Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Submission + - Cell phone location data used to help locate bodies of two deceased children

rufey writes: Earlier this month, the bodies of two children were discovered buried in the backyard of Chad Daybell, the current husband of the childrens' mother, Lori. In the recently released probable cause document released this week, it was revealed that location data obtained from cell phone GPS and tower pings from persons of interest played a large role in both identifying who was probably involved in burying the bodies, and at what times that activity occurred. The location accuracy was apparently sufficient enough to identify two areas of interest in the large backyard, where the two sets of human remains were found.

More information about the case of Lori Daybell's two children can be found here.

Comment Reactive verses preventative (Score 2) 245

From my point of view, it seems its becoming clear that HCQ doesn't help much if at all with patients who are already ill and admitted to the hospital. Its good to see studies that are now also starting to follow the patients post-release from the hospital to see what the lingering issues, if any, are. One interesting thing I've seen lately is a possible correlation between losing the sense of taste and smell, at least temporarily, after recovery.

That being said, I went to the study website for a quick perusal but didn't find much in the way of the results - probably have to dig deeper. What I'm still interested in is if HCQ or any of the other drugs they used for the trial are effective as preventative care. Getting a flu vaccine when you are currently sick with the flu isn't going to help much with getting better. Same with measles and chicken pox and other things we have vaccines for. Same with poor diet or lifestyle choices. Once you are sick, you are now in a reactive mode, not preventative mode.

Look at the ventilator thing. Its a known fact that the vast majority of patents who have to be put on a ventilator will never come off of the vent. I've read various sources that say that 95% or more of patents on ventilators die before becoming well enough to be taken off them. So the focus should be to prevent patients from getting to the point of needing a vent, not to make millions and millions of vents that in 95% of the cases, doesn't save the life of the patient. With this and other ongoing studies, I think we are starting to see what works or doesn't work when you are already at the point of being in the hospital.

At the end of the day, finding things that will prevent someone from even having to go to the hospital in the first place needs more attention (besides locking yourself away for days/weeks/months on end).

Submission + - LetsEncrypt to revoke 3 million certs on March 4th

rufey writes: The free SSL cert provider LetsEncrypt is going to revoke 2.6% of the SSL certs issued by them that are currently active, due to a bug in their backend CA software

From a more detailed article at arsTECHNICA, the bug is in Boulder, the CA software LetsEncrypt uses.

Let's Encrypt uses Certificate Authority software called Boulder. Typically, a Web server that services many separate domain names and uses Let's Encrypt to secure them receives a single LE certificate that covers all domain names used by the server rather than a separate cert for each individual domain.

The bug LE discovered is that, rather than checking each domain name separately for valid CAA records authorizing that domain to be renewed by that server, Boulder would check a single one of the domains on that server n times (where n is the number of LE-serviced domains on that server). Let's Encrypt typically considers domain validation results good for 30 days from the time of validation—but CAA records specifically must be checked no more than eight hours prior to certificate issuance.

The upshot is that a 30-day window is presented in which certificates might be issued to a particular Web server by Let's Encrypt despite the presence of CAA records in DNS that would prohibit that issuance.

The CAB Forum, which oversees the public CA space, has a ticket for this specific issue.

Comment No Common Sense (Score 2) 80

It amazes me to this day that there are drivers who still lack common sense. A few examples:

James Kim. This one didn't involve a GPS. The route chosen was selected by consulting a paper map apparently.

How rescuers found Karen Klein, the woman who trekked 26 miles in the snow through the Grand Canyon. They did know the north rim of the Grand Canyon is closed in the winter, right? The main access road was closed for the season, so they decided to try a different route over forest service roads.

Man, son walk 20 miles for help. This one happened within the past couple of weeks. Like the one above, this family apparently was also trying to get to the Grand Canyon.

Comment Re:Don't mix work and fun (Score 1) 75

Every company I have worked at over the past 25 years has required all employees to go through training that goes over this topic explicitly. You are not allowed to have a romantic relationship with someone who is subordinate to you. Period. What if that relationship turns sour. What if the subordinate gets a promotion over someone else on the team who is considered more qualified (did they get the promotion because they sleep with the boss)? What if its perceived the superior is playing favoritism with a subordinate because they are sleeping together. For people who work for the same company but don't belong to the same reporting chain, its less of an issue, but the case where a relationship sours can still be awkward. Even for two people who are married to each other - the question of favoritism will always be there.

Its hard for me to believe that this type of training and policy isn't in place at most places. I've had to take such training on a yearly basis, and attest to the fact I took the training. But I guess once you get to a certain level of management, your immune it for the most part apparently. I remember one of the CEOs of HP once had an affair or something and eventually was forced out (may not be remembering right, but was something along those lines).

Comment Re:Worse than this... (Score 2) 40

An addendum: Google Prompt isn't tied to a SIM and/or a phone number - just a cell phone for which you are logged into Google. Its Saturday and I try to not think about IT on the weekends... So Google Prompt should be safe from SIM swapping. But the SMS method definitely is vulnerable.

I still prefer TOTP, which doesn't even require the cell phone be logged into anything - doesn't require SMS, nor a push notification from the site you are trying to log into.

Comment Re:Worse than this... (Score 2) 40

I have mod points but posting instead.....

I setup 2FA for a few Google accounts over the past week. What I wanted to do was use TOTP with Google Authenticator (requires an app and not tied to a SIM and/or phone number). However, you don't even see that option when setting up 2FA until you have selected one of the other two methods that both require your cell phone tied to your phone number: Google Prompt and SMS. Only after you enable one of those two do you even see TOTP as an option, and then only as a secondary method.

