×
Windows

Complete Microsoft EMET Bypass Developed 116

msm1267 writes "Researchers at Bromium Labs are expected to announce today they have developed an exploit that bypasses all of the mitigations in Microsoft's Enhanced Mitigation Experience Toolkit (EMET). Principal security researcher Jared DeMott is delivered a presentation at the Security BSides conference explaining how the company's researchers were able to bypass all of the memory protections offered within the free Windows toolkit. The work is significant given that Microsoft has been quick to urge customers to install and run EMET as a temporary mitigation against zero-day exploits targeting memory vulnerabilities in Windows or Internet Explorer. The exploit bypasses all of EMET's mitigations, unlike previous bypasses that were able to beat only certain aspects of the tool. Researchers took a real-world IE exploit and tweaked it until they had a complete bypass of EMET's ROP, heap spray, SEHOP, ASLR, and DEP mitigations."
The Military

US War Machine Downsizing? 506

mrspoonsi writes "BBC Reports: 'Defense Secretary Chuck Hagel has unveiled plans to shrink the U.S. Army to its smallest size since before World War Two. Outlining his budget plan, the Pentagon chief proposed trimming the active-duty Army to between 440,000 and 450,000 personnel — from 520,000 currently. The U.S. currently spends more on defense than the combined total of the next 12 countries, as ranked by defense spending.'"
Emulation (Games)

New Release of DICE, the CPU-Less Arcade Game Emulator, Adds Four Games 43

KingofGnG writes "DICE is a small emulator dedicated to recreating on a modern computer the arcade games based on discrete circuits: ancient and bizarre entertainment machines where the electronic components required for the game experience were soldered individually on the circuit board and where there was no trace of integrated circuit or CPU. It's an obscure and fascinating kind of emulation, and the offering of emulated games grows richer with each release." Released a few days ago, DICE 0.8 adds support for four new games: Atari's Crossfire and Pin Pong, and Ramtek's Clean Sweep and Wipe Out.
The Media

Publishers Withdraw More Than 120 Fake Papers 62

bmahersciwriter writes "Over the past two years, computer scientist Cyril Labbé of Joseph Fourier University in Grenoble, France, has cataloged computer-generated papers that made it into more than 30 published conference proceedings between 2008 and 2013. Sixteen appeared in publications by Springer, which is headquartered in Heidelberg, Germany, and more than 100 were published by the Institute of Electrical and Electronic Engineers (IEEE), based in New York. Both publishers, which were privately informed by Labbé, say that they are now removing the papers." Looks like journal trolling is really easy.
Space

SpaceX Testing Landing Legs On Next Falcon9 Rocket 73

astroengine writes with news of SpaceX's next step in experimenting with vertical landings for rocket stages. From the article: "Space Exploration Technologies is installing landing legs on its next Falcon 9 rocket, part of an ongoing quest to develop boosters that fly themselves back to the launch site for reuse. For the upcoming demonstration, scheduled for March 16, the Falcon 9's first stage will splash down, as usual, in the ocean after liftoff from Cape Canaveral Air Force Station in Florida. This time, however, SpaceX hopes to cushion the rocket's destructive impact into the Atlantic Ocean by restarting the Falcon 9's engine and extending landing legs that will be attached to the booster's aft section. The goal is a soft touchdown on the water." The test is scheduled for their ISS resupply mission on March 16th 2014 (the mission also features the launch of the crowdfunded KickSat nano nanosatellites) .
The Almighty Buck

