Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Government

Submission + - UK Government Removing Barriers to Open Source (cio.gov.uk)

christian.einfeldt writes: "On February 24, the Chief Information Officer Council of the UK issued new guidelines which changes the way that the government of the United Kingdom will acquire software. The new guidelines will require that all UK agencies 'consider open source solutions on their merits according to total lifetime cost of ownership' and seek to quantify proprietary exit costs and proprietary lock-in as factors affecting the overall costs of software. The rules also direct agencies to share their evaluations of software, so that where open source solutions are evaluated and approved by one part of the UK government, that evaluation should not be repeated, but instead shared. The new policies also show a UK preference for the Open Document Format over the 'emerging' Office Open XML format. Sun Microsystems Open Source Officer Simon Phipps thinks that the new guidelines will go a long way toward shifting the UK's software acquisition policy from a procurement-driven market model, which favors proprietary software, to an adoption-led market model, which places open source software on a more equal footing with proprietary software."
Security

Submission + - Disabling Javascript doesn't mitigate PDF Zero-day (secunia.com)

zonky writes: It turns out that Disabling JavaScript in Acrobat Reader doesn't totally mitigate the Zero-day Adbobe bug, according to Secunia in this blog posting: http://secunia.com/blog/44/. While disabling JavaScript does defeat the publicly known exploits, Secunia managed to create a reliable, fully working exploit which does not use JavaScript and can therefore successfully compromise users, who may think they are safe because JavaScript support has been disabled. Oh well. Only 14 days to go until a Adobe patch.

Comment Re:Alternatives (Score 3, Informative) 208

The login form might be located on an HTTP page, but as long as the form submits to an HTTPS page, your login credentials are still SSL-encrypted.

In general, yes, but one of the 'tricks' of sslstrip is that it changes the content of the HTTP-served page so that the (formerly) HTTPS submission page is no longer HTTPS, but HTTP.

Comment Re:OT question ... (Score 2, Interesting) 386

There's nothing "grey" about the DVD solution. Using libdvdcss in the USA is a violation of the DMCA, and consequently is illegal at a federal level.

So why not release Debian with all the nice goodies included, but have the final stage of the installer ask "Are you in the US?" ... and if you answer "Yes", then it removes anything that cannot be distributed there.

Comment Re:Monkey see, monkey do.. (Score 1) 435

My 3 year old monkey(who obviously can't read/write) uses the computer all the time and I'm amazed at what she gets up to (ok she's not posting on slashdot, but give her time). She can switch on, start up the web browser, (her home page is the BBC kids page CBeebies) and she just looks around, finds the games to play, works out what to do and plays them. When she gets bored she goes back and chooses something else - painting a picture, watching a video etc. She only ever asks for help when she gets stuck in a dead end (like when she needs to download an add-on). I imagine the Monkey v4.5 is considerably more advanced.

Speaking as the parent process for an instance of Monkey v4.5, you're not wrong. She has the same setup as above, including CBeebies as the home page. The phrase "The Flash plugin has broken again, Dad" was part of her vocabulary for a while, until I sorted it out.

Comment OpenLDAP master+slaves, Samba, WPKG (Score 3, Informative) 409

Just to throw what I use into the mix, on a network of ~100 WinXP desktops:

- Samba - acts as domain controller, triggers login scripts, maps drives etc. System Policy controlled using NTConfig.pol files in the 'netlogon' share, prepared using poledit.exe

- OpenLDAP - authentication backend for Samba, groups/users for the Samba server (plus many other tasks which are unrelated to desktop usage);

- WPKG - for software deployment, runs at each boot-up - really nice.

Comment Re:Yes (Score 5, Funny) 990

Put me in a room with a bear, repeat a hundred times and see who comes out on top. Doesn't mean the bear is smarter.

I think it might mean that, actually. You just said "Put me in a room with a bear". Well, duh... you're clearly not that smart.

Comment Re:why bother with a liveCD? (Score 1) 81

The most important part of the installer that has changed for the better is you can easily start the installation by selecting from gui and text options from a menu. The Etch installer you had to type something to start the installer.

Thank goodness for that. Now I can install Debian on all my systems which don't have a keyboard. Phew!

Security

DNS Inventor Tackles Flaw 101

nk497 writes "Dr Paul Mockapetris is looking to fix the flaws in the Domain Name System he helped invent. 'It was never meant to be the only security mechanism for naming data on the internet, but was intended for additional security measures to be added to it later.' The flaws, first uncovered by security researcher Dan Kaminsky over the summer, lets attackers redirect genuine URLs to malicious ones — a problem Mockapetris believes could be solved using digital signatures."
Education

Submission + - UK schools warned not to use Office 2007

daveewart writes: BBC News reports that BECTA (British Educational Communications and Technology Agency) has published advice warning UK schools not to consider Microsoft's software subscription models, nor to buy/license Office 2007 "until it has proved to be compatible" (meaning that it supports ODF). BECTA has reported Microsoft to the Office of Fair Trading for its failure to provide fair licensing models to UK schools and its use of anti-competitive behaviour.

Slashdot Top Deals

A meeting is an event at which the minutes are kept and the hours are lost.

Working...