Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment powerdns was vulnerable, but differently (Score 2, Insightful) 237

Powerdns was vulnerable to the Kaminsky attack, but in a different way. It was actually easier to spoof the server due to its more actively dropping certain DNS packets. So while it did perform source port randomization, it was not totally immune to the attack either.

http://doc.powerdns.com/security-policy.html itself states:

All versions of PowerDNS before 2.9.21.1 do not respond to certain queries. This in itself is not a problem, but since the discovery by Dan Kaminsky of a new spoofing technique, this silence for queries PowerDNS considers invalid, within a valid domain, allows attackers more chances to feed *other* resolvers bad data.

Though it is phrased as "someone elses problem", in the DNS word of course nothing is "someone elses problem". DNS servers are chained in hierachies and one problem somewhere leads to problems elsewhere. DNS is all about protocol compliance to ensure interoperability. With the "someone elses problem" approach, we would have had no "reflection attack" and "amplification attack" problems either, it being "someone elses problem". Despite the nice phrasing, powerdns caused cache poisoning problems as a result of the Kaminsky attack that needed to be addressed.

In general, I have a problem with bug reports and changelogs writing things as "improved error handling", "made more robust" or "add security to" which are too often used to hide the real security impact of certain bugs. DJB's policy of "it is not my bug to fix, because it is an operating system bug" is also completely bogus from a system administrator point of view who still ends up with a security problem.

Comment Re:Killing desk space? (Score 2, Interesting) 370

I have two setups like that.

  At home two 24" monitors on one computer, along with a second computer with a 20" monitor. They are connected with synergy and a ps/2 kvm. The kvm is good for when the main one is down. I can just hotkey over and use the second computer. I use it mainly for IM, but also sometimes for a second browser. Both computers are running Fedora I find having two computers comes in handy regularly. I also use the second computer as a iscsi server for the first. The first computer already has six drives in it. So the second computer allows me to expand to ten.

  The office setup is two 20" monitors on one computer, along with a second computer with a 20" monitor. They are connected with synergy. In this case I actually have two keyboards and nice. The main computer has no ps/2, and I have no usb kvms. I use a two port ps/2 kvm to share one keyboard between the second computer and a third computer. Then I toggle the monitor between dvi and vga. I do it this way since 99% of the time I don't need console access on the third computer. I access it via ssh for CUDA programs. The first computer runs Fedora, the second runs Vista, and the third runs Fedora. Vista is good in the office. It lets me do things like VMware Infrastructure client(currently Windows only), Internet Explorer(just today I was told to use IE on the HR site, since it works better), and other little things.

Security

Submission + - Backtrack4 pre-final released! 1

purehate writes: "The Remote Exploit Team is ecstatic to announce the public release of BackTrack 4 Pre Final (codename "pwnsauce"). We have worked long and hard to provide the security community with another outstanding backtrack release. The .iso is available for download at http://www.remote-exploit.org/backtrack_download.html and users can keep up with all the latest official backtrack news at our blog http://www.offensive-security.com/blog/"

Comment eVGA GTX260 216 SC and CUDA (Score 4, Interesting) 186

I just bought a eVGA GTX260 216(core) SC at Fry's for $200+$20 tax. But it had a mail in rebate for $50. Which will bring the price down to $150+$20 tax. I bought it not as a gaming card, but as a second CUDA card. I already had a PNY GTX260(192 core).

CUDA doesn't play nice with regular graphics usage. Your machine will be really jerky every few seconds. I also didn't have room in my main computer, motherboard or power supply wise. So I put it in my second desktop that I use for iSCSI and a third monitor via synergy. The machine already had a 6600GT, which then became the secondary card. I run X off it. Which leaves the eVGA card just for CUDA. Then I can run it all day and not even notice a performance hit.

Comment Monitor setups (Score 1) 503

I have two setups with three monitors. One at work and one at home. Both use two desktops. Home is two 24" at 1920x1200, along with a 20" at 1680x1050. Work is three 20" at 1680x1050. The third monitor is on the second machine, and is accessible via synergy. The third monitor is great for IM, especially for work related stuff. I can look at it at a glance, along with a spreadsheet on the second monitor, and four terminal windows on the first monitor.

