Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment ShellShock checker (Score 2) 329

From Eric Blake's bug-bash post

bash -c "export f=1 g='() {'; f() { echo 2;}; export -f f; bash -c 'echo \$f \$g; f; env | grep ^f='"

If you see anything like the following:

bash: g: line 1: syntax error: unexpected end of file
bash: error importing function definition for `g'
1
2
f=1
f=() { echo 2

you're still vulnerable. There may be other issues the above does not cover.

Comment Re:Technology not needed in thermostats (Score 1) 103

I am afraid we are using technology where technology is not needed.

Wireless gizmos are becoming very common since they mean you don't need to dig holes in your walls to run the cables.

I have 2 wireless thermostats - the wireless isn't used to set them remotely, it is used for them to communicate with the boiler. On the whole they work pretty well (and yes, I'm sure the protocol is so trivial that someone could probably sit outside my house and turn the boiler on/off if they cared enough). That said, if I could point my browser at the thermostat instead of having to fiddle with a UI that has a limited display and only a few buttons, that'd be pretty useful.

I have a wireless doorbell too. It has to be said that this doesn't work so well because the range isn't great - it certainly won't reach my office. Again, probably really insecure and someone who cared enough could probably make my doorbell ring remotely.

As we get more and more wireless gizmos like this, having them all use common infrastructure, such as the wifi network, rather than communicating using their own point-to-point links is probably a pretty sensible idea - it cuts interference between devices as well as extending the range (by virtue of the wifi network usually covering the entire house anyway, so being able to relay the traffic, possibly via multiple access points). The problem here is twofold:
1. Moving from proprietary protocols to a standard protocol like wifi suddenly means off-the-shelf hardware and software can be used to attack the devices. The old proprietary devices were really insecure too, but no one cared enough to engineer hardware to attack them - now your phone or laptop comes with the hardware you need.
2. These wifi-enabled devices are more powerful and can therefore do nefarious things that the older devices couldn't do - i.e. attacking an old wireless thermostat allowed you to turn the boiler on and off, attacking a new one lets you send spam, etc.

Comment Re:Will this internet of things die already? (Score 1) 103

Hopefully people will exercise their legal rights to correct this kind of thing. For example, goods must be "fit for purpose" and of "reasonable quality". In other words, security must be reasonably effective.

Could be even more interesting if you paid to have it installed.

Unfortunately warranty legislation never seems to apply to software - how often do you hear people getting their money back from Microsoft because Windows is buggy (that would be a design or manufacturing flaw, which is certainly covered for physical goods).

Comment Re:Will this internet of things die already? (Score 1) 103

Nobody needs a home thermometer and refrigerator connected to the internet. Gadget makers and tech press have been trying to foist this shit on us for years and nobody wants it. Let it die already.

I'm not sure that's true - this stuff hasn't really hit the mainstream yet, but the same can be said about a lot of technology early on (how long ago was the internet "only for nerds"?)

I can certainly see a lot of uses for this stuff - my home thermostat lets me set different programs for every day, etc. but the UI isn't great and its time consuming to set. The UI deficiencies are mostly down to the fact that it has a limited display and a limited number of buttons - if I could control it from my web browser it'd be much easier to use.

I'm not entirely sure what you'd expect from an internet connected fridge - it could be useful for stuff like dynamic power use to reduce the load on the electricity grid. But a more consumer-focussed idea would be tracking what's actually in the fridge (would require RFID labelled products or similar) - I can't count the number of times I've found myself in the supermarket and thought "I wonder if we've got any milk left?", or "Is there space in the freezer for this?" - being able to easilly check that kind of thing remotely would certainly be useful. At the moment this is all in the "nerds only" stage, but how long until it integrates with your shopping list, automatically tells you what you've run out of and is used by a large chunk of the population?

I guess something that will hold back adoption of these technologies is that they are in devices that don't frequently get replaced - I've had my fridge for 14 years and I'm not planning on replacing it until it dies. But then the same could be said for TVs and a lot of people have recently replaced perfectly good CRTs with LCD smart TVs so at some point the jump in technology gets good enough for people to bite the bullet and upgrade.

Comment Re:So much power waste (Score 1) 287

If you look closely at those pictures, in pretty much every rack there are redundant switches with absolutely nothing connected to them, yet they are powered on.

Really? Do you like the blinking lights? I measured my 24 port 3com superstack switch and it was 50 watts. I switched to a 8 port low power gigabit (i have 6 devices these days) and it runs at 8watts.

Calculating the cost savings of the switch, at .07 cents a kwh, 42w = cost per year savings of 25 dollars. Roughly the cost of the gigabit switch i replaced it with!

Yep, managed switches seem to be outrageously power hungry. In my cabinet I've got:
  - Satellite patch panel (wired to the dish)
  - 24 port 8p8c patch panel (wired to sockets in the rest of the house/office)
  - 24 port managed gigabit switch
  - Test machine which is completely underpowered and never turned on (at some point I'll get around to removing it from the cabinet)
  - Sheevaplug
  - USB hard drive for Sheevaplug
  - VDSL modem
  - VoIP/POTS gateway
  - USB DVB-S2 receiver
  - RIPE Atlas probe
  - PoE injectors for 2 wireless APs that are dotted around the house
  - Far too many PSUs for all of the above! (Although I have consolidated all the 12v supplies into a single PSU with multiple connectors. I've still got stuff that needs 9v and 5v supplies though)

The total draw is about 90 watts, probably about 50% of it going to the managed switch! About 25% goes to the hard drive I guess.

