Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Submission + - Tinba Trojan Targets Major US Banks

An anonymous reader writes: Tinba, the tiny (20 KB) banking malware with man-in-the-browser and network traffic sniffing capabilities, is back. After initially being made to target users of a small number of banks, that list has been amplified and now includes 26 financial institutions mostly in the US and Canada, but some in Australia and Europe as well. Tinba has been modified over the years, in an attempt to bypass new security protections set up by banks, and its source code has been leaked on underground forums a few months ago. In this new campaign, the Trojan gets delivered to users via the Rig exploit kit, which uses Flash and Silverlight exploits. The victims get saddled with the malware when they unknowingly visit a website hosting the exploit kit.

Submission + - eBay redirect attack puts buyers' credentials at risk

mrspoonsi writes: EBay has been compromised so that people who clicked on some of its links were automatically diverted to a site designed to steal their credentials. The spoof site had been set up to look like the online marketplace's welcome page. The firm was alerted to the hack on Wednesday night but removed the listings only after a follow-up call from the BBC more than 12 hours later. One security expert said he was surprised by the length of time taken. "EBay is a large company and it should have a 24/7 response team to deal with this — and this case is unambiguously bad," said Dr Steven Murdoch from University College London's Information Security Research Group. The security researcher was able to analyse the listing involved before eBay removed it. He said that the technique used was known as a cross-site scripting (XSS) attack.
Education

ISIS Bans Math and Social Studies For Children 981

mpicpp sends this news from CNN: In swaths of Syria now controlled by ISIS, children can no longer study math or social studies. Sports are out of the question. And students will be banned from learning about elections and democracy. Instead, they'll be subjected to the teachings of the radical Islamist group. And any teacher who dares to break the rules "will be punished." ISIS revealed its new educational demands in fliers posted on billboards and on street poles. The Sunni militant group has captured a slew of Syrian and Iraqi cities in recent months as it tries to establish a caliphate, or Islamic state, spanning Sunni parts of both countries. Books cannot include any reference to evolution. And teachers must say that the laws of physics and chemistry "are due to Allah's rules and laws." Update: 09/18 16:26 GMT by S : CNN has pulled the story over "concerns about the interpretation of the information provided." They promise to update it when they get the facts straight.

Submission + - Is The Tesla Model 3 Actually Going To Cost $50,000? 2

cartechboy writes: How low can battery cost go, and how fast? That's the question automakers are dealing with when it comes to the future of electric cars. Tesla is betting big on electric and has already proven many skeptics wrong with its Model S sedan. The company is making even bolder claims with its upcoming Model 3 stating it'll have about 200 miles of range and a base price of $35,000. That's a nice goal, but is it possible. Battery skeptic Menahem Anderman wrote a new report suggesting that the pace of cost reduction for electric car batteries won't be as swift as Tesla's CEO Elon Musk suggests. This leads Anderman to predict the actual price of the upcoming Model 3 will be in the range of $50,000-$80,000. That's quite a jump from the goal of $35,000. Can Tesla actually pull off the Model 3 with the goal price of $35,000?

Comment Re:This is why I no longer use Linux (Score 2) 385

Being paid to program doesn't make you a professional.

Being paid to do anything by definition makes you a professional. Professional does not mean 'better', it just carries the connotation since frequently someone who cannot get paid for their work where another can is due to things that lack. In coding, sometimes being 'professional' versus 'amatuer' really boils down to being loud enough to get taken seriously.

Comment The problem... (Score 4, Insightful) 385

People have reported corrupt log files. The result is all the data is unrecoverable. The complaints have been answered 'as designed'.

When things are right, it works as intended. When things are bad, it can go far off the rails. Considering it is the system log used to debug what is wrong when things are off the rails, a full binary log is a dubious proposition.

There are benefits to binary log, but they could have been done to varying degrees with structured text and/or external binary metadata, rather than a corruptable binary blob.

