Anonymous Stallion writes "Two security researchers from TippingPoint (sponsor of the recent CanSecWest hacking contest) were able to infiltrate the Kraken botnet, which surpasses its predecessors in size. The researchers have published a pair of blog entries: Owning Kraken Zombies and Kraken Botnet Infiltration. They dissect the botnet and go so far as to suggest that they could cleanse it by sending an update to infected hosts. However, they stopped short of doing so. This raises the old moral dilemma about a hypothetical 'friendly worm' that issues software fixes (except that the researchers' vector is a server that can be turned off, not an autonomous worm that can't be recalled once released). What do you think — is it better to allow the botnet to continue unabated, or perhaps to risk crashing a computer controlling a heart monitor somewhere?"

rbf writes "A girl I like at my university, a graduate student in mathematics, will be having a birthday next month. She had thought of throwing a nerd-themed party — show up with tape on your glasses, pants hiked up, etc. However, she decided against it because most of her friends are math nerds and wouldn't even have to dress up! So my question for the community is: What fun party ideas would appeal to a group of mostly math-major nerds?"

(arg!)Styopa writes "As an early adopter, I have an HDTV-ready set without an integrated tuner. Analog television ends next February. My suspicion is that the $40 set-top box at Walmart has the minimum functionality to get by — i.e. simply a D-to-A converter and not an HDTV receiver. Three years ago I bought a UHF super-antenna (I'm about 40 mi. from the towers: borderline fringe reception) and searched for an HDTV converter to pull down HDTV OTA broadcasts. These were extremely hard to find — none at Radio Shack, Best Buy, Circuit City, or Ultimate Electronics (all the local bigboxen). I ended up buying a SIRT150 from eBay, which never found a signal, despite confirmed reception (on the set's normal tuner) of both VHF and UHF channels. So — any advice on what to look for in a set-top box? Is it going to cost me an arm and a leg, or is it not too far from the $40 Walmart special? Can I use Uncle Sam's $40 coupon towards it? I'd like very much to be able to find a physical store where I could go see the signal, before I decide if HD is worth the up-charge (if any) over simple DTV."

haxot writes "I'm the technologist at a local library. In our lab, I've managed to get some recognition for tools such as GIMP and Open Office, and even such toys as Bomberman and BZFlag. Now I'm turning towards the children's computers, which are mostly filled with ancient, buggy, rather boring games that try to be interactive TV shows rather than something entertaining. I'm looking for good OSS games and education suites (preferably multi-platform — I want to be ready for an OS switch to Linux). I'm not picky about the license; I'd just like the software to actually have that 'neat' appeal. Some examples I've found already are Gcompris and Tux Paint. My focus is the 2-year-old to 8-year-old range, but I'm happy to hear teen-oriented suggestions too. Since it's a public library, however, I can't have any software on the computers that is risqué, gory, or violent."

An anonymous reader writes "I have recently been tasked with switching our SSL certificate provider and it's proving not to be easy. We use an internal authority for our own stuff and then we buy certificates to protect outward-facing sites (a lot of them). My question for this community is: How do you choose a certificate authority to use? There is price, service (why we're leaving our last vendor), warranty, and products offered as the only differentiators I can find. Is there any public resource that would show me actual customer reviews of CAs like Verisign, GeoTrust, Comodo, Trustwave, and DigiCert? Our last vendor did a really poor job with support and I would like to make a reasonably educated decision."

jayminer writes "We are a relatively newly married young couple who enjoy spending our spare time at home. We don't own a console but have a gaming laptop with DVI output to play games on our TV. My wife is also a CS major so she's computer literate enough. She does not like strategy games, MMORG or any other role-playing game. Apart from "Find the Sausage" jokes, we need quality gaming advice, preferably games which we can play with a single laptop connected to a single large screen, with two gamepads, a console-like experience. What are your suggestions?"

