Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Google

The "Rickmote Controller" Can Hijack Any Google Chromecast 131

redletterdave writes Dan Petro, a security analyst for the Bishop Fox IT consulting firm, built a proof of concept device that's able to hack into any Google Chromecasts nearby to project Rick Astley's "Never Gonna Give You Up," or any other video a prankster might choose. The "Rickmote," which is built on top of the $35 Raspberry Pi single board computer, finds a local Chromecast device, boots it off the network, and then takes over the screen with multimedia of one's choosing. But it gets worse for the victims: If the hacker leaves the range of the device, there's no way to regain control of the Chromecast. Unfortunately for Google, this is a rather serious issue with the Chromecast device that's not too easy to fix, as the configuration process is an essential part of the Chromecast experience.

Comment Re:From TFA (Score 2) 113

It's not needless to say, unfortunately:

(Start of facts) Right now, there's a dispute developing in New York state, over whether McDonalds should have their contracts with franchisees set up so if those franchisees are caught violating state labor laws McDonalds will terminate their franchise rights. Some of the violations at issue include what are definitely felonies (i.e. extortion, threats of death or physical injury). Others are sometimes just misdemeanors (theft of wages, if under a certain amount), but are still criminal. This is an example where a very large employer isn't treating certain areas of criminality as criminal at all. McDonalds has their contracts written to address those crimes they want to include, and these sections are not on the parent corp's lists.

  That much is fact (i'm expecting somebody to try to pick that section apart, before I even offer the my opinion section, so I'm trying to make that line very clear). As opinion, things such as that need to be in contracts because we let corporations form under limited liability rules, and if they are willing to keep doing business with known criminal franchisees who are also incorporated, those multiple corporate veils make it fantastically more difficult to fix. I don't think limited liability ought to extend to cases where somebody hired a hit man to kill a union organizer, and that's proved, but we can't look into whether anybody in particular knew, or passed money about or did other favors to make the hit happen. In the non-corporate world, if you're continuing to associate with a bunch of people you know are felons, and the courts have proved are felons, exchanging money with them and contracting with them is plenty of grounds for an investigation, but this looks like it comes with a clause saying 'unless that trail passes into another corporation'. To fix this, just one of the steps is we evidently do need to get corporations to say explicitly that all relevant criminal conduct will not be tolerated, or at least the New York state prosecutor's office is of that opinion.

Transportation

"Intelligent" Avatars Poised To Manage Airline Check-In 102

An anonymous reader writes One of the developers behind special effects used in the film Avatar has inked a deal with airline check-in kiosk manufacturer BCS to implement avatars for personalized and interactive customer service. Dr Mark Sagar's Limbic IO is applying 'neurobehavioral animation' combining biologically based models of faces and neural systems to create live, naturally intelligent, and expressive interactive systems. "One of the comments levelled at self-service check in is that it has lost the human touch that people had when checking in at a traditional manned counter," Patrick Teo, BCS CEO says. "Travelling can be stressful and our aim is to make the interaction between human (passenger) and computer (check-in) as natural and helpful as possible."
Data Storage

Linux Needs Resource Management For Complex Workloads 161

storagedude writes: Resource management and allocation for complex workloads has been a need for some time in open systems, but no one has ever followed through on making open systems look and behave like an IBM mainframe, writes Henry Newman at Enterprise Storage Forum. Throwing more hardware at the problem is a costly solution that won't work forever, he notes.

Newman writes: "With next-generation technology like non-volatile memories and PCIe SSDs, there are going to be more resources in addition to the CPU that need to be scheduled to make sure everything fits in memory and does not overflow. I think the time has come for Linux – and likely other operating systems – to develop a more robust framework that can address the needs of future hardware and meet the requirements for scheduling resources. This framework is not going to be easy to develop, but it is needed by everything from databases and MapReduce to simple web queries."
Programming

US Senator Blasts Microsoft's H-1B Push As It Lays 18,000 Off Workers 529

dcblogs (1096431) writes On the floor of U.S. Senate Thursday, Sen. Jeff Sessions delivered a scalding and sarcastic attack on the use of highly skilled foreign workers by U.S. corporations that was heavily aimed at Microsoft, a chief supporter of the practice. Sessions' speech began as a rebuttal to a recent New York Times op-ed column by Microsoft founder Bill Gates, investor Warren Buffett and Sheldon Adelson ... But the senator's attack on "three of our greatest masters of the universe," and "super billionaires," was clearly primed by Microsoft's announcement, also on Thursday, that it was laying off 18,000 employees. "What did we see in the newspaper today?" said Sessions, "News from Microsoft. Was it that they are having to raise wages to try to get enough good, quality engineers to do the work? Are they expanding or are they hiring? No, that is not what the news was, unfortunately. Not at all."

