Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Security

Ethics of Releasing Non-Malicious Linux Malware? 600

buchner.johannes writes "I was fed up with the general consensus that Linux is oh-so-secure and has no malware. After a week of work, I finished a package of malware for Unix/Linux. Its whole purpose is to help white-hat hackers point out that a Linux system can be turned into a botnet client by simply downloading BOINC and attaching it to a user account to help scientific projects. The malware does not exploit any security holes, only loose security configurations and mindless execution of unverified downloads. I tested it to be injected by a PHP script (even circumventing safe mode), so that the Web server runs it; I even got a proxy server that injects it into shell scripts and makefiles in tarballs on the fly, and adds onto Windows executables for execution in Wine. If executed by the user, the malware can persist itself in cron, bashrc and other files. The aim of the exercise was to provide a payload so security people can 'pwn' systems to show security holes, without doing harm (such as deleting files or disrupting normal operation). But now I am unsure of whether it is ethically OK to release this toolkit, which, by ripping out the BOINC payload and putting in something really evil, could be turned into proper Linux malware. On the one hand, the way it persists itself in autostart is really nasty, and that is not really a security hole that can be fixed. On the other hand, such a script can be written by anyone else too, and it would be useful to show people why you need SELinux on a server, and why verifying the source of downloads (checksums through trusted channels) is necessary. Technically, it is a nice piece, but should I release it? I don't want to turn the Linux desktop into Windows, hence I'm slightly leaning towards not releasing it. What does your ethics say about releasing such grayware?"
Science

Programmable Quantum Computer Created 132

An anonymous reader writes "A team at NIST (the National Institute of Standards and Technology) used berylium ions, lasers and electrodes to develop a quantum system that performed 160 randomly chosen routines. Other quantum systems to date have only been able to perform single, prescribed tasks. Other researchers say the system could be scaled up. 'The researchers ran each program 900 times. On average, the quantum computer operated accurately 79 percent of the time, the team reported in their paper.'"
NASA

Air Force & NASA Fire Off Green Rocket 157

coondoggie writes "NASA and the Air Force said today they had successfully launched a 9-ft. rocket 1,300 feet into the sky, powered by aluminum powder and water ice. This combination of fuel elements, referred to as ALICE, has the potential to replace some liquid or solid propellants. The technology is being developed at Purdue University and Pennsylvania State University. Aside from its environmental benefiits, ALICE has the advantage that it could be manufactured in far-away places, such as the moon or Mars, instead of being transported to distant horizons at great cost, researchers said."
Image

13-Year-Old Trades iPod For a Walkman For a Week 354

BBC Magazine convinced 13-year-old Scott Campbell to trade in his iPod for a Walkman for a week and see what he thought. Scott thinks the iPod wins when it comes to sound quality, color, weight, and the shuffle feature. The Walkman, however, offers two headphone sockets, making it much easier to listen to music with a friend. My favorite part of the review is, "It took me three days to figure out that there was another side to the tape. That was not the only naive mistake that I made; I mistook the metal/normal switch on the Walkman for a genre-specific equalizer, but later I discovered that it was in fact used to switch between two different types of cassette."
Image

Paro the Therapeutic Robot Baby Seal 52

Mike writes "Paro is a therapeutic baby seal robot that is exploring new dimensions in animal therapy. Created to act as a companion for hospital patients and the elderly, the adorable baby harp seal bot aims to increase relaxation and decrease stress. Paro can sense and respond to its immediate environment through five integrated sensors that detect touch, light, sound, temperature, and posture, and it is even capable of learning and responding to a name."
Earth

Quantum Mechanics Involved In Photosynthesis 137

Kristina at Science News writes "We all learn about photosynthesis in school: sunlight in, plant food out. Not well understood is how this process achieves its initial and uniquely high efficiency in capturing the energy of a photon. Quantum mechanics may be at work in the electron transfer process inside chloroplast, giving electrons the chance to consider many paths at once before choosing the best one."
Security

