Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×
Google

Android Also Comes With a Kill-Switch 300

Posted by CmdrTaco from the now-that's-not-very-open dept.
Aviran writes "The search giant is retaining the right to delete applications from Android handsets on a whim. Unlike Apple, the company has made no attempt to hide its intentions, and includes the details in the Android Market terms and conditions, as spotted by Computer World: 'Google may discover a product that violates the developer distribution agreement... in such an instance, Google retains the right to remotely remove those applications from your device at its sole discretion.'"
Security

Submission + - Man hacks 911 system, sends SWAT on bogus raid. 5

Submitted by Anonymous Coward
An anonymous reader writes: The Orange County Register reports that a 19 year old from Washington state broke into the Orange County California 911 emergency system. He randomly selected the name and address of a Lake Forest, California couple and electronically transferred false information into the 911 system. The Orange County California Sheriff's Department's Special Weapons and Tactics Team was immediately sent to the couple's home. The armed officers surrounded the home.Inside the home lived a couple with two toddlers who were asleep and unsuspecting of what was going outside the home. The SWAT team handcuffed the husband and wife before deciding it was a prank.
It's funny. Laugh.

Submission + - Digital 'smiley face' turns 25 :-) (msn.com) 1

Submitted by
klubar
klubar writes: "Another milestone of online communications has been reached. The smiley turns 25 according Carnegie Mellon University professor Scott E. Fahlman who says he was the first to use three keystrokes :-). It's sad that emotional icons, known as emoticons have replaced clear writing to communicate. Soon, we'll all go back to cave paintings (but they will be digital and in high resolution).

The inventor said "But it's always possible that someone else had the same idea — it's a simple and obvious idea, after all.", but at least he didn't try to patent the concept as one would do now."
Software

Submission + - Microsoft forces users to install Live Messenger 2

Submitted by DC
DC writes: OK, people... this a long post about a serious issue, so sit back and read.

As you may or may not have seen recently, on Wednesday, September 12 approximately 8PM central, Microsoft began forcing users of Windows Live 8.0 and MSN Messenger 7.5 and below to install Windows Live Messenger 8.1 as the solution to patching a vulnerability in how webcam invites are handled. The flaw is caused by a buffer overflow that may allow an attacker sending the invite from the other end to run malicious code on your pc by clicking a webcam invite from an untrusted source. A great deal of users prefer MSN 7.5, and do not want to use Live because of it's flaws, system resource hogging, bugs, and the look. This issue does not only affect them, though, it affects everyone running a Windows system, as this may be Microsoft's new policy to their users: use what we tell you to or we'll deny your services.

They act as if installing Live Messenger is the only solution to the problem, and are forcing anybody with a compatible OS to install Windows Live Messenger (WLM), yet also released a patch for MSN Messenger 7.0 for any OS under Windows XP, though installing this on XP or Vista will still force you to install Live, so it is not a solution to get around being forced to install Live, whether you want it, like it, can't run it, or not. Either that, or stop using MSN and change clients, though if you prefer MSN 7.5 to other clients, you should be allowed to use it, as that is your right to choose.

Upon sign in of MSN Messenger, you are presented with a popup stating you MUST install Live Messenger to continue, giving the option of yes to install, or no to close the popup and go back to the sign in screen. You are denied logging into your client until you install WLM. Many people believe this is nothing more than a ploy to force people to install Live Messenger, hiding behind the disguise of a really minor security flaw to save face. I say minor because the only way one can be affected is if they: have a webcam to start a webcam conversation and openly accept webcam invites from untrusted sources. Ask yourselves, how many people do you know that accept webcam invites from just anybody?

A few days before the incident, Microsoft made a comment about the security flaw, and made a small mention there may be a chance for a mandatory update. The day the incident occurred, they issued the mandatory update to Live Messenger to fix the security flaw, completely cutting off all users of MSN Messenger until they installed WLM 8.1, as reported by this blog by the Security PM calling himself Anand, which is also where the nearly 100% of comments state they hate Live Messenger and refuse to use it, as well as the great deal of problems reported that have been caused by the mandatory update.
Anand's blog, September 12

A few days after receiving the surge in negative comments demanding they allow use of MSN Messenger 7.5, stop the mandatory update, and release a patch for those earlier versions, which would take little more than modifying the patch for Messenger 7.0, as well as how just plain wrong it is to be forcing people to install this software, a Microsoft employee named Jason released another blog under the title "We hear you!" addressing the issues people had in the comments, yet completely ignoring the nearly 100% who state they hate Live and want MSN 7.5 and below allowed with a patch released to fix the flaw. Sounds like they're really listening to their users, eh?
Jason's blog, September 14

On the same day, another blog was released by the Windows Live program manager, Rick, posted again to address the issues people had, and going lightly into the comments about the ethics of the forced install, and the issue of a person's rights to decide what they want to do with their computer. In opening, he states this affects 1/4 to 1/3 of their users, which sounds more like a number pulled out of his rear, as the response from the people seems to suggest that well over 50% of users were forced from MSN 7.5 and below, and at least 60% were forced to install WLM 8.1 to sign in. A search around the net on this matter shows thousands of websites worth of pissed off people looking for a way around the update to continue using a lower version that they prefer. As far as people I know goes, most of them do not want Live at all, and are looking for MSN 7.5.

