Become a fan of Slashdot on Facebook

 


Forgot your password?
Close
typodupeerror
×
Security

Submission + - GMail POST Mortem: Can You Handle CSRF? (hackademix.net)

Submitted by
Giorgio Maone
Giorgio Maone writes: "This week couldn't be worse for Google and GMail: four distinct vulnerabilities disclosed in the past few days, plus a Google Docs weakness by Rios/McFeters allowing for easy Flash-based XSS, and now another GMail hijacking technique half-disclosed (!) by Petko H. Petkov (AKA pdp).

GMail POST Mortem analyzes the details published by Petko under his ambiguous "semi-disclosure" policy, and it shows how this is in facts a 0 day full disclosure, since building a working exploit from it is pretty trivial. Finally, countermeasures against the CSRF (the class of vulnerabilities which this one belongs to) are provided, both for developers and for users.

BTW, the GMail hole is still unpatched (tested 1 minute ago)."

Feed Engadget: Ford to make HD Radio available on almost all new vehicles (engadget.com)

From feed by engfeed

Filed under: Transportation

Just when you thought your radio carrier headaches had gone away -- bam -- Ford starts offering HD Radio on almost all of its new vehicles. That's right, according to a recent press release, the automaker has plans to equip (should you so choose) a large percentage of its 2008 Ford, Lincoln, and Mercury vehicles with the new high definition "standard." HD Radio -- if you'll recall -- is free, and broadcasts on about 1,500 stations in the US, but offers higher quality audio than standard FM, in addition to features like track ID and extra "piggybacked" channels (called HD2). On top of the inclusion of the systems in new vehicles, Ford says that its 2005, 2006 and 2007 models can be retrofitted with the receivers, thus giving your old jalopy a sheen of newness heretofore unseen.

[Via Autoblog]

Read | Permalink | Email this | Comments

Office Depot Featured Gadget: Xbox 360 Platinum System Packs the power to bring games to life!
The Internet

Submission + - What's hot on Wikipedia (wikirage.com)

Submitted by
Craig
Craig writes: "WikiRage lists the pages in Wikipedia which are receiving the most edits per unique editor over various periods of time. Popular people in the news, the latest fads, and the hottest video games can be quickly identified by monitoring this social phenomenon."
Robotics

Submission + - BigDog's little brother tackles tough terrain

Submitted by
willatnewscientist
willatnewscientist writes: "The company that that brought us BigDog has a new robotic pooch. LittleDog is a smaller, more nimble version of the larger robot and was developed for DARPA to test competing adaptive approaches to crossing a highly irregular piece of terrain. Six different research groups — MIT, CMU, University of Pennsylvania, Stanford, USC and IHMC — have each been given one LittleDog and are developing their own walking algorithms. Once a month, DARPA tests these algorithms on its own LittleDog to see which shows the most promise. Ultimately, the program could help robots like BigDog cross rocky ground without breaking a robot leg."
Software

Submission + - Microsoft Expression Web - Is it All that?

Submitted by
erica_ann
erica_ann writes: "I am a Dreamweaver lover and die-hard fan. When I hear / see a website was made with Front Page, I cringe and shrudder. I have spent too many sleepless nights correcting the mangled code from Front Page so it would be cross-browser complaint as well as W3C and even CSS compliant — not to mention meet accessibility standards.

Now, I read that Microsoft has dropped Front Page and is now touting Microsoft Expression Web. From what I have read, it seems to be one of the few (or the only one) WYSIWYG editor that lets you drag and drop — say even an image — and creates a CSS style for it... not using HTML to place it.

I have also seen that it will not work with PHP — which is one of the reasons I love Dreamweaver so much — since it will.

Supposedly the new Microsoft Expression Web will be a rival for Dreamweaver and other top name Editors.. but can Microsoft really make a comeback from Front Page? I plan on downloading it and trying the trial out — but you have to uninstall the Office trail first which I am still crunching through to do a review on.

