Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Security

Submission + - Medical Billing Firm Exposes 300k Individuals (securityweek.com) 1

wiredmikey writes: Southern California Medical-Legal Consultants, Inc. (SCMLC), a California company that represents medical providers in the recovery of billing from workers’ compensation insurance carriers, announced that data containing the names and social security numbers of approximately 300,000 individuals who have applied for California workers’ compensation benefits had been exposed to unauthorized access. SCMLC said it was notified of the exposed data by a security firm that discovered some of the files that had been indexed by Google.

SCMLC’s clients have included the largest hospital companies in the country as well as health insurers, HMO, large public hospitals, medical groups and union health trusts.

Comment Reading /etc/passwd is fine (Score 1) 169

Check the format (man 5 passwd): If you're going to supply such niceties as usernames rather than UIDs, or group names rather than GIDs, you must read /etc/passwd. For security's sake, the passwords are no longer kept there (at least in GNU/Linux, and I hope in any other modern OS), but in /etc/shadow or /etc/master.passwd (*BSD) which can only be read by root.

Thus, the encrypted passwords, required for brute-force decryption attempts, are not available to every Tom, Dick, and Mallory.

Comment Uses of ``intellectual property'' law (Score 2) 388

First, note that I believe rms has the right of it when he decries the use of the term ``intellectual property''. It screws up your thinking because it tosses many contradictory legal regimes into one bag, so that talking about, say, copyright, gets confused by concepts from trademark, or trade secrets, or patent, or....

True, copyright needs a major overhaul---it's outlived its usefulness in its current form. Arguably, patent law is even worse—certainly in the matter of patenting software.

Trademark has its problems, too, but just think about about a marketplace where trademark didn't exist. What's that widget you're buying? Oh, it's from Foo, Inc., and they make good stuff. But how do you know it isn't from Bar Corp., which pushes trash that masks itself as Fooware? You'd need a chain of custody similar to what you see on precision instruments: ``Calibration traceable to the National Institute of Standards and Technology''. Except you couldn't be sure the attestation was kosher. You'd have to do a careful analysis of every object you bought more complex than, say, a spoon, to be sure you got what you paid for.

That's the scenario trademark law is written to avoid. What we have here is a baby/bathwater situation caused by blind use of the term ``IP''.

Security

Submission + - Your Nintendo 3DS pwns you (defectivebydesign.org)

Max Hyre writes: "The Nintendo 3DS's terms of so-called service, and the even more grotesquely misnamed privacy policy, make it clear that you are in the service of Nintendo. Specifically, anything you do, write, photograph, or otherwise generate with the 3DS is Nintendo's possession, for them to do whatever, however, whenever, and for as long as they want. On the other hand, if you do something they don't like, they're prepared to turn your device into a doorstop—and you gave them permission when you started using it.

And if you have a child's best interests at heart, don't give it to anyone too young to know to never use her real name, type in an address or phone number, or take any personally-identifiable photos. They might, at best, end up in a Nintendo ad. At worst, who knows?

Some of the details are on Defective by Design's website. I haven't found the full text online yet. If you do, please post it in a comment."

Submission + - Your Nintendo 3DS pwn you (defectivebydesign.org)

Max Hyre writes: "The Nintendo 3DS's terms of so-called service, and the even more grotesquely misnamed privacy policy, make it clear that you are in the service of Nintendo. Specifically, anything you do, write, photograph, or otherwise generate with the 3DS is Sony's possession, for them to do with however, whenever, and for as long as they want. On the other hand, if you do something they don't like, they're prepared to turn your device into a doorstop—and you gave them permission when you started using it.

And if you have a child's best interests at heart, don't give it to anyone too young to know to never use her real name, type in an address or phone number, or take any personally-identifiable photos. They might, at best, end up in a Nintendo ad. At worst, who knows?

Some of the details are on Defective by Design's website. I haven't found the full text online yet. If you do, please post it in a comment."

The Internet

Submission + - .NET Registry may Change Domain Dispute Process (thedomains.com) 1

psyclone writes: The May 10th deadline for comments on the .net registry agreement renewal has arrived with new domain name dispute changes. Instead of UDRP, the new agreement proposes adding the Uniform Rapid Suspension (URS) process to the .net TLD. The URS is a quick $200 process for a trademark holder to disable and take ownership of a domain. URS also reduces the panel size from 1-3 people to a single person. You can still comment on the proposal by sending an email to ICANN.
Japan

Submission + - Japan radiation monitoring goes crowd, open source (cnet.com)

fysdt writes: "A new open and crowdsourced initiative to deploy more geiger counters all over Japan looks to be a go. Safecast, formerly RDTN.org, recently met and exceeded its $33,000 fund-raising goal on Kickstarter, which should help Safecast send between 100 and 600 geiger counters to the catastrophe-struck country.
The data captured from the geiger counters will be fed into Safecast.org, which aggregates radiation readings from government, nonprofit, and other sources, as well as into Pachube, a global open-source network of sensors. Safecast is one of the larger crowdsourced monitoring efforts, not unlike a similar effort in the United States that predated the Japanese disaster."

Comment And in some sort of ultimate irony... (Score 1) 285

No one seems to have noted the part of Bloomberg's article saying:

Apple applied to register App Store as a trademark in the U.S., and the U.S. Patent and Trademark Office approved the application, Apple said in the lawsuit.

Microsoft Corp. (MSFT) has opposed the registration and the matter will be the subject of proceedings before a trademark appeal board, Apple said in the court filing.

The people who registered `Windows' think `App Store' is unworthy of a trademark registration?

Slashdot Top Deals

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Working...