Comment Re:Not Quite the Same (Score 1) 63

I'm thinking this is also about what we consider "alike" or "the same" Just a few days ago, I came across a report of a new (to me) member of the Burgess shale fossils, a relative of Anomalocaris. Basically, Anomalocaris was a two meter long killer shrimp with spiky grabbers and rasping plate teeth. It was the biggest thing in the ocean, the equivalent of a whale compared to the typial creatures of the time. This particular relative was a very large sized ( for the era) filter feeder, believed to be evolved from the Anomalocaris parent line about 25 million years later. If we agree that a 2 meter long swimmer that was fifty times the mass of just about everything else was the rough equivalent of a whale, it looks like that 'whale' eventually gave rise to several varieties of both predatory and filter feeding descendants. The question is, "What does "same" mean in this context?" - Anomalocaris must have been a living nightmare, like a T-Rex or a Great White, to the creatures of its era, but it would be a prey species in the modern seas. Hell, typical tuna would probably take them down routinely, let alone modern sharks. So does it make sense to say we now know of two cases where predatory whale-likes evolved into more varieties of whale-likes and some of those became filter feeders? Can we predict that large predators in the seas will give rise to large filter feeders in general? Is there, in fact. a lesson to be drawn in such cases? Or are humans, so good at seeing patterns we often see them where they don't exist, doing that thing we do sometimes?

Businesses

Ask Slashdot: How Many Employees Does Microsoft Really Need? 272

An anonymous reader writes: Yesterday, word came down that Microsoft was starting to lay off some 18,000 workers. As of June 5th, Microsoft reported a total employee headcount of 127,005, so they're cutting about 15% of their jobs. That's actually a pretty huge percentage, even taking into account the redundancies created by the Nokia acquisition. Obviously, there's an upper limit to how much of your workforce you can let go at one time, so I'm willing to bet Microsoft's management thinks thousands more people aren't worth keeping around. How many employees does Microsoft realistically need? The company is famous for its huge teams that don't work together well, and excessive middle management. But they also have a huge number of software projects, and some of the projects, like Windows and Office, need big teams to develop. How would we go about estimating the total workforce Microsoft needs? (Other headcounts for reference: Apple: 80,000, Amazon: 124,600, IBM: 431,212, Red Hat: 5,000+, Facebook: 6,800, Google: 52,000, Intel: 104,900.)

Comment Re:There's another treatment that stops most T2 (Score 2) 253

Thank you. I stopped just saying "Fuck you" to the idiots who want to bash diabetics, because it seems to turn the few who aren't just looking to boost their own egos off to learning, and I want to reach every one that can be reached, but I'm in fundamental agreement. I didn't start having symptoms until my early forties, and am nearly 60 now, but I think I understand (see my post above if you want).
          You see something from someone on the internet who doesn't have the genes for Type 2, and it turns out does less than a quarter of the physical workout you do in their day to day life, (if that), gets away in the short run with eating what you simply, just, can't, has no clue that what he's doing will kill him with a stroke at 48 (because some genetic conditions don't give as many warning shots as others), and is, at 35, already seeing the negative effect on his love life but also has no clue it started with that little bit of weight he thinks he is getting by with, because he obviously isn't as lazy as you, since he doesn't have Type 2 diabetes. And that someone lectures people like you about how lazy you are and if you'd just do like him, you could beat this "disease" (which he puts in quotes, like that). And they won't let you shove him through a wood chipper! It's not fair at all.
          But we (and I mean specific, real, You and Me, not some generalized group) need to get as many of those idiots as possible to wake up, learn this is a real disease, and support finding a real cure. I know they deserve the "Fuck You" ,but we, and plenty of people, who are threatened with dying an average of a decade early, with such conditions as gangrene after limb amputations, or extreme hypertension, deserve that effort to find a cure more. Please save the 'fuck you's' for the idiots who can't learn or have no money.

Comment Re:There's another treatment that stops most T2 (Score 4, Interesting) 253

