Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Detection still requires a scanner (Score 1) 410

After reading the article a couple of times, it seems that this is a tool that needs to be coupled with a scanner. This is a method that determines malware is trying to disguise itself or intefere with a scanner. Therefore a simple attack method would be to be a normal program and not try to disguise itself. The only way it could be detected would be for a scanner to already have a signature for that malware program. Hence this is a tool that should be incorporated in already existing anti-malware programs and not a standalone detector. Do I understand this correctly? And if so I am underwhelmed. I need a tool that can detect zero day attacks and this does not seem to be that. Julian
Education

Colleges Secretly Test Music-Industry Project 208

An anonymous reader writes "The music industry is still pushing Choruss, a controversial blanket-licensing scheme, but it is far less innovative than first described. Six colleges are setting it up now, but they refuse to have their names released because the issue is a political landmine — and who wants to be associated with the recording industry?"
Security

Submission + - MS Confirms Zeroday Flaw, Drive-by Exploits

Automatic Pow writes: Microsoft has issued a security advisory with confirmation of a zero-day Windows vulnerability in the way animated cursor (.ani) files are handled. The threat is caused by insufficient format validation prior to rendering cursors, animated cursors, and icons. Drive-by exploits against Internet Explorer users have already been picked up in the wild. Windows Vista is confirmed vulnerable.
Networking

Submission + - ScienceLogic Release Python Code for Net-SNMP

Anonymous writes: "SCIENCELOGIC ANNOUNCES PYTHON AVAILABILITY FOR NET-SNMP TO OPEN SOURCE SOFTWARE DEVELOPER COMMUNITY

Availability of Python language for further development of Net-SNMP source code via SourceForge.net enables broader contribution to advancement of network management

RESTON, Va. — March 29, 2007 — ScienceLogic(TM) LLC, a leading provider of next-generation framework technology, today announced that the company has released source code for Python developers to start using Net-SNMP tools and libraries for network management software development. Starting with Version 4.1 of ScienceLogic's EM7 IT Management Appliance, Net-SNMP 5.4 will be included in the EM7 proprietary polling engine — resulting in enhanced performance and new features for EM7 customers.

The source code for Net-SNMP 5.4 which includes the Python bindings is available to the open source developer community through SourceForge.net, a provider of free hosting to open source development projects. SourceForge.net is the world's largest open source software development Web site, hosting more than 100,000 projects and 1,000,000 registered users with a centralized resource for managing projects, issues, communication and code.

ScienceLogic sponsored SPARTA, Inc., a systems engineering and advanced technology company, in the development of this module. Wes Hardaker and Giovanni Marzot of SPARTA spearheaded the development. Hardaker is also lead developer of the open source Net-SNMP project.

The company hopes that its contribution of the core Python module components to the open source community will encourage developers to take advantage of the SNMP management protocol through the use of the Net-SNMP 5.4 toolkit. According to the Python community website, www.python.org, Python is used in thousands of real-world business applications at companies including Google, NASA, Industrial Light & Magic and YouTube.com.

"Python is an open source dynamic language that has gained much attention in recent years for its productivity and ease of use," said Stephan Deibel, chairman of the board of the Python Software Foundation. "We've seen significant growth in our world-wide community as more and more companies move to take advantage of Python."

"The open source community is a key driver for technological innovation; the big question for commercial software companies is how to work most effectively with that community," said David F. Link, CEO of ScienceLogic. "The release of this source code is an example of how ScienceLogic is leveraging open source for innovation and rapid development in our products. At the same time, we are making the powerful Net-SNMP APIs available to the wider community of Python developers who can extend its functionality even further, and everyone benefits."

"The Net-SNMP project is consistently ranked among Sourceforge.net's top 100 current projects, exhibiting its popularity in network management," said Wes Hardaker, senior research scientist at SPARTA, Inc. "Up until ScienceLogic's involvement, the Net-SNMP APIs have not been available for Python language programming. I am excited that ScienceLogic has open sourced the Python module, as it will inevitably lead to many new applications and improvements to the Net-SNMP project itself."

SNMP is a widely-used protocol for monitoring the health and welfare of network equipment, computer equipment and devices. Net-SNMP (formerly known as UCD-SNMP) is a protocol used to deliver network management information between networked hosts. Using SNMP, administrators can regularly poll devices and collect their management information, enabling them to manage certain aspects of networking, including performance management and problem detection. The Net-SNMP library provides open source, off-the-rack components which enable simpler and faster development and deployment of SNMPv1, SNMPv2c and SNMPv3 management applications that can be integrated into any network management solution.

