I think "able to brute-force thousands of passwords in an hour" qualifies as a weakness in SHA-1.
Not really. It just shows that 6-character passwords aren't very strong. The hash itself is not the weak point.
German U-boats (submarines) were given deliberately 'inflated' numbers, to make it seem that there were many more than there really were. The strategic/morale effect of your enemy believing that you have hundreds of submerged threats at sea was an important consideration to the Germans.
I guess they didn't see the need to do this with tanks.
For the first time since, well, quite a long time, we have no sizeable opposition in Parliament.
The size of the opposition (i.e. number of MPs) is fairly typical really. The problem is that the opposition consists of MPs who belong to the unpopular former-governing Labour party. People have become too used, over recent years, to disbelieving them
Seeing 'Hacker' in the same sentence as 'UK' and 'Government' made me think this story was about http://en.wikipedia.org/wiki/Jim_Hacker
If you want to play and allow proper nouns, then you don't need an official 'rule change' to do so. You just say to your fellow players "Hey, chaps, shall we allow proper nouns, then?"
And if the new 'offical rules' say that proper nouns are allowed, then you don't have to go along with it. You say to your fellow players "Hey, chaps, let's play Old School Scrabble: no proper nouns!"
Surely people do this all the time, where you have your own House Rules?
3. Make sure your PINs don't contain any 1's or 0's (some countries disallow those numbers).
Seriously?!?
His explanation describes how the compromise might work using online pizza ordering as an example. This is a superb way to highlight the risks. No-one wants their pizzas going to someone else, after all.
Goodbye car analogies, Hello pizza analogies
Perhaps it's Wine, then, or another package that has modified it: see http://linux.slashdot.org/comments.pl?sid=1430160&cid=29978100 and further comments.
Installing the wine package on ubuntu automatically sets mmap_min_addr to 0. The default install will have it set higher
Interesting. (See
Solution, remove wine.
Hardly a solution if one needs to use Wine, though, is it? Probably just a good idea to wait for a patched kernel, I should think.
But the bug is not exploitable on ubuntu, because they set vm.mmap_min_addr > 0 by default.
That doesn't seem to be generally true.
Ubuntu Hardy 8.04 LTS, 2.6.24-25-generic: vm.mmap_min_addr = 65536; Ubuntu Jaunty 9.04, 2.6.28-16-generic: vm.mmap_min_addr = 0. So, by the above logic, Ubuntu Jaunty is vulnerable, although Hardy is safe.
Also seems like vm.mmap_min_addr = 0 for all the Debian boxes I can get my hands on...
(All my comments above relate to the stock/packaged kernels for the distribution)
I don't understand why those with PVRs still watch the ads. I've found that, with the sole exception of the ad-free (but paid-for, of course) BBC channels, the ad breaks are _way_ too long; this is mostly the reason I use a PVR. To skip through the ads.
In addition, the Treat The Audience As If They Have An Attention Span Of Less Than A Minute approach, showing you highlights of what you're going to see soon, then actually showing you it, then showing you a re-cap of what you've just seen; that just encourages more skipping from me, really.
[...] if they show the person really is from war-torn Elbonia [...]
Everyone knows the Elbonian civil war ended years ago.
Happiness is twin floppies.
