Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Still waiting for a "hackability meter" (Score 1) 159

Why should there be a character limit on passwords? Providing you're hashing them then storing them just needs a constant width field. If you're dealing with html inputs, then the default is not to have a maxlength attribute and if you're POSTing the form data then you're unlikely to hit any limits.

Submission + - Big Vulnerability in Hotel Wi-Fi Router Puts Guests at Risk (wired.com)

An anonymous reader writes: Guests at hundreds of hotels around the world are susceptible to serious hacks because of routers that many hotel chains depend on for their Wi-Fi networks. Researchers have discovered a vulnerability in the systems, which would allow an attacker to distribute malware to guests, monitor and record data sent over the network, and even possibly gain access to the hotel’s reservation and keycard systems.

The vulnerability, which was discovered by Justin W. Clarke of the security firm Cylance, gives attackers read-write access to the root file system of the ANTlabs devices.

The discovery of the vulnerable systems was particularly interesting to them in light of an active hotel hacking campaign uncovered last year by researchers at Kaspersky Lab. In that campaign, which Kaspersky dubbed DarkHotel

Comment Re: Invisible hand (Score 2) 536

The average adult, globally, has much more buying/trading power than an American with $10 in their pocket and no debt, yet simply having $10 in your pocket and no debt makes you wealthier than 25% of Americans. While I'm doing quite well for myself, I couldn't afford to go buy a goat right now, but people living in mud huts do so routinely. Yes, collectively, we have more currency than most of the world, but per-capita, we have less buying/trading power than most 3rd world nations. It gets worse when you remove the 0.1% of Americans who control 22% of household wealth from the equation; worse still when you remove the 10% who control 80% of the wealth. Remove the outliers (and with weighting like that, there's nothing to remove from the low end) and calculate the buying/trading power of the average American, the compare that with the buying/trading power of the average person in, say, Ghana, then tell me who can afford more. Keep in mind that debt is *negative* buying/trading power, it's literally money already spent. If someone has $10,000.00 in liquid assets but $10,000.01 in debt, they legitimately have ($0.01) buying/trading power. That's negative one cent.

We only appear to have buying power in the US because we are extended much more credit than we can afford. Consider:

The average US salary is $51,000 per year, the average home price in the US is $188,900 per year (at 4% for 30 years), the average US car price is $32,086 (at 5% for 5 years), and the average American has $16,000 in revolving credit (at 14.9% in perpetuity). That means, right out of the gate, the average American is going to have $236,986 in debt which would take nearly 5 years to pay off with no interest, assuming they could throw their entire salary at the debt. Now, consider that the average American spends $151/wk on food (and doesn't necessarily eat much better than people in agriculturally-capable 3rd world countries), for a family of 3, that's $23,556 per year, leaving only $27,444 per year to pay down that debt, which would take almost 9 years if not for interest. Except that we also need clothing, which costs the average American family of 3 $174/mo, or $2,088 per year, leaving only $25,356. At that rate, it will take over 9 years to pay down that debt, with no interest. We've covered food, shelter, clothing, and transportation, so we'll ignore other expenses since the average American could forgo those if necessary.

Since I'm not writing a text book, I'm going to simplify the interest for the first year; I'll go with a set of estimates based on 6mo of payments toward each debt (e.g. I'll estimate the year's compound interest by calculating interest based on the mid-year principal balance), which won't be perfectly accurate. Some balances will be higher, some will be lower, in the end it should be fairly accurate; the interest calculated will likely be a bit low, but accurate enough to highlight my point. The average American's housing cost accounts for 79.71% of their debt, while transportation accounts for 13.53%, leaving the remaining 6.76% to revolving debt, so that is how I will distribute excess (e.g. over the minimum) payments for this example. The minimum payment for a $188,900 30 year home loan @ 4% is $902/mo, or $5,412 every 6mo; the minimum payment on a $32,086 5 year car loan @ 5% is $606/mo, or $3,636 every 6mo; and, the minimum payment on $16,000 of revolving debt @ 14.9% is $640/mo, or $3,840 every 6mo. Remember, the average American has $25,356 available each year to pay debts, half of that (to get 6mo of payments) is $12,678, so that is the number I'll be basing 6mo of payments on. Well, there's already a problem, given that the minimum payments total up to $12,888, over 6 months, which is $210 more than the average American will be able to pay in that time.