About ScienceLogic
Reston, Va.-based ScienceLogic LLC was started with one goal: Simplify IT. Founded and staffed by technology professionals who are intensely focused on making IT management simpler, better and faster, ScienceLogic is committed to delivering solutions with unquestionable quality and value and enabling its customers to deliver impeccable service to their constituents. ScienceLogic's patent-pending EM7 IT Management Appliance is a next-generation "framework" solution engineered to deliver comprehensive systems, network and application management. The revolutionary EM7 technology combines a secure and pre-integrated set of applications with automation tools, reporting, "single pane of glass" view and centralized data repository — all optimized to work together for proactive and efficient IT operations management. For more information, call 1-800-SCI-LOGIC (1-800-724-5644) or visit our web site at www.sciencelogic.com.

About the Python Software Foundation
The Python Software Foundation (PSF) is a 501(c)3 non-profit organization that holds the intellectual property rights to Python. The PSF provides the financial backing for PyCon, the annual North American Python conference, and has funded grants and other projects in the Python open source community. Additional information on the PSF is available at http://python.org/psf. To make a tax-deductible donation, please visit http://python.org/psf/donations/. Corporate donations are also being accepted."
GNU is Not Unix

Submission + - GPLv3 on the Novell-Microsoft Patent Agreement

jeevesbond writes: "Groklaw has an article that unravels some of the mystery of GPLv3 and the clauses dealing with the Microsoft/Novell Patent Agreement. From the article:

I take it that the focus is upon preventing Microsoft from being able to pursue its patent strategy, and rather than "punishing" Novell, instead protecting noncommercial developers, and thus depriving Novell of economic benefits of the deal. It really makes it more important than ever that the kernel guys realize that if they do not go to GPLv3, they will be enabling Novell's patent deal and preventing the effects of GPLv3 from taking effect.
"
The Almighty Buck

Submission + - 389,090 U.S. programmer jobs going offshore

nbauman writes: "Free trade isn't win-win after all. WSJ, 28 Mar 2007, Job prospects: Pain from free trade spurs second thoughts; Mr. Blinder's shift spotlights warnings of deeper downside, David Wessel and Bob Davis. http://online.wsj.com/article_print/SB117500805386 350446.html Alan S. Blinder, Princeton U., former Federal Reserve Board vice chairman and advisor to Democratic presidential candidates, who used to say that free trade enriches the U.S. and its trading partners, now admits that new communication technology will put 30-40 million American jobs at risk in 10-20 years. Ready to lose their jobs to offshore: 389,090 computer programmers, 1,815,340 bookkeepers, acounting and auditing clerks. Blinder still believes in free trade, comparative advantage, but wants more for displaced workers, better education system. Blinder helped Clinton sell NAFTA, but now admits it wouldn't create U.S. jobs after all. Trade changes types of jobs, not number. Technology allowed Indians in call centers to do the work of Americans, at lower wages. "Tens of millions of additional American workers will start to experience an element of job insecurity that has heretofore been reserved for manufacturing workers." Debate: Should government encourage forces of globalization or try to restrain them? Latin America did poorly since tariff cuts in 1980s and 1990s, compared to protectionist China and Southeast Asia. Paul Samuelson, in 2004 essay, condemned "economists' over-simple complacencies about globalization" and said workers don't always win. Lawrence Summers, advocate for trade expansion as Clinton Treasury Secretary, said retraining is "pretty thin gruel". Ralph Gomory, former IBM chief scientist, says rise of China and India could make the U.S. lose important industries. Harvard economist Dani Rodrik says trade barriers should help poor nations build domestic industries and give rich nations time to retrain workers. But Jagdish N. Bhagwati says jobs will grow in medicine, law and accounting."
Music

Submission + - Why the RIAA doesn't want defendants exonerated

RageAgainsttheBears writes: The RIAA is slowly beginning to find itself in an awkward position when a few among its many, many lawsuits don't manage to follow through. Typically, when they decide a case isn't worth pursuing (due to targeting the wrong person or not having sufficient evidence), they simply move to drop the case and any counterclaims, and everyone goes separate ways. But recently, judges have been deciding to allow the RIAA to drop the case, but still allowing the counterclaim through. According to the Ars Technica article:

If Judge Miles-LaGrange issues a ruling exonerating Tallie Stubbs of infringement, it would be a worrisome trend for the RIAA. The music industry has become accustomed to having its way with those it accuses of file-sharing, quietly dropping cases it believes it can't win. It looks as though the courts may be ready to stop the record labels from just walking away from litigation when it doesn't like the direction it is taking and give defendants justice by fully exonerating them of any wrongdoing.

