Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×

Submission + - Top 10 Best New Features in NetBeans IDE 7.4 (jaxenter.com)

Submitted by Geertjan Wielenga
Geertjan Wielenga writes: NetBeans IDE 7.4 is all about letting you work with JDK 8 previews, enabling you to integrate HTML5 into Java EE applications, providing tools for developing mobile applications via Apache Cordova, and deploying applications to mobile devices.
Cloud

Submission + - One in six Amazon S3 storage buckets are ripe for data-plundering (infoworld.com)

Submitted by
tsamsoniw
tsamsoniw writes: "Using a combination of relatively low-tech techniques and tools, security researchers have discovered that they can access the contents of one in six Amazon Simple Storage Service (S3) buckets whose owners had them set to Public instead of Private. All told, researchers discovered and explored nearly 2,000 public buckets, according to Rapid 7 Senior Security Consultant Will Vandevanter, from which they gathered a list of more than 126 billion files, many of which contained sensitive information such as source code and personal employee information. Researchers noted that S3 URLs are all predictable and public facing, which make it that much easier to find the buckets in the first place with a scripting tool."
Android

Submission + - Researchers Uncover Targeted Attack Campaign Using Android Malware (threatpost.com)

Submitted by Trailrunner7
Trailrunner7 writes: Android attacks have become all the rage in the last year or two, and targeted attacks against political activists in Tibet, Iran and other countries also have been bubbling up to the surface more and more often lately. Now those two trends have converged with the discovery of a targeted attack campaign that's going after Tibetan and Uyghur activists with a spear-phishing message containing a malicious APK file. Researchers say the attack appears to be coming from Chinese sources.

The new campaign began a few days ago when unknown attackers were able to compromise the email account of a well-known Tibetan activist. The attackers then used that account to begin sending a series of spear-phishing messages to other activists in the victim's contact list. One of the messages referred to a human rights conference in Geneva in March, using the recipients' legitimate interest in the conference as bait to get them to open the attachment. The malicious attachment in the emails is named "WUC's Conference.apk".
Security

Submission + - Twitter, Microsoft, LinkedIn, Yahoo open to hijacking (scmagazine.com.au)

Submitted by mask.of.sanity
mask.of.sanity writes: Twitter, Linkedin, Yahoo! and Hotmail accounts are open to hijacking thanks to a flaw that allows cookies to be stolen and reused.
Attackers need to intercept cookies while the user is logged into the service because the cookies expire on log-out ( except LinkedIn which keeps cookies for three months). The server will still consider them valid.
For the Twitter attack, you need to grab the auth_token string and insert it into your local Twitter cookies. Reload Twitter, and you'll be logged in as your target (video here). Not even password changes will kick you out.
GNOME

Submission + - Mageia 2 arrives with GNOME 3 and systemd (h-online.com)

Submitted by
ReinoutS
ReinoutS writes: "The H reports: 'The developers of the Mageia Linux distribution have announced their second release. As the official Mageia blog puts it, the distribution is "growing up". Where the initial version was mainly designed to get a stable first release out after the fork from Mandriva, the second major version of the distribution attempts the first significant changes to the code base: Mageia 2 has switched to systemd for its boot process and the GNOME desktop has been updated to the 3.x branch.'

Mageia 2 comes with kernel 3.3.6, KDE SC 4.8.2 and GNOME 3.4.1. In an interesting turn of events, Mandriva is going to base a business product on this distribution."
Google

Submission + - EU Warns Google To Change Or Face Fines (reuters.com)

Submitted by bonch
bonch writes: Europe's top antitrust regulator has issued an ultimatum, giving Google weeks to propose changes or face formal charges of antitrust abuse. Google is under investigation for allegedly promoting its services over competitors in search results. Google issued a statement disagreeing with the EU commission's conclusions, stating that 'innovation online has never been greater.'

Submission + - TNO studies WebM as alternative to H2.64 for deplo (www.tno.nl)

Submitted by
ReinoutS
ReinoutS writes: "Dutch research institute TNO has published a report comparing WebM and H2.64 for large scale deployment within the Dutch public broadcasting company, re-using as much opensource components as possible. From the article (my translation): WebM is regarded as a potential video standard for HTML5, solving the plugin issue. Rarely it has been investigated whether it is possible to realize a WebM-based operational chain, taking into account the patent-position, video quality, encoding speed and existing infrastructures. The main conclusions are: At present it is impossible, without big investments, to develop a WebM-based live- and VoD service that is compatible with the existing infrastructure at the NPO [Dutch public broadcasting company]. The fact that Google is the driving force behind the development of WebM, combined with increasing support of other industrial partners provides confidence in the fact that WebM can constitute a serious alternative within a few years."

Slashdot Top Deals

The one day you'd sell your soul for something, souls are a glut.

Close