Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:So much for LTS releases (Score 1) 338 338

In fact, Chromium was dropped from Wheezy recently since the version it was based on lost upstream support and security updates. The advice then was to run Jessie instead. Presumably that advice is now "don't run Chromium derivatives on Debian", unless testing has a supported kernel version.

Submission + - Virgin Media censors talk of "bufferbloat" on their discussion forums->

mtaht writes: Given that bufferbloat is now fixed by fq_codel and the sqm-scripts for anyone that cares to install openwrt and derivatives on their home routers (or use any random linux box for the job), AND standardization efforts for the relevant algorithms near completion in the IETF, I went and posted a short, helpful message about how to fix it on a bufferbloat-related thread on Virgin Media's cable modems... And they deleted the post, and banned my IP... for "advertising". I know I could post again via another IP, and try to get them to correct their mistake, but it is WAY more fun to try to annoy them into more publically acknowledging their enormous bufferbloat problems and to release a schedule for their fixes. Naturally I figured the members of slashdot could help out Virgin and their customers understand their bufferbloat problems better. My explanations of how they can fix their bufferbloat, are now, here.
Link to Original Source

Comment Re:/etc/inittab (Score 1) 314 314

It's still possible in daemontools to run a shell script wrapper from /etc/service/foo/run around some real server in Java/Erlang/whatever. Stopping the service with "svc -d /etc/service/foo" will then entirely fail to kill the server process. I would imagine that the systemd's cgroup suport would avoid this happening.
The Internet

Britain Gets National .uk Web Address 111 111

hypnosec (2231454) writes 'Starting today businesses and individuals in the UK will be able to register a new national web address (".uk") and drop their existing ".co.uk" or ".com" suffix in favour of a shorter and snappier domain name. The entire process along with the transition is being overseen by private yet not-for-profit organisation Nominet, which has already started notifying existing customers with a ".co.uk" domain of their chance to adopt a ".uk" domain. Nominet will reserve all ".uk" domain names, which already have a ".co.uk" counterparts, for the next five years offering registrants the chance to adopt the new domain and to keep cyber squatters at bay.'

Comment Re:"There's zero benefit a consumer gets from that (Score 1) 47 47

There's a reasonable argument for moving to 64-bit on security grounds too. The increase in virtual address space makes ASLR far more effective since there are many more options for positioning compared to 32-bit code. On top of that, any attacks are more likely to hit a unallocated page as opposed to anything useful (with some limitations of course).

Submission + - Over +36 exploits in latest Java with +140 for all Oracle products discovered->

An anonymous reader writes: More bad press can't seem to escape Oracle.

Oracle is posting patches for all its products next Tuesday which include +36 exploits for Java alone and over 140 for all Oracle products currently supported included over 80 that require no authentication to execute.These patches look to be critical for any administrator. Java 6 users who use equipment or programs that rely on older versions are SOL unless you sign up for a very expensive support contract as these patches are for Java 7 only.

Link to Original Source

Submission + - Target Admits 110 Million Victims in Data Breach, Not 40 Million->

Nerval's Lobster writes: Retail giant Target continues to drastically downplay the impact of the massive data breach it suffered during December, even while admitting the number of customers affected is nearly twice as large as it had previously estimated. Target admitted today the massive data breach it suffered during the Christmas shopping season was more than twice as large and far more serious than previously disclosed. A Jan. 10 press release admits the number of customers affected by the second-largest corporate data breach in history had increased from 40 million to 70 million, and that the data stolen included emails, phone numbers, street addresses and other information absent from the stolen transactional data that netted thieves 40 million debit- and credit-card numbers and PINs. “As part of Target’s ongoing forensic investigation, it has been determined that certain guest information — separate from the payment card data previously disclosed — was taken during the data breach” according to Target’s statement. “This theft is not a new breach, but was uncovered as part of the ongoing investigation.” The new revalation does represent a new breach, however, or at least the breach of an unrelated system during the period covered during the same attack, according to the few details Target has released. Most analysts and news outlets have blamed the breach on either the security of Target’s Windows-based Point-of-Sale systems or the company’s failure to fulfill its security obligations under the Payment Card Industry Data Security Standard (PCI DSS).
Link to Original Source

Submission + - How Chris Christie Could Use the NSA Playbook to Defend Himself over Bridgegate

Hugh Pickens DOT Com writes: Conor Friedersdorf has written a tongue-in-cheek article in The Atlantic advising New Jersey Governor Chris Christie how he can use the NSA playbook to successfully defend himself of the charges that a senior member of his staff was involved in shutting down George Washington Bridge traffic, a stunt meant to punish the mayor of an affected town for opposing his reelection. Christie's NSA-inspired explanation would include the following points: There are almost 9 million people in New Jersey, and only one was targeted for retribution, an impressively tiny error rate lower than .001 percent; The bridge closure was vital to national security because [redacted]; Since the George Washington Bridge is a potential terrorist target, everything that may or may not have happened near it is a state secret; Going after a political rival is wrong but it's important to put this event in context; Fort Lee Mayor Mark Sokolich was the only target of non-compliant behavior. No other Fort Lee resident was ever targeted for retribution, and any delays that any Fort Lee resident experienced were totally inadvertent and incidental; Finally a panel will be formed to figure out how to restore the public's faith in Chris Christie. "To some readers, these talking points may seem absurd or deliberately misleading," concludes Friedersdorf, "but there isn't any denying that so far they're working okay for the NSA."

Submission + - Mars One studying how to maintain communications with Mars 24/7->

braindrainbahrain writes: Mars One, the low credibility effort to colonize Mars, is at least funding some interesting concept studies for their alleged plan to colonize the red planet. One of the most interesting is the effort to maintain uninterrupted communications with Mars. This is not as trivial as it may sound, as any satellite in Martian orbit will still have to deal with occultations between Mars and Earth due to the Sun. Surrey Satellite Technology will be performing the study.
Link to Original Source

Submission + - Samsung, Apple Agree to try Mediation in Patent Disputes (LA Times)->

An anonymous reader writes: The smartphone and tablet rivals will work with a mediator in an effort to settle their patent disputes in advance of a second trial on the issues scheduled for this spring, according to Bloomberg News. The agreement, filed in federal court in San Jose today, was in response to U.S. District Judge Lucy Koh’s request in November that both sides submit a settlement discussion proposal before trial. Senior legal executives at the companies met Jan. 6 to discuss “settlement opportunities,” according to the proposal. The companies agreed to retain a mediator “who has experience mediating high profile disputes,” according to the filing, which doesn’t name the person. The chief executive officers and three to four company lawyers, but no outside lawyers, will attend the mediation before Feb. 19, according to the filing.

http://www.bloomberg.com/news/2014-01-09/apple-samsung-agree-to-mediator-in-attempt-to-settle-suit.html

Link to Original Source

"When the going gets weird, the weird turn pro..." -- Hunter S. Thompson

Working...