Mods
Opponents Take Swing
at GMO Grass

USDA Rejects
Drug-Laced Rice

Women Drive Changes
in Car Design

Gator, er, Claria
Files for IPO

Space Celebration
Circles Globe

Panel discusses SQL,
XML, Web Services,
and Grid Computing

Who is Messman
trying to convince?

King of Golf
Abdicates After Last
Round at Augusta
(Los Angeles Times)

Equal Right to Fight
(Los Angeles Times)

Politics a hot read
(Los Angeles Times)

On a Mission to
Change the Economics
of Hollywood (Los
Angeles Times)

Hearing Focuses
Harsh Light on FBI
(Los Angeles Times)

Iraq Overshadows
Cheney Visit to
Japan (Reuters)

Million Shi'ite
Pilgrims Gather Amid
Iraq Clashes
(Reuters)

Germany moots jail
for spammers

NY Times
hacker sentencing
delayed

As business grows,
umbilical cord blood
storage prompts
debate

BBStatus 2.47
Faith Online
eBay RSS Listings
Etch-A-Search
google.public.suppor
t.general FAQ

Google Teams Up with
17 Colleges to Test
Searches of
Scholarly Materials

Worms go to work on
waste

Air link promises
economic hopes

Man injured in
stabbing

Lord Hurd calls for
UK Iraq envoy

Music executives
want to see more
expensive online
music sales

Itanium and Xeon to
become compatible

P2P News Networks:
will they fly?

what is grok?