More details here: https://www.evilsocket.net/202...

You don't need to be able to overwrite files to cause problems. If you manage to add a new evil.conf file to /etc/httpd/conf.d or /etc/pam.d or /etc/sudoers.d with this exploit, you can do anything you want on the system.

See the robot in action: https://www.youtube.com/watch?...

There is a list of affected sites linked in the comments. The first one on the list is running FreeBSD. I did not bother checking the rest.

Quite simply, Slashdot should be accessible via IPv6. That is all.

No, it's not related to caching. I actually tried this multiple times and the results were repeatable.

I'm using a Nokia Booklet 3G laptop with Windows 7. Sadly it appears that hardware "accelerated" rendering is actually slower on this laptop than the traditional rendering method. After disabling the acceleration from FF4's settings the browser's speed is again adequate.

Yes, I just noticed that disabling hardware acceleration helped significantly. I picked a random Slashdot news article and scrolled from top to bottom, keeping the down arrow pressed down. With hardware "acceleration" enabled, it took 22 seconds. Without it, 9 seconds. A very unscientific benchmark for sure, but it reflects the impression I got. Without the hardware acceleration the speed seems to be about the same as with older FF3.

After getting disappointed by FF4, I installed Chrome. It seems even a bit snappier than any of the FF versions I've used.

I'm using a Nokia Booklet 3G laptop with Win7. Granted, it's not a particularly fast computer, but it has been sufficient for my web browsing needs with FF3. My main gripe with FF4 is that if the browser is indeed slower with hardware acceleration enabled, FF4 shouldn't enable it by default. Yes, technically enabled folks can tweak the settings to make the browser faster, but tweaking the settings SHOULDN'T be necessary for the average user.

I just downloaded and installed FF4, and unlike what I had expected from the new version, FF4 is actually noticeably slower on most websites, including Slashdot :-/

(clarification to my previous post, sorry for double-posting)

/. subscribers are not redirected to HTTP, they can use HTTPS. And for logging in securely you can use https://slashdot.org/my/login regardless of your subscription status.

More questions?

You can log in securely via https://slashdot.org/my/login

More questions?

HTTPS works fine here. Perhaps you should consider becoming a /. subscriber if you want HTTPS.

p.s. posted over SSL

Yes, that's unfortunately true.. At this point I'd be happy if Slashdot had an IPv6-only subdomain, such as ipv6.slashdot.org. At this moment that address does resolve (like any subdomain of slashdot.org), but unfortunately only to an IPv4 address :-/

Serious question. I already have an IPv6 address, why doesn't Slashdot have one?

Are you by chance using Adblock Plus? Nearly all the people who have complained about FF's memory usage have used that plugin. Try disabling it for a while to see if it has any effect.