Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Comment does not replace mount (Score 4, Informative) 541

When I first read this on Phoronix, it appeared that systemd was replacing the mount command. This is not the case. It is wrapping the mount command. That seems to be an important distinction. Replacing mount would be crazy and pointless. Handling mounts more intelligently during startup would be welcome. So far, this seems to be the latter instead of the former.

Comment Re:This isn't a big deal, it's fucking huge. (Score 2) 86

Well, this is a virtual machine they're eavesdropping on. Anyone running something on a virtual machine should always assume that the one controlling the underlying hardware can always see everything that's happening on the VMs too. My view has always been that if I don't have the physical hardware before my eyes, I have no real guarantee someone isn't tampering with it either legally or illegally. Heck, even if it's before my eyes, someone may still have tampered with it at some point in time, or even remotely.

Exactly this. If you don't control the bare metal, then the VM isn't fully trustworthy. Even before the details of the attack were worked out, this should have been an obvious conclusion.

Comment Ardour, Calf, and a Focusrite (Score 3, Informative) 264

I use Ardour on Fedora, connected to a Focusrite Saffire Pro 40, and heavily using the great and opensource Calf Studio Gear Audio plugin suite. Everything works really well, and the setup could be used to put together a really high quality album. We almost exclusively use it for recording church services, which doesn't exercise the full potential of the setup. One of these days I'll have time to put together a project that takes advantage of more of the capabilities we have.

Comment Re:Don't these routers have external memory? (Score 1) 157

I grant you that the ability exists on many SoCs. What remains to be seen is whether TP-Link has actually done the secure-boot chain starting with the SoC. If one of the OpenWrt devs could get their hands on one of these locked down devices, we'd find out pretty quickly. I still suspect it's just a check in the stock firmware's web interface.

Comment Re:Don't these routers have external memory? (Score 1) 157

These routers use UBoot, not a bootloader baked into the SoC. I doubt they have done anything too fancy, probably just checking for signed firmware when the user uploads it. I would suspect that even just using a serial connection to interrupt uboot would be enough to circumvent the checking. We won't know for sure until somebody does a complete evaluation/reverse-engineer of it.

Comment Self Correcting Problem (Score 1) 278

Seems like a self-correcting problem, given enough time.
Giving pedestrians the right-away seems like a problematic policy. It sounds nice, but physics suggests that a pedestrian can overcome their momentum and come to an immediate stop more successfully than a motor vehicle, which further suggests that perhaps the pedestrian should stop and wait, rather than the cars.

Comment Fwknop is a potential 2nd layer to protect sshd (Score 1) 157

Port knocking is one way to avoid being a target of ssh attacks, but legacy port knocking has its own shortcomings. SPA (Single Packet Auth) has solved most of those problems. Fwknop is the only maintained spa implamentation that I know of. More info at https://www.cipherdyne.org/fwk...

Comment You cannot regulate cyberweapons. (Score 5, Interesting) 123

First, the entire idea of cyberweapons is laughable. Exploits are only possible because of flaws in the code. That is no more a weapon than an unlocked door.

Second, you cannot regulate them as they are immaterial. It would be possible to discover a previously unknown vulnerability, and then not record the finding anywhere. Congratulations, you have a cyberweapon in your brain. Good luck regulating that.

Slashdot Top Deals

When I left you, I was but the pupil. Now, I am the master. - Darth Vader