goombah99 writes "While on vacation, I occasionally need to check my e-mail on a public terminal. What are some good techniques for avoiding keyloggers? Most of my ideas seem to have major drawbacks. Linux LiveCD can probably avoid software keyloggers, but it requires an invasive takeover of the public terminal, and is generally not possible. Kyps.net offers a free reverse proxy that will decode your password from a one-time pad you carry around, then enter it remotely. But, of course, you are giving them your passwords when you do this. You can run Firefox off a USB stick with various plugins (e.g. RoboForm) that will automatically fill the page in some manner they claim to be invulnerable to keyloggers. If that's true, (and I can't evaluate its security) it's getting close to a solution. Unfortunately, keeping the password file up-to-date is a mild nuisance. Moreover, since it will need to be a Windows executable, it's not possible for people without a Windows machine available to fill in their passwords ahead of time. For my business, I have SecureID, which makes one-time passwords. It's a good solution for businesses, but not for personal accounts on things like Gmail, etc. So, what solutions do you use, or how do you mitigate the defects of the above processes? In particular, how do people with Mac or Linux home computers deal with this?"

the_kanzure writes "I'm going to start at a university lab a few days after my high school graduation ceremony. The lab is an eclectic blend of computer science, evolutionary engineering and molecular biology, essentially it's research/development and — best of all — the research is worth something to me and my other pet projects. What I do know of science, tech and research has been gleaned from the internet. The open access research repositories (arxiv, PLoS, etc.) have been a life-saver. But showing up to get real, hard experience is not the same as those late hours into the night spent debugging software. In person, you can't just call up a favorite bash script to open up a few hundred tabs to do some quick research on feasability and past research ... how is this supposed to work — does anybody really get stuff done this way? So I've been wondering how Slashdotters have handled transitioning from learning in front of a screen and a good net connection, to actually showing up and getting stuff done. What's a first day like in a lab? Stories? What's the etiquette? Informal? In programing circles, you can always submit a patch and alternatives, but does this hold here? Is the professor still generally considered the PHB and the lowly undergrads are his minions to carry out his bidding?"

BarlowBrad writes "Yesterday my house was broken into and among other things two laptops were stolen. Getting past the feeling of violation, I am looking to the future and how to both prevent theft and recover computers should it happen again. I have found various services that claim to track and recover stolen laptops such as LoJack for Laptops, Computrace, GadgetTrak and Undercover, but I (obviously) have no experience with any of them. I also know that Intel will be coming out with a new anti-theft technology chip, but that isn't supposed to come out until the fourth quarter and I'll be replacing the laptops before then. Does Slashdot have a recommendation between these services or suggestions for another?" Read on for a related question about automating this process.

Smantha writes "I recently began teaching a Unix System Administration course at a community college. The previous instructor was using a very outdated textbook, and I'm trying to find one that is a bit more advanced and useful for my students. They are required to take a 100-level Unix class before this one and are familiar with the basics of using the command line. I'm looking for something that covers topics such as OS installation, software/package installation, user management, system administration tools, troubleshooting techniques and tools, service configuration (network services, for example) and some miscellaneous topics such as compression/archive tools, grep, make, and the like. What books have you found to be good references on your desk? What books have been good for learning these sorts of topics?"

dratcw writes "An article was posted this week to ComputerWorld, detailing the frustrations faced by blind people struggling to use the Web. The piece shows how little progress has been made and the inadequacy of solutions such as Microsoft's Narrator screen reader. While the article generated many positive comments, one reader said the disabled should 'get a grip' and maintained they 'have no more right to demand that others provide for their needs than I, as a diabetic, have a right to demand that sugar no longer be used.' Should Web sites and software makers do more, or does the reality of today's economics dictate that the blind/disabled will continue to struggle and learn to live with it?"

An anonymous reader writes "I'm a high school senior who is trying to pick a college to attend. I've been accepted by two comparably selective schools. One is a highly regarded tech school, and the other is a highly regarded liberal arts institution. I prefer the liberal arts college, but the computer science program is small, graduating about a dozen students a year. The course load is heavily theory based; programming languages are taught in later years. How much would the tech school vs. non tech school matter? Are CS majors from non-tech school considered inferior? What would an HR department think? What would you think if you were hiring?"

