Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Submission + - HTTPS Traffic Attacks Leak Sensitive Surfing Details (threatpost.com)

msm1267 writes: Researchers have built new attack techniques against HTTPS traffic that have been effective in learning details on users' surfing habits, leaking sensitive data that could impact privacy.
They tested against 600 leading healthcare, finance, legal services and streaming video sites, including Netflix. Their attack, they said in a research paper, reduced errors from previous methodologies more than 3 ½ times. They also demonstrate a defense against this attack that reduces the accuracy of attacks by 27 percent by increasing the effectiveness of packet level defenses in HTTPS, the paper said.

“We design our attack to distinguish minor variations in HTTPS traffic from significant variations which indicate distinct traffic contents,” the paper said. “Minor traffic variations may be caused by caching, dynamically generated content, or user-specific content including cookies. Our attack applies clustering techniques to identify patterns in traffic.”

Submission + - MirrorLink vs. Apple's CarPlay (computerworld.com)

Lucas123 writes: Apple's introduction of its iPhone automotive integration platform, CarPlay, yesterday signaled its entry into in-vehicle infotainment (IVI) systems — a market that up until now has consisted mainly of proprietary platforms with extremely limited mobile app capabilities. But open software efforts by the Linux Foundation and standards such as the Car Connectivity Consortium's MirrorLink and Google's recently launched Open Automotive Alliance are hoping to open up IVIs to any number of smartphones and related apps. ""The Apple [CarPlay] is just one standard. Right now MirrorLink is not compatible with iPhone..., but it can be," said Mark Boyadjis, manager of Infotainment & HMI systems at IHS Automotive. Alan Ewing, president of the Car Connectivity Consortium said we he first looked at Apple's CarPlay, he thought: "That's what we've been doing for two years. "It really validated the approach we'd already taken. But, we think the best mousetrap should win."

Comment Re:What's the solution? (Score 4, Insightful) 295

AFAIK the Mozilla folks have not had the same complaints about Linux graphics drivers, have they?

The solution is to avoid using the Google Chrome browser, unless you like being spied on all the time by Google. Load up Firefox with a completely fascist set of add ons and do your best to browse safely.

Submission + - Feds now oppose Aereo, rejecting cloud apocalypse argument

v3rgEz writes: TV streaming service Aereo expected broadcasters would put up a fight. The startup may not have seen the Justice Department as a threat, however. The Justice Department has now weighed in, saying in a filing that it’s siding with major broadcasters who accuse Aereo of stealing TV content. In its filing, the Justice Department noted it doesn’t believe a win for broadcasters would dismantle the precedent that created the cloud computing industry, as Aereo has previously claimed.

The case is expected to go before the Supreme Court in late April.

Submission + - Bug in the GnuTLS Library leaves many OSs and Apps at risk (arstechnica.com)

williamyf writes: According to our friends at ArsTechnica:

"The bug in the GnuTLS library makes it trivial for attackers to bypass secure sockets layer (SSL) and Transport Layer Security (TLS) protections available on websites that depend on the open source package. Initial estimates included in Internet discussions such as this one indicate that more than 200 different operating systems or applications rely on GnuTLS to implement crucial SSL and TLS operations, but it wouldn't be surprising if the actual number is much higher. Web applications, e-mail programs, and other code that use the library are vulnerable to exploits that allow attackers monitoring connections to silently decode encrypted traffic passing between end users and servers."

What's even more, the coding error *may* have been present since 2005, so one has to wander, again, where were those "many eyes that render all bugs shallow" one keeps hearing about...

Submission + - 4-Year-Old Asks NASA For Homework Help, This Is What Happened (gizmocrazed.com)

Diggester writes: What happens when you are clueless about how to answer science questions given to you as part of your homework? You would normally seek your mom’s or dad’s help, right? Well, those are methods of the past now. Lucas Whiteley, a 4 year old from England, tried a different route and derived great satisfaction from the outcome. Why seek mom’s or dad’s help when NASA can prove generous dollying out help on its own?

Comment Quick Discharge batteries? (Score 1) 131

FTA: 'The best performing copolymer consisted of 90% sulfur by mass. Batteries using this copolymer had an initial storage capacity of 1,225 mAh per gram of material. After 100 charge-discharge cycles, the capacity dropped to 1,005 mAh/g, and after 500 cycles it fell to about 635 mAh/g. In comparison, a lithium-ion battery typically starts out with a storage capacity of 200 mAh/g but maintains it for the life of the battery, Pyun says.' So, situations in which a massive blast of current is required could benefit quite well from these batteries. I'm thinking like sitting at light on Mulholland and turning a knob on the Tesla's dashboard that is graduated in 1960's TV Batman style: Low-Medium-High-Zowie!

