Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re: The Interview hits warez sites (Score 1) 166

There are basically only three decoders that cover most of the market: Microsoft's DirectShow filter, libavcodec / libavformat, and QuickTime. Hardware decode doesn't help much, because you still have the same software path as everyone else doing the de-encapsulation and file parsing, which is where the exploitable bugs often show up. If you have vulnerabilities in each of these then it's not generally hard to hide them all in the same file, as the codecs aim to be resilient to corrupted data so will usually just drop a frame or two for the exploits aimed at the other implementations.

Oh, and libavcodec / libavformat are used in Android (and in a lot of iOS apps, as AVFoundation doesn't always expose useful APIs), as well as in desktop browsers, so they're a pretty good target to aim for.

Comment Re: Yes, it's in FB's "ordinary [business] course" (Score 2) 48

People who think a fake name on Facebook protects them from any of the privacy invasion really haven't been paying attention to the last decade of data mining. The reason Facebook no longer cares if you register with a fake name is that they've been able, with very high accuracy, to get your real name and address without your providing it for a few years.
User Journal

Journal Journal: Merry Christmas! 1

For the first time in nine years I got to see my youngest daughter on Christmas; this is the first Christmas in nine years she didn't have to work. Great Christmas present!

And the second to last pre-publication copies came Christmas eve eve. I finished going through it this morning, and the book itself is ready. What wasn't was the cover; I fixed it and ordered another copy, so Mars, Ho! should be online in a couple of weeks.

Comment Re: The Interview hits warez sites (Score 4, Informative) 166

What secure OS do you run where the video codecs have had a full security review? Google found (and fixed) around 300 exploitable holes in libavcodec / libavformat in the last year. Do you want to bet that they found them all? Do you always run video codecs in an unprivileged process?

Comment Re:WTF UK? (Score 1) 360

And yet the contents of the tweet made it into the Slashdot summary, quoting from the Huffington Post article. It's no doubt now been posted by other news outlets. How many people do you think would have seen some idiot's tweet, verses the number that will now see it quoted in the news?

Comment Re:So... (Score 1) 131

They only give you the free copy for the photo of the cover for public domain books. If you want to read these, install FBReader (which has a nice search interface for various online collections) and don't waste time with this app. To get copies of in-copyright books, you need to deface the copyright page. If you can do that in a book shop without having to buy the book, then you live somewhere with very tolerant shopkeepers...

Comment Re:I'm the app's developer. Happy to answer questi (Score 2) 131

I already have an app that catalogues the books I own by reading the bar code (which contains the ISBN in most cases). It takes a couple of seconds on my cheap phone (Moto G) to scan each bar code - it takes longer to look them up in a DB. Why would I want to use an app that relies on being able to recognise a cover, which is both more computationally expensive and less reliable (several of the books I own have had a dozen or so different covers for different printings - try looking at all of the covers an Agatha Christie novel has had over the years sometime)?

To claim an eligible title you have to take a picture of your name written onto the book's copyright page

Ah, so I have to deface my books and take two pictures (one of the copyright page, one of the cover)? No thanks.

Slashdot Top Deals

Living on Earth may be expensive, but it includes an annual free trip around the Sun.

Working...