Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Submission + - Google has demonstrated a successful practical attack against SHA-1 (googleblog.com)

Artem Tashkinov writes: Ten years after of SHA-1 was first introduced, Google has announced the first practical technique for generating an SHA-1 collision. It required two years of research between the CWI Institute in Amsterdam and Google. As a proof of the attack, Google has released two PDF files that have identical SHA-1 hashes but different content. The amount of computations required to carry out the attack is staggering: nine quintillion (9,223,372,036,854,775,808) SHA1 computations in total which took 6,500 years of CPU computation to complete the attack first phase and 110 years of GPU computation to complete the second phase.

Google says that people should migrate to newer hashing algorithms like SHA-256 and SHA-3, however it's worth noting that there are currently no ways of finding a collision for both MD5 and SHA-1 hashes simultaneously which means that we still can use old proven hardware accelerated hash functions to be on the safe side.

Submission + - World's only sample of 'holy grail' metallic hydrogen lost in laboratory mishap (ibtimes.co.uk)

drunkdrone writes: A piece of rare meta poised to revolutionise modern technology and take humans into deep space has been lost in a laboratory mishap. The first and only sample of metallic hydrogen ever created on earth was the rarest material on the planet when it was developed by Harvard scientists in January this year, and had been dubbed "the holy grail of high pressure physics".

The metal was created by subjecting liquid hydrogen to pressures greater that those at the centre of the Earth. At this point, the molecular hydrogen breaks down and becomes an atomic solid.

Scientists theorised that metallic hydrogen – when used as a superconductor – could have a transformative effect on modern electronics and revolutionise medicine, energy and transportation, as well as herald in a new age of consumer gadgets.

Sadly, an attempt to study the properties of metallic hydrogen appears to have ended in catastrophe after one of the two diamonds being used like a vice to hold the tiny sample was obliterated.

Submission + - Judge Rules Against Forced Fingerprinting

An anonymous reader writes: A federal judge in Chicago has ruled against a government request which would require forced fingerprinting of private citizens in order to open a secure, personal phone or tablet. In the ruling, the judge stated that while fingerprints in and of themselves are not protected, the government’s method of obtaining the fingerprints would violate the Fourth and Fifth amendments. The government’s request was given as part of a search warrant related to a child pornography ring. The court ruled that the government could seize devices, but that it could not compel people physically present at the time of seizure to provide their fingerprints ‘onto the Touch ID sensor of any Apple iPhone, iPad, or other Apple brand device in order to gain access to the contents of any such device.’

Submission + - Google: 99.95% of Recent 'Trusted' DMCA Notices Were Bogus (torrentfreak.com)

AmiMoJo writes: In comments submitted to a U.S. Copyright Office consultation, Google has given the DMCA a vote of support, despite widespread abuse. Noting that the law allows for innovation and agreements with content creators, Google says that 99.95% of URLs it was asked to take down last month didn't even exist in its search indexes. “For example, in January 2017, the most prolific submitter submitted notices that Google honored for 16,457,433 URLs. But on further inspection, 16,450,129 (99.97%) of those URLs were not in our search index in the first place.”

Submission + - Trump to Attack Visas That "Undercut the American Worker" (cio.com.au)

OverTheGeicoE writes: On Monday, US President-elect Donald Trump released a video message outlining his policy plans for his first 100 days in office. At 1 minute, 56 seconds into the message, he states that he will direct the Department of Labor to investigate "all abuses of the visa programs that undercut the American worker." During his presidential campaign, Trump was critical of the H-1B visa program that has been widely criticized for displacing US high-technology workers. "Companies are importing low-wage workers on H-1B visas to take jobs from young college-trained Americans," said Trump at an Ohio rally. At other rallies, Trump invited former IT workers from Disney who had been forced to train their H-1B replacements to speak. According to TFA, the Monday Trump video is "the strongest signal yet that the H-1B visa program is going get real scrutiny once he takes office."
Security

Submission + - Airport Manager Won't Let TSA Replace Body Scanner With Magnetometer (spokesman.com)

OverTheGeicoE writes: TSA recently announced that it would remove all of Rapiscan's X-ray body scanners from airports by June. As part of this effort, it is trying to move a millimeter-wave body scanner from the Helena, Montana airport to replace an X-ray unit at a busier airport. Strangely enough, they have encountered resistance from the Helena's Airport Manager, Ron Mercer. Last Thursday, workers came to remove the machine, but were prevented from doing so by airport officials. Why? Perhaps Mercer agrees with Cindi Martin, airport director at Montana's Glacier Park International Airport airport, who called the scheduled removal of her airport's scanner 'a great disservice to the flying public' in part because it 'removed the need for the enhanced pat-down.'
Security

Submission + - Taking Sense Away: Confessions of a Former TSA Screener (wordpress.com)

OverTheGeicoE writes: TSA gets discussed on Slashdot from time to time, usually negatively. Have you ever wondered about the TSA screeners' perspective? Taking Sense Away is a blog, allegedly written by a former TSA screener, offering insider perspectives on TSA topics. For example, there's the Insider's TSA Dictionary, whose entries are frequently about the code screeners use to discuss attractive female passengers (like 'Code Red,' 'Fanny Pack,' and 'Hotel Bravo'). Another posting explains what goes on in private screening rooms, which the author claims is nothing compared to screener conduct in backscatter image operator rooms. Apparently what happens in the IO room stays in the IO room. Today's posting covers how TSA employees feel about working for 'a despised agency'. For many the answer is that they hate working for 'the laughing stock of America’s security apparatus,' try to hide that they work for TSA, and want to transfer almost anywhere else ASAP.
Security

Submission + - House Subcommittee Holds Hearing on TSA's 'Scanner Shuffle' (house.gov)

