Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Security

Submission + - Mac, BSD prone to decade old attacks 7

BSDer writes: An Israeli security researcher published a paper few hours ago, detailing attacks against Mac, OpenBSD and other BSD-style operating systems. The attacks, says Amit Klein from Trusteer enable DNS cache poisoning, IP level traffic analysis, host detection, O/S fingerprinting and in some cases even TCP blind data injection. The irony is that OpenBSD boasted their protection mechanism against those exact attacks when a similar attack against the BIND DNS server was disclosed by the same researcher mid 2007. It seems now that OpenBSD may need to revisit their code and their statements. According to the researcher, another affected party, Apple, refused to commit to any fix timelines. It would be interesting to see their reaction now that this paper is public.
Music

Submission + - RIAA Insanity-Suing People For Ripping CD's They P (fastsilicon.com) 2

mrneutron2003 writes: "With this past weeks announcement by Warner to release its entire catalog to Amazon in MP3 format with no Digital Rights Management, you would think that the organization that represents them, The Recording Industry Association of America , would begin changing its tune. However in an inane display of hubris and futility, the RIAA presses on in it's tirade against the very consumers its partners rely on buy (we're not making this up) suing individuals who merely rip CD's they've purchased legally.

The Washington Post reports on the case being fought by a Scottsdale Arizona man, Jeffrey Howell, who is being taken to task for ripping his own store bought CD's to his PC as a violation of copyright.

Now, in an unusual case in which an Arizona recipient of an RIAA letter has fought back in court rather than write a check to avoid hefty legal fees, the industry is taking its argument against music sharing one step further: In legal documents in its federal case against Jeffrey Howell, a Scottsdale, Ariz., man who kept a collection of about 2,000 music recordings on his personal computer, the industry maintains that it is illegal for someone who has legally purchased a CD to transfer that music into his computer.
If the RIAA is successful here, it is safe to say that the overwhelming majority of American music consumers will soon be classified as criminals under the law for attempting to use media they've legally purchased in a manner they desire.
http://www.fastsilicon.com/off-the-wall/riaa-insanity-suing-people-for-ripping-cds-they-purchased.html"

Security

Submission + - AVG Anti-Virus to Users: Pray for mercy, infidels! (grisoft.com) 1

Lincoln6Echo writes: I've been using and reselling AVG products for a few years now. Lately they appear to have begun a campaign to "be more corporate". I'd like to add my two cents towards their new corporate image and to user's impression of non-compromised AVG updates: remove the page that says "Pray for mercy, infidels!" from your SSL protected website. I found it when I made a mistake logging into the resellers console at https://biz.grisoft.cz/ (not https://biz.grisoft.com/) which is supposed to now redirect you to https://secure.grisoft.com.
Sony

Submission + - Sony silently drops PS3 linux support. (ps2dev.org) 4

t0qer writes: "Up until this week, hackers at the PS2dev.org forums have been hot on the trail of writing a hardware accellerated driver for the PS3 RSX chip until Sony released thier new firmware. Now it seems that updating to the new 2.10 version of PS3 firmware not only blocks RSX access completely, but breaks linux installs as well. This is a harsh blow to the PS3 linux community."
The Internet

Submission + - Bell Canada DSL service throttles P2P arbitrarily

Dembonez writes: The fine folks over at P2Pnet.net have compiled some great details on a very dirty deed. That is, Bell Canada as a DSL ISP is following the lead of Comcast in the US and Rogers up in Canada by throttling P2P traffic. Beyond what the other two are doing, Bell are imposing bandwidth caps for 'unlimited' service subsribers, stating that they've gone over the allotted bandwidth restriction for the month. Of course, nowhere in their terms of service do they outline what that restriction is for unlimited users. It gets better, though! Bell being an ILEC have 3rd party reseller ISPs. If you were to leave Bell after being identified as a heavy user, they'll deny any of their 3rd party resellers from signing you up! Bell being as big as they are, they have 3 of the 5 seats on the committee for fair competition in Canada. This means that it's highly unlikely that any complaint about unfair business practices or false advertising would be quashed. If you're in Canada and using Bell, send them a message... and go elsewhere. Want to know more? TFA: http://www.p2pnet.net/story/13883
Operating Systems

