Forgot your password?
typodupeerror
Security

Sophisticated Apache Backdoor In the Wild 108

Posted by samzenpus
from the protect-ya-neck dept.
An anonymous reader writes "ESET researchers, together with web security firm Sucuri, have been analyzing a new threat affecting Apache webservers. The threat is a highly advanced and stealthy backdoor being used to drive traffic to malicious websites carrying Blackhole exploit packs. Researchers have named the backdoor Linux/Cdorked.A, and it is the most sophisticated Apache backdoor seen so far. The Linux/Cdorked.A backdoor does not leave traces on the hard-disk other than a modified 'httpd' file, the daemon (or service) used by Apache. All information related to the backdoor is stored in shared memory on the server, making detection difficult and hampering analysis."
Mars

New Study Suggests Mars Viking Robots Found Life 172

Posted by samzenpus
from the it's-alive-alive dept.
techfun89 writes "New analysis of data, now 36 years old, from the Viking robots, suggests that NASA had found life on Mars. This conclusion was published by an international team of mathematicians and scientists this week. The Labeled Release experiment looked for signs of microbial metabolism in soil samples in 1976. The general thinking was that the experiment had found geological not biological activity. However, the new study approached things differently. Researchers broke the data into sets of numbers and analyzed the results for complexity. What they found were close correlations between the Viking results' complexity and those of terrestrial biological data sets. Based on this they concluded that the Viking results were more biological in nature than just geological processes."

Comment: Headhunters (Score 1) 444

by _aa_ (#36297468) Attached to: Ask Slashdot: Best Certifications To Get?

To everyone suggesting experience is superior to certifications and education, I completely agree. Unfortunately third party head hunting contractors hired by Fortune 500 human resource departments do not.

Your experience, intelligence and charisma will impress the hiring manager and might even get you the job, but.. you never got to meet him/her because you got rejected by the asshole third party headhunting contractor because your resume was not bit for bit identical to the job posting, even if you're an internal candidate for Christ's sake. Back in the good ol' days you could probably convince a human resources associate that even though you don't have required certification X, experience Y makes up for this. Today, that human resources rep has been replaced by a third party contractor whose job is to thrash through the thousands of resumes and present 25 precisely qualified candidates to the hiring manager. The hiring manager will never see any "maybes" or "close enoughs" or "willing to settles".

My advice is to hand tailor your resume to the specific job posting each time you submit it. If a job requires a certification or degree, you'd better have it. If it says "or equivalent experience", I'd put an "Experience Equivalent to Certification X" section right up top on my resume and emotionally prepare myself to be bumped by the hundreds of other candidates that actually have Certification X.

If you have Certification Y and the job posting doesn't mention Certification Y as a requirement or a desirable, leave it off. If you can get through the phone interview with the headhunter and get an interview with the hiring manager, this might be a great time to bring up Certification Y, but to a third party headhunter, superfluous education/certification can only over-qualify you. While suggesting you have a certification that you do not is dishonest and immoral, I've never heard of anyone getting fired from McDonald's because they forgot to mention that they graduated magna cum laude from Princeton.

If you are lucky enough to be happily employed I'd recommend taking every opportunity your employer offers to obtain education at their expense. Even if you don't need it now, having a vast portfolio of degrees and certifications will empower you to craft precisely targeted resumes in the future

If you are unemployed or looking to switch, I would hit every job posting for which I am precisely qualified first, then target jobs for which I am over-qualified at companies that will have much opportunity for advancement. If you are unemployed and under-educated/certified, target entry level positions at companies that will pay for or assist with training and education. "Does the hiring company offer education assistance?" is always a good question to ask a jack ass headhunter.

Security

Sony Online Entertainment Services Follow PSN Down 184

Posted by CmdrTaco
from the everything-is-totally-fine dept.
nam37 writes "Sony Online Entertainment's various services seem to be down and a message on the official site does not give much information on the particulars. According to a short post on the site, the services were taken down after an investigation revealed a deeper 'intrusion' than expected at first. This is the first we have heard that Sony's MMORPG arm had some sort of security breach. This could be part of Sony's plans to beef up security for the PlayStation Network, but this message seems to indicate that something more serious going on."
NASA

NASA Looking To Build 'Gas' Stations In Space 201

Posted by CmdrTaco
from the hope-they-have-pay-at-pump dept.
coondoggie writes "Fuel is a major issue when it comes to long-duration spaceflights — its weight is a problem for launch and once a spacecraft runs out of fuel there's no place to get more. That's where in-space 'gas' stations located at strategic spots along a route would be a boon to spaceflight. Which is exactly what NASA is looking to do by beginning to solicit proposals for what it calls an In-Space Cryogenic Propellant Storage and Transfer Demonstration that will lay the groundwork for humans to safely reach multiple destinations, including the Moon, asteroids, Lagrange points and Mars."

Comment: Re:Yeah, we need Debian (Score 1) 354

by Provos (#35388546) Attached to: Debian Is the Most Important Linux

RHEL's lag times are fine by me. While I don't work with a giant-multinational corporation, enterprise stability is still of utmost priority to my staff and I. We like that while RHEL stays on top of security issues, they do not make frequent jumps to newer application releases without significant warning.

As far as RHN, if you don't like paying for support, use CentOS. We do for our development and testing environment, and can be assure that it will stay in sync, once the base platform port occurs.

For desktops, our devs use whatever makes them happy. I'm running Fedora 14 right now, and several others are using various debian-sourced releases.

I think the real detriment, as mentioned earlier, was the growing lack of diversity in the distribution sphere.

Music

Civ IV's Baba Yetu Wins First Grammy For Video Game 88

Posted by CmdrTaco
from the well-isn't-that-special dept.
quantumstream writes "Christopher Tin made video game history yesterday by winning a Grammy for Best Instrumental Arrangement Accompanying Vocalist(s) for his song, Baba Yetu, featured prominently as the main theme song of Civilization IV. The composer, who wrote the song for his former Stanford University roommate Soren Johnson, has also seen the work featured at the largest choreographed water fountain in the world at the Burj Khalifa tower in Dubai."

This universe shipped by weight, not by volume. Some expansion of the contents may have occurred during shipment.

Working...