Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Submission + - Quantum entanglement survives, even across an event horizon

StartsWithABang writes: One of the more puzzling phenomena in our quantum Universe is that of entanglement: two particles remain in mutually indeterminate states until one is measured, and then the other — even if it's across the Universe — is immediately known. In theory, this should be true even if one member of the pair falls into a black hole, although it's impossible to measure that. However, we can (and have) measured that for the laboratory analogue of black holes, known as "dumb holes," and the entanglement survives!

Submission + - Unreal Engine 4 Is Now Free 1

jones_supa writes: In 2014, Epic Games took the step of making Unreal Engine 4 available to everyone by subscription for $19 per month. Today, this general-purpose game engine is available to everyone for free. This includes future updates, the full C++ source code of the engine, documentation, and all sorts of bonus material. You can download the engine and use it for everything from game development, education, architecture, and visualization to VR, film and animation. The business scheme that Epic set in the beginning, remains the same: when you ship a commercial game or application, you pay a 5% royalty on gross revenue after the first $3,000 per product, per quarter. Epic strived to create a simple and fair arrangement in which they succeed only when your product succeeds.

Feed Techdirt: The World's Email Encryption Software Relies On One Guy, Who Is Going Broke (google.com)

The man who built the free email encryption software used by whistleblower Edward Snowden, as well as hundreds of thousands of journalists, dissidents and security-minded people around the world, is running out of money to keep his project alive.

Werner Koch wrote the software, known as Gnu Privacy Guard, in 1997, and since then has been almost single-handedly keeping it alive with patches and updates from his home in Erkrath, Germany. Now 53, he is running out of money and patience with being underfunded.

"I'm too idealistic," he told me in an interview at a hacker convention in Germany in December. "In early 2013 I was really about to give it all up and take a straight job." But then the Snowden news broke, and "I realized this was not the time to cancel."

Like many people who build security software, Koch believes that offering the underlying software code for free is the best way to demonstrate that there are no hidden backdoors in it giving access to spy agencies or others. However, this means that many important computer security tools are built and maintained by volunteers.

Now, more than a year after Snowden's revelations, Koch is still struggling to raise enough money to pay himself and to fulfill his dream of hiring a full-time programmer. He says he's made about $25,000 per year since 2001 — a fraction of what he could earn in private industry. In December, he launched a fundraising campaign that has garnered about $43,000 to date — far short of his goal of $137,000 — which would allow him to pay himself a decent salary and hire a full-time developer.

The fact that so much of the Internet's security software is underfunded is becoming increasingly problematic. Last year, in the wake of the Heartbleed bug, I wrote that while the U.S. spends more than $50 billion per year on spying and intelligence, pennies go to Internet security. The bug revealed that an encryption program used by everybody from Amazon to Twitter was maintained by just four programmers, only one of whom called it his full-time job. A group of tech companies stepped in to fund it.

Koch's code powers most of the popular email encryption programs GPGTools, Enigmail, and GPG4Win. "If there is one nightmare that we fear, then it's the fact that Werner Koch is no longer available," said Enigmail developer Nicolai Josuttis. "It's a shame that he is alone and that he has such a bad financial situation."

The programs are also underfunded. Enigmail is maintained by two developers in their spare time. Both have other full-time jobs. Enigmail's lead developer, Patrick Brunschwig, told me that Enigmail receives about $1,000 a year in donations — just enough to keep the website online.

GPGTools, which allows users to encrypt email from Apple Mail, announced in October that it would start charging users a small fee. The other popular program, GPG4Win, is run by Koch himself.

Email encryption first became available to the public in 1991, when Phil Zimmermann released a free program called Pretty Good Privacy, or PGP, on the Internet. Prior to that, powerful computer-enabled encryption was only available to the government and large companies that could pay licensing fees. The U.S. government subsequently investigated Zimmermann for violating arms trafficking laws because high-powered encryption was subject to export restrictions.

In 1997, Koch attended a talk by free software evangelist Richard Stallman, who was visiting Germany. Stallman urged the crowd to write their own version of PGP. "We can't export it, but if you write it, we can import it," he said.

Inspired, Koch decided to try. "I figured I can do it," he recalled. He had some time between consulting projects. Within a few months, he released an initial version of the software he called Gnu Privacy Guard, a play on PGP and an homage to Stallman's free Gnu operating system.

Koch's software was a hit even though it only ran on the Unix operating system. It was free, the underlying software code was open for developers to inspect and improve, and it wasn't subject to U.S. export restrictions.

Koch continued to work on GPG in between consulting projects until 1999, when the German government gave him a grant to make GPG compatible with the Microsoft Windows operating system. The money allowed him to hire a programmer to maintain the software while also building the Windows version, which became GPG4Win. This remains the primary free encryption program for Windows machines.

In 2005, Koch won another contract from the German government to support the development of another email encryption method. But in 2010, the funding ran out.