Oklahoma Schools Required To Teach Students Personal Finance 304

Hugh Pickens DOT Com writes "Paula Burkes reports that under legislation passed in 2007, Oklahoma students, effective this May, now must demonstrate an understanding in banking, taxes, investing, loans, insurance, identity theft and eight other areas to graduate. The intent of personal financial literacy education is to inform students how individual choices directly influence occupational goals and future earnings potential. Basic economic concepts of scarcity, choice, opportunity cost, and cost/benefit analysis are interwoven throughout the standards and objectives. 'Oklahoma has some of the strongest standards in the country,' says Amy Lee, executive director of the Oklahoma Council on Economic Education, which lobbied for and helped develop the curriculum. 'Where other states require four or five standards regarding earnings, savings and investing, Oklahoma has 14 standards including three that are state-specific: bankruptcy, the financial impact of gambling and charitable giving.' The law is designed to allow different districts to implement the curriculum in different ways, by offering instruction in various grade levels, or by teaching all the curriculum in a single class or spreading it across several courses. 'The intent of this law was always to graduate students out of high school with a strong foundation in personal financial literacy to reduce the many social ills that come from mismanaging personal finance,' says Jim Murphree. 'I cannot think of anything that we teach that is more relevant.'"
Transportation

Why Nissan Is Talking To Tesla Model S Owners 335

cartechboy writes "What do you do when you're the first to market with a mainstream item, and yet the competition seems to be a hotter commodity? Naturally you do your homework. That's exactly what Nissan is doing. With disappointing sales of its Leaf electric car, Nissan is doing the smart thing and talking to Tesla owners about their cars. One would assume this is in hopes of understanding how to better compete with the popular Silicon Valley upstart. The brand sent an email to Sacramento-area Model S owners with four elements ranging from general information and a web-based survey to asking owners to keep a driving diary and to come in for in-person interviews with Nissan staff. The question is: Is Nissan trying to get feedback on its marketplace and competition, or is the brand looking at either offering an electric car with longer range or planning to challenge Tesla with an upper end plug-in electric car?"
Crime

DARPA Looks To End the Scourge of Counterfeit Computer Gear 75

coondoggie writes "Few things can mess up a highly technical system and threaten lives like a counterfeit electronic component, yet the use of such bogus gear is said to be widespread. A new Defense Advanced Research Projects Agency (DARPA) program will target these phony products and develop a tool to 'verify, without disrupting or harming the system, the trustworthiness of a protected electronic component.'"
Programming

Does Relying On an IDE Make You a Bad Programmer? 627

itwbennett writes "Writing about his career decisions, programming language choices, and regrets, Rob Conery says that as a .NET developer he became more reliant on an IDE than he would have with PHP. Blogger, and .NET developer, Matthew Mombrea picks up the thread, coming to the defense of IDEs (Visual Studio in particular). Mombrea argues that 'being a good developer isn't about memorizing the language specific calls, it's about knowing the available ways to solve a problem and solving it using the best technique or tools as you can.' Does using an IDE make you lazy with the language? Would you be better off programming with Notepad?"
Businesses

The Ever So Unlikely Tale of How ARM Came To Rule the World 111

pacopico writes "About 24 years ago, a tiny chip company came to life in a Cambridge, England barn. It was called ARM, and it looked quite unlike any other chip company that had come before it. Businessweek has just published something of an oral history on the weird things that took place to let ARM end up dominating the mobile revolution and rivaling Coke and McDonald's as the most prolific consumer product company on the planet. The story also looks at what ARM's new CEO needs to do not to mess things up."
Movies

Harold Ramis Dies At 69 136

samzenpus writes "Writer and comedian Harold Ramis has passed away at 69. Ramis had a hand in many classic comedies but is especially loved for playing the ghost-hunting Egon Spengler in Ghostbusters. 'His creativity, compassion, intelligence, humor and spirit will be missed by all who knew and loved him,' said his family in a statement."
Robotics

