Forgot your password?
typodupeerror

Submission + - Internet Archive Building a Digital Library of Amateur Radio (archive.org)

savetz writes: Internet Archive has begun gathering content for the Digital Library of Amateur Radio and Communications (DLARC), which will be a massive online library of materials and collections related to amateur radio and early digital communications. The DLARC is funded by a significant grant from the Amateur Radio Digital Communications Foundation (ARDC) to create a digital library that documents, preserves, and provides open access to the history of this community.

The DLARC project is looking for partners and contributors with troves of ham radio, amateur radio, and early digital communications related books, magazines, documents, catalogs, manuals, videos, software, personal archives, and other historical records collections, no matter how big or small. In addition to physical material to digitize, we are looking for podcasts, newsletters, video channels, and other digital content that can enrich the DLARC collections.

Internet Archive will work directly with groups, publishers, clubs, individuals, and others to ensure the archiving and perpetual access of contributed collections, their physical preservation, their digitization, and their online availability and promotion for use in research, education, and historical documentation. All collections in this digital library will be universally accessible to any user and there will be a customized access and discovery portal with special features for research and educational uses.

Comment Re:How exactly does this work? (Score 1) 77

L(should have)GT: https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/

I attended this talk yesterday, and it was by far the best talk I attended at defcon26. The researchers did some amazing work to get this exploit. You can get the full tail of hackery at the link above, but here's my (probably/mostly correct) summary:
 

  • At some point, the fax standard was amended to include support for JPGs, in order to allow full-color faxes
  • As the researchers wrote in the above-linked blog article, "For some unknown reason, firmware developers tend to re-implement modules that are already implemented in major popular open sources. This means that instead of using libjpeg [ref.13], the developers implemented their own JPEG parser."
  • When the All-in-One device receives a JPG fax, it stores the whole JPG file in local storage (on disk, essentially). This differs from how it processes TIFF files, where the headers and image data are separated. Because the whole JPG file is stored as a normal file, it gives the attacker a platform from which to operate.
  • The firmware-developer-implemented JPG parser has a number of bugs, including buffer overflow vulnerabilities in the COM (CVE-2018-5925) and DHT (CVE-2018-5924) markers. It turned out the bug in the DHT marker parser was the easier one to exploit.
  • Exploiting the DHT marker parser buffer overflow gets them arbitrary code execution. The code they want to execute is stored in the remainder of the JPG file. Because the OS on these All-in-One devices has no security controls and everything runs with highest privileges, they were able to use this ability to overwrite the LCD screen (to visually prove pwnage) and then to use the Eternal Blue and Double Pulsar (which they managed to squeeze into the ~4000 byte payload they had available in the JPG file) exploits to start attacking other hosts on the network. Since these All-in-One devices tend to be connected to the office network (else, it's hard to print on them), this presents an excellent jumping off point for attacks.

All in all (all-in-one?) this was some amazing research and the full article is well worth a read.

Comment Commercially available for some time... (Score 4, Informative) 100

All of the major WiFi equipment vendors (Cisco, Aruba, etc.) have offered this for some time -- though they don't claim anywhere near the MIT Lab's level of accuracy. For instance, Aruba calls their offering "ALE" or Aruba Location Engine. It sits as a separate virtual appliance and communicates to the central WiFi controller (AirWave in their parlance) or to the individual APs if they are operating in autonomous mode. It gets signal strength indications for each WiFi and bluetooth antenna in range of the APs (note: *not* just those devices that are Associated with the WiFi networks served by said APs) and feeds that into ALE. From there, you can map out the devices. Both Cisco and Aruba's products have very extensive APIs to access this info. Maybe they can enhance their offerings with MIT's new technology and get the location resolution improved a bit. For now, in the wild, it's often difficult to get a station (i.e. device) location down to better than a range of 3-10 meters.
United States

TSA: Confiscating Aluminum Foil and Watching Out For Solar Powered Bombs 289

schwit1 writes "If you think confiscating aluminum foil to prevent a solar powered bomb attack on a plane is a waste of time, don't blame the TSA agent. According to a former employee most of the security people agree with you. Instead, we need to hold accountable the people sending down such ridiculous orders. From the article: 'Ridiculous restrictions and the TSA have become nearly synonymous in the post-9/11 airport, and as new, improbable terrorist plots come to light, we will likely continue to be burdened with new, absurd rules. But our best bet is to take the frustration toward the TSA agent confiscating our over-sized liquids, and re-direct it to the people at TSA headquarters who are being paid the big bucks to make the rules — the ones who make the call as to whether our toothpaste is verboten and whether our shoes will need extra screening.'"

