Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Submission + - Stupid Simple Security - a Chrome plugin for safer browsing

shmaybebaby writes: There's this free and open source searchable repository of web vulnerabilities across the entire Internet. It's called PunkSPIDER (http://punkspider.hyperiongray.com) and it's handy for looking up the websites you frequent to see if they have any egregious vulnerabilities that could compromise your privacy and identity. Here's a Slashdot article on PunkSPIDER from last year http://it.slashdot.org/story/1... — you can see from the comments that it was, uh, kind of controversial.

But turns out, it's not even close to being the WMD that people were afraid of (that's a "weapon of mass destruction," in case you were born after the year 2000) and is actually kind of useful, particularly for the security / hacker community. People have used it for penetration testing recon, for security research, for a quick check of their own website, or just for personal use. The thing is, unless you're a security researcher who keeps PunkSPIDER open in a tab in your browser, you probably won't remember to go there and check out a website to make sure it's safe before you give them your credit card info.

To make it more accessible to the average user, the team behind PunkSPIDER released a Chrome extension that sits in your nav bar and tells you if PunkSPIDER has found any vulnerabilities on the site you're on. If it does, you get a red x, if it doesn't, you get a green check. It's stupid simple and it's free.

Here's a link to dl the extension https://chrome.google.com/webs... and here's a demo video on how it works http://www.youtube.com/watch?v.... There are some other videos under the same account that you can watch if you want to know more about the PunkSPIDER project.

There are plans to release a Firefox plugin soon, too, which will be nice because it's arguably a more ubiquitous browser than Chrome. Still, I'm switching to Chrome now just for this extension.
Networking

Submission + - Hardware Vendor Offers Backdoor with Every Product (threatpost.com)

Nameisyoung007 writes: A support page, titled "Backdoor Password for Allied Telesis Devices" recently turned up on Google. The page, labeled ***INTERNAL ONLY*** was written to answer customer questions like "'How do I obtain a backdoor password for my Allied Telesis device?'" and includes instructions on accessing a "built in Backdoor function" on any Allied Telesis device.

Probably a good time to double check your devices, just to make sure you're not affected.

Submission + - Frist attack using RSA breach ? (networkworld.com)

jeffviper writes: Ouch.... we all knew it was a bad thing for RSA and here is the first casualty : Lockheed Martin

Lockheed responded to questions about the incident with this written statement: "We have policies and procedures in place to mitigate the cyber threats to our business, and we remain confident in the integrity of our robust, multilayered information systems security," said spokesman Jeffery Adams.

Open Source

Submission + - DOD Releases Open Source Development Guide (pcworld.com)

BrandiCook writes: "The Department of Defense (DoD) has weighed in with its own support for open source. The DoD provides a nice analogy: “Imagine if only the manufacturer of a rifle were allowed to clean, fix, modify or upgrade that rifle. The military often finds itself in this position wit taxpayer funded, contractor developed software: one contractor with a monopoly on the knowledge of a military software system and control of the software source code.” Open technology offers increased agility and flexibility, fast delivery, increased innovation, reduced risk, lower cost and information assurance and security, the DoD asserts."

Comment Re:Other OS (Score 1) 329

In all fairness, Nintendo and MS never made any attempt to allow that type of thing.

You also didn't see the US Air Force or other research institutions buying clusters of Nintento Wii's or XBOX 360's for their cluster computing platforms.

Submission + - Endeavour launch scrubbed for 48 hours

shuz writes: At 10:15 am Eastern time the launch of Endeavour has been scrubbed for a minimum of 48 hours. The scrub is due to 2 failed Axillary Power Unit heaters.

Comment What about FY2012? (Score 3, Interesting) 290

If lawmakers can't agree to a budget for the time period starting 7 MONTHS AGO, how are they going to get a FY2012 budget done?

Federal managers aren't spending more than the Continuing Resolution levels, and should be saving some money in case of cuts. Funding them over the CR level would just lead to waste spending in the 'use it or lose it' model (They have until September to spend it all).

They need to pass a status quo budget for FY2011, and get started on FY2012. That is where the problem lies, and where a solution can take place.

Iphone

Submission + - Mother Charged after iPhone Almost Dies in Hot Car

Hugh Pickens writes writes: "Residents of the normally peaceful suburban town of Winnetka, Illinois are still reeling from the news that a mother, whose name is being withheld by police pending a full investigation, left an iPhone unattended for more than three hours in a car parked in the hot sun. "Security cameras have shown that the iPhone had been in the car—with the doors locked and the windows rolled up—since 1 p.m," says Winnetka police chief Douglas Blaine. "Due to the tragic and highly emotional nature of this case, we cannot say any more at this time." According to official police records, two officers forcibly broke into the car at 4:07 p.m. and found the iPhone lying face down on the dashboard. Police say that if the iPhone were left in the extreme heat for any longer, it could have died. The iPhone was rushed by ambulance to a nearby Apple facility for careful examination. Miraculously, no damage to its memory, screen, or wireless capabilities was reported. Witnesses said that when the iPhone's owner eventually arrived at her car and realized what she had done, she began sobbing hysterically, calling out in vain for her iPhone, and rocking back and forth on the parking lot pavement while repeatedly shouting "No" and "This can't be happening." The owner is currently being held by authorities and will be charged with criminal neglect. If found guilty, she will be subject to severe punitive action, including fines and possible jail time, and the iPhone will be placed under foster care."

Submission + - Google Debuts Dataing Site (google.com)

Daetrin writes: Have you seen the Google Romance page yet? Particularly the tour? I'm not going to bother writing up a real summary since i'm not creative enough to come up the the right Tweaks, but i'm sure you could find some fun ways to use them while talking about Google's attempt to help us find love/contextualize romance/sell ads :)
Google

Submission + - Drupal has been selected for the Google Summer of (drupal.org)

pvanerk writes: Sumitk writes:
We are thrilled to announce that for the seventh year in a row, Drupal has been selected for the Google Summer of Code program!

Drupal uses this great opportunity to expand its family with new talented contributors and award its existing long-term contributors. This fantastic program also gets Drupal some amazing new coding projects done! More information about the program is available in the Google Summer of Code website and program timeline.

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...