Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Software

Submission + - Linux kernel 2.6.20 released

diegocgteleline.es writes: "After two months of development, Linux 2.6.20 has been released. This release includes two different virtualization implementations: KVM: full-virtualization capabilities using Intel/AMD virtualization extensions and a paravirtualization implementation usable by different hypervisors. Aditionally, 2.6.20 includes PS3 support, a fault injection debugging feature, UDP-lite support, better per-process IO accounting, relative atime, relocatable x86 kernel, some x86 microoptimizations, lockless radix-tree readside, shared pagetables for hugetbl, and many other things. Read the list of changes for more details."
X

Submission + - Xfce 4.4.0 Released

kelnos writes: "After more than two years since our previous stable feature release, the Xfce Team is proud to announce the release of Xfce 4.4.0. This release features our new file manager, Thunar, as well as many improvements and feature additions to Xfce's core components.

Head over to our brand-new website and take a look at our visual tour, or go straight to the downloads."
Windows

Submission + - Vista Exploit Surfaces on Russian Hacker Site

nithinraju writes: "Proof-of-concept exploit code for a privilege escalation vulnerability affecting all versions of Windowsincluding Vistahas been posted on a Russian hacker forum, forcing Microsoft to activate its emergency response process. Mike Reavey, operations manager of the Microsoft Security Response Center, confirmed that the company is closely monitoring the public posting, which first appeared on a Russian language forum on Dec. 15. It affects csrss.exe, which is the main executable for the Microsoft Client/Server Runtime Server. According to an alert cross-posted to security mailing lists, the vulnerability is caused by a memory corruption when certain strings are sent through the MessageBox API. The PoC reportedly allows for local elevation of privilege on Windows 2000 SP4, Windows Server 2003 SP1, Windows XP SP1, Windows XP SP2 and Windows Vista operating systems, Reavey said in an entry posted late Dec. 21 on the MSRC blog. Initial indications are that in order for the attack to be successful, the attacker must already have authenticated access to the target system. Of course these are preliminary findings and we have activated our emergency response process involving a multitude of folks who are investigating the issue in depth to determine the full scope and potential impact to Microsofts customers, Reavey added. While I know this is a vulnerability that impacts Windows Vista I still have every confidence that Windows Vista is our most secure platform to date, he added. The MSRC is expected to issue a formal security advisory with pre-patch workarounds. In the interim, the company is urging customers to enable a firewall, apply all security updates and install anti-virus and anti-spyware protection. To date, there are no reports of actual attacks against Windows users. The Microsoft confirmation comes hard on the heels of a claim by anti-virus vendor Trend Micro that underground hackers are selling zero-day exploits for Windows Vista at $50,000 a pop. MY BLOG IS http://alieneliminator.wordpress.com/"
Operating Systems

Journal Journal: Will vista improve driver support for OSS/Linux ?

After reading this article it came to mind that now Vista is more closely modeled after a less lossely coupled data+code instead of closely coupled data+code it might become easier for companies to write drivers for all platforms.

Would this be holding up in practice ?

LSI Patents the Doubly-Linked List 328

An anonymous reader writes "Back in April, LSI was granted patent number 7028023. This is a patent on a stunning new technique in data structures ... the concept that a linked list can in fact have multiple orderings. Of course, this has been used since the beginning of (computer) time in the form of doubly-linked lists. Even if LSI wants to (somehow) claim that the doubly-linked list doesn't count as prior art, maintaining linked lists of graphical objects sorted by both x and y co-ordinates for collision detection has been done since "graphical objects" meant ASCII characters on a green-on-black screen, and has probably been widespread in databases for probably even longer."

Novell Injects MS Lawsuit Exploit Into Open Office 251

F.M. Petain writes, "It looks like Microsoft's first move in the 'Linux owes us' game is to move a Pawn. A few days ago, a Novell programmer, Noel Power, submitted patches to add VBA compatibility to Open Office's spreadsheet module. This is great for people trying to convert the business desktop from closed source to open source, but is this gift really a ticking time bomb? What happens when Microsoft declares that the VBA code was stolen?" The patches may have been submitted only a few days ago, but the code must be considerably older; the article claims that nine distros in adition to SUSE already support the VBA extensions in their versions of Open Office. (Linux.com and Slashdot are both part of OSTG.)

UK Has Become a "Surveillance Society" 291

cultrhetor writes "In a story released by the BBC, Richard Thomas, the information commissioner for Great Britain, says that fears of the nation's 'sleep-walk into a surveillance society' have become reality. Surveillance ranges from data monitoring (credit cards, mobiles, and loyalty card information), US security agencies monitoring telecommunications traffic, to key stroke logging at work. From the article, the report 'predicts that by 2016 shoppers could be scanned as they enter stores, schools could bring in cards allowing parents to monitor what their children eat, and jobs may be refused to applicants who are seen as a health risk.' The report's co-author, Dr. David Murakami-Wood, told BBC News that, compared to other Western nations, Britain was the 'most surveilled country.' He goes on to note: 'We really do have a society which is premised both on state secrecy and the state not giving up its supposed right to keep information under control while, at the same time, wanting to know as much as it can about us.'"

IE7 Released As High-Priority Update 438

jimbojw writes, "Internet Explorer 7 was finally released this morning and is available via automatic update or download from Microsoft." And an anonymous reader notes stats on IE7 and FF2 downloads, adding: "Looks like FF2 is already outnumbering FF 1.5, while IE7 is having a hard time to find followers. Will today's release as a high-priority, force-fed update fix this issue?" The sans.org stats site will be updated throughout the day, so perhaps we'll get an indication.

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...