Data Centers Breathe Easier With Less Oxygen 392

PC World is reporting that some companies are looking at a new method of fire protection in their server closets, oxygen-deprivation systems.""Wood stops burning when the oxygen content falls to 17 percent and plastic cables between 16 to 17 percent, said Frank Eickhorn, product manager for fire detection at Wagner Alarm and Security Systems GmbH in Hanover, Germany. Wagner makes electric compressors that use a special membrane to remove some of the oxygen from the outside air, a system the company calls OxyReduct. The excess oxygen is exhausted, and the remaining nitrogen-rich air is pumped inside the data center."
Communications

Submission + - Intel's WiMedia UWB Accepted as ISO Standard

writertype writes: "After failing to reach a compromise standard on ultrawideband (UWB), Intel said it would petition Ecma, the arbiters of the ISO standards, for inclusion. Two years later, it's paid off: the WiMedia "standard" is now an ISO standard, we're reporting over at ExtremeTech. The payoff? "The standard requires countries with international trade treaties to sell the standardized WiMedia products within their borders."

By the way, anyone heard anything from the WirelessHD or the Cable-Free folks lately? As far as I can tell, the first one's in its cradle, and the second one's in its deathbed."
Businesses

Submission + - Employee Scheduling Software Receives The Highest

Asgard Team writes: "If imitation is the highest form of flattery then Asgard Systems Inc. has been receiving it in spades. They are the publishers of Time Tracker — employee scheduling software. Judging from some of Asgards' competitors, Time Tracker appears to be the product to imitate.

They have had one competitor copy their logo and use it with their own product. Another competitor directly copied the Asgard web site (www.asgardsystems.com) and used it to sell similar software. In an attempt to increase market share, another employee scheduling company called their product Time Tracker.

Then, there is the very bold competitor that used the name Asgard Systems as their own company name. The company was even located in the same city as Asgards' head office. The real Asgard was alerted to the issue when customers began to call with complaints that just didn't make sense.

There was also the time that Asgard Systems discovered a tender and responding bids to develop an exact copy of the Time Tracker software. Their free trial version was copied and distributed as the basis of the tender.

Asgard also appears to be imitated when it comes to concepts and terms used. Scheduling concepts originally developed by Asgard have also appeared in a number of their competitors' products as well.

According to Richard Askwith, their product manager, "So far, our response has been to call the offending party and present our case. The embarrassed marketing director usually agrees to rectify the situation. In the case of the stolen logo, we were in the midst of redesigning our logo anyway. The tender to replicate Time Tracker was apparently cancelled, due to the high cost of development".

Richard goes on to say, "As amusing as these incidents are, I expect that we may need to take more aggressive action in the future. It is very fortunate for all, that the offending parties voluntarily curtailed their actions".

A certain degree of functional overlap can be expected in any industry. However, it is innovation and difference that make for healthy markets. Asgard has been happy to take the innovative lead but sometimes flattery crosses the boundary."
Sun Microsystems

Submission + - Ian Murdock joins SUN

RLiegh writes: "In an entry on his Weblog, Ian Murdock announced that he is joining Sun Microsystems as their chief operating platforms officer which, as he put it in his opensolaris post "basically means I'll be in charge of Sun's operating system strategy, spanning Solaris and Linux." In all likelihood one of his first priorities will be "closing the usability gap" between Solaris and Linux. Of course, being the founder of Debian -the operating system which forms the base of knoppix and Ubuntu- Ian Murdock needs no introduction to even casual slashdot readers."
Space

Submission + - SpaceX Demonstration Flight 2 Slated for Launch

Racalac writes: Space Exploration Technologies Corporation is scheduled to launch its Falcon-1 launch vehicle from Kwajalein Atoll in the Marshall Islands today at 7pm Eastern Time (2300 UTC). This is the commercial space launch company's second demonstration flight; the first flight ended with loss of the vehicle and payload. There is a webcast (Windows Media Stream) of the launch beginning at T-1 hour.
Google

Submission + - Traffic flow now on Google Maps

JohnAGonzalez writes: A recent look at Google Maps shows that they have added a new traffic feature. Click on the Traffic button in the upper right-hand corner of the map window while viewing your local metropolitan area and the major roads will be overlaid with colored outlines that show the traffic flow for that particular roadway.

Slashdot Top Deals

Our OS who art in CPU, UNIX be thy name. Thy programs run, thy syscalls done, In kernel as it is in user!

Working...