Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Tell you what (Score 1) 360

We Americans see the British as our cultural brethren, owing to the long intertwined history of our two nations. As England goes, so too shall America go. Thus we mourn for the Brits' loss of the freedoms that inspired our own. So too do we fear that our own regime may follow the UK down the path to open tyranny.

Comment Re:i'm not going to see this (Score 1) 351

I'm not sure why The Hobbit is so bad. One was OK, Two was more meh. It was like all the heart, soul, and magic of LOTR vanished in a poof of smoke for The Hobbit. I mean, come on, one of -the- best parts in one was the dwarves singing "Misty Mountains" and the song is not even 2 minutes long! It is like they don't have any faith in their ability to please the non-ADD crowd ...

Speaking of foreign films ...

Wheat (2009) was a great foreign film .. IF you can find it !

It opened at the Shanghai International Film Festival, but I guess it is not dumb action like Prometheus so it got panned ...

Comment Re:Except that they have no debts (Score 2) 265

The profit may be less this quarter... but give it six months to a year, plus one incident in the Middle East... and oil will be back up to $150 a barrel and stay there for good.

I wouldn't be too surprised if there were some Ruskie military intelligence types working overtime to stir up some new troubles in the Middle East. The Saudi gub'mint isn't exactly popular with their subjects, are they?

Open Source

Docker Image Insecurity 73

An anonymous reader writes Developer Jonathan Rudenberg has discovered and pointed out a glaring security hole in Docker's system. He says, "Recently while downloading an 'official' container image with Docker I saw this line: ubuntu:14.04: The image you are pulling has been verified

I assumed this referenced Docker's heavily promoted image signing system and didn't investigate further at the time. Later, while researching the cryptographic digest system that Docker tries to secure images with, I had the opportunity to explore further. What I found was a total systemic failure of all logic related to image security.

Docker's report that a downloaded image is 'verified' is based solely on the presence of a signed manifest, and Docker never verifies the image checksum from the manifest. An attacker could provide any image alongside a signed manifest. This opens the door to a number of serious vulnerabilities."
Docker's lead security engineer has responded here.

Submission + - Stupid Costly Patent Nuclear War By Microsoft & Apple Against Android Averte (techdirt.com)

An anonymous reader writes: We've written a few times about Rockstar Consortium, a giant patent troll that was created when Microsoft and Apple (and a few others) teamed up to outbid Google, Intel (and a few others) in buying thousands of Nortel patents. Nortel admitted that it had bulked up on many of these patents for defensive measures, but once Nortel went bankrupt they went to the highest bidder (and the bidding went pretty damn high).

The winners of the bidding kept a few of the patents for themselves, but then dumped them all into "Rockstar Consortium" which was a new giant patent troll and which, importantly, was not subject to promises that Apple and Microsoft initially made (to avoid antitrust problems) to license the patents under reasonable terms.

Slashdot Top Deals

Neutrinos have bad breadth.

Working...