Become a fan of Slashdot on Facebook

 


Forgot your password?
Close
typodupeerror
×

Submission + - Real Time Hacking Map (fortiguard.com)

Submitted by Dharkfiber
Dharkfiber writes: Cool new service from Fortinet shows real time hacking attempts to world wide honey pots. Similar to Norse and Dark Viking but better visuals. Enjoy!

Comment You need a cloud security broker (Score 1) 168

by Dharkfiber (#48313613) Attached to: Ask Slashdot: Single Sign-On To Link Google Apps and Active Directory?
Centrify, Ping Identity, Bit Glass and others can provide SSO capabilities between your core infrastructure (AD) and the cloud. Some include sync tools and other provide nearly full ADFS implementations. They can also provide 2FA and other authentication mechanisms. Centrify can even give you MDM (Mobile Device Management) for 802.1x like functionality. Bit Glass can do some very cool proxying that gives you DLP style water marking of stored files on the cloud. Etc etc etc.

Submission + - The Security Emperor Has No Clothes (reuters.com)

Submitted by Dharkfiber
Dharkfiber writes: In a weird twist of fate Palo Alto Networks, a company many consider to have the answer to many internet threats, fails to pass a standard set of TCP/IP invasions tests, caveat emptor.

Submission + - Fired NY Fed Regulator's Secret Audio Recordings Inside Goldman Sachs 2

Submitted by maynard
maynard writes: Carmen Segarra used to work as a regulator for the New York Federal Reserve Bank, one of twelve regional banks that make up the US central banking system. In her capacity as regulator, Ms. Segarra was assigned to a team overseeing investment banking giant Goldman Sachs. There, while investigating a case of Goldman having advisied a client about a buyout offer by another company in which the firm held significant investment holdings, she determined that Goldman didn't even have a conflict of interest policy. Her supervisor initially backed the investigation, until it became clear she meant to file a written report detailing her findings of fact. Then they abruptly fired her.

And all this would have been another unfortunate case of 'she-said / institution-said' ineffective whistleblowing were it not for the fact that Ms. Segarra saw what was coming and had bought a keychain audio recorder. With it, she collected 46 hours of internal discussion and meetings, including statements by Goldman Sachs principles admitting the firm didn't have a conflict of interest policy and that the deal under investigation had been "shady." Additionally, she collected reams of documents and testimony. She thought her case iron clad.

However, when it came time to reveal her findings in full to superiors, though initially supportive of the investigation, her boss quickly shifted gears and worked to squelch the report. This culminated in a recorded meeting where her boss made clear his supervisors at the Fed insisted she downplay those findings. Then, a week later, before she could formally file the report, they fired her.

While bits of the story have been out in print for about a year, the radio show This American Life just published actual excerpts from those audio recordings. They make for harrowing listening. As the producer says in the introduction, her recordings show: "Repeated examples of pervasive regulatory capture by the industry regulators are meant to oversee."

In other words, whereas before we could all surmise just how bad banking regulation must be, what with the Financial Crisis having nearly tanked the world economy and all, with this audio we can hear first hand and in minute detail what it's like for an honest regulator to try to do the job properly: You get fired. Quickly. Then your embarrassing work is buried and reputation smeared. And if she'd just kept her mouth shut, she coulda gotten rich! This, at the very heart of the global financial system.

Is it any wonder why the public has lost faith in our political and economic institutions?

Submission + - Yahoo scrapping sign-in security seal (yahoo.com)

Submitted by Anonymous Coward
An anonymous reader writes: Yahoo logins have long featured an option to display a sign-in seal associated with user computers to discourage phishing and other security holes. The seal will now disappear, with Yahoo claiming that "advances in secure communications for browsing, email, and instant messaging, there's no longer a need for it.". Yahoo didn't indicate how advances of insecure systems, malware and social engineering factored into its decision.

Submission + - Could we abort a manned mission to Mars?

Submitted by StartsWithABang
StartsWithABang writes: The next great leap in human spaceflight is a manned mission to a world within our Solar System: most likely Mars. But if something went wrong along the journey — at launch, close to Earth, or en route — whether biological or mechanical, would there be any way to return to Earth? A fun (and sobering) look at what the limits of physics and technology allow at present.

