The GSA should be held accountable for the solarwinds123 fiasco. They have sat on their hands for years spending billions (trillions?) and not really taking their supply chain seriously. Also worthy of mention is the NTIA's Software Transparency initiative:
  https://www.ntia.doc.gov/Softw...

You can get a pdf of the south expo floor plan here:
https://www.rsaconference.com/...

Exabeam booth was #555

So the adjacent booths may be part of the RSA coronavirus cluster:
Unisys, Thycotic, KnowBe4, Signal Sciences, Siemplify, were all within about 15 to 25 feet of the Exabeam booth.

Knowing whether the infection spread from that both is now just a waiting game.

Agreed. What gets forgotten in the debate is that Java is a reference implementation of all true OOP constructs: Interface Abstract Class Class Which when applied judiciously, allow u to do things like inversion of control, dependency injection and test driven development in a strongly-typed environment, and this strongly-typed nature, when properly embraced, makes it easier to write software which you can refactor as often as you desire with orders of magnitude less risk than with "fsck-all-typed" languages like ruby or JavaScript. So, if your application does little more than pushing data into and reading data from some storage engine, then okay, JavaScript is an okay choice. If your application is growing into having significant business logic, then JavaScript will turn into thousands of lines of spaghetti untraceable closure hell , whereby each refactoring attempt will almost certainly have catastrophic consequences in production down some obscure execution path in some anonymous callback function you couldn't be bothered unit testing because how the fsck do you write a unit test against that anonymous function? There's not a concept of a Class in JavaScript. Sure you can mimmick inheritance patterns with prototypes with albeit some unintended consequences (hasOwnProperry) and encapsulated properties by having your closures reference variables from their enclosing context etc, but those techniques are what i call "expressively contrived" Strongly-typed OOP languages have very-well established tried and true patterns for writing test-driven code Ruby while not strongly typed, at least has a concept of Class/methods/inheritance/polymorphism . Problem with Ruby is as i am writing things TDD in it, the first half of my tests are there to ensure that my methods behave correctly when i pass them arguments of the wrong types, and my methods are littered with lines of code ensuring that my arguments have the expected properties. Totally retarded. And Ruby doesn't know anything about an Interface, but that's okay because it's got "fsck-all-typing" so it's not like you would even try to enforce modicums of contracts. Anyway, as applications grow in complexity, building things TDD in strongly-typed OOP languages leads to more fun, and frequent refactoring which makes ur code more stable instead of more brittle. I've written a crap ton of JS code. Java code too. And PHP. And a minimal amount of Ruby: I've appreciated their strengths. And drawbacks. Feel free to learn the same thing I have the hard way: this panacea mentality to stacks is just one big circle jerk. If you think JS, in its current form, is the only true way to build web applications, then by all means, keep that head firmly planted in the sand while the rest of the World out innovates you with a blend of languages and platforms best-suited for their use-cases.

....find another client.

The real value here is it enables much more granular logging.

I object to this article, however, on grounds that this is not news. It's a press release, and crap like this is why I only visit slashdot every few months any more.

Wish this had made the real news. We know this sort of thing happens, but airline industries are highly effective at having this never reach public discussion.

So... "fun gimmick, or a serious commentary on an increasingly surveillance based society?"

Really?

How about both. Are having a sense of humor and making a serious comment mutually opposed? Slashdot deserves better.

Not 100% sure this is WebKit-free. On MacOSX there's still a reference to webkit in the UserAgent string as: "AppleWebKit" anyway.

Wild, I never expected these poll results to look like a progress meter.

du -h

Duh.

Anyone can be seriously "offensive" in this business. All it takes is $100 laptop and msf.

Defense? That, my friends, is the multi-tens-of-billions industry we're in.

Cyber Command? Show me your defensive game and stop wasting my tax money.

Apparently, I'll never understand Slashdot. The latest junk from Facebook, Microsoft, Amazon, Apple, Oracle, et al. make the front page, but one of the highest quality open source releases gets buried. (It's almost like people self-medicate their marketing these days, but separate issue.)

I got 6 years of uptime once off of NetBSD on sparc. This stuff is gold. It's platinum. It's so stable, you have to worry about making sure you get around to patching your apps because the OS just never dies... stick this on solid state storage with the new NAND support, and you don't even have to worry about spinning disk fails. As a network device OS, this will be an awesome high-uptime packet sensor or embedded packet router.

Bravo NetBSD! Keep up the good work. This is top headline stuff.

More like Logan's Run. I have been Michael's number two guy for about 5 years. And we make a great team. We're like one of those classic famous teams. He's like Mozart and I'm like... Mozart's friend. No. I'm like Butch Cassidy and Michael is like... Mozart. You try and hurt Mozart? You're gonna get a bullet in your head courtesy of Butch Cassidy. - Dwight Schrute

Apple only updated the Flash Plugin via Safari updates.

Mac OS X software and security updates have updated the Flash plug-in. Safari updates have never updated the Adobe Flash plug-in.

C'mon, this has HISTORY behind it.

This is simply untrue.