Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security

Submission + - Hacker Defeats Hardware-based Rootkit Detection

Manequintet writes: "Joanna Rutkowska's latest bit of rootkit-related research shatters the myth that hardware-based (PCI cards or FireWire bus) RAM acquisition is the most reliable and secure way to do forensics. At this year's Black Hat Federal conference, she demonstrated three different attacks against AMD64 based systems, showing how the image of volatile memory (RAM) can be made different from the real contents of the physical memory as seen by the CPU. The overall problem, Rutkowska explained, is the design of the system that makes it impossible to reliably read memory from computers. "Maybe we should rethink the design of our computer systems so they they are somehow verifiable," she said."
Education

University Migrating Students to Windows Live Mail? 450

An anonymous reader wonders: "My University has begun a migration of student email services to Windows Live Mail. All students will be forced onto the system by the end of the semester, but it doesn't support POP or IMAP. Because of that limitation, the only freely available mail client it supports is Windows Live Desktop, which is only available on Windows and I'm worried its ads might be vulnerable to malware just like the ones in Live Messenger. I depend on my mail client and I am concerned about this, because we're not allowed to forward our mail but are responsible for information received there from the University and classes, I'm not on a Windows machine, and I don't have the time to regularly check for web-mail, during the day." What are the pros and cons of such a move for a mid-sized or large college? If you were in charge of the communications of a such a university, would you outsource [please note the vendor neutrality, here] your e-mail?
Microsoft

Submission + - Apache and IIS: Another Firefox and IE?

An anonymous reader writes: The article Apache vs. IIS at TechX World describes the current state between Apache and IIS. One notable item in the article is that in some areas, such as performance optimization, both Apache and IIS seem to share a lot of the same features. Are Apache and IIS headed down the same path as Firefox and IE? And if so, who is actually innovating?
Microsoft

Microsoft Charging Businesses $4K for DST Fix 395

eldavojohn writes "Microsoft has slashed the price it's going to charge users on the daylight saving time fixes. As you know, the federal law that moves the date for DST goes into effect this month. Although the price of $4000 is 1/10 of the original estimate Microsoft made, it seems a bit pricey for a patch to a product you've already paid for. From the article: 'Among the titles in that extended support category are Windows 2000, Exchange Server 2000 and Outlook 2000, the e-mail and calendar client included with Office 2000. For users running that software, Microsoft charges $4,000 per product for DST fixes. For that amount, customers can apply the patches to all systems in their organizations, including branch offices and affiliate.' The only thing they can't do, said a Microsoft rep, is redistribute them."

Paul Thurrott Bitten by WGA 591

suntory writes "Paul Thurrott, one of the most important Microsoft advocates, has been bitten by Windows Genuine Advantage. As some Slashdot users have reported, Paul installed a bunch of updates in his machine and now Microsoft thinks that he is using pirated software." From the post: "Truthfully, I can only imagine what triggered these alerts. The software was installed to a VM a long time ago and archived on my server. I no doubt used a copy of XP MCE 2005 that I had received as part of my MSDN subscription. If the WGA alerts are to be believed, it's possible that Microsoft thinks I've installed this software on too many machines, though that seems unlikely to me. I can't really say. Anyway, that's what it looks like to be a suspected pirate. Like many people who will see these alerts, I don't believe I did anything wrong. I'm sure that's going to be a common refrain in this new era of untrusting software and companies. Ah well."

Slashdot Top Deals

Don't panic.

Working...