Follow Slashdot stories on Twitter

 


Forgot your password?
Close
typodupeerror
×

Comment Our system may be safe (Score 3, Interesting) 203

by cjb-nc (#28389991) Attached to: Attack On a Significant Flaw In Apache Released
Obviously need to verify this, but we already run mod_cband with a per-IP connection limit of 5. This is in place to stop the over-zealous "download accelerators" from taking all our connections and DOS'ing us. I expect it would stop a single attacker using this attack, but we'd still be vulnerable to a concerted attack by MaxChildren/5 IPs.

Comment Re:Fedora? (Score 1) 466

by cjb-nc (#26973333) Attached to: Which Distro For an Eee PC?
I second this, except that I installed Fedora 9 on my 901 before 10 was available. It has worked well for me, as I am more comfortable with the Redhat/Fedora-style environment.

Comment Re:*Sigh* I hate advertising (Score 1) 244

by cjb-nc (#26546281) Attached to: Pandora Trying Out Invasive Commercial Breaks

Another service to stop using. I'd rather pay/subscribe than listen to ads (not that the same promise didn't stop ads on cable tv). Not even regular radio interrupts songs in the middle, although a lot of obnoxiously talk into the beginning or cut off the end with their chatter. And replacing Satellite Radio with an iPhone/data_contract + Pandora seemed like a decent idea a while back.

Ok, so what's stopping you? I pay $36/year for ad-free Pandora. You can too. Beats the heck out of my XM subscription in the car, which has ads on an awful lot of its channels in spite of the promises otherwise.
Privacy

Submission + - Google's Orkut site accused of exploiting children (flickr.com)

Submitted by cjb-nc
cjb-nc writes: One parent has posted an accusation on Flickr that Google's social networking site Orkut is allowing users to steal photos of children and use them to create exploitive profiles on the Orkut site. She says "The red tape involved in getting these images removed is pathedic. [sic] Orkut will tell you to ask the user politely to remove the images. (yeah right!)" Does "You can make money without doing evil" apply to "promote no evil" as well?
Privacy

Submission + - Chips on DVDs could prevent theft

Submitted by Kiralan
Kiralan writes: New technology designed to thwart DVD theft makes discs unplayable until they're activated at the cash register. http://news.yahoo.com/s/ap/20070509/ap_on_hi_te/te chbit_dvd_theft From the story: "A chip smaller than the head of a pin is placed onto a DVD along with a thin coating that blocks a DVD player from reading critical information on the disc. At the register, the chip is activated and sends an electrical pulse through the coating, turning it clear and making the disc playable." This appears to be a decent use of security technology, but what is the potential of this being the new DIVX?
United States

Submission + - Anti-ID theft measures fought by credit industry

Submitted by
PetManimal
PetManimal writes: "Brian Krebs of the Washington Post has a very interesting article about the credit industry's fight against consumer rights measures that would force credit bureaus, credit card companies, retailers, banks and even private investigators to protect citizens from having their credit data accessed, by taking measures such as restricting access to credit reports and freezing new lines of credit. While several states have tried to enact consumer-friendly laws, the industry has lobbied hard on the state and national level to water down, eliminate, or reverse them and keep open access to easy credit.

'The banks, the insurance companies, credit bureaus and retailers really came out of the woodwork and fought hard against it,' [activist George Fitzgerald] said. 'I thought it was good for them and the banks. I thought with all the ID theft going on, people might even get to the point where they'd be afraid of using the [banking] system. I thought that since the credit bureaus were making a bundle of money off of trading consumers' information ... that they should offer a way to protect that information.'
The article says that the industry has backed down in some states and some credit-freeze laws have passed, but with conditions and business-friendly exceptions — for instance, Delaware had to eliminate a provision that included fines for merchants that failed to secure customer data, before the law could be passed."
The Courts

Submission + - RIAA Challenges Cause Foster Fees to Double

Submitted by
NewYorkCountryLawyer
NewYorkCountryLawyer writes: "The RIAA's challenges to Judge Lee R. West's order (pdf) awarding the defendant attorneys fees in Capitol v. Foster and to the "reasonableness" of Ms. Foster's attorneys' fees have not only forced the RIAA to disclose its own attorneys fees, and caused the judge to issue a second decision labeling them as "disingenuous", their motives "questionable", and their factual statements "not true", but have now caused the amount of the fees to more than double, from $55,000 to $114,000, as evidenced by Ms. Foster's supplemental fee application (pdf's)."
Security

Submission + - Over 10,000 malware sites hosted by IPowerWeb

Submitted by
mdm42
mdm42 writes: "Ethan Zuckerman blogs that a friend's website, hosted with IPowerWeb, got hacked. Turns out that almost eleven-thousand websites hosted by IPowerWeb have also been hacked in the same manner, but IPowerWeb denies that they have a security problem. The crack injects malicious JavaScript into hosted web pages; the purpose of the JavaScript? To load Windows trojans onto client machines that access the websites.

To the rest of us it looks like their systems have been compromised from the ground up. Or perhaps an inside job...?"
Security

Submission + - New Bank Authentication Scheme Debuts, Gets Hacked

Submitted by Anonymous Coward
An anonymous reader writes: Harvard and CommerceNet researchers report breaking Vidoop, a new two-factor graphical authentication scheme for banks. The scheme requires users to remember "image categories" to login and is supposedly invulnerable to phishing attacks, keyloggers and "all prevalent forms of hacking" (according to theri website and their TV commercial on YouTube). The researchers describe how they broke the scheme in a few hours with a man-in-the-middle attack, and they posted a video of the attack. This is related to the attack on Bank of America's SiteKey by the boarding pass hacker and to the Harvard study on SiteKey that shows how easily users get phished.

Slashdot Top Deals

"Engineering without management is art." -- Jeff Johnson

Close