CWmike writes "The typical home user running Windows faces the 'unreasonable' task of patching software an average of every five days, security research company Secunia said on Thursday. 'It's completely unreasonable to expect users to master so many different patch mechanisms and spend so much time patching,' said Thomas Kristensen, the company's CSO. The result: Few consumers devote the time and attention necessary to stay atop the patching job, which leaves them open to attack. Secunia says that of the users who ran the company's Personal Software Inspector in the last week of January, half had 66 or more programs from 22 or more different vendors on their machines. ... Secunia has published a white paper (PDF) that details its findings."

alphadogg writes "Three University of Michigan computer scientists say they have found a way to exploit a weakness in RSA security technology used to protect everything from media players to smartphones and e-commerce servers. RSA authentication is susceptible, they say, to changes in the voltage supply to a private key holder. While guessing the 1,000-plus digits of binary code in a private key would take unfathomable hours, the researchers say that by varying electric current to a secured computer using an inexpensive purpose-built device they were able to stress out the computer and figure out the 1,024-bit private key in about 100 hours – all without leaving a trace. The researchers in their paper outline how they made the attack (PDF) on a SPARC system running Linux."

Frequent Slashdot contributor Bennett Haselton contributes the following piece on trying to get some measure of satisfaction in the struggle against pop-up ads, writing "The most annoying thing about some pop-up ads, is that you have no way of knowing which ad-serving network served them or who the responsible parties are. Could we reduce the incidence of illegal or deceptive pop-up ads, by giving users an easier way to trace their origin and figure out where to send complaints? Here's one way to do it with a simple right-click." Read on for the rest.

eldavojohn writes "The Japanese computer manuracturer IO Data is the latest in line to license Microsoft's so-called 'Linux patents,' following the likes of Novell, Samsung, and Amazon. Yes, even the press releases use the word 'Linux' to describe these patents. From the press release: 'Specifically, the patent covenants apply to I-O Data's network-attached storage devices and its routers, which run Linux. Although the details of the agreement have not been disclosed, the parties indicated that Microsoft is being compensated by I-O Data.'"

kkleiner writes "Skinput is a system from Carnegie Mellon's Chris Harrison that monitors acoustic signals on your arm to translate gestures and taps into input commands. Just by touching different points on your arm, hand, or fingers you can tell your portable device to change volume, answer a call, or turn itself off. Even better, Harrison can couple Skinput with a pico projector so that you can see a graphic interface on your arm and use the acoustic signals to control it. The project is set to be presented at this year's SIGCHI conference in April, but you can check it out now in several video demonstrations."

krou writes "ReadWriteWeb is covering Google's embrace of a system that would enable any Web publisher to 'automatically submit new content to Google for indexing within seconds of that content being published.' Google's Brett Slatkin is lead developer of PuSH, or PubSubHubbub, a real-time syndication protocol based on ATOM, where 'a publisher tells the world about a Hub that it will notify every time new content is published.' Subscribers then wait for the hub to notify them of the new content. Says RWW: 'If Google can implement an Indexing by PuSH program, it would ask every website to implement the technology and declare which Hub they push to at the top of each document, just like they declare where the RSS feeds they publish can be found. Then Google would subscribe to those PuSH feeds to discover new content when it's published. PuSH wouldn't likely replace crawling, in fact a crawl would be needed to discover PuSH feeds to subscribe to, but the real-time format would be used to augment Google's existing index.' PuSH is an open protocol, and Slatkin says that 'I am being told by my engineering bosses to openly promote this open approach even to our competitors.'"

An anonymous reader writes "I work at a public hospital in the computer / technical department and (amongst others) was recently outraged by an email that was sent around our department: '(XXXX) District Health Board — Information Services is strategically a Microsoft shop and when talking to staff / customers we are to support this strategy. I no longer want to see comments promoting other Operating Systems.' We have also been told to remove Firefox found on anyone's computer unless they have specific authorisation from management to have it installed under special circumstances. Now, I could somewhat understand this if I was working in a company that sold and promoted the use of Microsoft software for financial gain, but I work in the publicly / government funded health system. Several of the IT big-wigs at the DHB are seemingly blindly pro-Microsoft and seem all too quick to shrug off other, perhaps more efficient alternatives. As a taxpayer, I want nothing more than to see our health systems improve and run more efficiently. I am not foolish enough to say all our problems would be solved overnight by changing away from Microsoft's infrastructure, but I am convinced that if we took less than half the money we spend on licensing Microsoft's software alone and invested that in training users for an open source system, we would be far better off in the long run. I would very much like to hear Slashdot's ideas / opinions on this 'Strategic Direction' and the silencing of our technical opinions."

New Scientist reports on research published in PNAS (abstract here) about what may be the earliest writing yet discovered, on eggshells dated to 60,000 years ago. "Since 1999, Pierre-Jean Texier of the University of Bordeaux, France, and his colleagues have uncovered 270 fragments of shell at the Diepkloof Rock Shelter in the Western Cape, South Africa. They show the same symbols are used over and over again, and the team say there are signs that the symbols evolved over 5,000 years. This long-term repetition is a hallmark of symbolic communication and a sign of modern human thinking, say the team. [Another researcher is quoted:] 'Judging from what we know about the evolution of art all over the world, there may have been many [written language] traditions that were born, lasted for some time, and then vanished. This may be one of them, most probably not the first and certainly not the last.'"

angry tapir writes "A group of researchers plans to release a version of the Firefox browser that includes the built-in ability to view 3D graphics. They've integrated real-time ray tracing technology, called RT Fact, into Firefox and Webkit. Images are described using XML3D, and the browser can natively render the 3D scene." The browser will be released within a few weeks, the researchers say, and they are checking with the Mozilla Foundation about whether they can call it Firefox.

jafo writes "There's been a lot of teeth gnashing going on recently about broken wireless at conferences. We just wrapped up PyCon 2010, with around 600 (out of 1,000) attendees simultaneously accessing the volunteer-run network, and response has been fairly positive. 2.4GHz (802.11b/g) continues to be problematic, but most users were on 5.2GHz (using 802.11n) and associating at 130mbps, with a 100mbps link to the net (though after the fact we found that 35mbps would have sufficed). My PyCon 2010 wrap-up reveals all the secrets of how we did it, including pretty bandwidth and user graphs."

angry tapir writes "The Bluetooth 4.0 wireless specification could start to appear in devices such as headsets, smartphones and PCs by the fourth quarter, said the Bluetooth Special Interest Group. The new specification will be able to be used in lower-power devices than previous versions of the technology, including watches, pedometers, smart meters and other gadgets that run on coin-cell batteries."

Grumbleduke writes "During today's debate in the UK's House of Lords on the much-criticized Digital Economy Bill, the unpopular Clause 17 (which would have allowed the government to alter copyright law much more easily than it currently can) was voted out in favor of a DMCA-style take-down system for websites and ISPs. The new amendment known as 120A sets up a system whereby a copyright owner could force an ISP to block certain websites who allegedly host or link to infringing material or face being taken before the High Court and made to pay the copyright owner's legal fees. This amendment was tabled by the Liberal Democrat party, which had so far been seen as the defenders of the internet and with the Conservative party supporting them. The UK's Pirate Party and Open Rights Group have both strongly criticized this new amendment."