An anonymous reader writes "I am a senior security xxx in a Fortune 300 company and I am very frustrated at what I see. I see our customers turn a blind eye to blatant security issues, in the name of the application or business requirements. I see our own senior officers reduce the risk ratings of internal findings, and even strong-arm 3rd party auditors/testers to reduce their risk ratings on the threat of losing our business. It's truly sad that the fear of losing our jobs and the necessity of supporting our families comes first before the security of highly confidential information. All so executives can look good and make their bonuses? How should people start blowing the whistle on companies like this?"

An anonymous reader writes "This weekend I spent half a day surfing the web looking for a new laptop. I just want (to be able to switch to) 1650x1280, or at least ...x1024, and a *non*-Glossy Display . To my surprise I found out that many vendors leave me not that much choice: ...x800, and glossy, i.e., higher-reflective type screens seem to have become the promoted defaults. Should I give up on my non-glossy wishes, or should I start flaming vendors?" I still can't understand the glossy screens. They make my eyes hurt almost immediately in any sort of ambient light, and do nothing in low light. Glossy laptop screens are like TVs on the shelf in the store with their colors all whacked out to look brighter. Once you get them into the real world, you realize that the colors are just wrong.

CleverMonkey writes "I'm a town representative to a newly created municipal group creating a new type of telco. This group has formed to build and operate a FTTH network, and provide both triple-play services and access to other providers, to over 20 mostly rural towns in East-Central Vermont. The project is novel because of the size of the network (a cable pass down every road within 600 square miles), the low-density of the area served, and the public-ownership/private-financing model that is being used. Some of the towns included in this group currently have nothing beyond 14.4 dial-up on a good day. This project began as a grassroots effort in a couple of towns and the name they chose was ECFiber — East-Central Fiber — or sometimes the East-Central Vermont Community Network. We hope that this network will grow beyond one corner of this state, and we would like a name that is both descriptive and flexible. What would you name a community-owned, cutting-edge, G-PON fiber-optic network covering every remote corner of two-dozen contiguous towns?"

cheapbob writes "Recently HP officially unveiled a budget ultraportable laptop aimed to compete with the likes of Asus Eee PC. According to Compal, one of Dell's assemblers, Dell is also going to enter the budget ultra-portable market soon. All of these devices lack many of the features associated with larger-sized laptops, such as optical drives and large amounts of storage space, yet demand for them is very high. Initial reviews of these devices unsurprisingly expose them to be underpowered and lacklustre. What's the appeal? What do you think is the perfect balance of features and price point for a budget laptop?"

juraj writes "What font color and what background is best for the eyes, when you work for a long time? I have found various contradictory recommendations and I wonder if you know about any medical studies on this topic."

azuredrake writes "NCSoft's City of Heroes has just announced that in-game ads are being added to the game, provided by an advertising firm Double Fusion. However, unlike in many games, the ads being brought to CoH have been defined as 'always optional'. The publishers see the ads as a purely additional revenue stream, not as something that will ever allow advertisers to affect game content. Commentary is available at Gamasutra. Is making advertisement volunteer-based a viable way to get around cynicism? The tone of these ads seems to be 'check them out to help the game'. Are there any sites or services in which you'd voluntarily look at ads to lend a hand? "

An anonymous reader writes "Is letting users manage their own PCs an IT time-saver or time bomb waiting to happen? 'In this Web 2.0 self-service approach, IT knights employees with the responsibility for their own PC's life cycle. That's right: Workers select, configure, manage, and ultimately support their own systems, choosing the hardware and software they need to best perform their jobs.'" Do any of you do something similar to this in your workplace? Anyone think this is a spectacularly bad idea?

patspam writes "As a software engineer I come up with patentable ideas every now and then, ideas which I'm not interested in pursuing myself but which I'd like to keep out of the hands of private entities/patent trolls in my own personal effort to defeat software patents. Should I patent the ideas and donate them to some sort of open source foundation? Or just blog about the ideas so that the 'prior art' exists in the public domain? What's your strategy for fighting against restrictive software patents?"