Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Submission + - What to do when someone else is using your email address? 7

periklisv writes: So, I was one of the early lucky people that registered a gmail address using my lastname@gmail.com. This has proven pretty convenient over the years, as it's simple and short, which makes it easy to communicate over the phone, write down on applications etc. However, over the past 6 months, some dude in Australia (I live in the EU) who happens to have the same last name as myself, is using it to sign up to all sorts of services. I daily receive emails from adult dating sites, loan services, government agencies, online retailers etc, all of them either asking me to verify my account, or, even worse, having signed me up to their service (especially dating sites), which makes me really uncomfortable, my being a married man with children.

I tried to locate the person on facebook, twitter etc and contacted a few that seemed to match, but I never got a response. So the question is, how do you cope with such a case, especially nowadays that sites seem to ignore the email verification for signups?

Submission + - If DHS database gets hacked it's hard to get a new face (technologyreview.com)

schwit1 writes: We’re willing to do a lot to make the airplane boarding process smoother, but privacy experts say we might want to think twice before agreeing to let a camera at the gate scan our faces.

Facial-recognition systems may indeed speed up the boarding process, as the airlines rolling them out promise. But the real reason they are cropping up in U.S. airports is that the government wants to keep better track of who is leaving the country, by scanning travelers’ faces and verifying those scans against photos it already has on file. The idea is that this will catch fake passports and make sure people aren’t overstaying their visas.

The practice is raising concerns among some legal experts, who say that the program may violate individual privacy protections and that Congress has not fully authorized it.

The U.S. Department of Homeland Security has partnered with airlines including JetBlue and Delta to introduce such recognition systems at New York’s JFK International Airport, Washington’s Dulles International, and airports in Atlanta, Boston, and Houston, among others. It plans to add more this summer. The effort is in response to a years-old mandate from Congress that DHS implement a biometric system for recording the entry and exit of non–U.S. citizens at all air, sea, and land ports of entry. Earlier this year, President Trump fast-tracked that mandate via executive order.

Submission + - Ask Slashdot: Why do so many of you think carrying cash is 'dangerous'? 5

An anonymous reader writes: Recently I Asked Slashdot what you thought about paying for things online using plastic, and the security of using plastic in general; thank you all for your many and varied responses, they're all much appreciated and gave me things to consider.

However I got quite a few responses that puzzled me: People claiming that paying for things with cash, and carrying any amount of cash around at all, was somehow dangerous, that I'd be 'robbed', and that I shoudn't carry cash at all, only plastic. I'm Gen-Y; I've walked around my entire life, in all sorts of places, and have never been approached or robbed by anyone, so I'm more than a little puzzled by that.

So now I ask you, Slashdotters: Why do you think carrying cash is so dangerous? Where do you live/spend your time that you worry so much about being robbed? Have you been robbed before, and that's why you feel this way? I'm not going to stop carrying cash in my wallet but I'd like to understand why it is so many of you feel this way — so please be thorough in your explanations.

Submission + - Chrome-browser hijack Windows DOS exploit (jsish.org) 3

Bent Spoke writes: Windows should be wary of a new Chrome browser Denial of Service threat that is making the rounds.

It starts when you click on a certain link and Windows freezes.
The mouse doesn’t respond and even Ctrl-Alt-Delete doesn’t seem to work, or takes a really long time (eg. 10-20 minutes).
The tab or browser close buttons don’t seem to work. However, by disconnecting the network cable and (eventually) opening task manager you can kill the browser.
This is not as big a problem on Linux, as the system does not freeze so the tab is easily closed.

The payload that eventually appears in the browser window is:

      Windows Defender Alert : Zeus Virus Detected In Your Computer !!
      Please Do Not Shut Down or Reset Your Computer.

      The following data will be compromised if you continue:

            1. Passwords
            2. Browser History
            3. Credit Card Information
            4.Local Hard Disk Files.

      This virus is well known for complete identity and credit card theft.
      Further action through this computer or any computer on the network will reveal private information and involve serious risks.

      Call Microsoft Technical Department: (Toll Free) 866 XXX-XXXX

This message, which is rather convincing as Windows is effectively hung, presumably connects you with a social-engineering service (sic).

The link that triggers the issue is of the following form (actual url changed for security reasons).

1234567891012345678.bid

This uses Javascript to successively redirect to:

1234567891012345678.bid/0
1234567891012345678.bid/01
1234567891012345678.bid/012

ie. it defeats redirect loop detection as each url is different.

One nasty side effect of this is that your browser history is filled with junk urls, making it practically impossible to access previously visited sites.
There are too many links to delete individually without hanging the browser (15K+), however this can be mitigated with "Clear Browser/History/Last Hour" if used right away.

