Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Security

Submission + - Security Through Obscurity? Don't Count On It. (securityweek.com)

wiredmikey writes: Anyone who argues that their website is too small or obscure for anyone to test for flaws isn’t paying attention to the fact that everyone’s website is being tested, all the time. If it’s accessible on the Internet, it’s a target.

There are thousands of script kiddies, launching hundreds of thousands of automated attacks all the time.

There are, in fact, an amazingly large number of script kiddies in the world, each running automated vulnerability tools against blocks of IP address blocks. These IP address blocks are chosen for coverage, not potential. Note that script kiddies are scanning arbitrary IP addresses, not specific website or ‘visible’ web applications — any website that is Internet accessible is a target.

Another argument for "Security through Obscurity" goes along the line that most website owners don’t believe their site has any value to a hacker. This, unfortunately, misses the mentality of a script kiddie – they are not out for specific information nor are they targeting a specific company. The script kiddie is just someone looking for the easy target, often just for the sake of finding and exploiting security flaws because he or she can.

Even if your site has no commercial value, it can be used for attacks on other sites, or defaced because it was on someone’s mindless scanning list.

HP

Submission + - webOS Still Alive, But On Life Support (itworld.com)

jfruhlinger writes: "HP declared that it was going to dump its PC business, then changed its mind, leading fans of the webOS operating system it acquired from Palm hoping for a similar reversal. A close reading of HP VP Todd Bradley's comments on the subject hints that, while webOS tablets are not in the cards, the company seems interested in embedding the operating system in printers and similar devices."
Blackberry

Submission + - Is RIM's Centralized Network Model Broken? (securityweek.com)

wiredmikey writes: Is RIM’s centralized network model broken? Andrew Jaquith thinks so, and provides an interesting analysis on why RIM should move to a decentralized model.

After two long outages this month, many believe that the end is drawing near for Research in Motion, maker of the BlackBerry.

But Is Research In Motion in trouble? Financially, RIM continues to be a healthy company, throwing off billions in profit each year. But if doesn't “think different” about its network strategy, its customers may think different about their choice of handset vendor, Jaquith argues.

Jaquith says that RIM should dismantle its proprietary centralized delivery network, something that has been a key strength for the company.

The BlackBerry was introduced in 1999 as a two-way pager on steroids. Back then, TCP/IP over GSM (and other networks) was just a pipe dream. RIM implemented a system by which all traffic is collected from the mobile networks of the sender, funneled through RIM servers and then routed back onto the recipient’s mobile networks and pushed to the handset.

By moving to a decentralized model for its BlackBerry network, (1) the Internet provides the routing and (2) centralized communications monitoring is much more difficult.

That is what Microsoft and Apple, in essence, do today because the devices connect directly to company servers [via commodity carrier networks] rather than through a single service provider.

Data plans that provide TCP/IP over wireless carrier networks are now ubiquitous, nullifying a key RIM advantage. Does BlackBerry need to rethink its network model to effectively compete moving forward?

Comment Re:What alternative? (Score 1) 425

I stopped using PayPal years ago. I had someone claim that they never received a laptop I sold to them via eBay, even though all parties had my UPS tracking information that shows exactly when it was delivered and the guys actual signature showing he signed for it!

Since then, I've sworn off PayPal and will relegate myself to missing out on little things. I've gotten by just fine without it. The sad thing is that most people will not care until something like what happened to me eventually happens to them.

Comment Re:"a simpler way to find applications"... (Score 2) 370

There is a DMG within the download that you can restore to a DVD or flash drive and it works fine, yes. The recovery partition boots a minimal version of OS X in which you can restore Lion but you have to log in to your Apple account and download it which makes the recovery partition a lot less useful.

Comment Re:Lost touch (Score 1) 223

I have and use both and they both work perfectly for me with no issues. The only downside is that the Wii does not offer HD streams but that can also be a good thing depending on if you have a bandwidth cap. As far as I know, the Xbox 360 version of Netflix will not let you turn HD streams off if they are available.

Slashdot Top Deals

The hardest part of climbing the ladder of success is getting through the crowd at the bottom.

Working...