If anyone has any recommendations for 24 port managed switches that don't draw silly amounts of power when idle, I'd be interested (bonus points if they have some PoE ports).

The other problem I have is that no devices seem to be able to roam between APs sensibly - if I move from the house to the office my phone and laptop try to hold onto the incredibly weak signal from the house AP even though there's an AP in the office for them to use. I have to toggle the wifi off and on again to get them to reassociate. (And vice-versa when I move back into the house).

Comment Re:A good slice of luck. (Score 1) 35

Esa says it will be a one-shot opportunity. Events will be taking place so far away that real-time radio control will be impossible.

What amazes me is that the lander has no RCS - it's launched at the comet, and if it bounces off or something there is no second go. I kinda expected the lander to have some RCS so it could automatically correct for unexpected troubles.

Comment Re:Helium? (Score 1) 296

And who the hell plans on running a data center hard drive indefinitely?

ISTR that the big datacentres, such as Google, run drives until they fail - the systems are redundent enough to cope with a failure with no problems and they have so many drives that it's more cost effective to have a resilliant system and just run the drives into the ground than it is to preemptively retire them (and still have to cope with unexpected premature failures).

Data Storage

WD Announces 8TB, 10TB Helium Hard Drives 296

Lucas123 writes: Western Digital's HGST subsidiary today announced it's shipping its first 8TB and the world's first 10TB helium-filled hard drive. The 3.5-in, 10TB drive also marks HGST's first foray into the use of shingled magnetic recording technology, which Seagate began using last year. Unlike standard perpendicular magnetic recording (PMR), where data tracks rest side by side, SMR overlaps the tracks on a platter like shingles on a roof, thereby allowing a higher areal density. Seagate has said SMR technology will allow it to achieve 20TB drives by 2020. That company has yet to use helium, however. HGST said its use of hermetically-sealed helium drives reduces friction among moving drive components and keeps dust out. Both drives use a 7-platter configuration with a 7200 RPM spindle speed. The company said it plans to discontinue its production of air-only drives by 2017, replacing all data center models with helium drives.

Comment Re:Sorry guys, but you are full of shit (Score 1) 533

The proportion of people who regularly watch hour long HD streaming video channels is probably pretty low.

Maybe that's because their ISP is providing inadequate service so they know better than to attempt it.

Or maybe its because they just aren't interested and therefore don't want to pay for a faster connection...

Comment Re:Sorry guys, but you are full of shit (Score 1) 533

TFS mentions high quality video. You're not streaming high quality video with 10 or even 20Mbps.

Netflix recommends 5Mbps for HD streaming, so you are wrong.

HD on the internet is definitely not the same as HD broadcast TV. When it was first launched, the BBC HD DVB-S channel was doing H.264 at a little over 20Mbps. I think they've reduced that a bit on the HD channels now but certainly nowhere close to 5Mbps. A quick look at a 35 minute programme recorded on my MythTV system from BBC One HD shows 2.6GB, which is a little over 10Mbps - the BBC transponders use statistical multiplexing though, so if you're watching something with more fast action then you can probably expect a higher bit rate than that though. I think BSkyB do around 8Mbps for their HD transponders (and people complain about the quality of BSkyB's HD channels).

The fact that Netflix skimp on the bandwidth a bit shouldn't really be news anyway...

That said, 4Mbps *is* enough for a lot of people - a very high proportion of people use their internet connection for a bit of web surfing and email. The proportion of people who regularly watch hour long HD streaming video channels is probably pretty low. Remember that Slashdot users aren't exactly the "typical" home internet user. (I say this having moved from a 6Mbps ADSL connection to a 40Mbps VDSL connection - for the vast majority of uses the 6Mbps connection was absolutely fine and the only real reason I upgraded was because switching ISP actually worked out cheaper than sticking with the old 6Mbps connection)

Comment Re:Grandparents... (Score 1) 66

Actually, the link does not apply since the unfortunate victim in that case jumped off an 80ft cliff into a quarry. I am not aware of any account where the original challenge, a bucket of cold water to the head, actually caused the participant to expire and go to meet his maker.

http://www.snopes.com/horrors/...

The link I posted does mention some idiot woman who decided to chuck a bucket of water over herself while sitting on a horse. The expected thing happened - the horse bolted and the woman was killed.

Comment Re:People who did High School Chemistry know this. (Score 1) 182

Exactly what I came here to post. We had the demonstration of what happens when you immerse something in liquid nitrogen vs what happens when you pour it over the top. Even if you didn't get to play with liquid nitrogen in school, there are lots of videos of this.

Although I was under the impression that the Leidenfrost effect only worked well on bare skin, so I'm surprised he didn't get frost burns to his scalp and clothed parts.

Slashdot Top Deals

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (5) All right, who's the wiseguy who stuck this trigraph stuff in here?

Working...