Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Submission + - Wikipedia Exposes Murky Israeli PR Firm (timesofisrael.com)

Rambo Tribble writes: The Israel Times reports that Wikipedia has uncovered an extensive effort at skirting the resource site's prohibition on paid editing. The Israeli firm Percepto (formerly Veribo) was identified as the source of many politically charged and potentially misleading edits to Wikipedia articles, through sockpuppet accounts.

Submission + - John McAfee Hides in Cuba, Offers Cryptocurrency for Asylum, Runs for President (reuters.com)

Aighearach writes: John McAfee is back in the news after having fled the Bahamas. Now he's on his yacht in Havana trying to trade snake oil for protection. He insists that "it would be trivial to get around the U.S. government’s embargo through the use of a clever system of currency." Clever and trivial at the same time, who better than John McAfee to solve that one?

"You can’t just create a coin and expect it to fly. You have to base it on the proper blockchain, have it structured such that it meets the specific needs of a country or economic situation. There are probably less than 10 people in the world who know how to do that and I’m certainly one of them."

He's also running for President. Of the US, not Cuba.

Submission + - SSH gets protection against side channel attacks (undeadly.org) 1

AmiMoJo writes: Damien Miller has just committed a new feature for SSH that should help protect against all the various memory side channel attacks that have surfaced recently.

Add protection for private keys at rest in RAM against speculation and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and Rambleed. This change encrypts private keys when they are not in use with a symmetic key that is derived from a relatively large "prekey" consisting of random data (currently 16KB). Attackers must recover the entire prekey with high accuracy before they can attempt to decrypt the shielded private key, but the current generation of attacks have bit error rates that, when applied cumulatively to the entire prekey, make this unlikely.


Submission + - Vim and Neo Editors Vulnerable to High-Severity Bug (threatpost.com)

JustAnotherOldGuy writes: Security researcher Armin Razmjou warned that a bug impacting editors Vim and Neovim could allow a trojan code to escape sandbox mitigations. A high-severity bug impacting two popular command-line text editing applications, Vim and Neovim, allow remote attackers to execute arbitrary OS commands. Exploiting the bug is as easy as tricking a target into clicking on a specially crafted text file in either editor. Razmjou outlined his research and created a proof-of-concept (PoC) attack demonstrating how an adversary can compromise a Linux system via Vim or Neowim. He said Vim versions before 8.1.1365 and Neovim before 0.3.6 are vulnerable to arbitrary code execution.

“[Outlined is] a real-life attack approach in which a reverse shell is launched once the user opens the file. To conceal the attack, the file will be immediately rewritten when opened. Also, the PoC uses terminal escape sequences to hide the modeline when the content is printed with cat. (cat -v reveals the actual content),” wrote Razmjou in a technical analysis of his research. “Beyond patching, it’s recommended to disable modelines in the vimrc (set nomodeline), to use the securemodelinesplugin, or to disable modelineexpr (since patch 8.1.1366, Vim-only) to disallow expressions in modelines,” the researcher said.

Comment Re:I didn't know about Mulatto (Score 1) 279

to me "half-caste" has a horribly imperialistic/colonialistic connotation

I can see now how it could convey that. A friend explained to me that the use of the word "half" was in some way diminishing/demeaning to the described person. That was not the way I had looked on it, I saw it as a simple and unimportant statement of fact that the colour (the "caste") was "half and half", but I learned to accept that others might not see things the same.

And as a USian, "colored people" has a direct connotation with Jim Crow and segregation.

Well thanks for the pointer - I had never heard of Jim Crow, but I've googled, and now I'm considerably wiser about the stupidities of my fellow humans. Well sort of - it's not clear whether "Jim Crow" was an actual person, or a caricature rhyming word for "negro". Doesn't matter really - the point is that I see how "coloured people" was used in an oppressive way on segregation paraphernalia.