Submission + - Ulteo brings OpenOffice.org to the web browser! (ulteo.com)

joestar writes: "Just announced on their website and now on some news sites: OpenOffice.org 2.3 can now be used online within the web browser (at least Firefox and IE), without prior download nor install. I've just tried it and they have implemented an interesting way to print documents, as a PDF download. It seems that the Ulteo plateform also offers some realtime desktop sharing capabilities, for training and workgroup. I would love to access all my apps online the same way!"
Google

Submission + - Use Gmail as Postfix Smart Host under Ubuntu (newsvine.com)

modmans2ndcoming writes: This guy has written a very good step-by-step How-To on setting up Postfix to use gmail as a smarthost. Those of us who have an evil ISP blocking port 25 can have the goodness of a home e-mail server with out paying out the butt for traditional smart hosting. It is written for those who use Ubuntu. He also links to a guy who wrote a similar article for those who like to compile their software.
The Courts

Submission + - Lime Wire antitrust claims against RIAA dismissed (blogspot.com) 1

NewYorkCountryLawyer writes: "The antitrust counterclaims interposed by Lime Wire against the RIAA record companies have been dismissed. In a 45-page decision (pdf), the Court relied principally upon the holding of the United States Supreme Court in Bell Atlantic v. Twombly that "A party's "obligation to provide the grounds of his entitlement to relief requires more than labels and conclusions, and a formulaic recitation of the elements of a cause of action will not do." Ironically, the Twombly decision was the authority upon which the RIAA's copyright infringement complaint was dismissed in Interscope v. Rodriguez."
Security

Submission + - RCMP investigator says eBay trying to hide scam pr

Maow writes: "RCMP investigator says eBay trying to hide scam problem
Calgary man loses $20K after eBay sale hijacked"

CBC.ca is reporting that an eBay auction page has been hijacked. A Calgary man has lost $20,000 in the scam.

"When Duraj complained to eBay, the company wrote him a letter saying someone had temporarily taken over, or hijacked, the seller's page, and that he would have to contact police and the FBI."

http://www.cbc.ca/consumer/story/2007/12/03/ebay-hijack.html

If this gets out, I imagine it would scare a fair few people from bidding. At least on big-ticket items.
Censorship

Submission + - Demonoid shut down for good? (demonoid.com)

r_jensen11 writes: It appears that the CRIA is at it again. According to their website, Demonoid may be down for good. The only message the crew have left is the following:

The CRIA threatened the company renting the servers to us, and because of this it is not possible to keep the site online. Sorry for the inconvenience and thanks for your understanding.
What do you think, is this the end of Demonoid? Or will they move to another country, yet again? Or maybe someone could revive them again?

The Courts

Submission + - Hacker Pleads Guilty to Spreading Botnets (pcworld.com)

An anonymous reader writes: So the guy pleads guilty to infecting 250,000 computers with bots to steal paypal accounts, and is looking at 60 years in prison. Of course this is in California, so he'll probably get a sushi roll and a sharp word and then a government job. If the courts want cybercrime to be taken seriously, they should stop treating computers as if they were the second-class citizens of private property. One count of breaking and entering is typically worth a few months in prison, even in California. Identity theft likewise commands a couple of years. So this fellow should be looking at about a million years in prison, not a mere 60. The fact that computers make these crimes easier to commit does not diminish how offensive they are to society.
Security

Submission + - US Botmaster admits infecting 250,000 computers

Stony Stevenson writes: A Los Angeles man on Friday admitted infecting 250,000 computers and stealing the identities of thousands of people by wiretapping their communications and accessing their bank accounts. John Schiefer, 26, agreed to plead guilty to four counts of fraud and wiretap charges that could lead to a US$1.75 million fine and send him to prison for up to 60 years, the Los Angeles U.S. Attorney's office said. Prosecutors said Schiefer and an unspecified number of conspirators installed malicious computer codes that acted as a wiretap on compromised computers and intercepted messages to www.paypal.com and similar Web sites. He retrieved usernames and passwords and used them to access an unknown number of bank accounts. Prosecutors said they were still investigating how much money was stolen and the number of victims.

Slashdot Top Deals

"No matter where you go, there you are..." -- Buckaroo Banzai

Working...