Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Feed Schneier: New Cross-Site Request Forgery Attacks (schneier.com)

Interesting: CSRF vulnerabilities occur when a website allows an authenticated user to perform a sensitive action but does not verify that the user herself is invoking that action. The key to understanding CSRF attacks is to recognize that websites typically don't verify that a request came from an authorized user. Instead they verify only that the request came from the...
Music

Submission + - EFF Report: RIAA legal crusade losing credibility (kingofgng.com)

KingofGnG writes: "After five years of legal threats against tens of thousands of American music consumers, the hands of RIAA, the USA recording labels organization, remain empty or barely over: from any standpoint you look at the matter, states the Electronic Frontier Foundation, the majors have lost the bet to reestablish the control on digital contents delivery while succeeding in antagonizing a huge amount of potential customers, pretty happy to not to give a single cent to those viewing them as "pirates" dangerous for business, artists, music and the entire world. Story here."
It's funny.  Laugh.

Submission + - Greatest IT Mistakes (ncl.ac.uk)

martyb writes: I'm a long-time member of /. and an even-longer-time reader of The Risks Digest (Forum On Risks To The Public In Computers And Related Systems). Their archives go back to 1985! If you missed out on Bone-Headed IT Mistakes, here's your chance: Andrew Brandt is Seeking tales of IT gone wrong. I can think of no better source than right here on /. and am in hopes that you can help him out (and entertain us here) with your tales of woe. In part, he writes:

I'm a freelance reporter, currently on assignment to write a story for *Infoworld*. The gist of the story is "Greatest IT Mistakes," where I hope to relate true anecdotes of people who — perhaps in an ill-advised, well-intentioned state of mind — set off a cascade of errors that resulted in serious computer downtime, lost data, or other notable information technology failures or problems. ... Please send me true stories, preferably where you have direct, personal knowledge of the details and parties involved.

The goal of the story is not to humiliate a person, or call attention to a company with poor IT policies. This isn't a name-and-shame piece. I'd like the story to serve as a cautionary tale to others, with a humorous angle, if that's possible. And I think it is. To that end, I'm willing to anonymize what anyone cares to share with me to whatever extent is necessary to avoid such humiliation. Of course, if the person or people responsible for, by way of entirely hypothetical example, deleting a company's entire e-mail archive in the process of performing a backup are willing to have their identities disclosed, I'd be more than happy to oblige. (emphasis added)

What is YOUR best (worst?) story? Does it make the grade of "Greatest IT Mistakes"?

Earth

Submission + - Can You See Fossett's Plane on Google Earth? (wired.com)

GirlScout writes: A ground team has found Steven Fossett's airplane after a hiker noticed that some of his belongings were tangled in a bush. The discovery came one year after two high profile searches that made use of satellite imagery and crowdsourcing were unsuccessful — one for Fossett and the other for David Gray. Wired Science wants to know if anyone can spot the wreckage on Google Earth. That would provide some validation for the unproven search and rescue technique.
Quickies

Submission + - Steve Fossett search back on

sbibayoff writes: "After, according to CNN, "Hikers in California found items belonging to missing millionaire adventurer Steve Fossett, officials said Wednesday. A weathered sweat shirt, cash and a pilot license with Fossett's name were found Tuesday near Mammoth Lakes, police Chief Randy Schienle said. The license did not have a photo, he said."
"No plane wreckage was found, but a multi-jurisdictional team would return to the area of the discovery to search by air and on foot, Schienle sai"

http://www.cnn.com/2008/US/10/01/fossett.discovery/index.html"
Technology (Apple)

Submission + - Apple drops part of iPhone developer NDA

ds writes: "Apple, this morning, announced they are dropping the iPhone Developer NDA in respect to released software. Previously, iPhone developers were legally bound even after their software had been released. The message, as seen on Apple's iPhone Developer site:

We have decided to drop the non-disclosure agreement (NDA) for released iPhone software. We put the NDA in place because the iPhone OS includes many Apple inventions and innovations that we would like to protect, so that others don't steal our work. It has happened before. While we have filed for hundreds of patents on iPhone technology, the NDA added yet another level of protection. We put it in place as one more way to help protect the iPhone from being ripped off by others. However, the NDA has created too much of a burden on developers, authors and others interested in helping further the iPhone's success, so we are dropping it for released software. Developers will receive a new agreement without an NDA covering released software within a week or so. Please note that unreleased software and features will remain under NDA until they are released. Thanks to everyone who provided us constructive feedback on this matter.
"
Announcements

Submission + - Jetpack man crosses English Channel

Smivs writes: "A Swiss man has become the first person to fly solo across the English Channel using a jet-propelled wing. The BBC article contains video of the feat. Yves Rossy landed safely after the 22-mile (35.4 km) flight from Calais to Dover, which had been twice postponed this week because of bad weather. The former military pilot took less than 10 minutes to complete the crossing and parachute to the ground. The 49-year-old flew on a plane to more than 8,200ft (2,500m), ignited jets on a wing on his back, and jumped out. It felt "great, really great", said Mr Rossy."
The Internet

