Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Submission + - 'Super-secure' BlackPhone pwned by super-silly txt msg bug (theregister.co.uk)

mask.of.sanity writes: The maker of BlackPhone – a mobile marketed as offering unusually high levels of security – has patched a critical vulnerability that allows hackers to run malicious code on the handsets. Attackers need little more than a phone number to send a message that can compromise the devices via the Silent Text application.

The impact of the flaw is troubling because BlackPhone attracts what hackers see as high-value victims: those willing to invest AU$765 (£415, $630) in a phone that claims to put security above form and features may well have valuable calls and texts to hide from eavesdroppers.

Comment Re:grandmother reference (Score 1) 468

You're falling into the trap of confusing ethics and the law. Whatever you -- or I, since I expect we'd agree -- think of the ethics of the situation, so far I haven't seen anything to suggest their actions in not respecting keys used other than under the conditions they were sold with is actually illegal. The law with respect to digital purchases, DRM, and remote access/activation schemes may be some anachronistic dinosaur, but if it's the law right now then complaining about the action on a forum like Slashdot isn't going to change that.

Comment Why use a cable? (Score 2) 248

Does anyone know why they wouldn't sidestep the infeasibility of particularly long cable runs by having the elevator climb the walls of the shaft directly, rather than being raised and lowered on a cable? I imagine that a cable and counterweight arrangement is more energy efficient for shorter runs; but if that isn't an option wouldn't a cog railway style mechanism, with 'track' on one or more walls of the elevator shaft, result in a system where the weight that has to be moved doesn't change at all with the height of the building? There would be some additional weight per unit height from the track structure; but that would be static and connected to the building's frame rather than being forced to support its own weight.

Too energy intensive? Wears too quickly? Safety breaks infeasible leading to risk of sickening plummet to doom?

Comment Re:Not all code is vulnerable - getaddrinfo() is f (Score 2) 211

As pointed out in the article, the program must use gethostbyname() on a name supplied by the attacker.

A much more mitigating factor is that the bug is only exercised if the name looks like a numerical id, and according to their search most software first checks this using inet_aton() and only calls gethostbyname() if this fails, thus avoiding the bug.

Comment Re:Why not strncpy or strlcpy (Score 1) 211

strncpy will not overflow the buffer provided you pass the size of the buffer (if you don't pass the size of the buffer, *none* of the safer functions are going to help). It's problem is that it will not write a nul at the end of the buffer, thus reading will read right off the end. It also wastes a huge amount of time filling the unused part of the buffer with nul.

strlcpy is far, far better and does pretty much what is wanted.

However in this case they really did try to figure out if the buffer would overflow, so neither strlcpy or strncpy should be needed. They did the calculation wrong, claiming it needed 4-8 bytes less than it really did.

Comment Re:grandmother reference (Score 1) 468

That's why I say the sale price approaches the cost of production. It does not start right at it and stay there forever more.

As for copyright laws and mini-monopolies, those are factors that damage the health of the market.

In another message, I looked at Far Cry 3 and assuming recovery of development price over the 10 million sold and a development cost of 60 million, that would come out to $6 ea. Note that it was never $6 each or even close (even a used copy runs twice that now after they have already paid off all development costs). Because they don't know they will sell 10 million, I would expect a higher price at first and for the market to support that based on novelty. However, after that honeymoon period, a healthy market would exert considerable downward pressure on the price.

Simply, we don't have efficient healthy markets in the U.S.

Comment Re:product name affects usage (Score 2) 158

is Vivaldi intended for a small group of developers only? no? you want non-developers to use it?

I don't understand your gripe with that name in particular. It's not an obscure name, and it evokes some sense of classical grace (as well as being an extension of the Opera name in a sense). There are any number of other projects out there, both successful and otherwise, that have much more ridiculous names. Firefox is a great example. What does "Firefox" have to do with being a web browser? Or SeaMonkey, or Chrome for that matter? What about Twitter? Or Flickr? What about LibreOffice, which I have to actually spell for people who haven't heard of it? How about "The Gimp?" But you're choosing to go on a rant over the name of a classical composer, as if no one has heard of this person?

In the first place, people are obviously fine with using things with names that don't have an obvious connection to the product. In the second place, plenty of people have actually heard of Vivaldi (the man). It's not as obscure as you apparently think it is.

Comment Re:Not their fault (Score 1) 397

Something worth considering. We associate snow with cold, so it's tempting to see more and frequent snowstorms as disproof that the planet is warning. However temperature is only one of the constraints on snow. The other is moisture.

I have lived here in Boston over fifty years, and in the 60s and 70s the December climate was bitterly cold and *bone dry*. In recent decades there has been a marked tendency toward warmer AND wetter Decembers and Januaries, and thus frequent significant snow storms in December (almost unheard of) and January (rare until the 90s).

