Comment Re:If you buy a movie, should be able to download (Score 1) 106
> Consumer laws need to change to stamp this out before it becomes too abusive.
the law already makes a difference between buy and rent AFAIK
Submission + - Hacker Gains Admin Control of Sourcegraph and Gives Free Access To the Masses (arstechnica.com)
An anonymous reader writes: An unknown hacker gained administrative control of Sourcegraph, an AI-driven service used by developers at Uber, Reddit, Dropbox, and other companies, and used it to provide free access to resources that normally would have required payment. In the process, the hacker(s) may have accessed personal information belonging to Sourcegraph users, Diego Comas, Sourcegraph’s head of security, said in a post on Wednesday. For paid users, the information exposed included license keys and the names and email addresses of license key holders. For non-paying users, it was limited to email addresses associated with their accounts. Private code, emails, passwords, usernames, or other personal information were inaccessible.
The hacker gained administrative access by obtaining an authentication key a Sourcegraph developer accidentally included in a code published to a public Sourcegraph instance hosted on Sourcegraph.com. After creating a normal user Sourcegraph account, the hacker used the token to elevate the account privileges to those of an administrator. The access token appeared in a pull request posted on July 14, the user account was created on August 28, and the elevation to admin occurred on August 30. “The malicious user, or someone connected to them, created a proxy app allowing users to directly call Sourcegraph’s APIs and leverage the underlying LLM [large language model],” Comas wrote. “Users were instructed to create free Sourcegraph.com accounts, generate access tokens, and then request the malicious user to greatly increase their rate limit. On August 30 (2023-08-30 13:25:54 UTC), the Sourcegraph security team identified the malicious site-admin user, revoked their access, and kicked off an internal investigation for both mitigation and next steps.”
The resource free-for-all generated a spike in calls to Sourcegraph programming interfaces, which are normally rate-limited for free accounts. “The promise of free access to Sourcegraph API prompted many to create accounts and start using the proxy app,” Comas wrote. “The app and instructions on how to use it quickly made its way across the web, generating close to 2 million views. As more users discovered the proxy app, they created free Sourcegraph.com accounts, adding their access tokens, and accessing Sourcegraph APIs illegitimately.” [...] While most data was available for all paid and community users, the number of license keys exposed was limited to 20.
The hacker gained administrative access by obtaining an authentication key a Sourcegraph developer accidentally included in a code published to a public Sourcegraph instance hosted on Sourcegraph.com. After creating a normal user Sourcegraph account, the hacker used the token to elevate the account privileges to those of an administrator. The access token appeared in a pull request posted on July 14, the user account was created on August 28, and the elevation to admin occurred on August 30. “The malicious user, or someone connected to them, created a proxy app allowing users to directly call Sourcegraph’s APIs and leverage the underlying LLM [large language model],” Comas wrote. “Users were instructed to create free Sourcegraph.com accounts, generate access tokens, and then request the malicious user to greatly increase their rate limit. On August 30 (2023-08-30 13:25:54 UTC), the Sourcegraph security team identified the malicious site-admin user, revoked their access, and kicked off an internal investigation for both mitigation and next steps.”
The resource free-for-all generated a spike in calls to Sourcegraph programming interfaces, which are normally rate-limited for free accounts. “The promise of free access to Sourcegraph API prompted many to create accounts and start using the proxy app,” Comas wrote. “The app and instructions on how to use it quickly made its way across the web, generating close to 2 million views. As more users discovered the proxy app, they created free Sourcegraph.com accounts, adding their access tokens, and accessing Sourcegraph APIs illegitimately.” [...] While most data was available for all paid and community users, the number of license keys exposed was limited to 20.
Comment Re:Gee, this sounds familiar. (Score 2) 76
season 3 48th episode of Sliders called "This Slide of Paradise"
cf. https://en.wikipedia.org/wiki/...
euh wait...
Comment Re:So this is a story about... (Score 1) 16
Does "RAMPS" stand for something a lot cool-er, or am I missing something...
well, check https://reprap.org/wiki/RAMPS_... for an alternate meaning or perhaps any other at https://en.wikipedia.org/wiki/... ?
spoiler: RepRap Arduino Mega Pololu Shield
Comment Re:What the French call la dolce vita? (Score 1) 477
or simply "rester peinard" ; "pour vivre heureux, restons couché !"
(keep cool ; be happy, stay in bed !)
Submission + - Why are we made of matter?