Have any ./ readers tried out the new Microsoft Expression Web? Is the code produced really that much better than the older Front Page? I would like to hear what others who have tried this have to say about it."
Power

Submission + - Solar Powered Car Breaks Record by 3 Days

Submitted by Walking The Walk
Walking The Walk writes: Jaycar Sunswift III broke the Transcontinental World Record today, by an incredible 3 days! As previously mentioned on slashdot, the UNSW Solar Racing Team started their 4000km journey across Australia 6 days ago. Cloudy weather the first two days couldn't slow them down, and they raced into Sydney in 5.5 days, surpassing the previous record of 8.5 days with ease. Several news agencies were on hand to meet the team on their triumphant arival. Read about the team's history and previous attempts on their site, www.sunswift.com
Data Storage

Submission + - A Beginner's Guide To LVM

Submitted by
hausmasta
hausmasta writes: "This guide shows how to work with LVM (Logical Volume Management) on Linux. It also describes how to use LVM together with RAID1 in an extra chapter. As LVM is a rather abstract topic, this article comes with a Debian Etch VMware image that you can download and start, and on that Debian Etch system you can run all the commands I execute here and compare your results with mine. Through this practical approach you should get used to LVM very fast.

http://www.howtoforge.com/linux_lvm"
Hardware Hacking

Submission + - DIY: Build a USB Airsoft Turret

Submitted by Anonymous Coward
An anonymous reader writes: How to artical showing how to build a USB powered Airsoft Turret with this article Inventgeek This would be a great start for anyone wanting to compete at defcon this year.
Sci-Fi

Submission + - Two Stargate SG1 Films Announced

Submitted by Presence2
Presence2 writes: MGM announced today that the Stargate franchise will migrate to the big screen, carrying with it the ending of the last two season's Ori plot-line. From the article:

"Stargate: The Ark of Truth": As SG-1 searches for an Ancient artifact which they hope can defeat the armies of the Ori, they learn more Ori ships are about to be sent through the supergate to launch a final assault on Earth. Daniel discovers that the artifact, the Ark of Truth, may be in the Ori home galaxy, and SG-1 embarks aboard the Odyssey to find it, and pre-empt the attack. The IOA has a plan of their own and SG-1 ends up in a distant galaxy fighting two powerful enemies.

"Stargate: Continuum": While SG-1 attends the execution of Ba'al, the last of the goa'uld system lords, Teal'c and Vala inexplicably disappear into thin air. Carter, Daniel and Mitchell race back to a world where history has been changed: the Stargate program has been erased from the timeline. As they try to convince the authorities what's happened, a fleet of goa'uld motherships arrives in orbit, led by Ba'al, his queen, Katesh, (Vala) and his first prime, Teal'c. SG-1 must find the Stargate and set things right before the world is enslaved by the goa'uld.

Still no word if Sam will end up the one and only "Sir!"
Google

Submission + - Google Answer to Filling Jobs Is an Algorithm

Submitted by Anonymous Coward
An anonymous reader writes: Desperate to hire more engineers and sales representatives to staff its rapidly growing search and advertising business, Google — in typical eccentric fashion — has created an automated way to search for talent among the more than 100,000 job applications it receives each month. It is starting to ask job applicants to fill out an elaborate online survey that explores their attitudes, behavior, personality and biographical details going back to high school. http://www.nytimes.com/2007/01/03/technology/03goo gle.html?em&ex=1168059600&en=4c26f1e0ca0babfd&ei=5 087%0A
Software

Submission + - Software company uses "logic bomb" on cour

Submitted by Anonymous Coward
An anonymous reader writes: A software vendor in Cleveland is threatening to disable the Juvenile Court's computers at the end of the month .. and is preventing them from using another company for support. A more modern version of "extortion". http://www.newsnet5.com/news/10670270/detail.html Similar problems have, in the past, resulted in strange things like cars getting stranded in a parking garage.

Slashdot Top Deals

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Close