At home the second desktop is another Linux box that I use for additional storage for the primary desktop via iSCSI. At work the second desktop is a Windows machine.

I only recently went to three monitor. I looked at doing it with a second video card in the main desktop, or using a Matrox splitter box to run two monitors off one DVI connector. A second video card in Linux just doesn't work that well, and the splitter boxes are expensive. Plus a second computer has some advantages. More segregated CPU and memory, more storage, different OS, etc.

Linux

Linux Needs Critics 1127

An anonymous reader writes "Keir Thomas berates the fact that the world of Linux almost entirely lacks critics. In fact, he says, Linux people tend to see genuine critical evaluation as a bad thing. FTA: 'The problem with this anti-criticism approach is that it's damning Linux to an eternity of navel gazing. Nothing can ever get any better. The best hope we have are the instances where a few bright sparks, with their heads screwed on the right way, get together and make something cool (as happened with, say, Firefox back in the day). But that's rare and can't be relied upon.'"
Operating Systems

Linux Kernel 2.6.29 Released 265

diegocgteleline.es writes "Linus Torvalds has released Linux 2.6.29. The new features include the inclusion of kernel graphic modesetting, WiMAX, access point Wi-Fi support, inclusion of squashfs and a preliminary version of btrfs, a more scalable version of RCU, eCryptfs filename encryption, ext4 no journal mode, OCFS2 metadata checksums, improvements to the memory controller, support for filesystem freeze, and other features. Here is the full list of changes."
Security

Researchers Demo BIOS Attack That Survives Disk Wipes 396

suraj.sun writes "A pair of Argentinian researchers have found a way to perform a BIOS level malware attack capable of surviving even a hard-disk wipe. Alfredo Ortega and Anibal Sacco from Core Security Technologies — used the stage at last week's CanSecWest conference to demonstrate methods (PDF) for infecting the BIOS with persistent code that will survive reboots and re-flashing attempts. The technique includes patching the BIOS with a small bit of code that gave them complete control of the machine. The demo ran smoothly on a Windows machine, a PC running OpenBSD and another running VMware Player."

Comment Re:nVidia rules (Score 2, Informative) 102

No, they are all of the same base architecture, but aren't the same card. The 8800GT and the 9800GT are pretty close. Probably the biggest difference is some 9800GT cards are 55nm chips instead of 65nm. On the other hand there is a lot of difference between 8800GT and the GTX260. The GTX260 has 32 dedicated double precision processors that the 8800GT does not. My rough understanding is that those double precision processors are roughly equal to 1.5x a Q6600(quad core), or 6 cores. The GTX260 also comes with more streaming(single precision) processors. The 8800GT is 96/112 and the GTX260 is 192/216, depending on model.

Just look at this graphic.

http://pyrit.googlecode.com/svn/tags/opt/pyritperfaa3.png

Music

Detecting Click Tracks 329

jamie found a blog entry by Paul Lamere, working for audio company Echo Nest, in which he experiments with detecting which songs use a click track. Lamere gives this background: "Sometime in the last 10 or 20 years, rock drumming has changed. Many drummers will now don headphones in the studio (and sometimes even for live performances) and synchronize their playing to an electronic metronome — the click track. ...some say that songs recorded against a click track sound sterile, that the missing tempo deviations added life to a song." Lamere's experiments can't be called "scientific," but he does manage to tease out some interesting conclusions about songs and artists past and present using Echo Nest's developer API.
Science

Scientists Create Compound With a Single Element 163

rocketman768 writes "An international team of researchers including scientists at the Carnegie Institution has discovered a new chemical compound that consists of a single element: boron. Chemical compounds are conventionally defined as substances consist of two or more elements, but the researchers found that at high pressure and temperature pure boron can assume two distinct forms that bond together to create a novel 'compound' called boron boride."

Slashdot Top Deals

BLISS is ignorance.

Working...