Zinic - Slashdot User

Tor Books Is Giving Away E-Books 172

Posted by kdawson on Sunday February 10, 2008 @04:32PM from the what's-not-to-like dept.

stoolpigeon writes "Tor Books is launching a new site and running a campaign in which they are giving away e-books (free as in beer) until the site goes live. To get in on the deal, fill out the form at their site, and each week you will receive a newsletter containing links to download a new book. The first two books are Mistborn by Brandon Sanderson followed by Old Man's War by John Scalzi. Scalzi's site says: 'My understanding is that they don't have DRM on them. Or at least, mine isn't supposed to have, and I don't think they're planning mine to be special in that regard.'"

Linux Kernel 2.6 Local Root Exploit 586

Posted by kdawson on Sunday February 10, 2008 @03:23PM from the batten-the-hatches dept.

aquatix writes "This local root exploit (Debian, Ubuntu) seems to work everywhere I try it, as long as it's a Linux kernel version 2.6.17 to 2.6.24.1. If you don't trust your users (which you shouldn't), better compile a new kernel without vmsplice." Here is millw0rm's proof-of-concept code.

OpenBSD Will Not Fix PRNG Weakness 196

Posted by kdawson on Sunday February 10, 2008 @07:58AM from the random-acts-of-kndness dept.

snake-oil-security writes "Last fall Amit Klein found a serious weakness in the OpenBSD PRNG (pseudo-random number generator), which allows an attacker to predict the next DNS transaction ID. The same flavor of this PRNG is used in other places like the OpenBSD kernel network stack. Several other BSD operating systems copied the OpenBSD code for their own PRNG, so they're vulnerable too; Apple's Darwin-based Mac OS X and Mac OS X Server, and also NetBSD, FreeBSD, and DragonFlyBSD. All the above-mentioned vendors were contacted in November 2007. FreeBSD, NetBSD, and DragonFlyBSD committed a fix to their respective source code trees, Apple refused to provide any schedule for a fix, but OpenBSD decided not to fix it. OpenBSD's coordinator stated, in an email, that OpenBSD is completely uninterested in the problem and that the problem is completely irrelevant in the real world. This was highlighted recently when Amit Klein posted to the BugTraq list."

Comment Something to play with (Score 1) 478

by Zinic on Tuesday February 01, 2005 @03:57AM (#11538129) Attached to: Solaris 10 Released

Personally, I've been waiting for Solaris 10 to come out for quite a long time now. I'm looking to make it my main file server and such, replacing the current Linux system I'm running. Don't get me wrong, I love Linux but I'm dying to see what Solaris is like. If anything though it's something new to play with!

Slashdot Top Deals