Let's go to the blog entry:
Rick's blog, September 14

First, he makes a over-exaggerated claim that this vulnerability that has existed for years already without causing any problems would be capable of bringing down everyone connected to their network, which is completely false, as this vulnerability can only truly affect people on a per user basis. Only the person being exploited by the flaw would be affected by it, as the attacker would have to start another webcam invite from the user's computer in order exploit the flaw again and spread it further than the one user's computer.

Next, he states that Microsoft had to take action to protect their users with the "right fix", addressing the flaw as a disease they must inoculate. Again, this goes back to stating that the only fix for the problem is to force people to install Live, instead of modifying the MSN 7.0 patch for users that wish to use MSN 7.5. This again implies that good old Microsoft knows what's best for you, and will force you to do what they imply is right for you with no concern for your wishes.

He then states that most people aren't smart enough to know how to run their computers and watch out for things, as if he knew what we, the users, know about our systems. Nowadays, I'd have to say that the number is actually more than 70%, at least, that are aware of danger on the net and what to look out for. Again, do they believe that everyone is just going to start accepting random webcam invites from untrusted users?

After once more addressing the stability issues that most, if not all, users that had commented caused by the install of Live on their system, he effectively shows just how serious they are taking the comments by people that flat out state they hate WLM and to give back the choice of using MSN 7.5 and below by comparing the issue to getting a shot by the doctor... which, I have to mention, is actually something you get by choice, and does not affect you for longer than a few seconds. Then a comment stating Microsoft is right and doing it for security. Once more, the real fact is, a security patch is the "right fix", not forcing everyone into using a program they do not want to use, or can't use.

Microsoft's "we know what's best for you, and you will do as we say" approach to this issue shows a complete and utter lack of respect for the wishes of their users. Is this going to be the new policy? Will you be the next person to be told to install software you don't want, because Microsoft knows what you want better then you do... all for the sake of "security"? For those that already run and prefer Live, that is your personal preference, not the preference of everyone. If you were the one being blocked from signing in unless you installed a piece of software you believe is garbage, or can't use, do to it taking too many resources, slowing your pc to a crawl, or just plain crashing and freezing, like many that have posted in the blogs have had, you would be pissed too.

It is obvious they are not taking the issue of respecting the users' preference of program and their right to use what they wish very seriously at all. If something isn't done to show how serious the issue is, they will do this again in the future and know they will get away with it. Dictating what you can and can't use is wrong, and very unconstitutional, removing the users' right to the freedom of choice.

If you believe it is wrong for Microsoft to force software on you whether you like it or not, stepping all over your right to choose what you want to run on your pc, it's time to take a stand against this. Head over to Microsoft's blogs, and anywhere else to contact them at, and post your opinions on the subject. Tell them you think what they are doing is wrong, and tell them your opinion of Live Messenger if you do not like it. It's really quite easy to see that this really is nothing more than a ploy by Microsoft to force people to install something they want their users running.

Maybe there wasn't enough people using it so this is what they came up with to get people to switch. Why would Microsoft go through the trouble of creating this mandatory update system rather than creating a patch for MSN users on XP? If you ask me, it sure brings back thoughts about Windows Media Player secretly bundled with drm software, and after the recent stealth update of Windows Update files, as well as the Windows Genuine Advantage screwup a few months ago, it sure seems like there is a hidden agenda behind this new example of stupid from the team at Microsoft. Maybe this stealth update is what allows their forced updater to view what version of Messenger and what OS you are running so as to deny you access if you don't have the right Messenger.

As for the issues being caused by this forced install, as a warning to those that haven't yet... if you do this, you will lose all of your emoticons and be denied the ability to add them back, as Live will tell you they are already there, despite not showing up anywhere. Some report also being denied the ability to grab the emoted from the folder they are in to manually add them back, no matter what they try. Most report not being able to start a conversation, their friends not being able to start a conversation, not being able to sign in, their connection continuously being dropped, extreme amounts of lag, slowing their pc to a crawl, freezing and flat out crashing before the program can even start up. This is to warn those of what they will probably see upon using this update, and everyone I have talked to about this has reported this to be true.

For those that do not wish to use Live, or can not due to it causing problems, there is a temporary fix for it. First, if you installed Live, uninstall it, or do a System Restore to the point before the install to get your earlier version back. If you can't get it back, search on Google for the version of Messenger you want (MSN Messenger 7.5.0324 being the last MSN version) and download and reinstall it. After installation, say no to the forced update if it happens to pop up, and close out of messenger, including the tray icon. Once messenger is completely closed, go to C:/Program Files/MSN Messenger, or Live Messenger if you decide to use Live 8.0, then right click on the program, the msn version called msnmsgr.exe, then go to Properties. Select the Compatibility tab, then check "Run in compatibility mode," and select "Windows 2000". Click OK, and then you're set. If you use a patch program such as Mess Patch, a window will appear as the program attempts to repair itself. Cancel the repair to keep it from making any changes. It's annoying, but you will get to keep your patch program changes.

