Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:The bug is in Disk Utility GUI volume creation (Score 4, Interesting) 85

Right, the system shouldn't know, that's why this is a bug.

When creating a new volume, [the Disk Utility GUI] apparently puts the password into the password hints field.

A hint needs to be plaintext to read it later, the error was the utility saving the *password*, not the *hint*, in the hint field.

Comment Re:Sounds like a step backwards (Score 2) 281

Then when it was time for exams, we wrote the formulas we were supposed to memorise into programs on the calculator.

Same. Gave me my most valuable lesson in programming. I made a helper program on my calculator and distributed it to a few friends who distributed it to their friends, and so on. The program had a few options (depending on what was being asked, how the question was worded, etc.), prompted the user for the 'givens', and printed the result neatly in the center of the screen. Being young and naive, I simply wrote the result to the screen with an offset, then wrote a few blank spaces over the ten-thousandths and hundred-thousandths spot to make the result appear centered.

The exam question asked for the answer to be rounded to the thousandths place, and guess what? The thousandths place had to be rounded up, which of course no-one knew because the display simply truncated the result without rounding.

Whole class got that question wrong except me (spent so long making the program that muscle memory meant it was quicker for me to do the math manually).

Lesson learned: if you want people to stop bugging you for stuff, give them wrong information. No-one asked to use my programs in that class ever again!

Comment Re:NoMX's Response (Score 4, Informative) 77

The old software's vulnerability were few and you needed physical access to exploit

The researcher/blogger needed physical access to discover the exploits, but the CSRF attacks can be embedded onto any webpage, he even provides the code in his blog post.

Side note: I'd suggest watching the nomx videos about "How it Works". Quality.

Comment Re:Nomx has a reply on their site (Score 1) 77

Blog post is a long read but good.

He reset the root account password so he could log in via ssh and poke around the filesystem. All the exploits he found were exploitable over the web interface (which is how the 'typical user' would interact with the device, using the default username/password of "admin@example.com" and "password") without the need to 'root' the system.

Comment Re: How? (Score 1) 99

Max cell tower range at the low end is 22 miles (depends on the technology)
Cruising speed (probably faster than they were going, but hey, worst case) is ~550mph
Putting it together, we get 2.4 minutes for a phone to be connected to a tower.

Don't know how long a handover takes, but I'll bet its less than 30 seconds. Probably closer to 3-5 seconds, considering that's generally how long it takes the network to stand up a connection for you to make the call in the first place.

Slashdot Top Deals

If a subordinate asks you a pertinent question, look at him as if he had lost his senses. When he looks down, paraphrase the question back at him.

Working...