Comment Hopefully not like their TV remotes... (Score 5, Informative) 115

I hope their home offering isn't like the TV remotes, where to get it to work, I had to create an account with them (with demands for a lot of personal info), go through their relatively awkward website to find the televisionI was using, have that downloaded to the device via USB, and then add some configuring after that before the remote could be used as a remote.

Heck with that. If a remote can't offer an interface to locate stuff on the device itself, it should at least not require an Internet connection (the application should handle this, perhaps downloading codes for newer items), and definitely not require registration on a website to be used.

Software

Logitech Aims To Control the Smart Home 115

An anonymous reader writes: Household devices are getting smarter these days: the so-called internet of things is bringing software-controlled thermostats, lighting, and other appliances into the mainstream. Many companies are fighting for a piece of the pie, but Logitech is taking a different approach. They're mostly known for computer peripherals, but they also make multi-function remote controls, and now they're trying to build remotes that will control all of a home's smart devices. "Logitech doesn't want to own the device, it wants to own the app experience. But to do that, it had to build a software overlay and a controller that would convince people to put it in their homes. So it's offering a $100 hub that combines IR, Wi-Fi, Bluetooth and RF that will let you use the Logitech Harmony app to control gear that uses those protocols. This means if you have a SmartThings, a Peq or a Lutron hub, the Wi-Fi in the Logitech device will let you control the others' gear from Logitech, which so far seems to have a much nicer interface." They've worked out partnerships with a lot of companies that are big in the home, like Nest, Honeywell, and Philips, all of whom seem to want this extra layer of control for the user.

Comment Re:Offsite. (Score 1) 268

http://www.amazon.com/SanDisk-...

LIMITATION OF LIABILITY:
SanDisk's liability is limited to replacement of product or refund.
*30 years warranty in regions not recognizing lifetime limited.

NOBODY has a warranty of data readability. even enterprise grade SDLT tapes have no warranty of the data being readable more than 30 milliseconds after being written. They will just replace the tape if "defective".

Comment Re:Yes, pipelined utilities, like the logs (Score 3, Insightful) 385

That is a valid complaint. Adding functionality so startup is parallel is one thing. Having one's own binary log format [1] is a big downside. To boot, rsyslog uses cryptographically signed logs. That means that I lose protection on systemd's logs because in theory an attacker could tamper with those. Should the logs go to rsyslog, the files either will show tampering or be missing.

This also prevents logging to a remote machine as well.

I'm not a fan of binary logs. Even AIX will log stuff from the errpt command if you turn on the right syslog settings. Binary logs make a program like Splunk a necessity, and that is not a cheap tool once you start talking about gigs a day hitting your index servers.

[1]: I don't like the "pro" for it saying that journalctl can give you just the info that you need. For the info I need, I have grep, egrep, and many other tools.

Comment Re:Simple set of pipelined utilties! (Score 2) 385

Religious sentiments aside, systemd scratches a number of itches that eventually needed to be addressed. The main one is parallel startup of daemons. On a SSD based machine (and note, these are anecdotal runs), CentOS 6.5 takes about a minute to fully boot to a login prompt. On CentOS 7.0 with systemd starting anything that isn't relying on another process at the same time, well under ten seconds. Similar with a shutdown.

The second item is being able to place processes in containers and set limits before they start. This can be done with SVR4 startup with wrapper scripts, but systemd makes it easier.

The main thing I see against systemd is that it is new. I remember pushback in the early 1990s when Linux distros went to the SVR4 way of starting up from having everything in a big /etc/rc file with branches to other /etc/rc.whatever files, and finally a rc.local file.

The second downside is that systemd has more moving parts. However, it will only be a matter of time before the bugs get eradicated. Heck, sendmail used to be the hair-puller for sysadmins and even that beast is now a long since solved problem.

If one wants to gripe about something, gripe about firewallD. For bringing Windows type abstraction to Linux, it is great. Anything else, it is just another questionable layer that is of dubious value at best, a potential vulnerability at worst.

Slashdot Top Deals

Anyone can make an omelet with eggs. The trick is to make one with none.

Working...