Obama, McCain Campaigns Both Hacked, Files Compromised 255

dunezone writes "As the election ends, news is coming out from both campaigns on what happened behind closed doors. During the summer, the Obama campaign had their systems hacked, but so did McCain — and not by each other, but by a third party. '... both the FBI and the Secret Service came to the campaign with an ominous warning: "You have a problem way bigger than what you understand," an agent told Obama's team. "You have been compromised, and a serious amount of files have been loaded off your system." The following day, Obama campaign chief David Plouffe heard from White House chief of staff Josh Bolten, to the same effect: "You have a real problem ... and you have to deal with it." The Feds told Obama's aides in late August that the McCain campaign's computer system had been similarly compromised.'" Also from the article: "Officials at the FBI and the White House told the Obama campaign that they believed a foreign entity or organization sought to gather information on the evolution of both camps' policy positions — information that might be useful in negotiations with a future administration."
Transportation

Simple Device Claimed To Boost Fuel Efficiency By Up To 20% 674

Ponca City, We love you writes "Temple University physics professor Rongjia Tao has developed a simple device that could dramatically improve fuel efficiency in automobiles by as much as 20 percent. The device, attached to the fuel line of a car's engine near the fuel injector, creates an electric field that thins fuel, reducing its viscosity so that smaller droplets are injected into the engine. Because combustion starts at the droplet surface, smaller droplets lead to cleaner and more efficient combustion. Six months of road testing in a diesel-powered Mercedes-Benz automobile showed an increase from 32 miles per gallon to 38 mpg, a 20 percent boost, and a 12-15 percent gain in city driving. 'We expect the device will have wide applications on all types of internal combustion engines, present ones and future ones,' Tao wrote in the study published in Energy & Fuels. 'This discovery promises to significantly improve fuel efficiency in all types of internal combustion engine powered vehicles and at the same time will have far-reaching effects in reducing pollution of our environment,' says Larry F. Lemanski, Senior Vice President for Research and Strategic Initiatives at Temple."
Programming

California Can't Perform Pay Cut Because of COBOL 1139

beezzie writes "Last week, California Governor Arnold Schwarzenegger ordered a pay cut, to minimum wage of $6.55/hr, for 200,000 state workers — because a state budget hadn't been approved yet. The state controller, who has opposed the pay cut on principle and legal grounds, now says the pay cut isn't even feasible because the state's payroll systems are so antiquated. He says it would take six months to go to minimum wage, and nine months more to restore salaries once a budget is passed. The system is based on COBOL, according to the Sacramento Bee, and the state hasn't yet found the funds or resources, in ten years of trying, to upgrade it." The article quotes a consultant on how hard it is to find COBOL programmers; he says you usually have to draw them out of retirement. Problem is, if there were any such folks on the employment rolls in California, Gov. Schwarzenegger fired them all last week, too.
Robotics

Scandinavian Scientists Designing Robotic Snakes 129

Cowards Anonymous writes "The Sintef Group, a research company based in Trondheim, Norway, announced that it's designing a robot based on snakes. The 1.5-meter long robots, which are made of aluminum, are being designed to inspect and clean complicated industrial pipe systems that are typically narrow and inaccessible to humans. The intelligent robots have multiple joints to enable them to twist vertically and climb up through pipe systems to locate leaks in water systems, inspect oil and gas pipelines and clean ventilation systems."
Wireless Networking

Confessions of a Wi-Fi Thief 849

Michelle Shildkret from Time wrote in to tell us about a story about "the ethics of stealing Wi-Fi. Many of us been guilty of the same crime at one point or another — according to the article, 53% of us at least. But how guilty do we really feel? As it is officially a crime to steal wi-fi (Title 18, Part 1, Chapter 47 of the United States Code, which covers anybody who 'intentionally accesses a computer without authorization or exceeds authorized access')."
Biotech

Bacteria Make Major Evolutionary Shift In the Lab 1185

Auxbuss sends us to New Scientist for news sure to perplex and confound creationists: scientists have watched a new, complex evolutionary trait develop in the lab. "A major evolutionary innovation has unfurled right in front of researchers' eyes. It's the first time evolution has been caught in the act of making such a rare and complex new trait. And because the species in question is a bacterium, scientists have been able to replay history to show how this evolutionary novelty grew from the accumulation of unpredictable, chance events."

Slashdot Top Deals

The rule on staying alive as a program manager is to give 'em a number or give 'em a date, but never give 'em both at once.

Working...