×
Security

Submission + - Hacker Grabs 150k Adobe User Accounts via SQL Injection (darkreading.com)

CowboyRobot writes: "Adobe today confirmed that one of its databases has been breached by a hacker and that it had temporarily taken offline the affected Connectusers.com website. The hacker, who also goes by Adam Hima, told Dark Reading that the server he attacked was the Connectusers.com Web server, and that he exploited a SQL injection flaw to execute the attack. "It was an SQL Injection vulnerability, somehow I was able to dump the database in less requests than normal people do," he says. Users passwords for the Adobe Connectusers site were stored and hashed with MD5, he says, which made them "easy to crack" with freely available tools. And Adobe wasn't using WAFs on the servers, he notes. Tal Beery, a security researcher at Imperva, analyzed the data dump in the Connectusers Pastebin post and found that the list appears to be valid and that the hacked database was relatively old."
Internet Explorer

Submission + - IE 10 almost finished for Windows 7 with final preview (arstechnica.com) 1

Billly Gates writes: IE 10 just hit the final preview yesterday for Windows 7. Windows XP and Windows Vista support has been dropped. Most slashdotters have a complex relationship with Internet Explorer. Many of us are hating it, while some of us are writting websites for it, or supporting it in an office setting. Microsoft has tried last year to make IE good again with release IE 9 which had some fanfare on slashdot, such as hardware acceleration and better standards compliancy, while MS even launched a full campaign to get us to switch.. IE 10 is supposed to continue the new process and promises to be much faster and support much more HTML 5 and CSS 3 and W3C HTML 5.1 and CSS 3.1 with a score of 320 on HTML5test. As a comparison, last years IE 9 only scored 138. The download is available here. Perhaps a few webdevelopers could care to comment if MS is really changing up its game since IE 6? It also appears that MS is rapidly releasing its browser on an annual schedule as well. What are the reactions of IT departments since IE 9 is now going to be an obsolete browser already?
Moon

Submission + - Google Lunar X Prize teams now in a race with China as well as each other (examiner.com)

MarkWhittington writes: "The Google Lunar X Prize rules of competition has a clause that reduces the $20 million grand prize to $15 million for the first private group to land a rover on the lunar surface should a government funded rover land first. The first scheduled government funded rover to land on the moon is the Chinese Chang’e 3. It is slated for a 2013 landing."
Android

Submission + - CyanogenMod Domain Stolen (cyanogenmod.org)

An anonymous reader writes: The team behind CyanogenMod, one of the most popular community-driven, Android-based operating systems for phones and tablets, has announced that they're moving to Cyanogenmod.org after their .com domain was held ransom by a community member. He had been in control of the .com domain name for some time, but the team found out he was impersonating Cyanogen to make deals with community sites. When they removed his access to other parts of the CM infrastructure, he demanded $10,000 to relinquish control of the domain and threatened to change the DNS entries. When they refused to pay, he went through with it. The team is now disputing control of the domain with ICANN. They said, 'We will continue to be open about the what, when, how, but unfortunately, we may never know the "why" – though greed comes to mind. The team itself has not made a profit off of CM and that is not our goal. But to have one of our own betray the community like this is beyond our comprehension.'
Chrome

Submission + - Visualizing 100,000 Stars in Chrome (thenextweb.com)

An anonymous reader writes: Google has rolled out a new web experiment for Chrome. This one is a visualization of the locations of over 100,000 nearby stars. It pulls data from astrometric databases and catalogs to show accurate relative locations of the stars. You can zoom and pan around the cluster, zoom all the way in to the solar system, or zoom all the way out to see how even this huge number of stars is dwarfed by the rest of the Milky Way. It also has data on a number individual stars in our stellar neighborhood. This web app works best in Chrome (much like their previous one, Jam With Chrome), but I was able to try it in Firefox as well.
Red Hat Software

Submission + - Red Hat Developer Demands Competitor's Source Code (muktware.com)

sfcrazy writes: A very serious argument erupted on the Linux kernel mailing list when Andy Grover, a Red Hat SCSI target engineer, requested that Nicholas A. Bellinger, the Linux SCSI target maintainer, provide proof of non-infringment of the GPL. Nick is developer at Rising Tide Systems, a Red Hat competitor, and a maker of advanced SCSI storage systems. Nick's company recently produced a groundbreaking technology involving advanced SCSI commands which will give Rising Tide Systems a lead in producing SCSI storage systems. Now, RTS is blocking Red Hat for getting access to that code as its proprietary. What's uncertain is whether RTS' code is covered by GPL or not — if it is then Red Hat has all the rights to get access to it and it's a serious GPL violation.
Microsoft

Submission + - The Empire In Decline?