This storm was particularly intense, and in my town got two feet or more. This has happened on six prior occasions, once in 1888, and five times since 1969.

Submission + - Google Glass Leaves Quadriplegics Out On A Limb

An anonymous reader writes: Last fall my wife's brother-in-law had a serious accident which left him a quadriplegic. In December I made the most inopportune decision to go big on a pair of Google Glass for him after reading myriad articles about Glass's potential to aid the disabled. Google got a lot of great press about disabled users of Glass, but I don't think it's widely known that no hands-free mode or hands-free app ever shipped. Here's an excerpt from my failed attempt to return them to Google:

John XXX
Jan 22 (5 days ago)
Reply
to Glass-Support
I bought Glass for my brother-in-law, who's a quadriplegic. Does Google have a recommended app for complete hands-free operation of Glass, or is there a hands-free mode that I can enable?

Thanks,
John

Glass-Support
Jan 22 (5 days ago)
Reply
to me
Hi John.

Thank you for the quick response. No worries, I can try to answer your question.

Glass was not designed to be used as a medical device.Many Glassware have hands-free aspects but many also require an Explorer to use their hands.

We do have Glassware that allows you to use head movements to direct objects on the Glass display. Star chart and Sky map would be great examples of this. Once you choose the Glassware on the device you can look towards the sky and follow along with the different stars and consolations.

If you have any other questions feel free to email me at any time.

John XXX
Jan 22 (5 days ago)
Reply
to Glass-Support
I understand that Glass is not a medical device, but I was under the impression that Google was facilitating the development of Glass apps for medical use cases, such as for use by quadriplegics. I'm sure that Google is facilitating the development of medical apps for Android phones, despite the fact that they aren't medical devices.

One of the first winners of Google's 2013 #ifihadglass competition was someone who developed an app to use Glass to drive an electric wheelchair. Is Google working with wheelchair vendors to develop a Bluetooth API that can be used by Glass and/or other Android devices do control the wheelchair's operation?

Glass-Support
Jan 23 (4 days ago)
Reply
to me
Hi John,

I've definitely heard of people developing Glassware to do much more than what we offer on our Glassware Gallery.

Take some time and see if there are any groups who are developing resources for your particular needs.

Our development is focused on the Glass device itself which tons of developers are creating amazing Glassware for to meet all kinds of needs.

I do not know of any particular Glassware that are designed to work with a wheelchair. We are not directly developing Glassware for medical purposes although there are lots of groups who are.

If you have any other questions feel free to email at any time.

John XXX
Jan 24 (3 days ago)
Reply
to Glass-Support
The only hands-free app for Glass I can find written about is something called Tilt Control, however, I can't find it in the app store. Can you help me to get this installed?

Thanks,
John

Glass-Support
Jan 26 (1 day ago)
Reply
to me
Hey John,

Currently, I would not be able to help you load unauthorized Glassware. If it is not listed on our Glassware page it has not a approved application.

If you have any other questions feel free to email me at any time.

John XXX
1:09 PM (1 hour ago)
Reply
to Glass-Support
I'd like to ask again that you accept the return of my Google Glass, and if you could please escalate my request to your supervisor or someone in your management chain.

I ordered my Glass on 12/14/14 and received it on 12/16/14, which put me into the unlucky spot of having my 30 day return window expire just 2 days after Google announced that it was discontinuing the product on 1/15/15. This cancellation alone, I feel, is justification to request a return of my Glass. I requested a return on 1/20/15, just a few days after my return window expired, but my request was denied.

Secondly, the device has failed to meet my expectations for hands-free operation, as I'll reiterate here. Upon launching Glass, Google received lots of favorable press regarding its potential as an aid for the disabled, including some fairly specific articles about the development of an app for hands-free operation to enable Glass's use by quadriplegics. As previously stated I ordered Glass for a member of my family who had an accident last fall and is now a quadriplegic. From what I was able to read online about Glass I was confident that I would be able to enable a reasonable hands-free mode for my Glass, either via native support or a 3rd party app. Even the online tutorial contains a section entitled 'Use Glass Hands Free', seemingly indicating that Glass has native hands-free support.

I understood when I ordered it that Glass is not a medical device. However, similar to Android phones which run medical apps, I believed that several apps useful for quadriplegics were either available for Glass or under active development. Frankly, I'm really surprised that Google never developed or chose not to develop support for Glass users with no use of their hands when it's such an obvious use case.

So, again, please escalate this to someone in your management chain, I'd like to return my Glass.

Thank you,

John XXX

Glass-Support
1:38 PM (59 minutes ago)
Reply
to me
Hi John,

I have spoken with my team and will not be able to create a refund for Glass. I can continue with any support questions you might have regarding Glass.

If you have any questions feel free to email me back at any time.

Slashdot Top Deals

Work is the crab grass in the lawn of life. -- Schulz

Working...