Comment Tea party darlings (Score 1) 668

The cognitive dissonance from this is that the politicians that seem to have the strongest tea party support tend to be the most scientifically backward bunch out there. From Michelle "pray the gay away" Bachman, to a whole host of global warming deniers. Have they decided to sacrifice their science principals to achieve the goal of lower taxes and smaller government, no matter what wacko they have to sign on with in order to get that?

Comment Re:Does this mean the Apple turfers will be labele (Score 1) 230

In checking your other posts, I realize when you said "Apple turfers" you may have meant "anti Apple turfers", not "Apple astroturfers".
If that's the case, sorry I let you have both barrels because you mispoke or I misunderstood.

Still, group labeling of accounts is pretty offensive. You can block any user.
  I guess I don't participate in /. conversations as much as I did in the nineties, so I've only had to block on a few occasions.

Comment Re:Does this mean the Apple turfers will be labele (Score 0) 230

"Labeling" users? How offensive. How do you propose doing that, by affixing "armbands" to their usernames? Maybe you are the one who needs to wear a stigmatic identifier.

I'm -pretty sure- Apple's roaring success depends naught on maintaining an army of "turfers". However there seems to be no end of anti-Apple posters like yourself, suggesting they exist. I see the value of pre-emptively accusing your opponent of your OWN sins, however all documented instances of "astroturfing" have been attributed to Microsoft or their agents.

I'm not an Apple fanboy. Been running Linux at home since 1994. But at least Apple advanced desktop computing, while Microsoft held it back AND helped change the Internet into this incredibly insecure thing, by virtue of a PERMANENT army of zombie computers. Old MacOS was never as cavalier about security as Windows still is, and Apple's record on security is pretty damn good with OS X. I can still gripe about the window dressing on the Mac desktop, but the underpinnings of OSX are a solid standard UNIX kernel... the modern Apple OS foundation is solid, unlike Microsoft's.

Comment Re:StackOverflow competior? (Score 2) 230

Are you saying Oracle (for example) is going to have some expert answer common Java questions in a slashvertisement/tech support type thing?

This -does- have the feel of something which came out of a 'monetize' brainstorming session. The description reads just as badly... it sounds like Soulskill is reading off of marketing's talking-points.

So HOW exactly does this benefit Slashdot users? Or is there one at all?
  HOW are sponsor representatives represented in discussion? Are their comments automatic +5, and totally immune to moderation?
This doesn't need explanation, apparently. :-/

I've been on Slashdot.org for about 14 years, and seen it survive the threat from Digg (and the the Digg self-destruct). But my interest is declining. The original stories are less insightful, more incidence of stories linking to overtly 'controversial' blog posts elsewhere designed to troll web clicks. Years ago I switched from viewing this website, to monitoring the RSS feed, and less and less often do I find reason to stick around when I click one of the feed items.

My biggest complaint of all is there is no benefit or advantage to the older accounts. I gave up submitting stories because even if I were one of the first (just a guess), there are semi-professional story submitters who get the credit. No wait, that's not my worst grievance... Slashdot has a checkbox for "Do not display ads", given for past participation on the site... but the checkbox doesn't work.

Maybe the worst annoyance is when I visit my ~user page, it tells me there's a new post on Will Wheaton's Slashdot journal.. which was deleted like 10 years ago, and because of that deletion I can't unsubscribe from it (it's a silent error, but probably failed SQL stupidity... and my support emails to slashdot go unanswered).

I think Slashdot recognizes that their future's probably in nurturing "communities" where the users interact more with each other (like Slashdot USED to be). GOOD call. But that space is served by Ning. If Slashdot's owners think the answer is "commercially sponsored questions and posts"... really? lulz. For me the answer is, different websites for different genres of information. That's way easier to follow, and you can somewhat get to know people.

Comment Re:...Good for you? (Score 1) 627

I'm sorry, this isn't a story. This is a blog entry, and a short one at that.

I'm sorry, you lack cynicism: what this submission IS is a troll for ad revenue. It's almost a troll... kind of like every John Dvorak article since 1990 (but without the legitimacy he had built up prior to that time).

I thought I had it good when we ditched our "desktop" computers 6 years ago and went with just laptops in the home. Now it's an iPad 1 and 2. When I am developing for Drupal, I use my iPad and laptop (Ubuntu, with Komodo IDE). When I take notes or read OReilly/Safari Books, it's the iPad. When I take notes or set appointments, it's the iPad and Google apps. When I play games, I use either the iPad or the PS3. When I watch movies, it's NetFlix on the iPad or PS3. I suppose for some the droid tablets are the same (although they all seem rather sluggish to me, and have inconsistent UIs.. but maybe I'm just jealous).

Slashdot Top Deals

Nothing will ever be attempted if all possible objections must be first overcome. -- Dr. Johnson

Working...