An anonymous reader writes: Pundits continue to weigh in on Steve Sinofsky's sudden exit from Microsoft (as executive head of Windows Division, he oversaw the development and release of Windows 7 and 8). SemiAccurate's Charlie Demerjian sees Microsoft headed for a steep decline, with their habit of creating walled gardens deliberately incompatible with competitors' platforms finally catching up to them. Few PC users are upgrading to Windows 8 with its unwanted Touch UI, sales of the Surface tablet are disappointing, and few are buying Windows Phones. On the Sinofsky front, Microsoft watcher Mary Jo Foley is willing to take the Redmond insiders' word that the departure was more about Sinofsky's communication style and deficiencies as a team player than on unfavorable market prospects for Windows 8 and Surface. Meanwhile, anonymous blogger Mini-Microsoft had suspiciously little to say.

Submission + - Salt Lake City Police to wear cameras. (ksl.com)

Psychotic_Wrath writes: "Salt Lake Police department will be much more transparent with their law enforcement. A program is being rolled out to require officers wear glasses equipped with a camera to record what they see. Of course there are several officers that oppose this idea, and will resist the change. One of the biggest shockers to me is that the police chief is in strong support of this measure.

If Chief Burbank gets his way, these tiny, weightless cameras will soon be on every police officer in the state.

With all the opposition of police officers being recorded by citizens that we are seeing throughout the country it is quite a surprise that they would make a move like this. The officers would wear them when they are investigating crime scenes, serving warrants, and during patrols. Suddenly Utah isn't looking like such a bad place to be. Now we just need to hope other states and departments would follow suite. It sure will be nice when there is video evidence to show the real story.

"

Power

Submission + - LA Metro to Harvest Energy From Subway Trains (vyconenergy.com)

An anonymous reader writes: Today the Los Angeles County Metropolitan Transportation Authority awarded VYCON Energy with a $3.6 million contract to install a flywheel energy recovery system at the Red Line Westlake/MacArthur Park subway station. The system will harness kinetic energy from braking trains then use the stored energy to help trains accelerate.
Network

Submission + - New WiFi protocol boosts congested wireless network throughput by 700% (extremetech.com)

MrSeb writes: "Engineers at NC State University (NCSU) have discovered a way of boosting the throughput of busy WiFi networks by up to 700%. Perhaps most importantly, the breakthrough is purely software-based, meaning it could be rolled out to existing WiFi networks relatively easily — instantly improving the throughput and latency of the network. As wireless networking becomes ever more prevalent, you may have noticed that your home network is much faster than the WiFi network at the airport or a busy conference center. The primary reason for this is that a WiFi access point, along with every device connected to it, operates on the same wireless channel. This single-channel problem is also compounded by the fact that it isn't just one-way; the access point also needs to send data back to every connected device. To solve this problem, NC State University has devised a scheme called WiFox. In essence, WiFox is some software that runs on a WiFi access point (i.e. it’s part of the firmware) and keeps track of the congestion level. If WiFox detects a backlog of data due to congestion, it kicks in and enables high-priority mode. In this mode, the access point gains complete control of the wireless network channel, allowing it to clear its backlog of data. Then, with the backlog clear, the network returns to normal. We don’t have the exact details of the WiFox scheme/protocol (it’s being presented at the ACM CoNEXT conference in December), but apparently it increased the throughput of a 45-device WiFi network by 700%, and reduced latency by 30-40%."
Intel

Submission + - Supercomputer-on-a-Chip Only Available on Board (sourceforge.net) 1

An anonymous reader writes: The massively parallel Xeon Phi is now shipping, but only on a PCIe board! GoParallel says that Intel's lead in supercomputing will get a boost, but why isn't Intel making the chip available. The 60-core Xeon Phi chip is light years ahead in x86 program execution, but you need a Xeon-based server or workstation to use it. Why doesn't Intel sell the chip alone, so that all types of supercomputer class devices can be built by we geeks?
Music

Submission + - Band uses nuclear isotopes to make music (foxnews.com)

Velcroman1 writes: Every second in your body, thousands of tiny isotopes are bursting with radioactive decay. And, all around you, imperceptible gamma rays explode in a brilliant but invisible lightshow. And they've just formed a live band. Yes, you read that correctly. But it's all for science: The Radioactive Orchestra 2.0 is part of a Swedish project to help us understand how low-energy radiation works, by showing the energy patterns of nuclear isotopes. Swedish musician Kristofer Hagbard conceived of the orchestra about a year ago and released an album last spring, but the new 2.0 version of "the band" allows him to perform live in front of an audience. “This can be looked at as a piano for high energy photons, so every detection gives us a note,” Hagbard said. “The musical instrument is as good as the gamma spectrometer we are using.”
Network

Submission + - Battery-Powered Transmitter Could Crash UK's 4G Network (ibtimes.co.uk)

DavidGilbert99 writes: "With a £400 transmitter, a laptop and a little knowledge you could bring down an entire city's high-speed 4G network.

