Bismillah - Slashdot User

Submission + - Chilling effect of Wassenaar Arrangement exploit export controls on research (itnews.com.au)

Submitted by Bismillah on Monday July 06, 2015 @01:31AM

Bismillah writes: Security researchers are confused as to how the export control and licensing controls covering exploits affect their work. Can you or can you not publish details on exploits?

Submission + - 'Zombie' network protocols become DDoS threats (itnews.com.au)

Submitted by Bismillah on Thursday July 02, 2015 @10:37PM

Bismillah writes: Do you still have internet-facing boxes that run some ancient UDP-based protocol like RIPv1? That's probably a really bad idea.

Submission + - Aussie telco caught handing over user mobile numbers to websites without consent (itnews.com.au)

Submitted by AlbanX on Tuesday June 23, 2015 @09:56PM

AlbanX writes: Australian telco Optus has been nabbed passing over its customers's mobile phone numbers to third-party websites without their knowledge.

The practice, known as HTTP header enrichment, aims to streamline the process of direct billing for customers, but they're not happy.

Submission + - Whitehouse mandates HTTPS for government sites and services (itnews.com.au)

Submitted by Bismillah on Wednesday June 10, 2015 @12:29AM

Bismillah writes: As per orders from Tony Scott, the government CIO. This despite Scott's own department and the White House having a few issues correctly implementing HTTPS on their sites.

Submission + - Apple Macs vulnerable to userland injected EFI rootkits (itnews.com.au) 1

Submitted by Bismillah on Sunday May 31, 2015 @07:34PM

Bismillah writes: A new vulnerability in recent Macs — and potentially older ones — can be used to plant code such as rootkits into areas of EFI memory that shouldn't be writeable, but become unlocked after the computer wakes up from sleep mode.

Submission + - Factory reset on millions of Android devices doesn't wipe storage (itnews.com.au)

Submitted by Bismillah on Thursday May 21, 2015 @09:10PM

Bismillah writes: Ross Anderson and Laurent Simon of Cambridge University studied a range of Android devices and found that even though a "factory reset" is supposed to fully wipe storage, it often doesn't. Interestingly enough, full-device encryption could be compromised by the incomplete wiping too.

Submission + - Qihoo 360 caught cheating in anti-virus tests (itnews.com.au)

Submitted by Bismillah on Thursday April 30, 2015 @08:50PM

Bismillah writes: China's allegedly largest security vendor Qihoo 360 has fessed up to supplying custom versions of its AV for testing according to an investigation by Virus Bulletin, AV-Comparatives and AV-Test.

Submission + - OSGeo Foundation up in arms over ESRI LAS lock-in plans

Submitted by Bismillah on Monday April 20, 2015 @07:41PM

Bismillah writes: The Open Source Geospatial Foundation is outraged over mapping giant ESRI's latest move which entails vendor lock-in for light detection and ranging (LiDAR) data through its proprietary Optimised LAS format. ESRI is the dominant company in the geospatial data arena, with its ArcGIS mapping platform boasting with over a million users and 350,000 customers.

Submission + - Australia passes mandatory data retention law (itnews.com.au)

Submitted by Bismillah on Thursday March 26, 2015 @03:50AM

Bismillah writes: Opposition from the Green Party and independent members of parliament wasn't enough to stop the ruling conservative Liberal-National coalition from passing Australia's new law that will force telcos and ISPs to store customer metadata for at least two years.

Journalists' metadata is not exempted from the retention law, but requires a warrant to access.

The metadata of everyone else can be accessed by unspecified government agencies without a warrant however.

Submission + - Cisco SPA300/500 IP phones vulnerable to remote eavesdropping (itnews.com.au)

Submitted by Bismillah on Sunday March 22, 2015 @11:11PM

Bismillah writes: Cisco has confirmed that its SPA300 and SPA500 are vulnerable to remote eavesdropping and dialling, and is working on a patch. Meanwhile, the advice is not to have the phones on internet-facing connections.

Submission + - UK GCHQ spy agencies admits to using vulnerabilities to hack target systems

Submitted by Bismillah on Wednesday March 18, 2015 @09:07PM

Bismillah writes: Lawyers for the GCHQ have told the Investigatory Powers Tribunal in the UK that the agency carries out the same illegal Computer Network Exploitation (CNE) operations that criminals and hackers do. Except they do it legally. GCHQ is currently being taken to court by Privacy International and five ISPs from UK, Germany, the Netherlands, Zimbabwe and South Korea for CNE operations that the agency will not confirm nor deny as per praxis.

Submission + - CSC subsidiary involved in Aussie bank IT bribery case (itnews.com.au)

Submitted by Bismillah on Wednesday March 18, 2015 @01:07AM

Bismillah writes: Computer Sciences Corporation-owned enterprise cloud management provider ServiceMesh appears to have been involved in the Commonwealth Bank IT bribery scandal in Australia. CBA's former head of IT service delivery was arrested yesterday, facing two charges of accepting bribes worth A$300,000.

Submission + - Australia may introduce site blocking to prevent copyright infringement (itnews.com.au)

Submitted by Bismillah on Tuesday March 17, 2015 @12:37AM

Bismillah writes: The conservative Coalition government in Australia is on the verge of introducing legislation requiring ISPs to block sites alleged of copyright infringement. Details of the bill have not yet been published, but it is expected to be sent to Parliament this week.

Submission + - FreeBSD random number generator broken for the last four months (lwn.net)

Submitted by Anonymous Coward on Wednesday February 18, 2015 @01:51PM

An anonymous reader writes: The FreeBSD RNG has been broken for some time, meaning generated SSH keys and SSL certificates may be guessable.

Submission + - Researchers make DNA data storage breakthrough (itnews.com.au)

Submitted by Bismillah on Tuesday February 17, 2015 @11:57PM

Bismillah writes: Researchers in Zürich have found a way to turn DNA into "synthetic fossils" with glass, making it more durable, and to read data encoded in it with error correction. The result could pave the way for DNA storage that survives over a million years in cold temperatures.

Slashdot Top Deals