So, which payments get cut? Remember the percentages I calculated for excess payments? We'll cut everyone according to their share of that $210 deficit, based on those percentages. So, we'll cut the housing payment by $167, the car payment by $28, and the revolving debt payments by $15, over the course of that 6 month period: $5,245 to housing, $3608 to the car payment, and $3835 to revolving debts. We'll also assume we have very understanding creditors who don't charge us any fees or sent our accounts to collections for nonpayment when we don't pay in full. That's a pipe dream, but I'm trying to be generous to your viewpoint (and keep the math as simple as possible).

For housing that leaves a balance of $183,655; for transportation that leaves a balance of $28,478; and, for revolving debt that leaves a balance of $12,165 after 6 months of payments (remember, we haven't factored in estimated interest yet). Now, let's add the year's interest and subtract the remainder of the year's payments. Interest: $183,655 @ 4% = $191,001; $28,478 @ 5% = $29,902; $12,165 @ 14.9% = $13,978. Remaining payments: $191,001 - $5,245 = $185,765 for housing; $29,902 - $3605 = $26,207 for transportation; $13,978 - $3835 = $10,143 for revolving debt.

So, it looks like after paying $10,490 toward their home, the balance only fell $3,135; after paying $7,210 toward their car, the balance only fell $5,879; and, after paying $7,670 toward their revolving debts, the balance only fell by $5,857. That is to say, after paying $25,370 (rounding error... yay!) toward their debts, they're only $14,871 less in debt; $10,499 went to interest, and we're not quite sure where the extra $14 came from (again, it was rounding error, maybe they kept a pair of shoes a couple months after the soles wore through).

Mind you, it'll get easier each year as more of their payment goes toward the principal balance, but at that rate it will take them 11.25 years to pay everything off. Of course, that's extremely optimistic. The car will need repairs in that time, as will the house, and those repairs will probably end up on the 14.9% interest credit cards. Oh, and after 11.25 years the car will probably no longer be road worthy, so they get to restart that debt (ignoring inflation). And, God forbid they get sick, which reminds me, the average cost of (now mandatory) health insurance for a family of 3 is $16,834 per year, which throws a monkey wrench in the whole damn thing; with only $8,522 per year to put toward bills (wait, no, after $2,516 in income tax, that's $6,006) each year. Do I need to redo the debt calculations for you, or are you now able to see how the average American actually has negative buying/trading power, by way of debt far in excess of the value of their liquid assets? Now, consider that I didn't account for vehicle or home maintenance (I mentioned them, but I did not account for them), car insurance (required in most states), gas (for the car), homeowner's insurance (required by the bank while your home is financed), utilities (electricity, gas [for heat], water, garbage collection), property taxes, sales tax, or any form of entertainment. And remember, if I actually took the time to calculate the interest on a month by month basis, you'd actually see more interest charged, so you'd see it taking even longer to pay off all of that debt.

The average American can't afford dick; the banks own it all and it's just on loan to us until we either manage to pay it off, or we default on the loan. You can't really pretend to understand until you've been there, or at least done the math. I've done both, and it's a life I'm glad I'll never have to go back to. And, for reference, the 3rd world cultures where people are starving, it's not that they can't afford food (they don't typically have a concept of money), but that the food simply isn't there (in part because they haven't figured out how agriculture works, so they're not really growing their own); in 3rd world cultures with a concept of money, people don't go hungry and the average person can also afford housing and transportation (usually a mule or equivalent animal, rather than a car), with enough left over to cover some entertainment (which, of course, varies quite a bit from what we consider entertainment in the 1st world) and medical care; the exceptions are areas ravaged by warlords. Mind you, our medicine is typically light-years ahead of theirs, but they can actually afford what is available to them without the crushing debt endured by the slightly above average, or lower, in the first world. That health care sure is important in the 1st world, though; they need us to stay alive and keep paying interest.

