Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:Can we just take a vote (Score 1) 117

And 8 of the 10 Windows vulnerabilities were related to the Adobe Type Manager Font Driver (ATMFD.DLL). I don't know how much of ATMFD was written by whom, but according to Wikipedia, "Adobe licensed to Microsoft the core code." That makes Adobe responsible for 13 of the 15 vulnerabilities, including all 9 of the most dangerous.

Comment Re:No surprises there (Score 4, Informative) 117

It would have been nice if The Register's somewhat hysterical FA (much less the Slashdot summary) had made clear up front that Microsoft patched most of the Windows vulnerabilities all the way back in March (MS15-021), and the last one in May (MS15-044). According to j00ru's blog post, Adobe patched their holes in May as well.

j00ru was clear enough in his blog post, but El Reg decided to stick in one line: "Microsoft and Adobe issued patches in three updates."—six paragraphs down, looking more like an image caption than part of the article. Sheesh.

Comment Re:Relevance? (Score 2) 127

Who ever did? I went to school in the 1960s and 1970s, consistently scored high on standardized tests, got the highest score in my state on one year's PSAT, but was never offered an IQ test by any school or doctor or organization. Informal tests have consistently put me somewhere in the 150-160 range, but in over half a century I've never had the opportunity to take a formal test (unless I wanted to pay someone to administer the test to me). IQ tests have always been something someone else took somewhere I wasn't.

Comment Re:Amen brother! (Score 1) 424

Man, I miss Northernlight. That was a search engine from the late 90s that actually tried to categorize results by topic, and returned a tree structure that you could navigate through. If you entered "Paris Hilton" you got a tree with separate branches for French hotels and for sluts.

But they went subscription-only after a few years, then they went away. Too bad.

Comment Re:Kaspersky (Score 3, Interesting) 53

You recently blogged ("Malware Evolution Calls for Actor Attribution") criticizing security companies that don't make the effort to identify the creators of malware. Do you think there are times when a company—such as Kaspersky in their recent attack—could be acting responsibly by deliberately suppressing (temporarily, one would hope) information they might have about the source of an attack?

Comment Re:Meh (Score 1) 830

Yes, except that significant digits are irrelevant when you speak of exact values. These days, 1" is defined as exactly 2.54cm (or 25.4mm or maybe even .0254m; I'm not sure of the actual definition), so 1" = 2.54cm is in fact exactly correct. Blame the fact that the common English numbering system has no way of distinguishing exact values from values lacking additional significant digits. That's why my old CRC Standard Math Tables used bold text for exact values.

Submission + - SourceForge MITM Projects (github.io) 2

lister king of smeg writes: What happened?

SourceForge, once a trustworthy source code hosting site, started to place misleading ads (like fake download buttons) a few years ago. They are also bundling third-party adware/malware directly with their Windows installer.

Some project managers decided to leave SourceForge – partly because of this, partly just because there are better options today. SF staff hijacked some of these abandoned accounts, partly to bundle the crapware with their installers. It has become just another sleazy garbage site with downloads of fake antivirus programs and such.

How can I help?

If you agree that SourceForge is in fact distributing malicious software under the guise of open source projects, report them to google. Ideally this will help remove them from search results, prevent others from suffering their malware and provide them with incentive to change their behavior.

As this story has been submitted several times in the past several days, by various submitter and is going around various other tech forums( https://news.ycombinator.com/i... , https://soylentnews.org/articl... , https://www.reddit.com/r/progr... ,) this submitter wonders has our shared "glorious Dice Corporate overloads" been shooting this story down?

Submission + - SourceForge assumes ownership of GIMP For Win, wraps installer in adware (arstechnica.com)

An anonymous reader writes: It appears that SourceForge is assuming control of all projects that appear "abandoned." In a blog update on their site, they responded saying in part "There has recently been some report that the GIMP-Win project on SourceForge has been hijacked; this project was actually abandoned over 18 months ago, and SourceForge has stepped-in to keep this project current. "

SourceForge is now offering "to establish a program to enable users and developers to help us remove misleading and confusing ads."

Slashdot Top Deals

So you think that money is the root of all evil. Have you ever asked what is the root of money? -- Ayn Rand

Working...