I hope this news gets around for all to see, as Microsoft has gone over the line this time once more in disrespecting the users' freedoms and wishes. Pass it on, and tell Microsoft your thoughts!
Announcements

Submission + - Watermarking to replace DRM? 3

Submitted by Anonymous Coward
An anonymous reader writes: News.com has an article on the announcement of Microsoft and Universal to introduce watermarking technology into audio files. The technology could serve several purposes including tracking file sharing statistics and insertion of advertisements into audio tracks. The article goes on to suggest that watermarking could possibly replace DRM in the near future.
Math

Submission + - 'We have broken speed of light'

Submitted by
sporkme
sporkme writes: "Physicists from the University of Koblenz in Germany claim to have violated special relativity using quantum tunneling to move microwave photons more than three feet "instantaneously." This would mean that the particles exceeded the speed of light by traversing the space between two prisms at a speed higher than 186,000 miles per second.

The original New Scientist article is available to subscribers."
Security

Submission + - No RealID? You'll Need a Passport (cnn.com)

Submitted by mmurphy000
mmurphy000 writes: According to CNN:

Americans may need passports to board domestic flights or to picnic in a national park next year if they live in one of the states defying the federal Real ID Act.


Note that these are the same passports which are already shipping with RFID tags.
Data Storage

Submission + - Corsair Padlock USB Drive, Built-In Secure Keypad (hothardware.com)

Submitted by
MojoKid
MojoKid writes: "With data and identity theft so prevalent today, an ever increasing number of users are concerned about securing their personal data. Corsair, however, just launched a new product that may hold the key to easy and convenient data security, literally and figuratively. The Corsair Flash Padlock functions much like any other USB thumbdrive, but it features a built-in keypad for entering a PIN code that locks or unlocks the data stored on the device. Without the PIN, the data cannot be accessed. This article highlights the main features of the Corsair Flash Padlock and profiles its performance. It looks like the Flash Padlock works as advertised, but transfer speeds aren't stellar."
Security

Submission + - User-friendly trojan authoring kit released (theregister.co.uk)

Submitted by
Christopher Blanc
Christopher Blanc writes: "Shark 2 makes the process of infecting targets for phishing attacks or performing other malign actions easier than ever. It means money making malware rackets are no longer the preserve of those with at least some programming skills. An idiot-friendly interface means s'kiddies can choose the malware characteristics they want. When does the joke of desktop security end? These machines are so hackable that we've gone into the realm of PowerPoint presentations, visual authoring tools and soon, instructional videos on PBS.

http://www.theregister.co.uk/2007/08/15/shark_troj an_creation_kit/"
Security

Submission + - Corsair Padlock USB Drive, PIN Combination Secure (hothardware.com)

Submitted by
MojoKid
MojoKid writes: "Securing data is always a concern, from the enterprise application to the end user. Portable USB flash drives have become commonplace, with lots of files flying around from end user to end user, both personal and business related. Securing portable flash USB drives through software encryption is one way to handle things but there are obvious ways to breach these methods. Memory manufacturer, Corsair has just announced their line of Padlock USB flash drives that provide and alternate method of securing portable data. Got something you need to carry around but want to keep from being accessed by just anyone? Just punch in your pin number and this USB stick will lock it down."
The Matrix

Submission + - Our universe might be somebody else's hobby

Submitted by Maximum Prophet
Maximum Prophet writes: In this article, http://www.nytimes.com/2007/08/14/science/14tier.h tml?8dpc, John Tierney, posits that we might just be a simulation in someone else's computer, based on the work of Nick Bostrom, a philosopher at Oxford University.
Not really a new idea, but it's the first time I've seen it in the mainstream press.

They don't mention it in the article, but the way to prove the hypothesis would be to look for bugs in the OS, and gain root privileges.
The Courts

Submission + - RIAA Short on Funds? Fails to Pay Attorneys Fees

Submitted by
NewYorkCountryLawyer
NewYorkCountryLawyer writes: "Can it be that the RIAA, or the "Big 4" record companies it represents, are short on funds? It turns out that despite the Judge's order, entered a month ago, telling them to pay Debbie Foster $68,685.23 in attorneys fees, in Capitol v. Foster, they have failed to make payment, and Ms. Foster has now had to ask the Court to enter Judgment, so that she can commence "post judgment collection proceedings". According to Ms. Foster's motion papers (pdf), her attorneys received no response to their email inquiry about payment. Perhaps the RIAA should ask their lawyers for a loan."

Slashdot Top Deals

I've noticed several design suggestions in your code.

Close