Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Oh Good (Score 1) 199

Well, there aren't really any apps that satisfy all of that. Open-source, secure, video and mobile. Thought the post I was replying to did not specify mobile (although that's WhatsApp's main platform I guess). But the Point I was trying to make is that WhatsApp didn't satisfy those requirements either. It wasn't open, nor secure.

Anyways. there is Xabber for Android -- but I don't think that has video. Also many Android users use Google Hangouts / Talk etc for chat and video, but that is not open-source. There seem to be a number of other XMPP clients for Android but I don't know enough about them.

Also, FYI that Wikipedia link covers lots of apps -- both desktop and mobile (including WhatsApp).

Comment Re:If I understand TFA (Score 1) 120

Scratch that, looking through the links, even one of the AOSP browsers is affected.

Some distributions of the Android Browser app have an addJavascriptInterface call tacked on, and thus are vulnerable to RCE. The Browser app in the Google APIs 4.1.2 release of Android is known to be vulnerable. A secondary attack vector involves the WebViews embedded inside a large number of Android applications. Ad integrations are perhaps the worst offender here. If you can MITM the WebView's HTTP connection, or if you can get a persistent XSS into the page displayed in the WebView, then you can inject the html/js served by this module and get a shell.

Comment Re:Oh Good (Score 3, Informative) 199

Was WhatsApp ever secure or open? Wasn't it just a proprietary wrapper for xmpp?

There are other jabber/xmpp/jingle clients out there. I'm not sure what is the best client but pidgin works well for most things IIRC. Miranda IM may also be worth a look, or Adium. All three are a GPL or similar license I think.

https://en.wikipedia.org/wiki/...

Businesses

Good Engineering Managers Just "Don't Exist" 312

hype7 writes "Here's a provocative article; the VP of engineering of a Sequoia-backed startup in Silicon Valley makes the case that good engineering managers aren't just hard to find — that they basically don't exist. The crux of his argument? The best engineers get all the benefits of being leaders, but without needing to take on the rather painful duties of management. So they choose not to move up. Compare this to the engineers who aren't as strong, and use the opportunity to move up as a way to get their voice heard."
Worms

Linksys Routers Exploited By "TheMoon" 134

UnderAttack writes "A vulnerability in many Linksys routers, allowing for unauthenticated code execution, is being used to mass-exploit various Linksys routers right now. Infected routers will start scanning for vulnerable systems themselves, leading to a very fast spread of this 'worm.'"
Google

Google Apps License Forbids Forking, Promotes Google Services 163

Sockatume writes "If you want to ship a phone with Google's apps on it, you need to license them. A copy of the OEM licensing agreement from 2011 was recently leaked, and Ars Technica provides a summary. Amongst the rules: a company licensing Google Apps can't act in a way that would fragment Android, but must also maintain the platform's open-ness; most of Google's services must be included; Google apps must be defaults, and placed within a couple of clicks of the default home screen. No surprises, but it's interesting to see the details laid out."

Comment Re:Intentional? (Score 2) 100

Sounds like they are probably just slacking on their locale detection. I bet the browser is sending something like just the two letter language code "zh" (Chinese) in the Accepts-Language header, and bing is falling back on "zh-CN" (instead of "zh-US").

Still, seems like an awfully dumb way to censor search results, not to mention the chilling effect. Kinda puts their "Scroogled" campaign in context.

China

Bing Censoring Chinese Language Search Results For Users In the US 100

kc123 sends this report from The Guardian: "Microsoft's search engine Bing appears to be censoring information for Chinese language users in the U.S. in the same way it filters results in mainland China. Searches first conducted by anti-censorship campaigners at FreeWeibo, a tool that allows uncensored search of Chinese blogs, found that Bing returns radically different results in the U.S. for English and Chinese language searches on a series of controversial terms. These include Dalai Lama, June 4 incident (how the Chinese refer to the Tiananmen Square protests of 1989), Falun Gong and FreeGate, a popular internet workaround for government censorship."
Earth

Scientists Solve Mystery of World-Traveling Plant 52

sciencehabit writes "By land or by sea? That's the question scientists have been pondering for decades when it comes to the bottle gourd, a plant with a hard-skinned fruit that's used by cultures all over the world to make lightweight containers and other tools. Archaeologists know that people were using domesticated bottle gourds in the Americas as early as 10,000 years ago. But how did the plant make the jump from its original home in Africa to the New World with an ocean in the way? A new study overturns previous evidence pointing to a human-assisted land migration and concludes that the bottle gourd floated across the Atlantic Ocean to the Americas on its own."

Comment Re:Sure, Netflix is safe, what about the rest? (Score 5, Interesting) 213

if (trafficSource != VerzionOnDemand && trafficSource != Netflix) {

degradePerformance(); //slightly and randomly degrades performance

}

Seems relatively easy from a logic point of view.

Would anyone notice if they randomly started dropping UDP packets? Your average web user would see pages load just as fast. Statistical analysis would have to be very large scale and long term to notice a trend that couldn't be attributed to the normal fluctuations of speed and reliability of the internet. But home users could get a subtle difference in viewing experience for video from their ISP and a competitor.

In reality, ISPs simply need to slack on peering arrangements so their competitors are hammered during peak usage. Something Verizon has already been accused of.

This all leads me to think the real problem is the vertical monopoly/integration of ISP and content provider. If the government doesnt step in, we'll continue to see this war over and over just with ever shifting battlefields. Even with common carrier, we would likely still have ISPs pulling these tricks. regardless of whether they can charge Netflix more.

*obviously it's more complicated than the pseudo code above

Comment Re:Judging Performance (Score 1) 192

I think what we gain from the security of a consistent rule of law, and the protection from the abuse by law enforcement officers, far outweighs the difficulty in having to think through and create reasonable laws. I dont want to trade protection from abuse just because we're to lazy to write correct laws. I don't want the current system of "make everything illegal" + "trust the cops" as the solution for that.

Some type of shoulder, dash cam, or Google-Glass-like device could go a long way towards that. I also think that there can be clear distinction at least when the cops must act and when they cant. Most places seem to have speed limits that are too low causing everyone to drive 5-15 over. But if the chances were high that you would get a ticket for going a few miles per hour over the limit, would you always put yourself in a situation where your are likely to accidentally drive over the limit? I think people would find a natural "buffer" and protect themselves. And speed limits should probably be increased and if the law was consistent and strict, people would find a reasonable speed to travel. Most of the time driving the actual speed limit becomes dangerous when everyone else is going that much faster. Or, specifically regarding speeding, cops could be prevented from pulling someone over unless they were traveling at 15mph or higher over the limit. I don't think it's hard to work out the details.

As for smokers...walking past smokers is a minor nuisance, people should just get over that (IMHO). I recently quit, switching to e-cigs, and people still cough when I walk by. They think I am smoking because my e-cig looks like a cigarette. It is all in their heads (there is no second hand smoke with e-cigs). Second hand smoke only becomes a problem indoors. And any rude smokers should be asked to make way nicely. (I used to always try to keep away from doors to buildings and especially keep my distance from children). But I'm not sure a law is needed here. Smoking is largely on the way out in the US.

As for pot, I think that should be legalized.

As for parking, that is not done by cops usually. And I can't remember a time when parking was ignored as a minor offense. Most towns see those tickets as cash cows.

While I appreciate what you saying, I dont think that is a good enough reason. If the law was applied consistently, people would adjust. Right now people just roll the dice against how much they can get away with. And cops walk around with power they should never have been granted.

Slashdot Top Deals

Doubt is a pain too lonely to know that faith is his twin brother. - Kahlil Gibran

Working...