Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:Shouldn't? (Score 1) 176

"The new console also takes measures to protect itself from overheating, so RRoDs shouldn't be a problem with this revision." Except it still has the same faulty X-clamps. Has even worse overheating issues than the original. And has already had green dots of death. (they removed the RRoD in favor of a green dot.)

Got any links to back that up?

The Internet

Submission + - Banlgladesh blocks Facebook (skunkpost.com)

crimeandpunishment writes: Bangladesh has now joined Pakistan in blocking Facebook because of the conroversial page urging people to draw images of the Prophet Muhammad. The government said Sunday that Facebook has been "temporarily" blocked...but that access would be restored if the offending material is removed.
Security

Submission + - Major Facebook Security Hole Discovered 2

adeelarshad82 writes: A major security hole in Facebook has been discovered. Ironically, the source of this vulnerability is Facebook's own much-vaunted security "improvements." A video shows how you can view pending friend requests and chat history for any of your friends. Facebook Chat is down at the moment (coincidence? probably not). Unfortunately this isn't the only security hole in Facebook, another one was recently discovered which lets you retrieve the full name and Facebook URL for any account holder, given nothing but the Facebook ID number.
Sony

Submission + - Sony Refuses to Sanction PS3 Other OS Refunds (thinq.co.uk)

Stoobalou writes: Sony says that it has no intention of reimbursing retailers if they offer fat PS3 users partial refunds.

Last week, the first PS3 user successfully secured a partial refund from Amazon UK as compensation for the removal of the ability to run Linux on the console.

The punter quoted European law in order to persuade the online retailer that the goods he had bought in good faith were no longer fit for purpose because of the enforcement of firmware update 3.21, which meant that users who chose to keep the Other OS functionality would lose the ability to play the latest games or connect to the PlayStation Network.

Privacy

Submission + - Google backs Yahoo in privacy fight with DOJ (cnet.com)

suraj.sun writes: Google and an alliance of privacy groups have come to Yahoo's aid by helping the Web portal fend off a broad request from the U.S. Department of Justice for e-mail messages, CNET has learned.

In a brief filed Tuesday afternoon, the coalition says a search warrant signed by a judge is necessary before the FBI or other police agencies can read the contents of Yahoo Mail messages--a position that puts those companies directly at odds with the Obama administration.

Yahoo has been quietly fighting prosecutors' requests in front of a federal judge in Colorado, with many documents filed under seal. Tuesday's brief from Google and the other groups aims to buttress Yahoo's position by saying users who store their e-mail in the cloud enjoy a reasonable expectation of privacy that is protected by the U.S. Constitution.

"Society expects and relies on the privacy of e-mail messages just as it relies on the privacy of the telephone system," the friend-of-the-court brief says. "Indeed, the largest e-mail services are popular precisely because they offer users huge amounts of computer disk space in the Internet 'cloud' within which users can warehouse their e-mails for perpetual storage."

CNET news : http://news.cnet.com/8301-13578_3-20002423-38.html

Microsoft

Submission + - Hotmail hacked, Account Contacts being spammed (tomshardware.com)

An anonymous reader writes: This morning I received an email (from a friend) which appeared a bit suspicious, but because this friend has a habit of being brief and not following email etiquette, I figured it was legitimate. I clicked the link and after being redirected to some sketchy/malware website, I wished I hadn't.

I contacted my friend who confirmed that he did not send the email. He mentioned that hotmail was recently hacked in February and he figured that must be part of the fallout from that.

I did a bit of googling, and it looks like a number of folks have been affected.

This seems like it could be a pretty big problem, and there doesn't seem to be much publicity on it. When twitter goes down for 5 minutes, it's headline CNN news, but somehow this event wasn't newsworthy?

We're all used to living in a world of spam, 419 scams, viagra emails, phishing attacks, etc., but this hack caught me slightly offguard, and it seems particularly dangerous because users (myself included, apparently) are inherently trusting of emails that come from (or seem to come from) a friend.

Security

Submission + - What security policy and processes do you use? (slashdot.org) 1

EvilMonkeySlayer writes: Recently we had a big multi-billion dollar four letter Japanese company install some very expensive software and hardware on our premises. Unfortunately the engineers who did the installing also brought a virus in and managed to install that onto their very expensive server.

Through processes i'd put in and a bit of luck the server that they installed was the only thing infected. I'd like to say this was the first time this has occurred but this has happened in the past where a third party who installed a piece of hardware has brought in a virus. I've got a decent security in depth set-up so much so that none of our machines has never been infected either through employees or cracking attempts on our public/private servers and workstations. However, it seems once every so often when we have a third party bring in their own server/machine that we've purchased they will inevitably infect said machine.

I have pressed managers in the past at our company to inform any engineers that they must pass any laptops, flash drives etc by me before connecting them up to our network or to another pc. However, they have typically neglected to inform them. Case in point an engineer decided to connect an infected flash drive to one of the workstations which is how I found out about the virus in the first place since the workstation AV blocked the virus and informed me immediately at which point I rushed over and forbid him from using it.

I have been talking to the company MD and he's talking of getting any engineers who come on site to sign a document stating that their computers are virus free etc.

I am wanting to literally make it very much clear to everyone and any third party that if they bring in a computer/flash drive it MUST pass by me first.

Unfortunately I can't always hold the hands of these engineers as I'm the only IT guy in the entire company, so often I may not be available or in a different part of one of our two buildings.

Also, the engineers installed a web server so customers can login remotely for the system. However, the web server is an older version of Apache (2.2.9) running on windows. I have forbidden this machine from having external access until in the words of the account manager for the four letter company "we're waiting to hear back from Japan because the software needs to be updated from them" which doesn't fill me with confidence especially for something that needs to be updated relatively frequently. (contractually wise me updating Apache on this windows server is in a grey area...)

What policy or methods do you guys use to enforce the rules?

I've talked of sending a very clear letter to all the managers from the MD that if they do not inform any third party that they must pass any computers/flash drives through me first that there will be serious consequences. (for example docking of wages, sacking etc)

Patents

Submission + - Facebook patents the news feed (thenextweb.com)

daedae writes: It seems Facebook has been granted a patent for the news feed, as a method of monitoring activities, storing them in a database, and displaying an appropriate set of activities to an appropriate set of users.

Comment Re:non Linux based routers (Score 5, Informative) 193

'It installs itself on routers and modems by guessing default administrative passwords and taking advantage of the fact that many devices are configured to allow remote access."' Does this botnet attack also work on non Linux based routers and if so the what is the logic behind the subject line ?

No, It requires the router to be running Linux on a MIPS system.

Comment Re:Pointless (Score 1) 167

It looks like they were cracking passwords which were 8 or less characters with simple Alphanumerics. In other words, weak passwords. While the cloud aspect makes it vaguely interesting, is it really news?

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...