Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Security

Submission + - Malware, Exploit Kit Writers Merging Their Skills (threatpost.com)

Trailrunner7 writes: Botnets have been around for more than 15 years now, and for much of that time they've been the favored platform for attackers looking to compromise users on a large scale and monetize those infected machines. But now, as researchers and authorities begin to have more success with botnet takedowns and arrests, the attackers behind malware kits and exploit kits are beginning to work together and learn from one another.

"Today, exploit kits and malware kits are sold separately, but we believe you'll see one combined kit to build and control malware soon," said Aviv Raff of Seculert, who has been researching the trend.

Those two functions in recent years have been performed by distinct groups, one of which develops and sells malware kits and another that does the same for exploit kits. But as the attack landscape continues to evolve and broaden, those functions are becoming more closely related and intertwined.

Power

Submission + - Nuclear plant flood barely averted (nytimes.com)

mdsolar writes: "Pictures of the Fort Calhoun nuclear power plant north of Omaha, Neb., show it encircled by the swollen waters of the Missouri River, which reached a height of nearly 1,007 feet above sea level at the plant yesterday.

The plant's defenses include new steel gates and other hard barriers protecting an auxiliary building with vital reactor controls, and a water-filled berm 8 feet tall that encircles other parts of the plant. Both systems are designed to hold back floodwaters reaching 1,014 feet above sea level. Additional concrete barriers and permanent berms, more sandbags and another power line into the plant have been added. The plant was shut down in April for refueling and will remain so until the flood threat is passed.

"Today the plant is well positioned to ride out the current extreme Missouri River flooding while keeping the public safe," Nuclear Regulatory Commission spokesman Victor Dricks said on an agency blog this week.

But a year ago, those new defenses were not in place, and the plant's hard barriers could have failed against a 1,010-foot flood, the Nuclear Regulatory Commission contends in a yearlong inspection and enforcement action against the plant's operator, the Omaha Public Power District (OPPD)."

Submission + - EVE Online Customers demonstrate in central hub (justin.tv) 4

An anonymous reader writes: After the leaked internal newsletter of company CCP that postulated that there are plans to sell ingame items for real money customers are demonstrating in the game.
Games

Submission + - Hackers attack Electronic Arts website (reuters.com)

fysdt writes: "Cyber hackers have breached an Electronic Arts Inc website and may have taken user information such as birth dates, phone numbers and mailing addresses, the company said on its website on Friday.

Electronic Arts is the latest victim in a spate of global cyber attacks waged against video game companies. Last week, Sega Sammy Holdings Inc reported that user information had been stolen from 1.3 million customers, while Sony Corp is still grappling with the massive breach that compromised the data of more than 100 million of its video game users in April."

Apple

Submission + - Apple gets its own Geek Squad (channelnomics.com)

dasButcher writes: "Apple's professional support is no longer limited to the Genius Bar. It's formed a partnership with a national network of IT professionals to provide on-site support to SOHO and SMB customers of its Apple stores. Who says Apple is only interested in consumers?"
Networking

Submission + - Can Open Source Startups Shake Up Networking? (datacenterknowledge.com)

1sockchuck writes: Can a commercial ecosystem grow atop the OpenFlow open source networking standard? That was a hot topic this week at the Structure conference, where both startups and incumbent players sized up the potential to make networks easier to program. OpenFlow shifts management features from a switch to an external server, simplifying centralized management. Startups like Big Switch and Nicira say networking hasn't kept up with innovation in other sectors of the IT world, and OpenFlow is a key part of the solution.
PHP

Submission + - War Between LulzSec and The Jester Intensifies (zeropaid.com)

Dangerous_Minds writes: There's an increasingly testy war between LulzSec and The Jester as of late. The Jester recently posted chatlogs and compromising data on LulzSec security leader Sabu. In response, LulzSec ridiculed The Jester by belittling his efforts to take down terrorist websites and even going as far as rewriting one of The Jester's PHP scripts from 60 lines to 3. One can only expect more fireworks between the two after this.
Linux

Submission + - Linux 3.0 Will Be faster Than 2.6.39: Linus (muktware.com) 1

sfcrazy writes: While we were thinking that the announcement of 3.x branch was nothing more than Linus' mood swing, it seems there is more to it.