Jesus, what a mess of racial prejudice you folks have gone through in the US. In terms of the US history of prejudice I'd seen "Mississippi Burning" and that was about all; the epicentre of apartheid while I was growing up had been white South Africa, which we saw off when Nelson Mandela was released. Racial prejudice / racism always seems to me so old-fashioned and deluded that I don't even consider it ... "Surely we were over and done with that crap 100 years ago? Can we move on and get on with the future please?". Yes, white privilege. But every now and again I get a rude awakening to the reality that the crap still infests our planet. Sigh.

Comment Re:I didn't know about Mulatto (Score 2) 279

I used that term ["mulatto"] with a friend of mine who is mixed-race. He told me it was offensive

I've been told (in a friendly way) that in the UK I shouldn't call people "mixed race" any more cos that's offensive - instead I should use "people of colour" (but woe betide me if I say "coloured people", cos that's offensive too). There was a time when I used "half-caste", but apparently that's really really really wrong, and it was after then that I started using mixed-race.

I'm a honky ... you can call me that all you like, I really don't mind :-)

This whole situation has become ridiculous.

Submission + - Windows 10 bug removes overwrite confirmation when extracting ZIP files (softpedia.com) 1

AmiMoJo writes: The Windows 10 October 2018 Update (version 1809) rollout is still on hold due to the critical bug that caused the removal of user files, but those who installed it keep reporting more and more issues nearly on a daily basis. This time, it looks like another glitch in the October update causes the overwrite confirmation to be missing from ZIP files. In a discussion thread on Reddit, several users confirm that when extracting one specific file from an archive to a location where an item with the same name exists causes the data to be overwritten automatically, with no warning displayed.

Submission + - Russia Says Its New Aircraft Can Disable U.S. Satellites (nationalinterest.org) 9

schwit1 writes:

“The work is currently underway to develop an aircraft equipped with jamming systems that will replace Il-22PP Porubshchik [electronic warfare aircraft], which are currently being delivered to the Russian Aerospace Forces,” an unnamed Russian defense industry source told Sputnik News. “This machine will receive a fundamentally new on-board equipment, which will allow to conduct electronic suppression of any targets—ground, air, sea—and disable enemy satellites that provide navigation and radio communication on the ground.”

Disabling the electronics on satellites? This would seem to be a different challenge, and how Russia plans to tackle it is unclear. For example, what does it mean to “turn off” a military satellite? Convince the satellite to shut down its systems, perhaps by spoofing a command signal from ground control? Or does it mean hitting the satellite with some kind of powerful beam that fries its electronics or disrupt its systems? And how powerful a system could be mounted on what is essentially a medium-sized airliner?


Submission + - Passwords for Tens of Thousands of Dahua Devices Cached in IoT Search Engine (bleepingcomputer.com)

An anonymous reader writes: Login passwords for tens of thousands of Dahua devices have been cached inside search results returned by ZoomEye, a search engine for discovering Internet-connected devices (also called an IoT search engine). A security researcher has recently discovered that instead of just indexing IoT devices, ZoomEye is also sending an exploitation package to devices and caching the results, which also include cleartext DDNS passwords that allow an attacker remote access to these devices.

Searching for the devices is trivial and simple queries can unearth tens of thousands of vulnerable Dahua DVRs. According to the security researcher who spotted these devices, the trick has been used in the past year by the author of the BrickerBot IoT malware, the one who was on a crucade last year, bricking unsecured devices in an attempt to have them go offline instead of being added to IoT botnets.

Submission + - 19-year-old archivist charged for downloading freedom-of-information releases

Ichijo writes: According to an article on CBC News, a Canadian teen "has been charged with 'unauthorized use of a computer,' which carries a possible 10-year prison sentence, for downloading approximately 7,000 freedom-of-information releases. The provincial government says about 250 of those contain Nova Scotians' sensitive personal information."

