Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:Not all code is vulnerable - getaddrinfo() is f (Score 2) 211

As pointed out in the article, the program must use gethostbyname() on a name supplied by the attacker.

A much more mitigating factor is that the bug is only exercised if the name looks like a numerical id, and according to their search most software first checks this using inet_aton() and only calls gethostbyname() if this fails, thus avoiding the bug.

Comment Re:Why not strncpy or strlcpy (Score 1) 211

strncpy will not overflow the buffer provided you pass the size of the buffer (if you don't pass the size of the buffer, *none* of the safer functions are going to help). It's problem is that it will not write a nul at the end of the buffer, thus reading will read right off the end. It also wastes a huge amount of time filling the unused part of the buffer with nul.

strlcpy is far, far better and does pretty much what is wanted.

However in this case they really did try to figure out if the buffer would overflow, so neither strlcpy or strncpy should be needed. They did the calculation wrong, claiming it needed 4-8 bytes less than it really did.

Comment Re:Not really. (Score 5, Insightful) 237

First, it doesn't explain Fermi's Paradox, it merely adds another term to it. In all of those various probabilities, apparently there is something like a 10% chance of not getting taken out by a gamma burst in half-a-billion years. I would also expect the odds to get better as a given galaxy "settles down", generating fewer big, hot stars and more smaller, calmer ones. Some neighborhoods are probably rougher too. I wouldn't wait around to settle Trantor, near the center of our galaxy.

Second, I wouldn't consider intergalactic contact in any serious way - the distances are bad enough for interstellar, do we really want to add a few more orders of magnitude?

Third, our presence establishes our galaxy as one of the more benign ones. There is at least one neighborhood that has been sufficiently peaceful for the last half-billion hears. Last I knew, there were no supernova candidates close enough to cause that kind of trouble any time soon, either.

Fourth, I'll focus on your word "silliness", which I think you meant as an understatement. There is conceivably a chance that we are under observation, and rank as "too silly" for any contact. The Earth has had an oxygen atmosphere for the last half-billion years, and we're on the verge of being able to detect other such atmospheres on other worlds such as Kepler has found. It's not a bad assumption that any civilization capable of interstellar travel is also better at planetary surveys than us. If they're there and within a few thousand light-years, they know something worth seeing is probably here.

At this point in physics we're stuck at the Standard Model. We have many theories that move beyond, but no facts to select among them, and many of the experiments would be incredibly expensive. But let's say one day we saw a "warp signature", it's quite possible that we could immediately discard half of those theories. (By "warp signature" I really mean physical evidence of truly advanced technology.) IF there were here watching us, and seeing our "silliness" as well as the scientific acumen of some, they would be especially careful that we see no such evidence.

Comment Re:Hear Hear! (Score 2) 397

Ah, Americans and their "mammoth snowstorms" - try living on a rock in the middle of the North Atlantic. You know what we call a snowstorm with gale-force winds and copious precipitation? Tuesday ;) Our last one was... let's see, all weekend. The northwest gets hit by another gale-force storm tomorrow. The southeast is predicted to get hurricane-force winds on Thursday morning.

Here's what the job of someone dispatched to maintain antennae for air traffic control services has to deal with here. ;) (those are guy wires)

Comment Re:Visible from Earth? (Score 1) 126

A sun-like star is about 1 1/2 million kilometers in diameter. To blot out all light from such a star that's 10 light years away, a 0,75 kilometer diameter disc could be no more than 1/200.000th of a light year, or around 50 million kilometers (1/3rd the distance between the earth and the sun).

The brightest star in the sky is Sirius A. It has a diameter of 2,4 million km and a distance of 8.6 light years. This means your shade could be no more than 25 million kilometers away.

The sun and the moon both take up about the same amount of arc in the night sky so would be about equally difficult to block; let's go with the sun for a nice supervillian-ish approach. 1,4m km diameter, 150m km distance means it'd be able to block the sun at 800km away. Such an object could probably be kept in a stable orbit at half that altitude, so yeah, you could most definitely block out stars with the thing - including our sun!

Submission + - What Makes a Great Software Developer? (dice.com)

Nerval's Lobster writes: What does it take to become a great—or even just a good—software developer? According to developer Michael O. Church’s posting on Quora (later posted on LifeHacker), it's a long list: great developers are unafraid to learn on the job, manage their careers aggressively, know the politics of software development (which he refers to as 'CS666'), avoid long days when feasible, and can tell fads from technologies that actually endure... and those are just a few of his points. Over at Salsita Software’s corporate blog, meanwhile, CEO and founder Matthew Gertner boils it all down to a single point: experienced programmers and developers know when to slow down. What do you think separates the great developers from the not-so-fantastic ones?

Comment Re:keeping station behind it? (Score 1) 126

It makes sense. We can radiate individual photons for thrust if so desired. We can move individual electrons from one position in a spacecraft to another for tiny adjustments of angle and position if so desired. It seems you're going to be much more limited by your ability to precisely track your target than by your ability to make fine adjustments.