Submission + - SPAM: Accused of tolerating scammers, an ISP goes dark

alphadogg writes: The lifeline linking notorious service provider Intercage to the rest of the Internet has been severed. Intercage, which has also done business under the name Atrivo, was knocked offline late Saturday night when the last upstream provider connecting it to the Internet's backbone, Pacific Internet Exchange, terminated Intercage's service. Intercage president Emil Kacperski said Pacific did not tell him why his company had been knocked offline, but he believes it was in response to pressure from Spamhaus, a volunteer-run antispam group, which has been highly critical of Intercage's business practices.
Link to Original Source
Math

Submission + - New Mersenne Primes Announced 1

Mini-Geek writes: GIMPS has announced M45 and M46, found September 6 and August 23 respectively. Both numbers are over 10,000,000 digits, having 11,185,272 and 12,978,189 respectively. The numbers are 243,112,609-1 and 237,156,667-1. M45 and M46 were discovered by Hans-Michael Elvenich and Edson Smith respectively. GIMPS will claim the EFF's $100K reward for the first prime number with over 10,000,000 digits. GIMPS will split the prize money by their prize rules, with $50,000 going to the discoverer of M46. The discoverer of M45 will not receive any prize money, since he discovered M45 after M46. M45 is 'the first Mersenne prime to be discovered out of order since Colquitt and Welsh discovered 2110,503-1 in 1988.' Read more about both new primes at http://www.mersenne.org/.
Software

Submission + - The death of the progress bar? (slashdot.org)

Too-late-too-fight-boredom writes: As I sit watching a 3G iPhone absorb the latest 237.8MB upgrade (that's before unpacking, btw) I realise that here too is really no way of telling just how far it has progressed, and it struck me that I haven't seen a *real* progress bar for quite some time other than, ironically, on the iPhone itself.

Let me define "real": a progress bar that gives me an idea of how far a computer program has progressed during a time consuming (> 30 seconds) task. What I do NOT consider a progress bar:

- one that starts again after it has completed its journey from left to right (a "feature" of most newer installers, probably aimed at users busy)
- an animation that tells me nothing at all — demonstrated by what PC based iTunes shows when it pushes the aforementioned update up the iPhone's rear end.
- one that tells me it needs another 31456 hours and some minutes and then finishes 10 mins later (Vista).

Now, I understand that it's sometimes hard to predict just how long things are going to take, but then maybe an overview bar and one per task would be more informative. It's not like that is a new idea, if I recall correctly that was something used by the Norton Commander. If not, well, look at the Linux Midnight Commander — same idea. Useful.

I've seen enough "keep 'em busy" animation to last me a lifetime, starting with the animated Windows hourglass which mainly appears to suggest that the system you paid for is presently off doing something else like smoking a joint or copying some potentially confidential information, so I really don't need any more of that, thanks.

Just bring back the progress bar, please. I would consider that, umm, well, progress..

Earth

Submission + - Why Does Hurricane Size Not Get As Much Attention? 1

circletimessquare writes: "Hurricanes can vary greatly in size. As of Thursday Evening, Ike is a Category 2-3 Storm. But it is extremely large. Therefore, in terms of raw destructive energy, it is stronger and more dangerous than even Hurrican Katrina. A good comparison of raw strength, ironically on an experimental NOAA scale called IKE (integrated kinetic energy), quantifies this comparison. Anyone with a passing familiarity with physics understands a wind going 100 mph and 30 miles wide packs more energy than a wind going 200 mph but only 10 miles wide. But there are people who choose to wait things out in Houston and Galveston, for many foolish reasons, but not least of which because they hear that Ike is only Category 2. So why doesn't the NOAA and the media convey more information, use a different scale that takes into account storm size as well as wind speed, or at least quote the numbers together? Such as 'Hurricane Ike is a Category 2x550 storm' (550 miles across)."
Software

Submission + - The Adobe PDF license trap

Gene A writes: "I wanted to download Adobe Reader on to my computer so I could read PDF files. I went to Adobe's web site. The Download page said, "By clicking the Download button you agree to the License Agreements and Privacy Policies for the software included." Dutifully, I went to read the license page and it said, "You can access the product license in Adobe® Portable Document Format (PDF) by ..." Obviously, the web site maintainers at Adobe have read the novel, Catch 22."
Privacy

Submission + - Using ITunes Genius Isn't Smart (daniweb.com)

rsmiller510 writes: "The other day I downloaded the latest version of iTunes and discovered the much-heralded Genius feature is a not-so subtle way to sell content on iTunes. First, you have to transmit a list of the contents of your library to Apple, then they make suggestions in the iTunes store based on your content. Genius also can build playlists based on your content in your library, but not unless you transmit to Apple your information to Apple first. They could have made it a service that just checks your library or lets you share your info to get suggestions from the Apple store, but they chose to force you to send your information and that's what really bothers me."

Slashdot Top Deals

"If I do not want others to quote me, I do not speak." -- Phil Wayne

Working...