Comment Re:Already Lost (Score 1) 353

Let's not worship the P-51 without acknowledging some deadly flaws: P-51 pilots didn't dare get into a low-altitude dogfight. The slogan of Mustang drivers faced with low altitude combat was "Shit and Git!" or more politely "Boom and Zoom!" because even lower grade Luftwaffe fighters could wipe it out in tight turns down low. The supercritical wings of the Mustang were actually a hindrance down low in the thicker air in tight turns. So, while the P-51 with Merlin engine was a game changer, it had its faults.

Submission + - Microsoft reportedly plans to offer a free version of Windows 8.1 (ndtv.com)

An anonymous reader writes: According to reports, to Microsoft plans to announce a free version of Windows 8.1 in a bid to persuade customers to upgrade to the latest version.

Reports claim the new version, called 'Windows 8.1 with Bing', could be given away at a developers' conference in April, a version that would have key Microsoft apps and services.

According to media reports, "Microsoft is currently experimenting with a free version of Windows 8.1 that could boost the number of people using the operating system."

Submission + - The Ukraine-Russia Cyberwar Has Already Begun (vice.com)

Daniel_Stuckey writes: Ground troops may be flexing their muscles in Crimea while they await marching orders, but cyber and information attacks between Russia and Ukraine are already underway.

Friday, a group of unidentified men took control of a series of communication centers in Crimea. Maintained by Ukrtelecom JSC, Ukraine's telecom provider, the facilities are essential to linking Crimea with the rest of Ukraine. With the hubs knocked out, landline, mobile, and internet services were severed, with almost no coverage available. It is unclear exactly who was responsible for these attacks, but considering their sophisticated and clandestine nature, it is reasonable to assume they were carried out by professionals.

On the other side of the border, RT—the news channel formerly known as Russia Today and funded by the state—had its website hacked on Sunday morning, with the word 'Nazi' not so stealthily slipped into headlines. Highlights included “Russian senators vote to use stabilizing Nazi forces on Ukrainian territory,” and “Putin: Nazi citizens, troops threatened in Ukraine, need armed forces' protection.” RT was quick to notice the hack, and the wordplay only lasted about 20 minutes.

Submission + - NASA Forgets How to Talk to ICE/ISEE-3 Spacecraft 1

Hugh Pickens DOT Com writes: Randall Munroe's XKCD cartoon on the ICE/ISEE-3 spacecraft inspired me to do a little research on why Nasa can no long communicate with the International Cometary Explorer. Launched in 1978 ISEE-3 was the first spacecraft to be placed in a halo orbit at one of Earth-Sun Lagrangian points (L1). It was later (as ICE) sent to visit Comet Giacobini-Zinner and became the first spacecraft to do so by flying through a comet's tail passing the nucleus at a distance of approximately 7800 km. ICE has been in a heliocentric orbit since then, traveling just slightly faster than Earth and it's finally catching up to us from behind, and will return to Earth in August. According to Emily Lakdawalla, it's still functioning, broadcasting a carrier signal that the Deep Space Network successfully detected in 2008 and twelve of its 13 instruments were working when we last checked on its condition, sometime prior to 1999. Can we tell the spacecraft to turn back on its thrusters and science instruments after decades of silence and perform the intricate ballet needed to send it back to where it can again monitor the Sun? Unfortunately the answer to that question appears to be no. "The transmitters of the Deep Space Network, the hardware to send signals out to the fleet of NASA spacecraft in deep space, no longer includes the equipment needed to talk to ISEE-3. These old-fashioned transmitters were removed in 1999." Could new transmitters be built? Yes, but it would be at a price no one is willing to spend. "So ISEE-3 will pass by us, ready to talk with us, but in the 30 years since it departed Earth we've lost the ability to speak its language," concludes Lakdawalla. "I wonder if ham radio operators will be able to pick up its carrier signal — it's meaningless, I guess, but it feels like an honorable thing to do, a kind of salute to the venerable ship as it passes by."

Submission + - The Raspberry Pi celebrates 2 years with open source graphics driver competition (techienews.co.uk)

hypnosec writes: The Raspberry Pi, which was first put up for sale on February 29, 2012, has completed two years and has sold over 2.5 million units during the period. Announcing the milestone and commemorating the two years, Founder and former trustee of the Raspberry Pi Foundation, Eben Upton announced a $10,000 competition wherein developers will be required to demonstrate a satisfactory Quake III gameplay at a playable framerate on the credit card sized computer using open source drivers.

Slashdot Top Deals

Life is a whim of several billion cells to be you for a while.

Working...