Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
Get HideMyAss! VPN, PC Mag's Top 10 VPNs of 2016 for 55% off for a Limited Time ×

Submission + - Comodo's Built-In Tech Support Tool Is Open to the Internet, Has No Password

An anonymous reader writes: Many of Comodo's security products come bundled with an app called GeekBuddy which the company's support staff use to debug faulty products. This is a remote desktop tool. For older versions of Comodo products worked without a password on port 5091. For newer ones it used an automatically generated password which was easy to guess. If the computer was exposed to the Internet, anyone could use this feature to connect to your PC.

Submission + - Comodo Antivirus Tech Support Feature Lets Anyone Connect to Your PC (softpedia.com)

An anonymous reader writes: Google Project Zero security researcher Tavis Ormandy has discovered that one of Comodo's tech support tools packed with many of the company's security products leaves the door open for attackers to connect with admin privileges on the user's PC. He discovered that to blame for this problem was a remote desktop tool called GeekBuddy, which Comodo was bundling with its security software. This tool either used no password, or used a simple system to create the password which tech support staff would use to connect to user PCs. Ormandy previously discovered a similar issue in Comodo software, related to the company's Chromodo browser.

Submission + - ZDNet Writer Argues Over Windows 10 Phoning Home

jones_supa writes: Gordon F. Kelly of Forbes whipped up a frenzy over Windows 10 when a Voat user found out in a little experiment that the operating system phones home thousands of times a day. ZDNet's Ed Bott has written a follow-up where he points out how the experiment should not be taken too dramatically. 602 connection attempts were to 192.168.1.255 using UDP port 137, which means local NetBIOS broadcasts. Another 630 were DNS requests. Next up was 1,619 dropped connection attempts to address 94.245.121.253, which is a Microsoft Teredo server. The list goes on with NTP, random HTTP requests, and various cloud hosts which probably are reached by UWP apps. He summarizes by saying that a lot of connections are not at all about telemetry. However, what kind of telemetry and datamined information Windows specifically sends, still remains largely a mystery, with hopefully curious people doing more analysis on the operating system and network traffic sent by it.

Submission + - SpaceX sets target date for next launch: February 24th

Rei writes: After some consternation about the pacing of Falcon 9 upgrades, SpaceX has announced that it plans to launch again from Cape Canaveral with a target date of February 24th. While the primary mission will be to place the SES-9 communications satellite in orbit, this will also mark their fourth attempt to land the first stage on an autonomous drone ship, after their last launch touched down softly but fell over when one leg failed to latch. SpaceX is working to significantly accelerate the rate of production and launches — they are reportedly moving the factory from 6-8 cores produced per year to 18 at present, and expect to reach 30 by the end of the year. After the upcoming launch, they expect to launch one rocket every two to three weeks.

Submission + - Video of Britain's Taranis supersonic drone (abc.net.au)

chrism238 writes: ABC News (Australia) is presenting vision of the of a state-of-the-art drone touted as the future of British warfare, showing it soaring over what is thought to be Woomera in remote South Australia — "'Australia's Area 51". The Taranis drone is a joint project between UK defence and BAE Systems. The test drone cost 185 million pounds ($AUD336.5 million). It is designed to carry a payload of guided bombs and missiles, travel at supersonic speeds, and fly undetected by radar. The UK military says the Taranis will be operable via satellite from anywhere in the world.

The first test flight is being hailed as a "major landmark for UK aviation". The vision shows the sleek Taranis, named after the Celtic god of thunder, making a seamless take-off and conducting a number of manoeuvres over red desert during its first test flight. The British Military of Defence (MoD) will not confirm where the footage was shot, but in a submission last year to a UK parliamentary hearing, revealed that the Taranis Unmanned Combat Air Vehicle (UCAV) demonstrator had indeed conducted initial test flights at the Woomera test range.

Submission + - Gates returns to Windows 7 after being unable to install the Windows 8.1 upgrade 3

Artem Tashkinov writes: According to rumors Bill Gate's first day at his office in Redmond turned out to be a complete disaster mixed with ostensibly curse words no one had expected from him. He tried to install the Windows 8.1 upgrade but the updater failed continuously asking to reboot the PC. Microsoft's new C.E.O. Satya Nadella who came to help resolve the situation couldn't sort it out. In the end Gates said he would be returning to Windows 7 for the foreseeable future.

Submission + - Induction stove not compatible with Iphone

dovgr writes: There is a story in the Swedish news paper Dagens Nyheter, Google translation at http://translate.google.com/tr... , telling the story of a woman who bought an induction stove, that caused a noise in her phone whenever using the phone. When complaining to stove service company, she was told that the stove is only compatible with Samsung, and recommended her to switch phones.

Submission + - Request for Funding OpenBSD HQ's Electricity

An anonymous reader writes: The OpenBSD Project started a Request for Funding our Electricity. As Undeadly.org writes:

OpenBSD supports a wide range of hardware architectures, and for practical and logistical reasons there are few places in the world that have them all in one place except OpenBSD headquarters [...] But keeping all this hardware running involves a considerable electricity bill, and Theo de Raadt (deraadt@) is asking for help, preferably in the form of a company willing to specifically sponsor the project's electricity bill.

Donations are greatly appreciated and bigger donations can go to the OpenBSD Foundation which will help with details and can provide receipts.

Java

Submission + - Oracle Releases February Java Security To Deal with Live Exploit (infoq.com)

An anonymous reader writes: Oracle has published a major security update for Java. The update was originally scheduled for February 19th, but was released a fortnight early on Friday because of "active exploitation 'in the wild' of one of the vulnerabilities affecting the Java Runtime Environment (JRE) in desktop browsers".

From the article
"According to the latest Oracle Risk Matrix, the update covers a total of 50 flaws: 49 of these can be remotely exploited — in other words just visiting a web page, for instance, might be enough to infect your computer; 26 carry the maximum Common Vulnerability Scoring System (CVSS) risk score of 10. Oracle hasn't said which of the remote code execution holes is the one that's actively being exploited but it is addressed with this patch."

Google

Submission + - SPAM: Google announced YouTube channel redesign, featuring trailers and cover photos

vividtimes writes: "Google has just announced on its blog the launch of redesigned YouTube channels in ”limited beta.”

The new channel design features “channel art:” YouTube’s take on the Facebook or Google+ cover photo, which similarly sits behind a creator’s profile pic; and “channel trailers:” a way for YouTube creators to promote their content to non-subscribers."

Link to Original Source
China

Submission + - China third country to be hit by 'brown tide' (nature.com)

ananyo writes: "The species of alga that causes 'brown tides' in the United States and South Africa is also to blame for massive blooms along China’s east coast on the Bohai Sea, researchers have found. The finding could be the first step to tackling the problem.
It is the fourth consecutive year the country has been hit by the bloom (Slashdot's story on the 2010 bloom here), with the situation worsening each time the bloom returns."

Linux

Submission + - Valve to Port Steam Games Service to Linux (ibtimes.co.uk)

asavin writes: Games developer Valve has started a Linux blog, in order to publicise work on an open source version of the Steam online game service.

"For some time, Gabe has been interested in the possibility of moving Steam and the Source game engine to Linux," the first blog post reads, explaining that Valve already used Linux on several of its servers and was used to supporting it.

"In 2011, based on the success of those efforts and conversations in the hallway, we decided to take the next step and form a new team."

Valve has chosen Ubuntu over other forms of Linux, so it can concentrate on one version of the operating system.

Slashdot Top Deals

Real Users are afraid they'll break the machine -- but they're never afraid to break your face.

Working...