Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Security

Submission + - Feds Hold Open Competition for Hash Standard (scitedaily.com)

blee37 writes: The federal government is holding an open competition to decide the next secure hash standard, which will be called SHA-3. The winner will be specified as one of a handful of secure hash algorithms approved for use by all federal agencies for digital signatures, secure key-exchange, and similar protocols. With SHA-1 on the way out and SHA-2 having never gained wide adoption, it is likely that a good SHA-3 algorithm would become the de facto standard. The competition is in the second round and 14 algorithms remain.

The feds have used open competitions to select encryption algorithms in the past — for example DES and AES were chosen this way. The open process makes perfect sense because the government wants as many smart people as possible to submit and try to break each other's codes. Modern encryption algorithms no longer rely on the secrecy of their source code because it is assumed that source code will fall into the wrong hands anyway. Furthermore, the open process creates a perception of greater legitimacy. A hash algorithm handed down directly by the government would be suspected of having a "backdoor" allowing national security agencies to read your messages.

Comment Re:Policy document (Score 1) 246

Particularly interesting is the following clause indicating that your electronic devices can be searched even if the officer has no good reason to think you are 'suspicious.'

5.1.2. In the course of a border search, with or without individualized suspicion, an Officer may examine electronic devices and may review and analyze information encountered at the border, subject to the requirements herein and applicable law.

I suppose this is the same as the right of officers to open everyone's bags, without any need of proving suspicion. This is quite an invasion of people's privacy and property, yet realistically I don't think this will endanger attorney-client privilege or trade secrets. The officer searching you probably searches thousands of people a day. It's not like he's going to go through your data files and memorize all the important business/legal documents and then report them to your competitors. The policy document indicates that all electronic searches take place in your presence and with a supervisor present.
Science

Submission + - The Swiveling Heads Experiment (scitedaily.com)

blee37 writes: Suppose that you are observing a group meeting but cannot hear what people are saying or see their mouths. Could you tell who was speaking and who was listening based on body language alone? Dutch researchers have shown that the answer is 'sometimes.' They used head tracking software and 3D avatars in a virtual environment to have observers answer just this question based only on head movements taking place during a meeting. The results are important not only for understanding how the human meat-machine works but also suggests that electronic communication tools like videoconferencing are lacking in some of the body language and visual cues that makes real-life interaction so comfortable for us.

Comment Re:Images definitely still censored (Score 2, Interesting) 300

According to CNN, Tiananmen is the proper spelling and Tienanmen is a misspelling that is not properly censored due to technical errors. Apparently those errors have not been fixed since 2006. http://money.cnn.com/2006/01/30/technology/browser0130/index.htm Thanks for the link though. Impressive number of tank man pictures. I hope Google does provide uncensored search, even if for just a few hours.
Google

Google Hacked, May Pull Out of China 687

D H NG writes "Following a sophisticated attack on Google infrastructure originating from China late last year, Google has decided to take 'a new approach' to China. In their investigation, Google found that more than 20 large companies had been infiltrated and dozens of Chinese human rights activists' Gmail accounts had been compromised. Google has decided to 'review the feasibility of [its] business operations in China,' no longer censoring results in Google.cn, and if necessary, to 'shut down Google.cn, and potentially [Google's] offices in China.'"
Television

Boxee Opens Beta To All 163

DeviceGuru writes "Boxee has quietly moved its long-awaited Beta release onto its public download site, reports OpenBoxeeBox.com. The new version of this free Internet- and local- A/V streaming player currently supports PCs running Mac OS X, Windows XP, and Ubuntu OSes, with an Apple TV version coming soon. Key enhancements include a vastly redesigned homescreen and new global menu, which collectively make it much quicker to locate content, an improved search function that now treats online and local media equivalently, so you can locate and play movie or TV show titles much faster, plus — at long last — a fully functional Netflix instant-downloads player appears in the Windows version (but not in the Linux version). Also of significance is that Boxee's graphical engine has migrated from from OpenGL to DirectX, allowing it to take advantage of Direct X video acceleration. The free public Boxee Beta A/V player software is available on Boxee's website."
Sci-Fi

Star Trek Online Open Beta Starts Today 309

Today Cryptic Studios will begin the open beta of Star Trek Online, opening their test servers to invitees and anyone who has pre-ordered the game. The beta will run through the 26th, and the game will officially launch on February 2nd; head-start players will be allowed in on January 29th. The game is set in the old universe (not the rebooted one from last year's movie), and takes place roughly 30 years after the events in Star Trek: Nemesis. There are two playable factions to start — the Federation and the Klingon Empire — and more may become available later on. There will be conflict between the two factions, but supposedly all PvP will be "optional and consensual." Players will be able to choose from a variety of ships, and they'll see cameos from familiar characters. Eurogamer has a hands-on preview of the game, and fans of the Trek universe will be pleased to hear that "Cryptic is clearly thinking about Star Trek first and MMO convention second." A number of gameplay trailers are available for viewing, and the official forums have a nice collection of facts.
Mozilla

