Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Encryption

Dual_EC_DRBG Backdoor: a Proof of Concept 201

New submitter Reliable Windmill sends this followup to the report that RSA took money from the NSA to use backdoored tech for random number generation in encryption software. From the article: "Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of randomness in their applications. If you still believe Dual_EC_DRBG was not backdoored on purpose, please keep reading. ... It is quite obvious in light of the recent revelations from Snowden that this weakness was introduced by purpose by the NSA. It is very elegant and leaks its complete internal state in only 32 bytes of output, which is very impressive knowing it takes 32 bytes of input as a seed. It is obviously complete madness to use the reference implementation from NIST"
Bitcoin

Ulbricht Admits Seized Bitcoins Are His and Wants Them Back 243

An anonymous reader writes with the latest news about the aftermath of the Silk Road shutdown "From the article: 'Ulbricht ... said in a notarised December 11 statement that he believes the virtual currency should be returned to him because Bitcoins are "not subject to seizure" by federal law. Ulbricht, 29, now admits the Bitcoin fortune is his — even though he's previously denied any wrongdoing regarding Silk Road and claimed through his lawyer that the feds arrested the wrong guy.' So not only has he now confirmed his link to the site, and confirmed the money is his, but also means that a few precedents will be set. Is it seizable? Is it just 'copying data?'" Relatedly, three alleged moderators of Silk Road were indicted on Friday.
Bitcoin

Why Charles Stross Wants Bitcoin To Die In a Fire 691

Hugh Pickens DOT Com writes "SF writer Charles Stross writes on his blog that like all currency systems, Bitcoin comes with an implicit political agenda attached and although our current global system is pretty crap, Bitcoin is worse. For starters, BtC is inherently deflationary. There is an upper limit on the number of bitcoins that can ever be created so the cost of generating new Bitcoins rises over time, and the value of Bitcoins rise relative to the available goods and services in the market. Libertarians love it because it pushes the same buttons as their gold fetish and it doesn't look like a "Fiat currency". You can visualize it as some kind of scarce precious data resource, sort of a digital equivalent of gold. However there are a number of huge down-sides to Bitcoin says Stross: Mining BtC has a carbon footprint from hell as they get more computationally expensive to generate, electricity consumption soars; Bitcoin mining software is now being distributed as malware because using someone else's computer to mine BitCoins is easier than buying a farm of your own mining hardware; Bitcoin's utter lack of regulation permits really hideous markets to emerge, in commodities like assassination and drugs and child pornography; and finally Bitcoin is inherently damaging to the fabric of civil society because it is pretty much designed for tax evasion. "BitCoin looks like it was designed as a weapon intended to damage central banking and money issuing banks, with a Libertarian political agenda in mind—to damage states ability to collect tax and monitor their citizens financial transactions," concludes Stross. "The current banking industry and late-period capitalism may suck, but replacing it with Bitcoin would be like swapping out a hangnail for Fournier's gangrene.""
Red Hat Software

Fedora 20 Released 147

sfcrazy writes "The Fedora Project has announced the release of Fedora 20, code named Heisenbug (release notes). Fedora 20 is dedicated to Seth Vidal, the lead developer of Yum and the Fedora update repository, who recently died in a road accident. Gnome is the default DE of Fedora, and so it is for Fedora 20. However unlike Ubuntu (where they had to create different distros for each DE) Fedora comes with KDE, XFCE, LXDE and MATE. You can install the DE of your choice on top of base Fedora."
Crime

How the Lessons of Columbine Saved Lives At Arapahoe High School 894

Hugh Pickens DOT Com writes "Ray Sanchez reports at CNN that the handling of Friday's shooting at Arapahoe High School, just 10 miles from the scene of the 1999 Columbine High School shooting, drew important lessons from the earlier bloodshed. At Arapahoe High School, where senior Claire Davis, 17, was critically injured before the shooter turned the gun on himself, law enforcement officers responded within minutes and immediately entered the school to confront the gunman rather than surrounding the building. As the sound of shots reverberated through the corridors, teachers immediately followed procedures put in place after Columbine, locking the doors and moving students to the rear of classrooms. "That's straight out of Columbine," says Kenneth Trump, president of National School Safety and Security Services. "The goal is to proceed and neutralize the shooter. Columbine really revolutionized the way law enforcement responds to active shooters." Arapahoe County Sheriff Grayson Robinson credits the quick police response time for the fact that student Karl Pierson, the gunman, stopped firing on others and turned his weapon on himself less than 1 minute, 20 seconds after entering the school. Authorities knew from research and contact with forensic psychologists that school shooters typically continue firing until confronted by law enforcement. "It's very unfortunate that we have to say that there's a textbook response on the way to respond to these," says Trump, "because that textbook was written based on all of the incidents that we've had and the lessons learned (PDF).""
Encryption

