Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Distributed blockchain (Score 2) 34

Not really.

Enterprise Blockchain focuses more on business needs that don't require the decentralization but do need the "journalistic" integrity blockchain offers.

For example, take security log files on a webserver: by storing new entries in a QLDB vault you can ensure that they become tamper proof should a malicious third-party gain access to them. They won't be able to reconstruct the underlying hashes at a given historical point moving forwards.

Comment Not Quantum (Score 1) 34

The term 'Quantum' in QLDB appears to be a marketing term and not related to post-quantum addressing schemes like XMSS/WOTS+.

That sort of "quantum" blockchain deals with the theoretical attacks on ECDSA addressing schemes; examples: Mochimo and QRL.

Amazon's appears to be an append-only journaling system based on SHA256. It's unclear from the documentation whether it just hashes each transaction and maintains a verifiable/uninterruptable chain of hashes, or whether it also injects a Proof-of-Work style iteration based on nonces to make "reconstructing" the blockchain unfeasible.

Submission + - New Gmail Bug Allows Sending Messages Anonymously (bleepingcomputer.com)

An anonymous reader writes: BleepingComputer reveals new security flaws in Gmail identified by Tim Cotten and Eli Grey aiding malicious phishing and spoofing attacks this holiday season, including "a new bug discovered in Gmail affects the web app's user experience by hiding the source address of an email, a situation that comes with an obvious potential for abuse."

Tampering with the 'From:' header by replacing some text with an object, script or img tag causes the interface to show a blank space instead of the sender's address. Opening the email does not help, either, as the sender's address continues to remain hidden and shows no info even when hovering on it, an action that typically reveals the details and offers several actions (adding to contacts, sending email, scheduling event, sending a Hangouts message or starting a video call).

"Without the sender information there this looks completely legitimate and a well-educated user could easily be suckered into compromising their own account," the developer explains. BleepingComputer then summarizes: "Indeed, messages without a sender could easily pass as system notifications that should not be ignored, just like in the case of mobile alerts from the operator."

"At the moment, there are at least three known UX-related glitches that affect Gmail and can be abused for high-class phishing. The two disclosed by Cotten is joined by a flaw in the UX that allows fraudsters to create a 'mailto:' link that populates the destination field in the app with whatever address they want; the latter was reported about 19 months ago to Google and is still present in the Gmail app for Android."

Submission + - Unfixed Gmail Flaw Allows Senderless Emails (cotten.io)

Draconi writes: An unfixed flaw in the way the Gmail desktop and mobile apps parse the 'From' field in email headers allows for blank/senderless emails to emulate the appearance of official system messages, amongst other spoofing bugs. Both myself and Eli Grey have reported similar, still unresolved issues to Google despite their use in the wild.

Comment Re:Probably the future of online RPGs (Score 4, Interesting) 33

Exactly, which is why we went indie and have remained that way with Shards Online.

Big companies would never run this kind of game - we all came from working for the larger publishers, and many of us from working on Ultima Online.

The whole idea is to build a full MMO and then turn it over to the players. Will we run our own servers? Sure! We can do events, live patches, and add new content regularly. But the most important thing is to have a highly polished end product that community servers don't just treat like middleware: it's a full game to customize how they see fit!

Comment Re:Games are getting to be like TV shows (Score 4, Informative) 33

We should mention that this is actually Round #2 with Kickstarter.

When we didn't reach our first goal, we continued development with our own money (as we had been doing from the inception of the game). As former leads on Ultima Online, we have a solid vision for what we want to bring forward to the gaming world, as well as the sandbox and production experience to make it happen.

Kickstarter is all about accelerating and enhancing development of our core tech. One nice thing that differentiates us from most Kickstarters that have a bunch of concept art and a pitch is that we have a working game already built. Now it's all about fleshing it out into a full MMO so we're not just recreating a middleware market.

Shards Online is all about building an amazing sandbox game, and then giving the full content over to players.

Slashdot Top Deals

It is easier to write an incorrect program than understand a correct one.

Working...