Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror

Comment Re:Conflicted Issue (Score 1) 154

It might be a breach of privacy to take advantage of radio signals from cell phones, since you never gave the store permission to use the signals your own device generates, but that is a matter of popular opinion - does the store have a right to record or use signals produced by their customers for their own purposes?

It *might* be? I think not... Imagine you are at Starbucks drinking coffee, and surfing with your laptop. Does that give the Barista the right to use sslstrip and extract your credit card numbers? Not at all.

Comment Opt Out (Score 3, Interesting) 154

You can 'opt out' of this tracking service by turning off your mobile phone. But in this time and day, this solution seems akin to telling people to stop using email to 'opt out' from spam or to stop eating foods to 'opt out' of food poisoning. But even if the management wanted the costumers to be able to opt out, how would they do it? The only way is to tell the system to stop tracking the phones opted out, which means the system will need to start tracking the phones individually (to identify which phones are to be tracked and which are opted out), and by doing that, they enable the system to track *individual* users who have not opted out, making the issue worse for the average consumer who has no idea that these systems exist/how they work.
Security

Submission + - SCADA Vulnerabilities in Correctional Facilities (net-security.org)

Orome1 writes: Many prisons and jails use SCADA systems with PLCs to open and close doors. Using original and publicly available exploits along with evaluating vulnerabilities in electronic and physical security designs, researchers discovered significant vulnerabilities in PLCs used in correctional facilities by being able to remotely flip the switches to "open" or "locked closed" on cell doors and gates.

Comment Re:If even strong passwords can get leaked... (Score 1) 141

The advantage of "try and guess THIS one!" type password is not only are they hard to guess, but if they are long enough and hashed properly (SHA1 or similiar) they cannot be unercrypted. (Presuming that the decrpyting party does not have access to a super computer). This is due to the fact that these passwords go through a one-way type hash, thus the only way to crack them is having a list of every single possible hash and its key (or generating such a list). So if one has a password that is 27 characters long, an attacker will need to generate a hash for every password from 1 character long to 27 characters long. Example: 1,2 ... 001, 002 .... goalcar, goalcat, goalcau ... and so on.
The Internet

Submission + - Go Daddy Loses 21,000 Domains in One Day (cnet.com) 1

expo53d writes: Hats off to all those who transferred their domains off GoDady. CNET reports that yesterday 21,054 domains where pulled off Domaincontrol.com, a subsidiary of GoDady. While this maybe a coincidence, it is likely to be caused by GoDady's controversial support for SOPA. It seems that GoDady's attempts at remedying the problem were of no use.

Comment Security? (Score 1) 173

IHMO, any government/sensitive systems should be completely isolated from the internet. It surprises me that much of the US infrastructure is connected to the internet. Why does the US CoC need internet controlled thermostats? That just opens up vulnerabilities. On another note, why was the thermostat communicating with China? If these attacks were as professional as claimed and went undetected for a year, then you would suspect the "professional" hackers would use a proxy or some sort of onion routing. And the printer printing Chinese characters? Why would a hacker do that? And couldn't any "hacker" (not necessarily Chinese) have the printer print Chinese characters? The US will get its systems secured sooner to later, but if they don't secure it now by their will, they will be *forced* to secure it later.

Slashdot Top Deals

"Joy is wealth and love is the legal tender of the soul." -- Robert G. Ingersoll

Working...