NSA Able To Crack A5/1 Cellphone Crypto 122

jones_supa writes "The most widely used cellphone encryption cipher A5/1 can be easily defeated by the National Security Agency, an internal document shows. This gives the agency the means to intercept most of the billions of calls and texts that travel over radiowaves every day, even when the agency would not have the encryption key. Encryption experts have long known the cipher to be weak and have urged providers to upgrade to newer systems. Consequently it is also suggested that other nations likely have the same cracking capability through their own intelligence services. The vulnerability outlined in the NSA document concerns encryption developed in the 1980s but still used widely by cellphones that rely on 2G GSM. It is unclear if the agency may also be able to decode newer forms of encryption, such as those covered under CDMA."
Wikipedia

Wikipedia's Lamest Edit Wars 219

Hugh Pickens DOT Com writes "Who says Wikipedians don't have a sense of humor? While perusing Wikipedia I recently came across an article documenting the lamest examples of wikipedia edit wars over the most trivial things. As one wikipedian says: 'Some discussions are born lame; some achieve lameness; some have lameness thrust upon them.' A few of the most amusing examples include: Was Chopin Polish, French, Polish–French, or French–Polish? Can you emigrate from a country of which you are not a citizen? Can you receive citizenship if you already have it? The possibilities for intensive study are endless. Next up, Are U2 an 'Irish band' or simply a band that happen to be from Ireland, since two of their members were born in the UK? A heated discussion took place for over two-and-a-half weeks that resulted in at least one editor getting blocked and many more getting warnings. Next, should members of the Beatles be listed in the 'traditional' order or in alphabetical order? Another edit war which flares up continuously in The Beatles involves whether to identify the band as 'The Beatles' with a capital T or 'the Beatles' with a lower case t. The issue became so contentious it merited an article in the Wall Street Journal. One such installment of this saga was brought before the arbitration committee (by an administrator, no less) where it was quickly declared 'silly.' Next, Is J. K. Rowling's name pronounced like 'rolling' or to rhyme with 'howling'? Rowling is on record claiming she pronounces her name like 'rolling'. An irate editor argues that this is a 'British' pronunciation and the 'American" pronunciation of her name should also be noted. 'This is slightly ridiculous as she is English, and therefore of course will pronounce it in an English manner. Perhaps it rhymes with "Trolling"?' Finally did Jimmy Wales found Wikipedia or co-found it? 'Not surprisingly, those who actually were around at the time and know the answer stayed far away from this one. The casualty list has yet to be compiled, but no doubt editor egos will be among the worst hit.'"
Medicine

You Are What Your Dad Ate 130

Freshly Exhumed writes "What a father eats before his child is conceived may influence the chance a baby will be born with a birth defect, a new study suggests. Much of the focus on how diet relates to birth has been done on moms. A father's diet before conception plays a crucial role in the health of his offspring, researchers in Canada suggest. Sarah Kimmins, a researcher at McGill University in Montreal, said the study focused on vitamin B9, also known as folate, which is found in green leafy vegetables, cereal, fruit and meat. The researchers found that the mouse offspring of folate-deficient fathers had a 30 percent increased risk of birth defects, compared to those offspring who had received a sufficient amount of folate."
Science

