Catch up on stories from the past week (and beyond) at the Slashdot story archive

 


Forgot your password?
Close
typodupeerror

Submission + - SPAM: Super Mario Maker 2

Submitted by omfglearntoplay
omfglearntoplay writes: With all the new/old school gamers, software developers, and puzzle lovers on Slashdot, I'm surprised there hasn't been a Mario Maker 2 article. It was just released a few weeks back.

If you like old games from the 1980s, this is your game. If you like creating things, you make your own standard Mario levels here. If you like solving or creating puzzles, there is a whole branch of levels you can filter by that are puzzle levels... and some are stinking hard.

Link?
[spam URL stripped]...
[spam URL stripped]...

Review link:
[spam URL stripped]...
Link to Original Source

Submission + - Asking slashdot: How do you deal with blow from Certificate authority? 4

Submitted by rastos1
rastos1 writes: I work for a mid-size software company that develops CAD-CAM software for textile industry for many decades. Last weekend Sectigo (formerly known as COMODO until late 2018) revoked code signing certificate that our company bought in the beginning of 2018 from Sectigo reseller and used to sign all our SW products. On Monday morning we woke up to phones ringing from confused customers unable to launch our software. This has hit mostly Java applications launched from a web page because JRE checks the signature by default using OCSP. But also traditional executables and shared libraries would report invalid signature upon checking. We reached to Sectigo but for half a day we could not get any feedback. Later we got information that some malware was signed with our certificate. 2 days, many e-mails and phone calls later we understand that this is what happened: someone submitted one of our executables to virustotal.com — site that runs ~70 antivirus programs on submitted files and reports back whether they flag the uploaded file. 5 of antivirus packages flagged our executable. We tracked down the version and we positively know it was a false positive. There is random guy that wrote a tool that creates a monthly report of files flagged at Virustotal. Sectigo found the report, and, according to their statement, revoked all certificates used to sign executables flagged by some antivirus causing major disruption to us and downtime for our customers. We buy certificates from COMODO/Sectigo for more than a decade, but there was no attempt to contact us and clarify the situation.
How do you prepare and deal with such scenario? Did you know how little it takes to get your certificate revoked?

Comment Re:The Huawie-ism of ... (Score 1) 146

The planet is naturally nationalistic and isolationist due to lessons learned during the past 5000 years, no matter what idealistic wishful thinking may be popular among those who have failed to learn from history.

Fake news is no worse than wishful idealistic news.

I do appreciate that you admit to posting in the interests of DJI.

Slashdot Top Deals

"What man has done, man can aspire to do." -- Jerry Pournelle, about space flight

Close