In regards to the original story, its sheer stupidity to not block outbound "request help" traffic so that the connection can't be initiated from the inside. You should also block other things like the on-line meeting sites (gotomeeting and the like) for the most part, especially for customer service reps. This is simple firewall 101, which the affected companies have failed at horribly.

... companies like Google are still promoting your phone number either as a 2-factor via SMS or for account recovery.

You actually get warnings from Google about your security if you don't have a phone number set up for account recover, even in the face of years of SIM hijacking attacks.

Comment Re:Hottest October? Not in Utah... (Score 1) 275

I live in northern Utah, so felt the cold first hand.

I'm not trying to imply that Utah is somehow significant enough to throw water on the whole climate change thing. I was just pointing out that while it may have been the hottest October on average globally, there were places where it was record breaking cold.

On the flip side I had a co-worker who took a vacation in France at the end of June of this year, and he said it was unusually hot there for that time of year.

Comment Hottest October? Not in Utah... (Score 0, Offtopic) 275

In other news, Utah had its coldest period in October since records started being kept in the late 1800s. The last two weeks of October saw the temperature in Salt Lake City dip down to 14 F, which beat the old record by a couple of degrees.

It was cold.

Up north in Montana they also had at least one pretty good snow storm, where it was also cold.

Yes, I understand an average is an average. Some places will be colder, some will be warmer/hotter. Just pointing out a location where it wasn't just colder, but a lot colder, and I experienced it first hand.

Comment The nitty gritty (Score 2, Informative) 21

For those interested in the history of this action, see https://groups.google.com/foru....

The "announcement" was made in the first post made on July 9, 2019.

This gives you some insight into what kind of stuff goes on when an entity applies to have their root CAs become trusted by Mozilla, and effectively, trusted in other browsers.

Comment Source post about the problem (Score 4, Informative) 88

Link to the source post for the issue at hand: https://gist.github.com/rjhans...

A very salient part from the Vice article: "If you think this is bad, consider this: the SKS software was written in an obscure language by a PhD student for his thesis. And because of that", according to Hansen, “there is literally no one in the keyserver community who feels qualified to do a serious overhaul on the codebase.”

The bottom line is this is taking advantage of a feature of OpenPGP - where you can have tens of thousands of people attach a signature to yours, to attest that your certificate is really yours. Problem is, once you get a large number of these attached, GnuPG will choke if it downloads one from a keyserver.

And, as shown above, no one wants to fix the issue with the keyservers (put a limit on number of signatures that can be attached), so it must not be a very important issue to begin with (/sarc)

Comment Partners split (Score 5, Informative) 216

Reading the linked article makes shows that the root cause of all of this was Dave's divorce from his first wife, Barbara, which was finalized in 2015. They co-founded Snopes in 1994, and fast forward to 2015 they had a 50-50 ownership in Snoopes. After the divorce, the ex-wife was approached by a vendor that Snopes was currently using, seeking to buy her 50%, which she sold to the vendor.

So the vendor ended up being a 50% owner of the parent entity that owns Snopes, with David owning the other 50%. The rest of the story turns on business partners squabbling over how money is spent, and where the crux of the matter lies.

Bottom line is that if you own a business 50/50 with your wife and you then split, unless there is something that stipulates how the ownership is going to work after the divorce (IANAL, so I don't even know the legal things you could even do, maybe nothing at all), either side could sell their interest in the business, and not necessarily to the benefit of the other partner. David could have bought out his ex wife, but may have been unable to due to the cost or other reasons.

This would be akin to being in business with a partner, and having a falling out with the partner, causing the partner to sell their interest to someone else, who the remaining partner may not like.

Comment Re:OK, but why... (Score 3, Informative) 179

Indeed. The SpaceX property, according to Google Maps (plus code: XRWV+X3 Port Isabel, Texas), is situated north of the Rio Grande river, which *is* the border between the US and Mexico. The terminus of the Rio Grande river where it dumps into the Gulf of Mexico is right there, and from satellite images, the ground looks kinda like wetlands.

Its located at the mouth of the river where it dumps into the Gulf of Mexico. The land looks like a mix of dry and marshy ground. The issue isn't that part of SpaceX's property is in Mexico (its not). Its that you can't build a wall like is being proposed in wet, marshy ground, so the actual wall will be north of the actual border, which means you can be on the south side of the wall and yet be standing on ground belonging to the US.

Comment Re:Well, why do modern aircraft allow pilots to cr (Score 1) 167

Out of 136 people on board, only 3 died, all of smoke inhalation due to not being able to escape the aircraft.

https://en.wikipedia.org/wiki/...

The aircraft was intentionally flying at a very low altitude as it was part of an airshow, demonstrating fly-by-wire. It was the fist public demonstration of fbw, which obviously didn't go well.

Comment Re:A customer in Utah (Score 1) 198

My DNS queries go through a local forwarder sitting on my desk, which forwards to two DNS servers over a VPN, which are themselves housed at a VPS provider. I own the VPS servers and maintain them, so I own the entire DNS stack. My VPS servers do the recursive DNS work, and that is where my control ends.

I did all of this because I got tired of CenturyLink always directing me to their "suggestions" page when I mis-spelled a URL (for those that I hadn't bookmarked in some way yet), which was all done with their DNS not returning an NXDOMAIN but instead returned a IP to their "suggestions" page for non existent domain names.

I could have just used either Cloudflare or Google's DNS service, but I wanted to keep CenturyLink's prying eyes off of my DNS traffic. I also host my own domain and authoritative DNS servers for it, so I already had the VPS infrastructure to do all this.

Its worked fairly well the past year I've been using it.

Slashdot Top Deals

Software production is assumed to be a line function, but it is run like a staff function. -- Paul Licker

Working...