This information comes from research carried out in the US into the possibility of using LTE networks as the basis for a next-generation emergency response communications system.

Jeff Reed, director of the wireless research group at Virginia Tech, along with research assistant, Marc Lichtman, described the vulnerabilities to the National Telecommunications and Information Administration (NTIA), which advises the White House on telecom and information policy.

"If LTE technology is to be used for the air interface of the public safety network, then we should consider the types of jamming attacks that could occur five or ten years from now. It is very possible for radio jamming to accompany a terrorist attack, for the purpose of preventing communications and increasing destruction," Reed said."

Politics

Submission + - Nate Silver turns his eye to the American League (nytimes.com)

Lasrick writes: Nate Silver is at it again. Here's a quote: "It might seem as if these statistics make Cabrera, the first triple crown winner in either league since 1967, a shoo-in for the M.V.P. But most statistically minded fans would prefer that it go to another player, Mike Trout of the Los Angeles Angels."

Submission + - 'Rogue (wandering) planet' spotted 100 light-years away (bbc.co.uk) 1

Maow writes: "This object was discovered during a scan that covered the equivalent of 1,000 times the [area] of the full moon," said study co-author Etienne Artigau of the University of Montreal.

"We observed hundreds of millions of stars and planets, but we only found one homeless planet in our neighbourhood."

This planet appears to be an astonishingly young 50-120 million years old.

The paper is published at arxiv.org.

Here's hoping the Mayan End-of-World-2012 people don't seize upon this as some kind of impending rogue planet on a collision course with Earth, but one can expect it'll be bantered about on such forums.

NASA

Submission + - DARPA wants army of networked amateur astronomers to watch sky for space junk (networkworld.com)

coondoggie writes: "There is really so much junk floating around in space the government needs help keeping track of it all. This week the Defense Advanced Research Projects Agency announced a program to utilize amateur astronomers to help watch space for any dangerous junk that maybe be threatening satellites or other spacecraft and even the Earth. If you have a telescope, great but the program will even install equipment if you are in a strategic area the government want to watch."
Earth

Submission + - Fukushima ocean radiation won't quit (nature.com)

mdsolar writes: ""The Fukushima disaster caused by far the largest discharge of radioactivity into the ocean ever seen. A new model presented by scientists from Woods Hole Oceanographic Institution in Massachusetts estimates that 16.2 petabecquerels (1015 becquerels) of radioactive caesium leaked from the plant — roughly the same amount that went into the atmosphere.

Most of that radioactivity dispersed across the Pacific Ocean, where it became diluted to extremely low levels. But in the region of the ocean near the plant, levels of caesium-137 have remained fixed at around 1,000 becquerels, a relatively high level compared to the natural background. Similarly, levels of radioactive caesium in bottom-dwelling fish remain pretty much unchanged more than 18 months after the accident."

The solution to pollution is not dilution...."

Data Storage

Submission + - Everspin launches non-volatile MRAM that's 500 times faster than NAND (extremetech.com)

MrSeb writes: "Alternative memory standards have been kicking around for decades as researchers have struggled to find the hypothetical holy grail — a non-volatile, low-latency, low-cost product that could scale from hard drives to conventional RAM. NAND flash has become the high-speed, non-volatile darling of the storage industry, but if you follow the evolution of the standard, you’ll know that NAND is far from perfect. The total number of read/write cycles and data duration if the drive isn’t kept powered are both significant problems as process shrinks continue scaling downward. Thus far, this holy grail remains elusive, but a practical MRAM (Magnetoresistive Random Access Memory) solution took a step towards fruition this week. Everspin has announced that it’s shipping the first 64Mb ST-MRAM in a DDR3-compatible module. These modules transfer data at DDR3-1600 clock rates, but access latencies are much lower than flash RAM, promising an overall 500x performance increase over conventional NAND."
NASA

Submission + - NASA Security Breach (spaceref.com)

Mephistophocles writes: If you work for NASA, you saw this memo sent to all agency employees yesterday afternoon:

"On October 31, 2012, a NASA laptop and official NASA documents issued to a Headquarters employee were stolen from the employee's locked vehicle. The laptop contained records of sensitive personally identifiable information (PII) for a large number of NASA employees, contractors, and others. Although the laptop was password protected, it did not have whole disk encryption software, which means the information on the laptop could be accessible to unauthorized individuals. We are thoroughly assessing and investigating the incident, and taking every possible action to mitigate the risk of harm or inconvenience to affected employees."

Slashdot Top Deals