Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security

Cambridge Researcher Breaks OpenBSD Systrace 194

An anonymous reader writes "University of Cambridge researcher Robert Watson has published a paper at the First USENIX Workshop On Offensive Technology in which he describes serious vulnerabilities in OpenBSD's Systrace, Sudo, Sysjail, the TIS GSWTK framework, and CerbNG. The technique is also effective against many commercially available anti-virus systems. His slides include sample exploit code that bypasses access control, virtualization, and intrusion detection in under 20 lines of C code consisting solely of memcpy() and fork(). Sysjail has now withdrawn their software, recommending against any use, and NetBSD has disabled Systrace by default in their upcoming release."

Microsoft Says "War on Terror" is Overblown 666

SlinkySausage writes "The endless security measures imposed on society as a result of the "war on terror" have become overblown and intrusive, according to Microsoft Redmond senior security analyst Steve Riley. He made the comments in a talk at day one of Tech.Ed Australia about software security. Riley also fessed up that Microsoft cocked up XP from a security perspective. "We let you down with XP," he said. Microsoft also showed a very interesting new desktop virtualisation technology called SoftGrid, which allows applications to be virtualised individually, rather than a whole OS. Think Virtual PC or VMware, but instead of virtualising an OS, just a single application is virtualised."
Businesses

What is Apple Without Steve Jobs? 281

necro81 writes "David Pauly at Bloomberg has written a piece that asks 'Does Apple Inc. Have a Future Without Steve Jobs?' He writes in the context of Jobs' latest success in launching the iPhone, set against the backdrop of stock backdating troubles. In Pauly's worst-case-scenario, the SEC prosecutes Apple, and the board is forced to oust Jobs.Even without resorting to such scenarios, it's an interesting question to ask the fanboys and detractors out there: could Apple succeed and continue to innovative without Jobs at the helm?"
Media

Is DRM Intrinsically Distasteful? 631

jelton writes "If digital media was available for sale at a reasonable price, but subject to a DRM scheme that allowed full legitimate usage (format shifting, time shifting, playback on different devices, etc.) and only blocked illicit usage (illegal copying), would you support the usage of such a DRM scheme? Especially if it meant a wealth of readily available compatible devices? In other words, if you object to DRM schemes, is your objection based on principled or practical concerns?"
United States

Does Income Inequality Matter? 1186

theodp is concerned about the following: "Alarmed by Goldman Sachs CEO Lloyd Blankfein's record-setting $53M bonus, Charles Wheelan (aka The Naked Economist) argues that income inequality matters. Wheelan notes that the Gini Coefficient (a measure of income inequality) for the U.S. has been moving away from countries like Japan and Sweden and closer to that of Brazil, where the murder rate is 5X that of NYC and crime is materially impacting GDP."

Comment Here's our solution. (Score 2, Informative) 574

We (The Binghamton University Computer Science Department) employ 2 debian raid servers. They make use of a 3ware ATA 12-port card and their (3ware's) hot-swap enclosures (whoever said hot-swapping with ATA is not possible is incorrect, we do it).

It uses a 9 external 5.25 bay case (enlight) with an Antec 550W power supply to handle the 12 drives (plus a seagate system drive in the internal 3.5" bay). This has worked very well.

We use Maxtor 300GB drives in one machine (RAID55) and have lost 5 of 20 drives we purchased in 6 months. The other uses Western Digital 200GB (RAID5), and we've lost 1 of 12 in a year. Manufacturer DOES matter. WD replaced our drive in days, Maxtor makes you jump through hoops and tries to deny the problem for a while, just to finally decide to replace the drive, then take 5-7 mroe days to get it to you.

All in all, these machines cost us under 7K each and perform very well. However, if I bought one today, I'd get 3ware's SATA card and Seagate's new 400GB SATA drives instead. Whoever said ATA cables are a pain was NOT wrong, and these drives would give much better performance.

Slashdot Top Deals

An authority is a person who can tell you more about something than you really care to know.

Working...