Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security

Submission + - Could the Election of the New Pope be Hacked? 1

Hugh Pickens writes writes: "The rules for papal elections are steeped in tradition. John Paul II last codified them in 1996, and Benedict XVI left the rules largely untouched. The "Universi Dominici Gregis on the Vacancy of the Apostolic See and the Election of the Roman Pontiff" is surprisingly detailed. Now as the College of Cardinals prepares to elect a new pope, security people like Bruce Schneier wonder about the process. How does it work, and just how hard would it be to hack the vote? First, the system is entirely manual, making it immune to the sorts of technological attacks that make modern voting systems so risky. Second, the small group of voters — all of whom know each other — makes it impossible for an outsider to affect the voting in any way. The chapel is cleared and locked before voting. No one is going to dress up as a cardinal and sneak into the Sistine Chapel. In short, the voter verification process is about as good as you're ever going to find. A cardinal can't stuff ballots when he votes. Then the complicated paten-and-chalice ritual ensures that each cardinal votes once — his ballot is visible — and also keeps his hand out of the chalice holding the other votes. Ballots from previous votes are burned, which makes it harder to use one to stuff the ballot box. What are the lessons here? First, open systems conducted within a known group make voting fraud much harder. Every step of the election process is observed by everyone, and everyone knows everyone, which makes it harder for someone to get away with anything. Second, small and simple elections are easier to secure. This kind of process works to elect a pope or a club president, but quickly becomes unwieldy for a large-scale election. And third: When an election process is left to develop over the course of a couple of thousand years, you end up with something surprisingly good."
Firefox

Submission + - Firefox Will Soon Block Third-Party Cookies (webpolicy.org)

An anonymous reader writes: Stanford researcher Jonathan Mayer has contributed a Firefox patch that will block third-party cookies by default. It's now on track to land in version 22. Kudos to Mozilla for protecting their users and being so open to community submissions. The initial response from the online advertising industry is unsurprisingly hostile and blustering, calling the move 'a nuclear first strike.'

Comment This is getting (has gotten?) out of control (Score 1) 3

Let the companies innovate to make money, sitting on patents is getting ridiculous. Especially when the patent is awarded for something like (move your finger from left to right across a touch screen in order to effect some action"

The right solution is to award patents only for real innovation (for some definition of innovation) AND to arm the patent office with capable people that can actually understand what they are reviewing (which comes with the added cost of paying these competent people). Neither of these are likely to happen, so how do we go about fixing the situation?

Submission + - Curiosity killed the QRcode app, study finds curious men are most likely victims (cmu.edu)

An anonymous reader writes: It turns out that people scan QR codes simply because they are curious, not because the want information about a product. [Un]fortunately, curiosity is also a primary motivator for phishing campaigns used by scammers. In a recent study CMU researchers performed a QRishing (QR code phishing) experiment placing various types of QR codes around Pittsburgh. Besides finding that curiosity was the chief reason people scanned, it was also obvious that men are much more likely to fall victim to this scam.

In the real world, this attack would likely have been far more effective since these researchers were handcuffed by ethical research rules. Attackers could place QRcodes over existing ones or deface public property like parking meters. Heck, who wouldn't scan a QR code stick that had been placed on the neighborhood cat?

With the incredibly long and spurious patch cycle for today's Android devices, scanning a QR code could result in a bad guy having complete control of your mobile phone. Be wary next time you see one of these codes, certainly use a reader app that at least shows you the URL before launching your, probably old, browser!

Comment This not a samsung bug, and it's already fixed (Score 1) 151

The dialer no longer allows special characters that are part or USSD codes. see patch:
https://android.googlesource.com/platform/packages/apps/Contacts/+/39948dc7e34dc2041b801058dada28fedb80c388%5E!/#F0

now, everyone can still rant about how long it will take for owners to receive an updated version of Android (if ever).

and before anyone starts the iOS vs Android bantering. No, iOS does not have this particular flaw:
"Specifically, if a URL contains the * or # characters, the Phone application does not attempt to dial the corresponding phone number."
https://developer.apple.com/library/ios/#featuredarticles/iPhoneURLScheme_Reference/Articles/PhoneLinks.html

Security

Submission + - Breakthrough silicon scanning discovers hardware backdoor in military ASIC chip (cam.ac.uk) 3

StealthHunter writes: Cambridge researchers found a hardware backdoor after discovering additional functionality in the JTAG (hardware debugging / programming) interface. While such attacks have been theorized, this is thought to be the first real-world instance. The vulnerable product is the Actel ProASIC3, and, since the backdoor is in the hardware, there is no patch other than to physically replace the chip.
Iphone

Submission + - Should Apple's designs belong to Apple ? (themanufacturingrevolution.com) 1

Taco Cowboy writes: So we have Apple using a clock design without permission — http://apple.slashdot.org/story/12/09/23/1651204/swiss-railway-apples-using-its-clock-design-without-permission

And we have Apple suing others for their "rectangle with rounded corners" design

Well ... take a good look at the following -

http://themanufacturingrevolution.com/braun-vs-apple-is-copying-designs-theft-or-innovation

How can Apple's designs belonged to Apple when it is proven that they stole the designs from others?

Ubuntu

Submission + - Erm, we have root. - Mark Shuttleworth (markshuttleworth.com) 2

electron_god writes: The reaction to Canonical's decision to integrate Amazon search results through the Home Lens on Ubuntu 12.10 (Quantal Quetzal) has been ........loud. Mark Shuttleworth's response to the criticism, much of it revolving around security concerns regarding local system searches being transmitted to Amazon via Canonical, is "Erm we have root."

Comment Its easy to get working; ships (relatively) fast (Score 3, Interesting) 170

I ordered my Pi from Element14 on Aug 14th and it shipped on Aug 28th. I don't know what you are doing wrong such that you haven't received yours yet.

Once my Pi arrived, I downloaded an SD card image, wrote it to a card using dd, added power to the Pi and everything worked straight away. The parts that took the most effort were retrieving my spare cell phone charger and finding an HDMI cable to connect it to my TV.

Where is all the hate coming from?

Comment android gets a bad rap (Score 1) 179

sure lookout and company find malware, google removes it, etc the android alternative markets can have loads of malware (percentage wise). but at least we are fairly aware of what's going on. the apple ecosystem is still a big black box where the nastiness is ignored and unknown. even the notion that apps are vetted is completely misleading - as shown by charlie miller in syscan. apple doesn't even release stats like what the market distribution is among the different iOS devices.

Comment of course numbers are up (Score 1) 135

companies are winning lawsuits on "clicking a phone number in an email in order to dial the number" and "switching to an app while on the phone." companies would be mad not to try to patent every tiny user interface action, technical revision, bugfix, etc. regardless of prior art or novelty. prediction, 2012 will be even bigger!!!

Comment when a win is barely a win (Score 5, Informative) 314

HTC gave Android Central the following statement (updated 6:20 EST): We are gratified that the Commission affirmed the judge’s initial determination on the ‘721 and ‘983 patents, and reversed its decision on the ‘263 patent and partially on the ‘647 patent. We are very pleased with the determination and we respect it. However, the ‘647 patent is a small UI experience and HTC will completely remove it from all of our phones soon.

Slashdot Top Deals

Say "twenty-three-skiddoo" to logout.

Working...