"When he was around eight...his Grade 3 class adopted an animal at a shelter, receiving an electronic adoption certificate. That lead to a discovery on the classroom computer. 'The website had a number at the end, and I was able to change the last digit of the number to a different number and was able to see a certificate for someone else's animal that they adopted,' he said. 'I thought that was interesting.' The teenager's current troubles arose because he used the same trick on Nova Scotia's freedom-of-information portal, downloading about 7,000 freedom-of-information requests."

Submission + - Flat-Earther Launches Himself In Rocket To Verify Beliefs

Tetch writes: A flat-earth-believing American called Mike Hughes spent his weekend launching himself into the sky on a home-made rocket so he could confirm his belief that the Earth is flat. He said he was sick of critics mocking him for being unwilling to go up into the sky to check the truth of his belief.

Unfortunately his rocket only reached an altitude of 1875 feet (577 metres) so the jury's probably still out for him. Still, full marks to him for standing behind his beliefs.

Comment Never did trust FB, so nothing has changed (Score 1) 228

Because I'm not a complete dumbass I always have understood that due to the terrible threat it constitutes to my privacy and ultimately to my freedom Facebook is to be trusted as far as I can spit - so I don't overshare, never post anything personal on it, and use it only for (a) ranting about ignorant politicians and other morons, and (b) learning. There are innumerable special interest FB groups you can join, in some of which I have learned very valuable things (Food Preservation Techniques, Fungi Identification, all kinds of Philosophy, all kinds of Politics ..... Trump joke of the day, etc., etc.)

In the Church Of The Flying Spaghetti Monster group I learned that it's infested by fools who actually assert that Pastafarianism is a valid religion, rather than the religion-trashing parody of contempt for believers in fairy stories that I had thought it was ... so I've backed right out again ... it's good to be informed :-)

And then there is the amusing sport that is to be had by lying to Facebook at every opportunity ... My FB friends know where I really live in the world, and what I do with my life, so when they see me posting that I've just moved to Copenhagen, or am enjoying learning Indonesian at nightschool they understand that I'm just having fun with Zuckerberg's database. You post something like that, and then wait to see how long it takes to show up in the ads you get served, or the news items it recommends in your feed, or the groups you might like to join.

So I heartily urge you all to get accounts if you don't already, and then join in the community effort to turn Zuck's database to cottage cheese. Lets face it - when the shit comes down and the 10-ton trucks start hauling subversives off to the internment camps it'll be a red flag to the TLAs to not have an FB profile, so you might as well set one up that's full of plausible nonsense.

Submission + - Man Convicted of making "Grossly Offensive" joke in UK. 4

sheetsda writes: The country that brought the world the "Killer Joke" sketch has now convicted a man of the crime of making a "Grossly Offensive" joke. What was the joke? Training a dog to raise its right paw in response to "Sieg Heil" and publishing a video of it on the internet. The convicted man says the he trained the dog to do Nazi salutes to annoy his girlfriend in response to her claims that the dog was cute. Comedian Ricky Gervais responded, "If you don't believe in a person's right to say things that you might find 'grossly offensive', then you don't believe in Freedom of Speech."

Submission + - SPAM: A Star Grazed Our Solar System 70,000 Years Ago, and Early Humans Likely Saw It.

schwit1 writes: Some distant objects in our solar system bear the gravitational imprint of a small stars close flyby 70,000 years ago, when modern humans were already walking the Earth, a new study suggests.

In 2015, a team of researchers announced that a red dwarf called Scholzs star apparently grazed the solar system 70,000 years ago, coming closer than 1 light-year to the sun. For perspective, the suns nearest stellar neighbor these days, Proxima Centauri, lies about 4.2 light-years away. The astronomers came to this conclusion by measuring the motion and velocity of Scholzs star — which zooms through space with a smaller companion, a brown dwarf or "failed star" — and extrapolating backward in time.

Link to Original Source

Slashdot Top Deals

Kleeneness is next to Godelness.

Working...