Simulations Back Up Theory That Universe Is a Hologram 433

ananyo writes "A team of physicists has provided some of the clearest evidence yet that our Universe could be just one big projection. In 1997, theoretical physicist Juan Maldacena proposed that an audacious model of the Universe in which gravity arises from infinitesimally thin, vibrating strings could be reinterpreted in terms of well-established physics. The mathematically intricate world of strings, which exist in nine dimensions of space plus one of time, would be merely a hologram: the real action would play out in a simpler, flatter cosmos where there is no gravity. Maldacena's idea thrilled physicists because it offered a way to put the popular but still unproven theory of strings on solid footing — and because it solved apparent inconsistencies between quantum physics and Einstein's theory of gravity. It provided physicists with a mathematical Rosetta stone, a 'duality', that allowed them to translate back and forth between the two languages, and solve problems in one model that seemed intractable in the other and vice versa. But although the validity of Maldacena's ideas has pretty much been taken for granted ever since, a rigorous proof has been elusive. In two papers posted on the arXiv repository, Yoshifumi Hyakutake of Ibaraki University in Japan and his colleagues now provide, if not an actual proof, at least compelling evidence that Maldacena's conjecture is true."
Crime

Thieves Who Stole Cobalt-60 Will Soon Be Dead 923

Hugh Pickens DOT Com writes "The Washington Post reports that the carjackers who set off international alarm bells by absconding with a truckload of highly radioactive cobalt-60, used in hospital radiotherapy machines, most likely had no idea what they were stealing and will die soon from exposure. The robbery occurred as the cobalt-60 was being driven from a public hospital in the border town of Tijuana to a storage facility in central Mexico. While waiting for daybreak at a gas station in the state of Hidalgo the drivers were jumped by two gunmen who beat them and stole the truck. "I believe, definitely, that the thieves did not know what they had; they were interested in the crane, in the vehicle," says Mardonio Jimenez, a physicist with Mexico's nuclear safety commission. The prospect that material that could be used in a radioactive dirty bomb had gone missing sparked an urgent two-day hunt that concluded when the material, cobalt-60, used in hospital radiotherapy machines, was found along with the stolen Volkswagen truck. The cobalt-60 was found, removed from its casing, in a rural area near the town of Hueypoxtla about 25 miles from where the truck was stolen. Jimenez suspects that curiosity got the better of the thieves and they opened the box. So far the carjackers have not been arrested, but authorities expect they will not live long. "The people who handled it will have severe problems with radiation. They will, without a doubt, die.""
Crime

EV Owner Arrested Over 5 Cents Worth of Electricity From School's Outlet 1010

sl4shd0rk writes "It seems you can be arrested in Georgia for drawing 5 cents of electricity from a school's outdoor receptacle. Kaveh Kamooneh was charged with theft for plugging his Nissan Leaf into a Chamblee Middle School 110V outlet; the same outlet one could use to charge a laptop or cellphone. The Leaf draws 1KW/hour while charging which works out to under $0.10 of electricity per hour. Mr Kamooneh charged his Leaf for less than 30 minutes, which works out to about a nickel. Sgt. Ernesto Ford, the arresting officer, pointed out, 'theft is a theft,' which was his argument for arresting Mr. Kamooneh. Considering the cost of the infraction, it does not seem a reasonable decision when considering how much this will cost the state in legal funds. Does this mean anyone charging a laptop or cell phone will be charged with theft as well?"
Bitcoin

Why Bitcoin Is Doomed To Fail, In One Economist's Eyes 537

Hugh Pickens DOT Com writes "Economist Edward Hadas writes in the NYT that developers of bitcoin are trying to show that money can be successfully privatized but money that is not issued by governments is always doomed to failure because money is inevitably a tool of the state. 'Bitcoin exemplifies some of the problems of private money,' says Hadas. 'Its value is uncertain, its legal status is unclear, and it could easily become valueless if users lose faith.' Besides, if bitcoin ever really started to take off, governments would either ban it or take over the system says Hadas. The authorities might be motivated by a genuine concern about the stability of a shadow monetary system or they might act out of self-preservation because tax evasion would be too easy in a parallel economy. 'Part of the interest in virtual currencies like bitcoin is that their anonymity can provide a convenient cloak for criminal activity. Part is technological — this is a cool idea. And part is speculative — gamblers bet that bitcoin's value will increase,' concludes Hadas. 'Truly private money is an inferior alternative to the money that comes with the backing of a political authority. After all, no bank or bitcoin-emitter can be as public-minded as a government, and no private power can raise taxes or pass laws to unwind monetary excesses.'" Could be there's something good about money that can't be manipulated by law. Some people at least think there's plenty of value in Bitcoin and similar currencies, despite the risks. And those risks at present probably aren't enough to comfort the unfortunate Welsh fellow who (HT to reader judgecorp) "has realised he threw out a hard drive containing 7500 bitcoins, worth £4 million at today's prices. It is now under four feet of garbage in a landfill site the size of a football pitch."
The Almighty Buck

