Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?

Submission Summary: 0 pending, 2 declined, 1 accepted (3 total, 33.33% accepted)

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).


+ - CarrierIQ: Most Phones Ship with Rootkits-> 1

Submitted by Kompressor
Kompressor (595513) writes "According to a developer on the XDA forums, TrevE, many Android, Nokia, and BlackBerry smartphones have software called "Carrier IQ" that allows your carrier full access into your handset, including keylogging, which apps have been run, URLs that have been loaded in the browser, etc.


Link to Original Source

+ - Massive Security Issue in HTC Android Phones->

Submitted by Kompressor
Kompressor (595513) writes "Trevor Eckhart, Justin Case, and Artem Russakovskii have found and analyzed a frightening array of vulnerabilities related to HTC's customization of Android. From the article:

Any app on affected devices that requests a single android.permission.INTERNET (which is normal for any app that connects to the web or shows ads) can get its hands on:

  • the list of user accounts, including email addresses and sync status for each last known network and GPS locations and a limited previous history of locations
  • phone numbers from the phone log SMS data, including phone numbers and encoded text (not sure yet if it's possible to decode it, but very likely)
  • system logs (both kernel/dmesg and app/logcat), which includes everything your running apps do and is likely to include email addresses, phone numbers, and other private info

Link to Original Source

+ - Working Linux in Javascript Emulator->

Submitted by Kompressor
Kompressor (595513) writes "Fabrice Bellard has written a JavaScript based PC emulator, and built a functioning Linux install in it.

From his technical description:

This PC emulator is written in Javascript. The emulated hardware consists in: a 32 bit x86 compatible CPU a 8259 Programmble Interrupt Controller a 8254 Programmble Interrupt Timer a 16450 UART. The code is written in pure Javascript using Typed Arrays which are available in recent browsers. It was tested with Firefox 4 and Google Chrome 11 on Linux, Window and Mac (it does not work with Chrome 12 beta. As far as I know, it is a bug in the browser). In any case, a fast Javascript engine is needed to have good performance.


Link to Original Source

Kiss your keyboard goodbye!