Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Privacy

Submission + - Judge:Man can't be forced to divulge passphrase (news.com) 2

mytrip writes: "A federal judge in Vermont has ruled that prosecutors can't force a criminal defendant accused of having illegal images on his hard drive to divulge his PGP (Pretty Good Privacy) passphrase.

U.S. Magistrate Judge Jerome Niedermeier ruled that a man charged with transporting child pornography on his laptop across the Canadian border has a Fifth Amendment right not to turn over the passphrase to prosecutors. The Fifth Amendment protects the right to avoid self-incrimination.

Niedermeier tossed out a grand jury's subpoena that directed Sebastien Boucher to provide "any passwords" used with his Alienware laptop. "Compelling Boucher to enter the password forces him to produce evidence that could be used to incriminate him," the judge wrote in an order dated November 29 that went unnoticed until this week. "Producing the password, as if it were a key to a locked container, forces Boucher to produce the contents of his laptop."

Especially if this ruling is appealed, U.S. v. Boucher could become a landmark case. The question of whether a criminal defendant can be legally compelled to cough up his encryption passphrase remains an unsettled one, with law review articles for the last decade arguing the merits of either approach. (A U.S. Justice Department attorney wrote an article in 1996, for instance, titled "Compelled Production of Plaintext and Keys.")"

Security

Submission + - Multiple FLAC Vulnerabilities affecting every OS (heise-security.co.uk)

Enon writes: eEye Digital Security and US-CERT has discovered 14 vulnerabilities in the FLAC file format that affect a huge range of media players on every supported Operating System (yes Windows, Mac OS, Linux, Unix, BSD, Solaris, and even some hardware players are vulnerable). These vulnerabilities could allow a malicious hacker or even (DUN DUN DUN) the RIAA to trojanize FLAC files that could compromise your computer if they are played on a vulnerable media player.

Source: http://www.heise-security.co.uk/news/99108
Additional Link 1: http://research.eeye.com/html/advisories/published/AD20071115.html
Additional Link 2: http://www.kb.cert.org/vuls/id/544656

Security

Submission + - One-liner to crash IE6 (blogspot.com)

Kelly Yancey writes: "A Japanese fellow going by the name Hamachiya2 has stumbled upon one line of HTML/CSS code that crashes IE6. The magic line is:
<style>*{position:relative}</style><table><input>< /table> You can try it yourself at: http://hamachiya.com/junk/ie_crash.html. Of course, if you are running IE6 or anything that embeds IE6 as a component, you can expect it to crash. All other browsers appear to render the code just fine. I think I may have just found a new signature. :)"

Unix

Submission + - Open Sound System (OSS4) goes GPLv2 (opensound.com)

mrcgran writes: "The Open Sound System (OSS) is one of the first sound systems for Linux, predating ALSA, but in the last 10 years it's stalled in version 3.8 (the last public GPL version) and it's being replaced by ALSA as the sound system of choice in Linux. ALSA is a Linux-only solution, while OSS works in a range of Unixes as well, and both have advantages and disadvantages over the other. Now, OSS4 is out under a GPLv2 license, with a number of advanced features over ALSA, like its new dynamic VMIXing capabilities, low-latency kernel modules, simple API and many other features. This release seems to be important enough to shake the foundations of the current desktop sound systems, specially in Linux."
Programming

Submission + - Progress on next-generation Python

An anonymous reader writes: A couple of years ago, Guido Van Rossum undertook a major overhaul of the Python language called Python 3000. Despite the fact that Python is older than languages like Java and Javascript, Guido's initial design decisions have held up remarkably well over the years. Nevertheless, it was inevitable that after 15 years, a language designer would like to redo some things. Guido says: "The idea was that Python 3000 would be the first Python release to give up backwards compatibility in favor of making it the best language going forward." Now Guido says that Python 3000 is on-track (modulo a 2 month schedule slip). Will this release prepare Python for competition with Perl 6 and Ruby 2? Does it matter?
The Internet

Facebook Apps Facing Delays and Uncertainties 82

NewsCloud writes "After reading about the Facebook platform launch, I spent the next week learning the API and building my application. Facebook's platform has been pretty successful despite complaints of poor documentation, instability and outcries over its application approval process. I've been waiting two weeks for my application to be approved for their directory and had my account disabled (temporarily) after I invited a large number of colleagues. While I'm impressed with the potential of the platform, the experience has made me more concerned about the lack of transparency in privately held social networks and the risks we take as developers when we invest time in a company's platform. Facebook's home page advertises itself as "a social utility that connects you with the people around you." My concern with Facebook is that there's no one regulating the utility."
NASA

Submission + - NASA Administrator: Don't fight Global Warming

mdsolar writes: "Engineer and NASA Administrator Michael Griffin revealed in an NPR interview that he was unsure there was any need to take steps to make sure that the climate remain stable. Now the NYT has editorialized that his lack of vision may help explain NASA's back peddling on its planet protection mission. The post of NASA Administrator is a tough one, with the last one being chased out of office for being too cautious. Is Griffin stepping into a meat grinder on this one?"
Wireless Networking

Submission + - Google Wants to Play in 700MHz Band

scubacuda writes: "The FCC's Wireless Telecommunications Bureau is soliciting feedback on Google's proposal for the 700 MHz band spectrum (Word ver), which currently is occupied by broadcasters in TV channels 52-69 and is being made available for wireless services. Google wants (a) the band to allow licensees to utilize "dynamic auction mechanisms", such as real-time auctions and per-device registration fees; (b) to "posit at least whether it would be in the public interest to mandate for some, or even all, of the commercial spectrum to be auctioned in the 700 MHz bands"; and (c) the unpaired 6 megahertz E Block (722-728 MHz) in the current lower 700 MHz band plan to be designated, "primarily or exclusively, for the deployment of broadband communications platforms." (More on the fight for the 700 MHz band here and )"
Networking

Submission + - What are your hosting experiences?

gratemyl writes: Having gone through a long time trying to find a VPS host which satisfies my very own requirements (pptpd support) and spending some time looking for cluster computer (and supercomputer) access (paid, of course), I would like to know: what were your experiences with different hosts? What unusual hosting requirements did you have (incl. cluster computer access)?

I am from Germany, no CC, thus need to pay using PayPal — Amazon EC2 does not allow PayPal, and I am currently looking at Sun's www.network.com.

Share your experiences...
Microsoft

Microsoft Vs. TestDriven.NET 418

Erebus writes "Jamie Cansdale released a free addin to Visual Studio back in 2004 to help developers build unit tests. His only problem was, he enable his addin for all versions of VS - including the Express addition which isn't suppose to support addins. After over a year of trying to talk with Microsoft and understand how and why he was in violation of their license agreement, during which they would never explain specifically which clause in the license was being violated, they sent the lawyers after him and pulled his MVP status. To top it all off, Jamie is actually a Java developer by day — his addin was originally developed just as a hobby project. A full account is available on his blog, including all email correspondence he had with Microsoft and the now 3 letters received from Microsoft lawyers. The lead product manager for Visual Studio Express has responded to Jamie's posts."

Slashdot Top Deals

If you want to put yourself on the map, publish your own map.

Working...