That really has me wondering how I survived for a decade on $16,000/yr with one dependent. Oh, no it doesn't... a mountain of debt, that's how. It's taken me half a decade of earning well above the national average to even put a dent in that.

But yeah, we're doing a lot better than the 3rd world. </sarc> Sure, we have nicer stuff, which our financial overlords let us use, for now. Very few of us are richer than anyone in the 3rd world, when you factor what we actually own, free and clear, against what we have on loan. If 3rd world banks gave 3rd world people in 3rd world countries some 3rd world loans, well, they'd be living like we do and those banks would be facing the same lending crisis the 1st world banks would have to deal with.

TL;DR: Your average 1st world citizen is likely much worse off, financially, than your average 3rd world citizen. We only live the way we do because we have the option of carrying take-centuries-to-repay levels of debt; take away that option and tell me how much of the 1st world ends up looking a lot like the 3rd. Here's a hint: Any region where the majority of the population has slightly above average, or lower, income and slightly below average, or higher, expenses. To put it into the perspective of someone who's lived in a 3rd world country, my former boss grew up in a tribal region of Papua New Guinea and could afford a better lifestyle than he currently lives in the US as a business owner.

Submission + - MIT Debuts Integer Overflow Debugger (threatpost.com)

msm1267 writes: Students from M.I.T. have devised a new and more efficient way to scour raw code for integer overflows, the troublesome programming bugs that serve as a popular exploit vector for attackers and often lead to the crashing of systems.

Researchers from the school’s Computer Science and Artificial Intelligence Laboratory (CSAIL) last week debuted the platform dubbed DIODE, short for Directed Integer Overflow Detection.

As part of an experiment, the researchers tested DIODE on code from five different open source applications. While the system was able to generate inputs that triggered three integer overflows that were previously known, the system also found 11 new errors. Four of the 11 overflows the team found are apparently still lingering in the wild, but the developers of those apps have been informed and CSAIL is awaiting confirmation of fixes.

Comment Helpful websites will provide (Score 2) 159

A reminder about their password requirements.

I cannot begin to count the number of times I've had to hit "Forgot my password" simply because they do not remind me up fron that my password must have special character in it. For websites that do not have my personal information and especially not financial (blog sites, sport sites) I tend to use a common password so I don't have to remember different passwords. Again, completely different from any important password and used only for essentially throwaway sites.

But some sites require at least digit, others at least one Capital letter (or at least one lowercase), others at least one special character, others some combination.

The throwaway password usually meets these by virtue of the way it is constructed, but not always. Sometimes it has to be doubled to meet a length requirement, for example. But while they tell you this when you create the password, they never seem to remind you when you later have to enter your password.

Comment Re:This validates the US policy... (Score 1) 737

I imagine we'll being seeing this policy across EU airlines pretty damn quickly. I also guarantee that all flight crew members will be looking at where the door mechanism is on the flight deck and how to use it. As you say, it would take very little time to open the door - we're talking about real life here, it's unlikely that a single man will be able to knock out anyone in an instant, especially while sitting down.

Comment Re:it could have been an accident (Score 1) 737

Except when there is a terrorist threatening the pilot outside, asking him to enter the code...

But that terrorist will be bum rushed by everyone on board and beaten to the ground. Even the hostage knows his best bet is to take the knife between ribs - better odds surviving that than the destruction of the plane.

Terrorists - or anyone - stopped hijacking airplanes the second such hijackings stopped meaning a delay and started meaning everyone aboard dying.

Submission + - New Political Party Runs Entirely on Your Feedback (post-gazette.com)

Andrew Warshaver writes: Fed up with the failures of the U.S. political system, two CMU grads are turning to technology to create a new party that runs entirely online, and entirely on your feedback. Their electorates will make decisions solely based on the principles of Liquid Democracy, a form of Representative Democracy for the Technology Age. If they succeed, no more calling & mailing your representatives, simply log on and vote (or delegate).