Mozilla Rolls Out Firefox 3.6 RC, Nears Final 145

CWmike writes "Mozilla has shipped a release candidate build of Firefox 3.6 that, barring problems, will become the final, finished version of the upgrade. Firefox 3.6 RC1, which followed a run of betas that started in early November, features nearly 100 bug fixes from the fifth beta that Mozilla issued Dec. 17. The fixes resolved numerous crash bugs, including one that brought down the browser when it was steered to Yahoo's front page. Another fix removed a small amount of code owned by Microsoft from Firefox. The code was pointed out by a Mozilla contributor, and after digging, another developer found the original Microsoft license agreement. 'Amusingly enough, it's actually really permissive. Really the only part that's problematic is the agreement to "include the copyright notice ... on your product label and as a part of the sign-on message for your software product,"' wrote Kyle Huey on Mozilla's Bugzilla. Even so, others working on the bug said the code needed to be replaced with Mozilla's own."
Mozilla

Submission + - Mozilla draws criticism over add-on plans (pcpro.co.uk)

Barence writes: Mozilla has sparked a revolt among developers by admitting that stability and simplicity will soon take precedence over flexibility when creating Firefox add-ons. Firefox architect Mike Connor admitted that Mozilla considered add-on creation and maintenance far too difficult, and was looking to make the process easier through tools such as Jetpack, which allows developers to create adds-ons using web technologies including HTML, CSS and JavaScript. "We knew from the beginning that we would have to trade off truly limitless customisations to produce a more stable API/pseudo-API, but we felt that was worth it to achieve our long-term goals for the project," he writes on the blog.
Sci-Fi

Submission + - 'Spider-Man 4' Scrapped, Franchise Reboot Planned (imdb.com) 3

derGoldstein writes: Yesterday it was asked What SciFi Should Get the Reboot Treatment Next?. If you consider SpiderMan as "proper SciFi", then it would appear that's the answer. According to IMDB, "Sony Pictures decided today to reboot the Spider-Man franchise after Sam Raimi pulled out of Spider-Man 4 because he felt he couldn't make its summer release date and keep the film's creative integrity. This means that Raimi and the cast including star Tobey Maguire are out. There will be no Spider-Man 4. Instead, the studio will focus on a reboot script by Jamie Vanderbilt with a new director and a new cast."

Submission + - Barbie... future Computer Engineer? (barbie.com)

TimTucker writes: For all those who lament the lack of women in IT, Mattel is having a contest to see which career Barbie should choose next and "Computer Engineer" is on the list. This is our chance to make a difference!

Comment Re:amusing (Score 1) 350

As other people have pointed out any sort of computer device must store and send data. (1) Any modern computer will have a framebuffer that stores the image temporarily. (2) The signal has to be sent from the scanners to the display, so someone could open the machine and could redirect the signal to go somewhere else like a network.

It makes more sense to ask how easy it is to store and send data. There isn't enough information to determine this.

"The official declined to say whether activating test mode requires additional hardware, software or simply additional knowledge of how the machines operate."

It would make a big difference whether the device has a hard drive or can write to portable media like a flash drive or writable CD. It would also make a big difference whether the device has the hardware to connect to networks (e.g. a NIC). We might ask similar questions about the device's software.

Without knowing the answer to those questions, it is hard to say whether the device is posing any danger in excess of that which is unavoidable by nature of its being a computer.

Final thought: It might be more sensible to secure the devices by relying on encryption rather than trying to preventing "storage" and "transmission." For example, one could encrypt the signal from the scanners as it was passed to the display, store the encrypted bits in the framebuffer, and only decipher the signal as it was passed to the display. The encryption mechanism would need to be a blackbox hardware device so the keys couldn't be snooped.
News

Submission + - Baidu Hacked by Iran

Uber Banker writes: Baidu is suddenly unavailable, with sources all over China confirming this. It seems that China’s most popular search engine, with a market share of over 77% has been hacked by Iranian hackers. At present, the website is unavailable, but we have found a screenshot from Twitter users Budi Putra and doubleaf. It seems that the website has been DNS hacked by Iranian Cyber Army, the same guys that hacked Twitter a few weeks ago.
Security

Submission + - The Hacker News Network Returns (hackernews.com)

spacerog writes: "It was briefly mentioned on slashdot before but now it is out of beta. After ten years the original Hacker News Network is back. Originally a side project of the hacker think tank L0pht Heavy Industries HNN has relaunched as a video blog reporting on news and views of the information security and computer underground."

Slashdot Top Deals

To do nothing is to be nothing.

Working...