I think a much bigger problem is going to be isolating standing waves from within the shielding material from distorting its perfect rim (with a shield that big and thin, there *will* be oscillations from even the slightest thrust inputs). You need to isolate the rim from the shielding. And you also need to make sure that you can have a rim that can be coiled up for launch but uncoil to such perfection in space.

Tough task... but technically, it should be possible.

Comment Re:No (Score 3, Insightful) 126

I would presume that the bulk material in the inside has no need for accuracy, only the very rim. The question is more of whether you can have a coiled material that when uncoiled (deployment) can return to a shape with that level of accuracy. I would think it possible, but I really don't know.

I would forsee a super-precise rim with just a small bit of light shielding on its inside, deployed via uncoiling, and then attached to a much stronger, less precise uncoiled ring to which the bulk shielding material (and stationkeeping ion thrusters) are attached. The attachment between the two would need to provide for vibration and tension isolation (even the slowest adjustments in angle of such a huge, thin shield are going to set in motion relevant vibrations, you've got almost no damping - you want the structural ring to deal with those and not transfer them through to the precision ring). Not to mention that your shield will be acting as a solar sail whether you like it or not (unless you're at L2... but then your craft better be nuclear powered).

Your telescope behind it is going to need to do some real precision stationkeeping (either extreme precision on the whole spacecraft positioning, or merely "good" positioning of the whole spacecraft plus extreme precision adjustment of the optics within) . This means long development times and costs to demonstrate that you can pull it off before you actually build the shield. But I would think that also possible - just very difficult. If they take the latter route they could probably demonstrate that here on Earth, which would be a big cost-saver.

Submission + - Kim Dotcom offers up secure 'Skype Killer' voice chat (networkworld.com)

colinneagle writes: Kim Dotcom, the controversial German expat living in New Zealand whose file-sharing site was busted by U.S. federal agents, has launched an end-to-end encrypted voice and video chat service that operates through the browser called MegaChat, which will now be available for free to the 15 million registered users of his file-sharing service Mega.

MegaChat aims to provide an alternative to the current voice and video chat services which Dotcom himself has accused of cooperating with government snooping. "No U.S.-based online service provider can be trusted with your data," Dotcom once claimed. "Skype has no choice. They must provide the U.S. government with backdoors."

However, Dotcom has also claimed that there are backdoors in Chrome and Firefox, so if you are using them to browse, how can he guarantee end-to-end encryption? And while Mega is great for file sharing, its track record for security is a little dubious. Right after its launch, there was criticism of the implementation of the site's security, from cross-site scripting flaws to poorly implemented encryption, and later it was found that Mega passwords could be extracted with basic hacking tools.

Submission + - Opera founder unveils feature-rich Vivaldi power browser. (gigaom.com)

cdysthe writes: Almost two years ago, the Norwegian browser firm Opera ripped out the guts of its product and adopted the more standard WebKit and Chromium technologies, essentially making it more like rivals Chrome and Safari. But it wasn’t just Opera’s innards that changed; the browser also became more streamlined and perhaps less geeky.

Many Opera fans were deeply displeased at the loss of what they saw as key differentiating functionality. So now Jon von Tetzchner, the man who founded Opera and who would probably never have allowed those drastic feature changes, is back to serve this hard core with a new browser called Vivaldi.

Submission + - Why Screen Lockers On X11 Cannot Be Secure (martin-graesslin.com)

jones_supa writes: One thing we all remember from Windows NT, is the security feature requiring the user to press CTRL-ALT-DEL to unlock the workstation (this can still be enabled with a policy setting). The motivation was to make it impossible for other programs to mimic a lock screen, as they couldn't react to the special key combination. Martin Gräßlin from KDE team takes a look at the lock screen security on X11. On a protocol level, X11 doesn't know anything of screen lockers. Also the X server doesn't know that the screen is locked as it doesn't understand the concept. This means the screen locker can only use the core functionality available to emulate screen locking. That in turn also means that any other client can do the same and prevent the screen locker from working (for example opening a context menu on any window prevents the screen locker from activating). That's quite a bummer: any process connected to the X server can block the screen locker, and even more it could fake your screen locker.

Submission + - CIA source of NY Times reporter James Risen convicted on circumstial evidence (nytimes.com) 2

webanish writes: The New York Times reports:

Jeffrey A. Sterling, a former Central Intelligence Agency officer, was convicted of espionage Monday on charges that he told a reporter for The New York Times about a secret operation to disrupt Iran’s nuclear program.

The case revolved around a C.I.A. operation in which a former Russian scientist provided Iran with intentionally flawed nuclear component schematics. Mr. Risen revealed the operation in his 2006 book, “State of War,” describing it as a mismanaged, potentially reckless mission that may have inadvertently aided the Iranian nuclear program.

While this comes as no surprise given the Obama administration's record on going after whistleblowers releasing secrets in public interest, the ramifications of these building cases could be twofold.

  • Legitimate issues which should be discussed in public are withheld out of fear
  • Leakers might not always act so benevolently to go to reputed press institutions

To an outsider, it seems there is widespread support for Snowden and responsible whistleblowing laws. Why is there no momentum for this in the government?

Slashdot Top Deals

You knew the job was dangerous when you took it, Fred. -- Superchicken

Working...