Submission + - Free Software Foundation issues response to inquiry about Shellshock bug (fsf.org) 5

Submitted by mctaylor
mctaylor writes: The Free Software Foundation issued a rambling and evasive response to inquiries into the Shellshock bug reported here previously. In response to inquiries, the Free Software Foundation reasserts the superiority of free software over proprietary solutions, but notes:

Free software cannot guarantee your security, and in certain situations may appear less secure on specific vectors than some proprietary programs

, and concludes by stating:

the solution is to put energy and resources into auditing and improving free programs.

. But shouldn't the GNU project have been doing that already? If it is not, or can not, then perhaps we should be asking ourselves where our donations have been going. What are your thoughts? Is the FSF really spending our donations wisely?

Submission + - New Patch for "Shellshock" Bug Issued Thursday

Submitted by Anonymous Coward
An anonymous reader writes: A new patch was released Thursday for the "Shellshock" bug in the GNU Bourne Again Shell (bash). The initial patch, issued on Wednesday by the GNU bash code maintainer Chet Ramey, was found to be incomplete by Tavis Ormandy, an information security engineer at Google. Ramey wrote a new patch Wednesday night and tested and packaged it Thursday. Various Linux distributions pushed out the patch very late Thursday night.

Submission + - How 3D printers went mainstream after decades in obscurity (digitaltrends.com)

Submitted by Anonymous Coward
An anonymous reader writes: By now, everyone knows the likes of MakerBot, Bre Pettis and the gun-printing cage rattlers at Defense Distributed. But the tale of 3D-printing goes all the way back to the heady pre-Macintosh days of 1983, and a simple plastic cup that holds the distinction of being the first-ever 3D-printed object. Garage entrepreneur Chuck Hull managed to print it using cobbled-together hardware that looked like something out of ‘Waterworld,’ laying the fragile plastic framework for everything to come. From retrofitted hot glue guns, to a machine made specifically to print on-demand shot glasses, the last 30 years in 3D printing have been full of strange twists, odd characters and melted failures. And the possibilities are just beginning to emerge now that anyone can play.

Submission + - NASA Expands Commercial Space Program (nasa.gov)

Submitted by Anonymous Coward
An anonymous reader writes: Just 10 days after NASA awarded multi-billion-dollar contracts to SpaceX and Boeing for future manned rocket launches, the agency announced today it is expanding its commercial space program to include contracts for delivery missions to the International Space Station. "Under the Commercial Resupply Services 2 RFP, NASA intends to award contracts with one or more companies for six or more flights per contract. As with current resupply flights, these missions would launch from U.S. spaceports, and the contracted services would include logistical and research cargo delivery and return to and from the space station through fiscal year 2020, with the option to purchase additional launches through 2024."

Submission + - Incredible Disappearing URL Entry (lonesysadmin.net)

Submitted by Dharkfiber
Dharkfiber writes: I just pulled up my chrome browser on Android and found that a new tab creation does not allow me to put in a URL into the browser. I am now forced to "Search" for everything I want to find through the Google search function. It seems "Don't Be Evil" is gasping its final breaths. What are your feelings on the ethics of this?

Submission + - Multitasking With Your Mobile Phone Could Cause Brain Deformation

Submitted by rofkool
rofkool writes: Using your mobile phone at the same time as your tablet or laptop could cause the structure of your brain to change, leading to mental health disorders.

A new study by neuroscientists at the University of Sussex's Sackler Centre for Consciousness found that frequent multi-tasking resulted in "structural changes" that led to "lower grey-matter density" in the anterior cingulate cortex (ACC).

"The exact mechanisms of these changes are still unclear," said Kepkee Loh, a neuroscientist at the University of Sussex. "Although it is conceivable that individuals with small ACC are more susceptible to multitasking situations due to weaker ability in cognitive control or socio-emotional regulation.

"It is equally plausible that higher levels of exposure to multitasking situations leads to structural changes in the ACC."

Submission + - Not Just Netflix: Google Challenges Canada's Power to Regulate Online Video (michaelgeist.ca)

Submitted by Anonymous Coward
An anonymous reader writes: Yesterday's report on the regulatory battle between Netflix and Canada's broadcast regulator has now grown as Google has jumped into the fight. Faced with similar demands from the CRTC, Google has refused to provide it with requested information, arguing that it is not part of the Canadian broadcast system and not subject to CRTC regulation.

Slashdot Top Deals

Intel CPUs are not defective, they just act that way. -- Henry Spencer

Close