Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×

Comment Re:I stopped reading the summary (Score 1) 210

I'm not seeing the ambiguity in 'offline' - offline means exactly that, the system is not online (either its turned off or disconnected from the network).

And its real goal is not to protect against such errors (that is what the historical part of a backup like the incremental rsync you described is for). What it is for is protection against a hacker getting into your system and remotely erasing your backups along with your main system (q.f. the recent story re that site of flight sim stuff). Simply saying 'but the target box only exposes ssh/rsync' isn't good enough. All you need is one vulnerability and bang.

You could possibly make an argument in favour of a box which exposes no remote services at all and initiates the rsync itself to a partition explicitly mounted noexec, nosuid; but it is important to realise that that is simply managing the risk down (to ruddy near zero) rather than removing it.

Now for a home setup, its probably the most arguable of all the elements of a backup as to whether you need it. As with all these things, your level of paranoia determines this - I use something similar to what is described above. Yes, I am vulnerable to that type of attack potentially, but that a risk I have judged and made a call on. To think that approach is not at risk is dangerous.

Software

Linux 2.6.27 Out 452

diegocgteleline.es writes "Linux 2.6.27 has been released. It adds a new filesystem (UBIFS) for 'pure' flash-based storage, the page-cache is now lockless, much improved Direct I/O scalability and performance, delayed allocation support for ext4, multiqueue networking, data integrity support in the block layer, a function tracer, a mmio tracer, sysprof support, improved webcam support, support for the Intel wifi 5000 series and RTL8187B network cards, a new ath9k driver for the Atheros AR5008 and AR9001 chipsets, more new drivers, and many other improvements and fixes. Full list of changes can be found here."
Intel

Submission + - Asus Unveils Eee Box Atom-Powered Desktop (hothardware.com)

MojoKid writes: "Asus has released details at Computex today, regarding their upcoming Eee Box mini-desktop follow-on to the Eee PC. The Eee Box is based on a low-power Intel Atom processor and configurations with 512MB, 1GB, or 2GB of RAM will be available. Although the actual dimensions are listed, it's the image from ASUS' booth that really gives a sense of scale. In the picture, the Eee Box is standing next to a paperback book. These systems will feature Linux and Windows operating system installations that are very similar to the Eee PC mini-notebooks. Pricing is said to be in-line with the Eee PC cost model as well. A 2GB model with a 160GB hard drive, for example, will cost only $299."
Privacy

Submission + - Sears at it again: burglar's reference (ca.com)

Anonymouse Coooward writes: "CA has another scoop on Sears:
http://community.ca.com/blogs/securityadvisor/archive/2008/01/03/managemyhome-com-another-privacy-issue-for-sears.aspx

Sears' managemyhome.com site allows any burglar to case a home from the comfort of their armchair and provide them with everything they'd need to bluff their way through picking it up for a "recall".

quotes from TFA:

Once you register, you can look up major purchases for ANY address. All you need to do is enter a name, address and phone number and if the person attached to that info has made a major purchase at sears you get that info!! They have no real controls in place — you have to enter an onscreen code and they say that keeps your info safe, but that does not stop someone from entering other people's contact info to see their product purchases.

I checked this out, and sure enough, in about 2 minutes I was looking at every purchase my parents had made since 1989. What's worse, I had used no more info than is publicly listed in the phone book: their name, address, and telephone number. Once you have an account at http://www.managemyhome.com/ and have logged in, select the first option (Home Profile) from the "Home" pull-down menu on the main page. In the upper right corner of the page, you should see a "Sears Purchase History", with a button labeled "Find my Products". The only information they asked for when I followed that button was a name, phone number, and address.

If you had major dealings with Sears, that information is now available to the public, from a television bought in 1978 to a stove which was purchased elsewhere but had been repaired by a Sears technician."

Wine

Submission + - Running MS Office 2003 on Linux with Wine 0.9.52 (blogspot.com)

twickline writes: "This is a Office 2003 on Linux with Wine 0.9.52, Guide with lots of nice screenshots and tips. The long standing error"Microsoft Office (Word or Excell) has not been installed for the current user. Please run setup to install the application" has now been properly fixed as of Wine 0.9.52 in addition to many other fixes and enhancements. If you currently use Office 2003 on Linux via Wine this should be considered as a major upgrade."
Television

Submission + - Tiger Team: Penetration Testing TV Series Dec 25 (courttv.com)

ChazeFroy writes: CourtTV (TruTV) has a new series starting Dec 25 at 11 pm called Tiger Team. It follows a group of elite penetration testers hired to test organizations' security using social engineering, wired/wireless penetration testing, and physically defeating security mechanisms (lock picking, dumpster diving, going through air vents/windows). They do all of this while avoiding the organizations' various security defenses as well as law enforcement. The stars of the show also did a radio spot this morning in Denver, and its MP3 is here.
Music

Submission + - Next for Apple: Lossless iTunes Store (cnet.co.uk)

DrJenny writes: C|net has an interesting piece running at the moment about why Apple developed their own lossless codec, and more importantly that iTunes will become a download store for lossless audio, potentially from all the major labels. This would be a massively positive move for people who spend hundreds, if not thousands, of dollars on hi-fi gear, but refuse to give money to stores that only offer compressed music. It's a big FLAC, DRM, ALAC and GB discussion, but it's a very exciting perspective, and surely one that'll pan out meaning audiophiles will finally be able to take advantage of legal digital downloads.
Security

Submission + - SquirrelMail Repository Poisoned (beskerming.com)

SkiifGeek writes: "Late last week the SquirrelMail team posted information on their site about a compromise to the main download repository for SquirrelMail that resulted in a critical flaw being introduced into two versions of the webmail application (1.4.11 and 1.4.12).

After gaining access to the repository through a release maintainer's compromised account (it is believed), the attackers made a slight modification to the release packages, modifying how a PHP global variable was handled. As a result, it introduced a remote file inclusion bug — leading to an arbitrary code execution risk on systems running the vulnerable versions of SquirrelMail.

The poisoning was identified after it was reported to the SquirrelMail team that there was a difference in MD5 signatures for version 1.4.12.

Version 1.4.13 is now available."

Biotech

Submission + - Artificial Blood Vessels Grown on a Nano-Template (eurekalert.org)

Invisible Pink Unicorn writes: "Researchers at MIT have found a way to induce cells to form parallel tube-like structures that could one day serve as tiny engineered blood vessels. The researchers found that they can control the cells' development by growing them on a surface with nano-scale patterning. The work focuses on vascular tissue, which includes capillaries, the tiniest blood vessels, and is an important part of the circulatory system. The team has created a surface that can serve as a template to grow capillary tubes aligned in a specific direction. The cells, known as endothelial progenitor cells (EPCs), not only elongate in the direction of the grooves, but also align themselves along the grooves. That results in a multicellular structure with defined edges — a band structure. Once the band structures form, the researchers apply a commonly used gel that induces cells to form three-dimensional tubes."

Slashdot Top Deals

"Money is the root of all money." -- the moving finger

Working...