For almost two years, Koch continued to pay his programmer in the hope that he could find more funding. "But nothing came," Koch recalled. So, in August 2012, he had to let the programmer go. By summer 2013, Koch was himself ready to quit.

But after the Snowden news broke, Koch decided to launch a fundraising campaign. He set up an appeal at a crowdsourcing website, made t-shirts and stickers to give to donors, and advertised it on his website. In the end, he earned just $21,000.

The campaign gave Koch, who has an 8-year-old daughter and a wife who isn't working, some breathing room. But when I asked him what he will do when the current batch of money runs out, he shrugged and said he prefers not to think about it. "I'm very glad that there is money for the next three months," Koch said. "Really I am better at programming than this business stuff."

Related stories: For more coverage, read our previous reporting on the Heartbleed bug, how to encrypt what you can and a ranking of the best encryption tools.

Republished from ProPublica. ProPublica is a Pulitzer Prize-winning investigative newsroom. Sign up for their newsletter .



Permalink | Comments | Email This Story








Submission + - Linux database GUI application develpment question 2

msubieta writes: I have been developing some applications to use in small businesses using Windows and SQL Server. I would like to move on and start doing the same thing in Linux. I have looked at several Frameworks/Databases/Development environments and I really don't know what is the best/simplest/fastest to learn approach. I use VS and C# mostly, although I could easily go back to C++. I found Qt and GTK+ are the most common frameworks, but they seem to lack controls that deal with datasets and stuff (sorry, spoiled by the .net form controls), but I also know that I could use Mono in order to make the jump. I would have no problem on moving to MySQL, as I have done quite a lot of work on that side, and I would like to stick with the traditional client server application, as I find it easier to maintain, and a whole lot more robust when it comes to user interaction (web apps for POS applications don't seem to be the right way to go in my view).

Any suggestions/comments/recommendations?

Submission + - Keurig 2.0 Genuine K-Cup Spoofing Vulnerability (blogspot.com)

An anonymous reader writes: A security researcher has released a humorous vulnerability description for the Keurig 2.0 coffee maker, which includes DRM designed to only brew Keurig brand coffe pods (K-Cups)

Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup.

The vulnerability description even includes mitigating controls, such as keeping the Keurig in a locked cabinet when not in use.

Submission + - Supreme Court rules cell phones can't be searched without a warrant (nytimes.com)

CarlThansk writes: The courts have long debated on if cell phones can be searched during an arrest without a warrant. Today, the Supreme Court unanimously ruled that the police need warrants to search the cellphones of people they arrest.

"Chief Justice John G. Roberts Jr., writing for the court, said the vast amount of data contained on modern cellphones must be protected from routine inspection."

Submission + - TrueCrypt author claims that forking is impossible (pastebin.com)

An anonymous reader writes: On a request from Matthew Green to fork the TrueCrypt code, the author answers that this is impossible. He says that this might be no good idea, because the code needs a rewrite, but he allows to use the existing code as a reference.

"I am sorry, but I think what you're asking for here is impossible. I don't feel that forking TrueCrypt would be a good idea, a complete rewrite was something we wanted to do for a while. I believe that starting from scratch wouldn't require much more work than actually learning and understanding all of truecrypts current codebase.

I have no problem with the source code being used as reference."

Submission + - Cassini probe sees plastic ingredient on Titan moon (bbc.co.uk)

Ron024 writes: The Cassini probe has detected propene, or propylene, on Saturn's moon Titan. It is the first definitive detection of the plastic ingredient on any moon or planet, other than our home world, says the US space agency (Nasa). The discovery, made by Cassini's infrared spectrometer, is reported in Astrophysical Journal Letters.

Submission + - Tar Pitch Drop Captured on Camera (nature.com)

Ron024 writes: How long would you be willing to wait for a drop of the black stuff in Dublin? After 69 years, one of the longest-running laboratory investigations in the world has finally captured the fall of a drop of tar pitch on camera for the first time. A similar, better-known and older experiment in Australia missed filming its latest drop in 2000 because the camera was offline at the time.
Intel

Submission + - Intel breathes new life into Pentium (techworld.com.au)

angry tapir writes: "Intel is giving new life to its Pentium processor for servers, and has started shipping the new Pentium 350 chip for low-end servers. The dual-core processor operates at a clock speed of 1.2GHz and has 3MB of cache. Like many server chips, the Pentium 350 lacks features such as integrated graphics, which are on most of Intel's laptop and desktop processors."
Science

Submission + - Ask Slashdot: Science Sights to See? 2

steevven1 writes: "My girlfriend and I are planning a long trip across the United States for this summer, and we'd like to see the usual sights, but we both have a bit of a geeky side, and we were trying to think of science-related marvels to see along the way. So far, we have thought of places like the Very Large Array in New Mexico and Fermilab in Illinois. Any suggestions?"

Slashdot Top Deals

Many people are unenthusiastic about their work.

Working...