OverTheGeicoE writes: The Homeland Security Subcommittee on Transportation Security held a hearing on TSA's recent decision to move X-ray body scanners from major airports to smaller ones, which the subcommitte refers to as a 'Scanner Shuffle.' John Sanders, TSA's assistant administrator for security capabilities, testified that 91 scanners recently removed from major airports were now in storage due to 'privacy concerns.' Although TSA originally planned to relocate the scanners to smaller airports, those plans have been shelved because smaller airports don't have room for them. The subcommittee is also investigating allegations that the machines' manufacturer, Rapiscan, 'may have falsified tests of software intended to stop the machines from recording graphic images of travelers' (VIDEO). Coincidentally, shares of Rapiscan's parent company, OSI Systems Inc., dropped in value almost 25% today, its biggest intraday decline in about 12 years. If wrongdoing is proven, Rapiscan could face fines, prison terms and a ban on government contracting, according to a former head of federal procurement.
Encryption

Submission + - Ask Slashdot: Is TSA's PreCheck System Easy to Game? (wordpress.com)

OverTheGeicoE writes: TSA has had a preferred traveler program, PreCheck, for a while now. Frequent fliers and other individuals with prior approval from DHS can avoid some minor annoyances of airport security, like removing shoes and light jackets, but not all of the time. TSA likes to be random and unpredictable, so PreCheck participants don't always get the full benefits of PreCheck. Apparently the decision about PreCheck is made when the boarding pass is printed, and a traveler's PreCheck authorization is encoded, unencrypted, on the boarding pass barcode. In theory, one could use a barcode-reading Web site (like this one, perhaps) to translate a barcode into text to determine your screening level before a flight. One might even be able to modify the boarding pass using PhotoShop or the GIMP to, for example, get the screening level of your choice. I haven't been able to verify this information, but I bet Slashdot can. Is TSA's PreCheck system really that easy to game? If you have an old boarding pass lying around, can you read the barcode and verify that the information in TFA is correct?
Red Hat Software

Submission + - Is Ubuntu Development Becoming Less Open? (muktware.com)

sfcrazy writes: While the larger Ubuntu community was busy downloading, installing and enjoying the latest edition of Ubuntu yesterday, a post by Ubuntu founder Mark Shuttleworth rustled some feathers. He gave indications that from now onwards only selected members of the community will be involved in some development and it will be announced publicly only after completion. Unlike other open source projects where all development happens in open manner. There as some criticism of this move and Shuttleworth ate his words and responded that they are actually opening up those projects where were being developed internally by Canonical employees instead of closing currently open projects. He also attacked Red Hat, as usual. This attitude or Shuttleworth is causing much discomfort for the entire Linux community. Is Canonical doing something wrong?
Security

Submission + - TSA Moving X-ray Body Scanners To Smaller Airports (propublica.org)

OverTheGeicoE writes: If you're concerned about possible health effects from TSA's X-ray body scanners, you might be pleased to learn that TSA is making changes. TSA is removing X-ray body scanners from major airports including Los Angeles International, Boston's Logan, Chicago's O'Hare, and New York City's JFK. Then again, these changes might not please you at all, because they are not mothballing the offending devices. No, they are instead moving them to smaller airports like the one in Mesa, AZ. Is this progress, or is TSA just moving potentially dangerous scanners from 'Blue' areas to 'Red' ones right before a presidential election?
Math

Submission + - Randomly generated math article accepted by ``open-access'' journal (thatsmathematics.com)

call -151 writes: Many years ago, a human-generated intentionally nonsense paper was accepted by the (prominent) literary culture journal Social Text. In August, a randomly-generated nonsense mathematics paper was accepted by one of the many low-tier ``open-access'' research mathematics journals. The software Mathgen which generated the accepted submission takes as inputs author names (or those can be randomly selected also) and generates nicely TeX'd and impressive-sounding sentences which are grammatically correct but mathematically disconnected nonsense. This was reviewed by a human, (quickly, for math, in 12 days) and the reviewers' comments mention superficial problems with the submission. The references are also randomly-generated and rather hilarious. For those with concerns about submitting to lower-tier journals in an effort to promote open access, this is not a good sign!
Security

Submission + - Boston Airport Replacing X-ray Body Scanners (bostonherald.com)

OverTheGeicoE writes: Boston's Logan International Airport is in the process of replacing its X-ray body scanners with millimeter-wave ones. According to TFA, nine of the new scanners have been installed already, and ultimately 27 of these scanners will replace the 17 X-ray backscatter scanners that were installed in March of 2010. Perhaps this will help TSA workers avoid being part of a cancer cluster. Some speculate that TSA will ultimately eliminate all of its X-ray body scanners.

Submission + - Intelligence effort named citizens, not terrorists (nctimes.com)

PolygamousRanchKid writes: A multibillion-dollar information-sharing program created in the aftermath of 9/11 has improperly collected information about innocent Americans and produced little valuable intelligence on terrorism, a Senate report concludes.

The lengthy, bipartisan report is a scathing evaluation of what the Department of Homeland Security has held up as a crown jewel of its security efforts. The report underscores a reality of post-9/11 Washington: National security programs tend to grow, never shrink, even when their money and manpower far surpass the actual subject of terrorism.

Because of a convoluted grants process set up by Congress, Homeland Security officials don't know how much they have spent in their decade-long effort to set up so-called fusion centers in every state. Government estimates range from less than $300 million to $1.4 billion in federal money, plus much more invested by state and local governments. Federal funding is pegged at about 20 percent to 30 percent. Despite that, Congress is unlikely to pull the plug. That's because, whether or not it stops terrorists, the program means politically important money for state and local governments.

Slashdot Top Deals

A slow pup is a lazy dog. -- Willard Espy, "An Almanac of Words at Play"

Working...