Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Submission + - New Linux Vulnerability (arstechnica.com)

Cognitive Dissident writes: Ars Technical is reporting a major new vulnerability in Linux. Named "Dirty Pipeline" it involves abuse of 'pipes' at the shell level as you might guess.

The name Dirty Pipe is meant to both signal similarities to Dirty Cow and provide clues about the new vulnerability's origins. "Pipe" refers to a pipeline, a Linux mechanism for one OS process to send data to another process. In essence, a pipeline is two or more processes that are chained together so that the output text of one process (stdout) is passed directly as input (stdin) to the next one. Tracked as CVE-2022-0847, the vulnerability came to light when a researcher for website builder CM4all was troubleshooting a series of corrupted files that kept appearing on a customer's Linux machine. After months of analysis, the researcher finally found that the customer's corrupted files were the result of a bug in the Linux kernel.


Comment Not as great as the public thinks! (Score 1) 33

While it's not the fault of the guys who discovered this that it was adopted at breakneck speed, there are problems with CRISPR. These problems have even been covered on this site.

"A suite of experiments that use the gene-editing tool CRISPR-Cas9 to modify human embryos have revealed how the process can make large, unwanted changes to the genome at or near the target site. "

Comment Entering the walled garden? (Score 1) 146

Won't Spotify want him to close his own website? They seem to prefer exclusive content. How does cutting off people who don't want to pay for the podcast increase his audience? Expect a noticeable drop in his audience once the show is Spotify exclusive. I certainly won't be listening anymore.

Comment Local HOSTS also bypassed! (Score 1) 147

It is very important that people realize this also skips the local HOSTS file. That means that people who have been using "null" entries in their HOSTS files to block unpleasant things like ads and snooping will no longer have that particular layer of protection. As protective as encrypted DNS might be of some aspects of privacy, it might not be worth the price in other areas.

Ideally, any network-aware OS should be smart enough to do the encrypted DNS query, but include the local HOSTS check in the process. But I believe the only way to do that right now would require third-party utilities which most people will not be tech-savvy enough to setup for themselves.

Comment Re:Bandwidth? (Score 1) 75

Since Opera was once I good browser I had installed it on a device I own. It seemed OK for a while, but then I got flooded with tourism ads for China. The "notices" would respawn as quickly as I could delete them. Uninstall was the only remedy. Now I will not have anything to do with Opera in any OS.

Comment Re:Easy to get administrator access? (Score 3, Interesting) 80

No, it's not a non-issue, but it's a different kind of issue than most people realize. Remember the Alexis de Tocqueville Institution and the propaganda they pumped out last decade about how Linux and Open Source in general was a parasite on the tech industry, was enabling all sorts of illegal activities (such as terrorism - of course!), and attempted to publish a book claiming Linus Torvald's didn't really invent the Linux kernel? Microsoft was (and still is!) a major funder of this propaganda mill.

Think about the possible implications of a story like this: Could it generate calls to change the way the Linux kernel and programs that run under it are written? And now MS have their hooks sunk deeply into the kernel dev team. The SCO gambit (also funded by MS) failed, spectacularly. And the Astroturf de Tocqueville gambit failed, though not quite as spectacularly. And now we have MS "cooperating" in the development of Linux. And up pops a story that may justify an overhaul of Linux to make it controllable by MS Windows. Well, surprise, surprise! This "change of attitude" by MS is looking more and more like a subtler strategy to seize control of Linux rather than outright destroy it.

Submission + - Autism associated with shorter lifespan according to UK charity study

Cognitive Dissident writes: It's only one study, but the results are disturbing. An article in The Guardian describes a study by the UK charity Autistica showing that all people on the autism spectrum, not just the profoundly autistic, seem to be dying much younger than the average. There is no single definable cause, though a higher rate of suicide is one problem, but the aggregate result is a much higher mortality rate than the general population. There is no single cause, but a higher rate of suicide is noted. "Autistic people with no learning disabilities are nine times more likely to die from suicide compared to the rest of the population, the report states." Looks like something that needs more attention and research, which the charity is trying to organize.

Comment Re:Will Someone Please! (Score 3, Interesting) 370

If enough of us ask nicely, or not so nicely, the FTC might sue them.

Send your complaints about Microsoft's unfair and unethical behavior to: antitrust@ftc.gov

This is the official address for reporting antitrust violations. I think trying to leverage the near universal presence of old versions of Windows on PCs worldwide to force acceptance of the new version qualifies as abuse of market position. The FTC might agree with enough public comment/complaint. People who have experienced the "involuntary upgrade" problem are likely to be especially influential. If you know anyone who has experienced this, pass that address along to them.

Submission + - 18th Century Law dredged up to force decryption of devices (theregister.co.uk) 1

Cognitive Dissident writes: The Register has a story about federal prosecutors using a law signed by George Washington to force manufacturers to help law enforcement access encrypted data on devices they manufacture. The All Writs Act is a broad statute simply authorizing courts to issue any order necessary to obtain information within their jurisdiction.

Quoting the Register Article:
Last month, New York prosecutors successfully persuaded a judge that the ancient law could be used to force an unnamed smartphone manufacturer to help unlock a phone allegedly used in a credit card fraud case. The judge ordered the manufacturer to offer "reasonable technical assistance" to make the phone's contents available.

End quote. What will happen when this collides with Apple and Google deliberately creating encryption that they themselves cannot break?

Submission + - New analysis shows dinosaurs not as heavy as previously believed. (discovery.com)

Cognitive Dissident writes: Discovery.com has an article on a new study using computer modeling to estimate the actual amount of flesh needed to cover the skeletons of dinosaurs. Based on a comparison with modern animals, it indicates that these animals could have weighed dramatically less than has been previously estimated. "A huge Brachiosaur, once thought to weigh 176,370 pounds, is now believed to have weighed 50,706 pounds." That's only about two-and-a-half times the weight of a modern African elephant. If other evidence can be reconciled with this, many estimates of the ecosystems dinosaurs lived in will also have to be revised.

Comment Urban Legend becomes reality (Score 5, Interesting) 141

Steven Spielberg claimed to have done something similar. He claimed to have occupied an unused office on the Universal Studios lot by simply dressing in a suit, carrying a brief case, and bluffing his way past the security guards. But his story kept growing and growing. A clear sign of fabrication. So it was finally debunked by snopes. But even his tallest tale didn't claim to have lived on the lot full time. And now this kid has gone one better than the tall tale, actually living inside the corporate complex of a major tech company.

Submission + - WHMCS data compromised by good old social engineering (softpedia.com)

howhardcanitbetocrea writes: WHMCS has had 500k records leaked, credit cards included, by hackers calling themselves ugnazis. Apparently ugnazis succeeded in obtaining login details from the billing software's host by using social engineering Ugnazis accuse WHMCS of knowingly offering services to fraudsters.

After almost 24 hours ugnazis still seems to have control of WHMCS twitter account @whmcs and is regularly updating their exploits. These tweets are also feeding into WHMCS software.

Slashdot Top Deals

Getting the job done is no excuse for not following the rules. Corollary: Following the rules will not get the job done.

Working...