Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Sign story (Score 4, Funny) 50

Back in the mid 80s I ran a BBS (Demented Data Systems) We used to to crap like run scans looking for modems. Anyhow, one of the users found something interesting: an electronic sign on top of a downtown office building here was accessible by modem with no password or anything. Just a banner with the company name, sign location and menu.

He set up a scroll for sometime late one particular evening saying "CALL DEMENTED DATA SYSTEMS - 555-5555 (insert real phone number). So that evening after many beers, the band of drunken ~18 year old geeks went out to the street corner across the road and watched. Sure enough, after what seemed like ages of waiting, there it was scrolling across the screen.

So, yeah, in the olden days some crap was pretty easy to play with.

Comment Ted Unangst's article (Score 4, Informative) 304


Ted Unangst wrote a good article called "analysis of openssl freelist reuse"

His analysis:

This bug would have been utterly trivial to detect when introduced had the OpenSSL developers bothered testing with a normal malloc (not even a security focused malloc, just one that frees memory every now and again). Instead, it lay dormant for years until I went looking for a way to disable their Heartbleed accelerating custom allocator.

it's a very good read.

Submission + - NSA said to have used Heartbleed bug for years (bloomberg.com)

grub writes: The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug, and regularly used it to gather critical intelligence, two people familiar with the matter said.

The NSA’s decision to keep the bug secret in pursuit of national security interests threatens to renew the rancorous debate over the role of the government’s top computer experts.

Slashdot Top Deals

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Working...