Apocalypse NAO: College Studies the Theological Ramifications of Robotics 176

malachiorion writes "Have you heard the one about the Christian college in North Carolina that bought a humanoid robot, to figure out whether or not bots are going to charm us into damnation (dimming or cutting our spiritual connection to God)? The robot itself is pretty boring, but the reasoning behind its purchase—a religious twist on the standard robo-phobia—is fascinating. From the article: '“When the time comes for including or incorporating humanoid robots into society, the prospect of a knee-jerk kind of reaction from the religious community is fairly likely, unless there’s some dialogue that starts happening, and we start examining the issue more closely,” says Kevin Staley, an associate professor of theology at SES. Staley pushed for the purchase of the bot, and plans to use it for courses at the college, as well as in presentations around the country. The specific reaction Staley is worried about is a more extreme version of the standard, secular creep factor associated with many robots. “From a religious perspective, it could be more along the lines of seeing human beings as made in God’s image,” says Staley. “And now that we’re relating to a humanoid robot, possibly perceiving it as evil, because of its attempt to mimic something that ought not to be mimicked.”'"
Books

Book Review: Sudo Mastery: User Access Control For Real People 83

Saint Aardvark writes "If you're a Unix or Linux sysadmin, you know sudo: it's that command that lets you run single commands as root from your own account, rather than logging in as root. And if you're like me, here's what you know about configuring sudo:

1.) Run sudoedit and uncomment the line that says "%wheel ALL=(ALL) ALL".
2.) Make sure you're in the wheel group.
3.) Profit!

If you're a sysadmin, you need to stop people from shooting themselves in the foot. There should be some way of restricting use, right? Just gotta check out the man page.... And that's where I stopped, every time. I've yet to truly understand Extended Backus-Naur Form, and my eyes would glaze over. And so I'd go back to putting some small number of people in the 'wheel' group, and letting them run sudo, and cleaning up the occasional mess afterward. Fortunately, Michael W. Lucas has written Sudo Mastery: User Access Control for Real People."
Keep reading for the rest of Saint Aardvark's review.
AI

Ray Kurzweil Talks Google's Big Plans For Artificial Intelligence 254

Nerval's Lobster writes "Ray Kurzweil, the technologist who's spent his career advocating the Singularity, discussed his current work as a director of engineering at Google with The Guardian. Google has big plans in the artificial-intelligence arena. It recently acquired DeepMind, self-billed 'cutting edge artificial intelligence company' for $400 million; that's in addition to snatching up all sorts of startups and research scientists devoted to everything from robotics to machine learning. Thanks to the massive datasets generated by the world's largest online search engine (and the infrastructure allowing that engine to run), those scientists could have enough information and computing power at their disposal to create networked devices capable of human-like thought. Kurzweil, having studied artificial intelligence for decades, is at the forefront of this in-house effort. In his interview with The Guardian, he couldn't resist throwing some jabs at other nascent artificial intelligence systems on the market, most notably IBM's Watson: 'IBM's Watson is a pretty weak reader on each page, but it read the 200m pages of Wikipedia. And basically what I'm doing at Google is to try to go beyond what Watson could do. To do it at Google scale. Which is to say to have the computer read tens of billions of pages. Watson doesn't understand the implications of what it's reading.' That sounds very practical, but at a certain point Kurzweil's predictions veer into what most people would consider science fiction. He believes, for example, that a significant portion of people alive today could end up living forever, thanks to the ministrations of ultra-intelligent computers and beyond-cutting-edge medical technology."
Cellphones

US Carriers Said To Have Rejected Kill Switch Technology Last Year 197

alphadogg writes "U.S. cellphone carriers were offered a technology last year that supporters say would dramatically cut incidents of smartphone theft, but the carriers turned it down, according to sources with knowledge of the proposal. The so-called 'kill-switch' software allows consumers to remotely wipe and render their phones useless if stolen. Law enforcement and politicians believe the incentive for stealing a smartphone or tablet would be greatly reduced if the technology became standard, because the devices could quickly be rendered useless. A proposal by Samsung to the five largest U.S. carriers would have made the LoJack software, developed by Canada's Absolute Software, a standard component on many of its Android phones in the U.S. The proposal followed pressure from the offices of the San Francisco District Attorney and the New York Attorney General for the industry to do more to prevent phone theft."

Slashdot Top Deals