StartsWithABang writes: The Universe began with equal amounts of matter and antimatter after the Big Bang, and yet when we look out at today's Universe, we find that, even on the largest scales, it's made of at least 99.999%+ matter and not antimatter. The problem of how we went from a matter-antimatter-symmetric Universe to the matter-dominated one we have today is known as baryogenesis, and is one of the greatest unsolved problems in physics. Where are we on the quest to understand it as of April, 2014? A wonderful and comprehensive recap is here.
Submission + - Blender Foundation's Sintel video taken down on Youtube for copyright violation (youtube.com) 2
An anonymous reader writes: As if the automated take downs on Youtube weren't already bad enough, today fans of the popular open source 3D software Blender were greeted by a copyright take down notice for their third open movie, Sintel, despite it being released under a creative commons license:
"This video contains content from Sony Pictures Movies & Shows, who has blocked it on copyright grounds." It is believed that the take down was a result of Sony Electronics adding Sintel to their official 4k demo pool.
Submission + - Mercury Has Shrunk More than Thought (sciencemag.org)
sciencehabit writes: Measuring just 4880 kilometers across, Mercury is a small world. The planet became slightly smaller as its interior cooled, which caused Mercury to shrink, buckling its surface and creating numerous cliffs and ridges. Now, after studying 5934 of these features, researchers report online today in Nature Geoscience that Mercury's contraction was much greater than previously thought: During the past 4 billion years, the planet's diameter decreased by 7 to 14 kilometers. The greater estimate of shrinkage accords with models that predict how much a rocky planet should contract as its interior cools; the new work may also lend insight into the evolution of extrasolar planets that, like Mercury and unlike Earth, lack any moving continents.
Submission + - Silicon-Free Molybdenite Microchips Developed (bbc.co.uk)
An anonymous reader writes: A Swiss team may have found an alternative to silicon microchips which could result in smaller, more flexible and less energy hungry processors. The Swiss team’s chip does not use silicon, butmolybdenite (MoS2) a dark-coloured, naturally occurring mineral that is able to be used in much thinner layers. Currently used as a strengthening agent in plastic, molybdenite isabundantin the natural word.
Submission + - US military pays SETI to check Kepler-22b for alie (theregister.co.uk)
iComp writes: "The Search for Extra Terrestrial Intelligence (SETI) has announced that it is back in business checking out the new habitable exoplanets recently discovered by NASA's Kepler space telescope to see if they might be home to alien civilisations. The cash needed to restart SETI's efforts has come in part from the US Air Force Space Command, who are interested in using the organisation's detection instruments for "space situational awareness"."
Submission + - Graphene spun into metre-long fibres (nature.com)
ananyo writes: Nano-sized flakes of graphene oxide can be spun into graphene fibres several metres long, researchers in China have shown. The strong, flexible fibres, which can be tied in knots or woven into conductive mats, could be the key to deploying graphene in real-world devices such as flexible batteries.
Submission + - NASA's Next Mission: Deep Space (informationweek.com)
gManZboy writes: "NASA's Mars Science Lab and Curiosity rover are the next steps in a long-term plan to travel farther and faster into space. Check out the future spacecrafts and tools that will get them there--including NASA's big bet, a spacecraft that combines the Orion multipurpose crew vehicle with the Space Launch System, designed to take astronauts beyond low-Earth orbit for the first time since the Apollo 17 Moon mission in 1972. NASA will need 10 years to prepare astronauts to take Orion and SLS for a test flight."
Boy Finds £2.5M Gold Locket With Metal Detector 169
Instead of bottle caps and ridicule from his peers, 3-year-old James Hyatt found a locket worth millions with his metal detector. James and his dad found the gold locket last May in Essex. Since then the 500-year-old treasure has been appraised at around £2.5million. From the article: "James’s father Jason, 34, said: ‘My son is one of the luckiest people ever. If we go to the doctors he’ll put his hand down the side of the sofa and pull out a tenner.’"
Comment Re:Fractint (Score 1) 131
There's Gnofract 4D too at http://gnofract4d.sourceforge.net/ and with even a flickr group http://www.flickr.com/groups/gnofract4d/
Submission + - Developers fork Mandriva Linux, creating Mageia (mageia.org) 1
Anssi55 writes: As most of the Mandriva employees working on the Linux distribution were laid off due to the liquidation of Edge-IT (a subsidiary of Mandriva SA) and the trust in the company has diminished, the development community (including the core developers) has decided to fork the project. The new Linux distribution, named Mageia, will be managed by a not-for-profit organization that will be set up in the coming days. There are already many people that have decided to follow the fork, but the people behind it are still welcoming any help offered in the various tasks related to establishing the new distribution.
Slashdot Top Deals
The life of a repo man is always intense.