Comment Re:It's the universe trying to stop us innit... (Score 1) 57

Yes, of course a host needs a CPU in order to emulate another CPU, but it needn't be the same (or even similar) architecture (e.g. it doesn't need an x86 class CPU to emulate an x86 class CPU, though it *does* help speed things up a bit). As for the RTC, or any other hardware, well, all you need is the CPU and some clever software to emulate pretty much anything.

We're not talking about realtime emulation where 1 second of emulated time equals 1 second of actual time, we're talking perfect (from the perspective of the application, not the user) emulation, where X emulated clock ticks equals 1 second of real time. For that, all you need to do is count clock ticks and advance the counter on your emulated RTC accordingly. You can do that on a system with no hardware RTC at all. For extra realism, emulate jitter by advancing it a handful of ticks early or late. It doesn't matter if 1 second of emulated time equals 1 year of real time (e.g. emulating a 1GHz CPU on a 33MHz CPU sharing the same instruction set and architecture, assuming ideal conditions). From inside that simulation, the application would think 1 second had passed, regardless of how much time had passed in reality.

That's actually, by definition, how an insulated VM works. An insulated VM is in no way efficient, it's intended to be secure above all else. That means no instructions from the VM ever get passed to any physical hardware; CPU instructions run on a software virtualized CPU (no VT-x or similar technologies) or through a software translation layer and calls to any other hardware run through software that emulates said hardware; no physical hardware need exist beyond the CPU, some RAM, and the minimal hardware required to support those. How do you think an NES emulator works on a PC (or phone)? You don't honestly think that every bit of hardware that exists in an NES console also exists within every PC and phone, do you? No, they're emulated in software. All of it, right down to the CPU.

What marcello_dl was saying, and said quite effectively for those of us who understand how emulation works, is that it is impossible, from inside an insulated system, to tell that you are in an insulated system. The biggest clue you could possibly have is timing, and when your timing device is emulated to match the speed of your processor, adding some jitter for effect, that clue doesn't exist. From there, the best you can do is find some piece of hardware that doesn't work as expected; but that's not conclusive, either, as you can't prove whether the unexpected behavior is the result of poor emulation or faulty/failing hardware. To marcello_dl's point, when you pull the trigger of a loaded gun with all safeties off, you expect a loud bang and at least one new hole in someone or something; when you don't get that, you can't prove that it was a failure of the gun or bullet and not an emulation error. That's why there are people out there who genuinely believe we live in a simulation, and I'll grant them that it's possible (though not very likely), given some things I've experienced that really don't have any explanation other than "I was really high despite not having taken any drugs" or that. It would explain why the universe appears to be growing and we appear to be able to use the same techniques we've had access to for centuries to find smaller and smaller particles (e.g. the simulation's available storage is growing, allowing it to render and present finer detail) but, then, so would a handful of other, much more likely, scenarios (e.g. the big bang).

Comment Re: Do It, it worked in AZ (Score 1) 886

People don't lose their humanity just because they work for (or own) a corporation.

But neither does it extend to the corporation. Aardvarkjoe Catering, LLC doesn't have a religion even if its owner(s) and employee(s) do, and thus can't refuse anything on religious grounds. An employee of Aardvarkjoe Catering, LLC may feel servicing sexual, ethnical, political or other minorities is unacceptable, and if so Aardvarkjoe Catering, LLC must deal with the issue as it sees fit within limits dictated by law; but Aardvarkjoe Catering, LLC is not that employee.

You don't get to put down your corporate shield whenever that suits you, yet hide behind it the rest of the time.

Comment Re:Not faultless (Score 1) 536

Nope. All the fault is comcast. They lied. Plain and simple.

Um, no, they were mistaken.

If you have to go on the assumption that everybody is always lying to you all the time and double and triple check everything then you will get zero things done in your lifetime.

If you have to go through life assuming that anyone who makes a mistake is a liar, you're going to end up a cynical bastard who never gets anything accomplished, yes. If, on the other hand, you always keep in mind that people are fallible, you're much more likely to end up with good results.

Slashdot Top Deals

Each new user of a new system uncovers a new class of bugs. -- Kernighan

Working...