Follow Slashdot stories on Twitter


Forgot your password?
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

How To Go Broke Selling Zero-Day Exploits 66

Trailrunner7 writes "Despite all of the hand-wringing and moral posturing about the public sale of security vulnerabilities, it turns out that not many people are buying or selling vulns, and the ones who are aren't making much money at it. A new survey of security researchers who sell vulnerabilities either publicly or in private, directed sales found that the vast majority of the flaws sell for less than $5,000. Almost none of them sell for much more than $10,000. At those prices, there's little chance that this is going to turn into the chaotic Wild West marketplace that some people predicted. It's a small, mostly controlled market that isn't making anyone rich."

CRTC Approves Usage Based Billing In Canada 381

qvatch writes with this from CBC News: "The CRTC has approved Bell Canada's request to bill Internet customers, both retail and wholesale, based on how much they download each month. The plan, known as usage-based billing, will apply to people who buy their Internet connection from Bell, or from smaller service providers that rent lines from the company, such as Teksavvy or Acanac. ... Customers using the fastest connections of five megabits per second, for example, will have a monthly allotment of 60 gigabytes, beyond which Bell will charge $1.12 per GB to a maximum of $22.50. If a customer uses more than 300 GB a month, Bell will also be able to implement an additional charge of 75 cents per gigabyte."
Linux Business

Canonical Explains Decision to License H.264 For Ubuntu 372

tux writes with this snippet from The Register: "Ubuntu's commercial sponsor Canonical has tried to clarify how — if not why — it has licensed a closed-source and patented codec for video on PCs running its Linux. Canonical is the first Linux shop to have agreed to license the codec in question, H.264, from MPEG LA. Even though Red Hat and Novell are also available for use on PCs, they have not licensed H.264."

Submission + - GPL Lawsuit Continues Despite Report Of Settlement

ScottAS writes: According to various Online outlets, of which include Slashdot.Org, it was reported yesterday that a lawsuit pertaining to a violation of the GNU General Public License (GPL) had been settled. Unfortunately it is not so. The lawsuit is to continue and may not be settled in an out-of-court decision. Daniel B. Ravicher, a Legal Director stated; "I can confirm that we are discussing settlement, but, contrary to what many in the press seem to believe, no agreement has been reached. Simply coming into compliance now is not sufficient to settle the matter, because that would mean anyone can violate the License until caught, because the only punishment would be to come into compliance." Read More
The Almighty Buck

Submission + - The World's Most Polluted Sites

Hugh Pickens writes: "Blacksmith Institute has just published their annual list of the world's most polluted sites. Sumqayit in Azerbaijan leads the list with its toxic legacy of heavy metal, oil and chemical contamination from its days as a center of chemical production with local Azeris suffering cancer rates 22 to 51 percent higher than their countrymen "As much as 120,000 tons of harmful emissions were released [in Sumqayit] on an annual basis, including mercury," says Richard Fuller, founder of Blacksmith. "There are huge untreated dumps of industrial sludge." Blacksmith compiles their list by comparing the toxicity of the contamination, the likelihood of it getting into humans and the number of people affected. An article from Scientific American says that despite the massive pollution, it would be relatively easy and cheap to clean up the most dangerous hazards at these contaminated sites. For example, it would cost just $15,000 to save an estimated 350 lives by simply digging up radioactive contaminated soil from the Mayak plutonium facility that had been deposited on the shore of the Techa River in the Russian town of Muslyomova. Similar cost-effective efforts are underway across the globe. "For about $200, the cost of a refrigerator, we are able to save someone's life," Fuller says."

Submission + - Its official! Denmark votes NO to OOXML (

SplatMan_DK writes: According to an official press release (Danish only) from Dansk Standard, it is now official: Denmark will vote NO (with comments) to approving Microsoft Open Office XML (OOXML) as an ISO standard at this time. Here is a translation from Groklaw:

Dansk Standard (the Danish Standard's institute) has on behalf of Denmark voted "No with Comments" to the proposed standard ISO/IEC DIS 29500 OOXML. This means, that DS will cooperate with the standards committee to approve Office Open XML as a ISO/IEC standard, if certain problems is addressed.


Submission + - Spirit Outlasts Viking 2 Lander

ScottMaxwell writes: "Spirit, the Mars rover designed for a 90-day mission, has now outlasted the Viking 2 lander. Viking 2 survived until its 1281st sol (Martian day); Spirit is now on sol 1282 and counting. Assuming both rovers continue to weather the ongoing dust storms, Spirit's sister, Opportunity, will reach the same age in a few weeks. They aren't breathing down the neck of the all-time record just yet, though — the Viking 1 lander lasted 2245 sols on the surface of Mars; Spirit and Opportunity won't break that record for another 2.7 Earth years."

Slashdot Top Deals

Remember: Silly is a state of Mind, Stupid is a way of Life. -- Dave Butler