There Would Be No Iranian Nuclear Talks If Not For Fracking 236

Hugh Pickens DOT Com writes "Matthew Philips writes at Bloomberg that US Secretary of State John Kerry landed in Geneva on Friday to begin negotiations with Iran over its nuclear weapons program and there is sudden optimism that a deal is in the offing. But the simple fact is that Iran would not be coming to the negotiating table without the US oil boom. Over the last two years, the US has increased its crude production by about 2 million barrels a day. According to a recent report from the Congressional Research Service (pdf), Iran's oil exports have been cut in half since 2011 (PDF), from 2.5 million barrels per day to a bit more than 1 million today. As a result, Iran has had to halt an equal amount of production. 'I think it's pretty clear that without the U.S. shale revolution, it never would have been possible to put this kind of embargo on Iran,' says Julius Walker. 'Without US production gains, I think we'd be looking at $150 a barrel.' Instead, international prices have hovered around $110, and are less than $100 in the US. According to data from Bloomberg, the combined carrying capacity of oil tankers leaving Iranian ports last month dropped 22 percent from September. 'They're having a very hard time finding buyers,' says Walker. If a deal gets done, the trick will be to ease Iranian oil back onto the broader market without disrupting prices. If not managed properly, flooding the market with Iranian crude could carry its own negative consequences by suddenly making fracked oil in the US unprofitable."
Power

Stung By Scandal, South Korea Weighs Up Cost of Curbing Nuclear Power 200

mdsolar writes in about an ongoing scandal in South Korea that has rocked their nuclear power program. "It started with a few bogus safety certificates for cables shutting a handful of South Korean nuclear reactors. Now, the scandal has snowballed, with 100 people indicted and Seoul under pressure to rethink its reliance on nuclear power. A shift away from nuclear, which generates a third of South Korea's electricity, could cost tens of billions of dollars a year by boosting imports of liquefied natural gas, oil or coal. Although helping calm safety concerns, it would also push the government into a politically sensitive debate over whether state utilities could pass on sharply higher power bills to households and companies. Gas, which makes up half of South Korea's energy bill while accounting for only a fifth of its power, would likely be the main substitute for nuclear, as it is considered cleaner than coal and plants can be built more easily near cities."
Businesses

Why Amazon Is Profitless Only By Choice 258

An anonymous reader writes "Eugene Wei, a former employee at Amazon and Hulu, explains why Amazon continues to post quarterly earnings statements with lots of revenue but no actual profit. Many of Amazon's retail businesses and platforms are quite profitable by themselves, Wei says, a fact that is hidden by large expenditures on investment for the future. He writes, 'If Amazon has so many businesses that do make a profit, then why is it still showing quarterly losses, and why has even free cash flow decreased in recent years? Because Amazon has boundless ambition. It wants to eat global retail. This is one area where the press and pundits accept Amazon's statements at face value. Given that giant mission, Amazon has decided to continue to invest to arm itself for a much larger scale of business. If it were purely a software business, its fixed cost investments for this journey would be lower, but the amount of capital required to grow a business that has to ship millions of packages to customers all over the world quickly is something only a handful of companies in the world could even afford. ... I'm convinced Amazon could easily turn a quarterly profit now. Many times in its history, it could have been content to stop investing in new product lines, new fulfillment centers, new countries. The fixed cost base would flatten out, its sales would continue growing for some period of time and then flatten out, and it would harvest some annuity of profits. Even the first year I joined Amazon in 1997, when it was just a domestic book business, it could have been content to rest on its laurels. But Jeff is not wired that way. There are very few people in technology and business who are what I'd call apex predators. Jeff is one of them, the most patient and intelligent one I've met in my life.'"

Slashdot Top Deals

1 + 1 = 3, for large values of 1.

Working...