Another issue to be aware of is that upon restart, you do not want to let the browser reopen previous tabs.

Submission + - AI Creates Fake Obama (ieee.org) 1

schwit1 writes: Computer scientists at the University of Washington previously revealed they could generate digital doppelgängers of anyone by analyzing images of them collected from the Internet, from celebrities such as Tom Hanks and Arnold Schwarzenegger to public figures such as George W. Bush and Barack Obama. Such work suggested it could one day be relatively easy to create such models of anybody, when there are untold numbers of digital photos of everyone on the Internet.

Are we going to have to create Heinlein’s “fair witness” as machine records become easier to fake?

Submission + - LIU XIAOBO Dies in Chinese Hospital: A deserving Nobel Peace Prize winner (voanews.com)

schwit1 writes: Chinese human rights prisoner Liu Xiaobo died Thursday at age 61 following a high-profile battle with liver cancer that made his death as controversial as his life.

Liu, a Nobel Peace Prize laureate who spent his last eight years as a prisoner of conscience, passed away at a hospital in Shenyang, China, where he had been moved from his prison cell in the final stage of his illness.

Submission + - NATO Providing Cybersecurity Equipment to Ukraine (securityweek.com)

wiredmikey writes: Ukraine is an area of great geopolitical significance — a sort of buffer zone between NATO and Russia — that both sides seek to influence. Crimea aside, neither side wishes to be too overt with military intervention, and the result is tailor-made for modern cyber warfare. NATO's official policy towards Ukraine is to bolster its independence.

As a result, NATO is providing Ukraine with cybersecurity equipment for some government institutions and authorities, which NATO secretary general Jens Stoltenberg says will enable Ukraine to "investigate who is behind certain cyber-attacks, because the response to them is extremely important."

In December 2014, NATO established a Trust Fund designed "to provide Ukraine with the necessary support to develop its strictly defensive, CSIRT-type technical capabilities, including laboratories to investigate cyber security incidents."

Submission + - Kaspersky Lab Has Been Working With Russian Intelligence (bloomberg.com)

An anonymous reader writes: Internal company emails obtained by Bloomberg Businessweek show that Kaspersky Lab has maintained a much closer working relationship with Russia’s main intelligence agency, the FSB, than it has publicly admitted. It has developed security technology at the spy agency’s behest and worked on joint projects the CEO knew would be embarrassing if made public.

The previously unreported emails, from October 2009, are from a thread between Eugene Kaspersky and senior staff. In Russian, Kaspersky outlines a project undertaken in secret a year earlier “per a big request on the Lubyanka side,” a reference to the FSB offices. Kaspersky Lab confirmed the emails are authentic.

Submission + - SPAM: Deep Partisan Divide on Higher Education

Linorge writes: Republicans have soured on higher education, with more than half now saying that colleges have a negative impact on the United States.An annual survey by the Pew Research Center on Americans’ views of national institutions, released this week, found a dramatic attitude shift on higher education among Republicans and people who lean Republican, with the change occurring across most demographic and ideological groups.
Link to Original Source

Submission + - Malware is a Threat to Clouds and IoT (cloudtweaks.com)

SciFiTurboGeek writes: Security expert Junaid Islam says that malware, if not contained, is an increasing threat to cloud and IoT. "The increasing number of personal compute devices and supply chain partners connecting to enterprise clouds makes universal endpoint protection impossible. Subsequently, malware can find and propagate from infected compute devices to cloud-based applications. Once infected, hosted apps can become malware super spreaders. However as bad as the risk of malware is to enterprises, the risk to IoT systems is even greater."

Submission + - Too Big to Succeed: Jawbone's Demise a Case of 'Death by Overfunding'

randomErr writes: Several Top-tier venture capital firms invested hundreds of millions of dollars in Jawbone, lifting its valuation to $3.2 billion in 2014. All that money couldn't save San Francisco-based Jawbone. Based on total funding raised Jawbone ranks as the second largest failure among venture-backed companies. The company's fall after raising more than $900 million provides a stark example of how the flood of cash pouring into Silicon Valley can have the perverse effect of sustaining companies that have no future, technology executives and financiers say.

Submission + - Linux finally starting to see the problem with certain init systems? (lkml.org)

jawtheshark writes: In a latest Linux Kernel Mailing List post, Linux Torvalds, finishes his mail with a little poke towards a certain init system. It is a very faint criticism, compared to his usual style. While Linus has no direct influence on the "choices" of distro maintainers, his opinion is usually valued.

Slashdot Top Deals

As the trials of life continue to take their toll, remember that there is always a future in Computer Maintenance. -- National Lampoon, "Deteriorata"

Working...