Probably not. Both me and my ex are Type 2. I can't afford to get even 20 lbs. over weight (I'm 6'1", For me, I should weigh at least 180 - that's show off the six pack range, but even with measured bodyfat at less than, say, 14%, I still have to use some oral meds if I get only 20 lbs. over what looks to be about ideal). For her, at only 5' 6", she could probably get above 220 before she would need to use insulin or see progress in retinopathy - she has some initial traces, but the progression has been totally stalled for nearly 10 years now. However, she has to stay below 180 lbs. or she has peripheral neuropathy symptoms (that's in the feet, where it usually starts. Under 165, she stops having those symptoms, plus even needing Metformin, and so she's trying to stay there. She has about the usual cushion for Type 2, I have almost none at all. For typical Type 2's, managing the disease well enough to beat neuropathy is also plenty to beat retinopathy. For atypical ones such as myself, who knows, but what AbRASION wrote is generally good advice.
            However, it's generally tougher than what he (?) wrote - more like 30 minutes + of just plain running 3x a week, PLUS some weights and wierd stuff like climbing walls, standing jumps for elevation and such, so the gym sessions usually go to a full hour, and weekend hiking, swimming, cross-training if either of us gains even five pounds, and often if not. We both run in 10 K's not just 5's,,and have managed a half marathon in the last 2 years. She leg presses 550 lbs to my 440, I'm benching 265 to her 110. If that's light exercise to someone, their dad's name was Jor El.
          Quadrupliing your complex carbs? Well double them at least, and cut the simpler starches nearly as much as the sugars. "Vastly reduce your sugar intake" is also accurate, as in NO HFCS, NO sweetened soft drinks, Stevia is a lifesaver, a cookie? - is it my birthday? We had to memorize, and check for changes frequently, which peanut butters or canned soups have how much added sugar - there's added sugar or HFCS in a whole lot of products that people don't usually expect. Who would think that some brands of Smoked Ham lunchmeat have more added sugar than the same brand's Honey Ham version? Working out as we do, we can manage twice a week soft drinks made from fruit juice and soda water, no added sweeteners, and a small dessert at sunday family dinners (a third of the pie slice or cake slice everyone else cuts), but I, at least, have to know which fruits are high in Fructose and which have more of the other sugars mixed in to even do that, and I skip that dessert completely more often than not.
          We've been on this sort of regimen for over 8 years for her and 11 for me. I'm not going to jump at a potential cure, because I'm managing, and I doubt she will want to volunteer for early tests either, but if this leads to a real cure, we can stick to what we do, and in another five years, most of you will be welcoming me and her as your new overlords. I'm expeding effort like what I used to do in my 30's to score 380 on the Army's extended scale APFT, just to stay in pretty good shape for a guy in his 50's. Take away this disease and that effort will again make me a veritable titan, and all Slashdot will tremble at my name. Bwaa-ha-ha-ha! Excuse me, I meant to say I find this prosepective cure moderately interesting.

Comment Re:Final Objective? (Score 1) 76

If they found it was some nation-state where a corrupt bureaucrat did it to line his pockets and those of the supreme leader, the consequences might be less trust in the market (if that's possible), and similar, limited economic effects. If the nation-state in question wanted to destabilize our whole economy, that's part of WAR. (you know, that thing where lots of people die very rapidly and it wasn't one of the other horsemen?). Those are very, very different consequences and levels.
            YOU picked two possible options from what may well be more. YOU didn't notice that even if your limited answer is the whole truth, it implies two incredibly different possible 'final objectives'. YOU chose to regard destabilizing our economy as a 'final objective', when it simply isn't, and never historically has been, in a single case. It's always been an intermediate objective, and the 'final' one, in every historic example, has always been winning a war. YOU then criticised the chairman for having noticed what YOU didn't. Fail reading 101 much? I can think of an enormous number of things Mike Rogers has said that make me question his judgment (and sometimes whether all the many-tentacled pre-cambian era cyanogen breathing epifauna really died off), but not this quote - it's accurate, non-inflammatory, and rational.

Security

LibreSSL PRNG Vulnerability Patched 151

msm1267 writes: The OpenBSD project late last night rushed out a patch for a vulnerability in the LibreSSL pseudo random number generator (PRNG). The flaw was disclosed two days ago by the founder of secure backup company Opsmate, Andrew Ayer, who said the vulnerability was a "catastrophic failure of the PRNG." OpenBSD founder Theo de Raadt and developer Bob Beck, however, countered saying that the issue is "overblown" because Ayer's test program is unrealistic. Ayer's test program, when linked to LibreSSL and made two different calls to the PRNG, returned the exact same data both times.

"It is actually only a problem with the author's contrived test program," Beck said. "While it's a real issue, it's actually a fairly minor one, because real applications don't work the way the author describes, both because the PID (process identification number) issue would be very difficult to have become a real issue in real software, and nobody writes real software with OpenSSL the way the author has set this test up in the article."

Comment Re:Fukushima (Score 1) 151

Obviously, Pu oxide is a common result of reaction with either atmospheric O2 or splitting H20 used to try and cool the burning plutonium. But where does the Chlorine potentially come from, salt in sea water? It sounds like you're describing a risk where at least part of it is specific to plants that might be either inundated by the sea or catch fire and have sea water pumped in to put it out, but I'm far from sure if that's actually what you mean. Is the point here that we are equally screwed whether a plant is on/near a seacoast or not, or that inland plants might be somewhat safer?

Slashdot Top Deals

Intel CPUs are not defective, they just act that way. -- Henry Spencer

Working...