Linus wrote on the Linux Kernel Mailing List, "3.0 will still be noticeably faster than 2.6.39 due to the other changes made (ie the read-ahead), so yes, the regression itself is fixed."

Firefox

Submission + - Microsoft Exploits Firefox 4 Uproar, Beats IE Drum (computerworld.com) 1

CWmike writes: "A Microsoft executive late Thursday used the furor over Mozilla's decision to curtail support for Firefox 4 to plead the case for Internet Explorer in the enterprise. 'I think I speak for everyone on the IE team when I say we'd like the opportunity to win back your business,' Ari Bixhorn, director of IE at Microsoft, said in a post on his personal blog. 'We've got a great solution for corporate customers with both IE8 and IE9, and believe we could help you address the challenges you're currently facing.' Bixhorn addressed his open letter to the manager of workplace and mobility in the office of IBM's CIO, John Walicki, who, along with others, had voiced their displeasure with Mozilla's decision to retire Firefox 4 from security support. In a comment appended to a blog maintained by Michael Kaply, a consultant who specializes in customizing Firefox, Walicki called Mozilla's decision to end security support for Firefox 4 a 'kick in the stomach.'"
Apple

Submission + - Judge already skeptical of Apple's "App Store" cas (tgdaily.com)

mschaffer writes: Well, it looks like the Judge is already skeptical about Apple's assertions about the "app store" moniker.

US District Judge Phyillis Hamilton has already said she will "probably" reject Apple's request to have exclusive access to the term "app store,"
During early proceedings, she knocked Apple down a peg, reportedly saying, "I'm troubled by the showing that you've made so far, but that's where you're likely not to prevail at this early juncture."

Android

Submission + - Fine-grained Permissions For Android (h-online.com)

An anonymous reader writes: FTA:
"Whisper Systems, the maker of Android security extensions, has now added fine-grained permissions for applications to its free WhisperCore device security software. It allows users to be more selective than ever in deciding what access rights an application should have to specific resources, granting or denying access to data."

Opera

Submission + - Opera Founder Jon S. von Tetzchner Resigns (techcrunch.com)

fysdt writes: "Opera founder Jon S. von Tetzchner has resigned from the company.

In an email to Opera employees, von Tetzchner said that “It has become clear that The Board, Management and I do not share the same values and we do not have the same opinions on how to keep evolving Opera. As a result I have come to an agreement with the Board to end my time at Opera. I feel the Board and Management is more quarterly focused than me.”"

AMD

Submission + - AMD Rejects Industry Recognized SYSmark Benchmark (marketwire.com)

Deathspawner writes: "In an unusual move, Advanced Micro Devices has issued a press release rejecting its endorsement for the industry recognized benchmark SYSmark 2012. Developed by BAPCo and backed by industry heavyweights such as Dell, Intel and Hewlett-Packard, AMD has stated that BAPCo both has tuned SYSmark to create bias in favor of its competitor, and that its benchmarks are not relevant for the audience it targets. Also noted is a complete lack of heterogeneous CPU+GPU testing. Techgage tears apart AMD's claims to see if they are valid, while also evaluating the overall usefulness of SYSmark and the impact it can have on consumers."
Security

Submission + - StartSSL Compromised, Claims Certs Not Affected (threatpost.com)

Gunkerty Jeb writes: A certification authority called StartSSL was attacked and compromised recently and forced to suspend the issuance of SSL certificates indefinitely. However, unlike earlier attacks on CAs such as Comodo, the attackers were not able to gain access to the material necessary to issue themselves valid certificates for arbitrary domains.

The attack on StartSSL occurred on June 15 and the company posted a short statement on its site saying that it had suffered a security breach, but stressing that the certificates issued to its existing customers were not compromised and visitors to those sites were not affected. What's not clear is exactly what the attackers were able to access and how that affects the company's ability to issue certificates in the future.

Space

Submission + - Europe sets experimental transport spacecraft (networkworld.com)

coondoggie writes: "Looking to take a giant step toward taking part in low Earth orbit transportation, exploration and servicing orbiting space structures, the European Space Agency today it would team with Thales Alenia Space Italia to begin building an experimental spacecraft for launch in 2013."

Slashdot Top Deals

Machines have less problems. I'd like to be a machine. -- Andy Warhol

Working...