Forgot your password?
typodupeerror

Submission + - At least one open source vulnerability found in 84% of code bases (csoonline.com)

L.Kynes writes: Almost all applications contain at least some open source code, and 48% of all code bases examined by Synopsys researchers contained high-risk vulnerabilities, which are those that have been actively exploited, already have documented proof-of-concept exploits, or are classified as remote code execution vulnerabilities.

At a time when almost all software contains open source code, at least one known open source vulnerability was detected in 84% of all commercial and proprietary code bases examined by researchers at application security company Synopsys.

The vulnerability data — along with information on open source license compliance — was included in Synopsys' 2023 Open Source Security and Risk Analysis (OSSRA) report, put together by the company's Cybersecurity Research Center (CyRC).

The annual OSSRA report represents CyRC findings from the previous year's data. Of the 1,703 codebases that Synopsys audited in 2022, 96% of them contained open source. Aerospace, aviation, automotive, transportation, logistics; EdTech; and Internet of Things are three of the 17 industry sectors included in the report that had open source in 100% of their audited codebases. In the remaining verticals, over 92% of the codebases contained open source.

Comment Tough challenge (Score 1) 65

Even real authors such as Brian Herbert and Kevin J. Anderson somehow failed to match the depth of Frank Herbert's writing to conclude the original Dune series. And they were using his notes for the plot.

Hunters of Dune: The New York Times said of Hunters of Dune that "Brian Herbert and Kevin J. Anderson go through the motions, but they don't often seem to be having much fun with their material ... by the end of Hunters, they have done little more than set the table for Sandworms of Dune."

https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2F...

Sandworms of Dune: Conversely, the novel was criticized by Publishers Weekly for its writing and storytelling methods: Longtime collaborators Herbert and Anderson set themselves a steep challenge-and, in the end, fail to meet it-in this much anticipated wrapup of the original Dune cycle.

https://ancillary-proxy.atarimworker.io?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2F...

Comment Re:Oh good grief (Score 1) 28

Sometimes I have to shake my head regarding some of the stories that get posted to Slashdot nowadays. This is neither "news for nerds" nor "stuff that matters".

This is okay news. The subject is new extension to AI image generators which allows to insert user content. It is better than to be limited only to the training data set. Or did I get it wrong and was that always possible?

From the article:

With an additional technique called Dreambooth, people can insert their own subject or character into scenes generated by Stable Diffusion. It can also be used to insert real people into fictional situations.

Comment LastPass will be always the week link (Score 1) 38

The point is that LastPass and similar services will be always the week link.

LastPass has to store the full text of your passphrases to other sites. These passphrases are encrypted, but the encrypted blob still contains the full passphrases. As the article says, soon as the thieves brute force and guess your master passphrase, they will be able to see all your passphrases to other sites in clear text and use them for logins.

On the other hand, slashdot and other sites can store only salted peppered hash of your passphrase on their servers to authenticate your login by some salted challenge response (SCRAM) mechanism. Such stored hash on server is totally useless when someone steals it.

Comment Re:It's sad. (Score 1) 19

The sooner we invade DPRK the better if you ask me.

I really hope that they will be able to bring down dictatorship from within. Which countries ended dictatorship:

ChatGPT:

Many countries have transitioned from dictatorship to democracy, or have abolished dictatorship and established a democratic system of government. Some examples of countries that have ended dictatorship in recent history include:

  1. 1. Argentina: The military dictatorship in Argentina ended in 1983, following the collapse of the regime after the defeat in the Falklands War.
  2. 2. Chile: The military dictatorship of Augusto Pinochet in Chile ended in 1990, after the regime lost a plebiscite and democratic elections were held.
  3. 3. South Korea: The authoritarian regime of Park Chung-hee ended in 1979, after his assassination.
  4. 4. Brazil: The military dictatorship in Brazil ended in 1985, following the country's return to democracy.
  5. 5. Philippines: The authoritarian regime of Ferdinand Marcos ended in 1986, after he was ousted in the People Power Revolution.
  6. 6. Taiwan: The authoritarian rule of the Kuomintang party ended in Taiwan in the late 1980s, leading to the establishment of a multiparty democracy.
  7. 7. South Africa: The apartheid regime in South Africa ended in 1994, following the release of Nelson Mandela and the negotiation of a new, democratic constitution.
  8. 8. Tunisia: The dictatorship of Zine El Abidine Ben Ali ended in 2011, following the Tunisian Revolution and the adoption of a new constitution.
  9. 9. Egypt: The authoritarian regime of Hosni Mubarak ended in 2011, following the Egyptian Revolution and the adoption of a new constitution.
  10. 10. Libya: The dictatorship of Muammar Gaddafi ended in 2011, following the Libyan Revolution and his death at the hands of rebel forces.

Comment Re:Anything is better than Gnome (Score 1) 32

Gnome (GNU Network Object Model) is responsive and stable environment.

I am using Debian GNU/Linux which allows you to choose from about 10 desktops during installation with default setting to Gnome. Debian with Gnome is the most usable Linux on my machine with 2 GB RAM. Everything is fast and it automatically installs vmware tools during installation. After the first boot you already have full display resolution and shared folders to host machine. Nice.

Comment Re:Well, that's disappointing (Score 1) 24

VS Code is a current product and under active development. It's a decent IDE once you figure it out. Opens fast, supports almost everything, git support built in... Good stuff.

I like that I can use VS Code on my Mac, Linux and Windows machines. Doing some cross platform development. I use vsc only as a text editor and use msys2, gcc and clang from standard terminal.

pluses: can handle files with gigabytes of data, fast (indexed) grep like search in thousands of text files in total 100 GB, automatic code index to jump to definitions etc., remote connections to work on another machine

minuses: different keyboard shortcuts than MS Visual Studio, takes lots of RAM - about 1 GB per window, can not open two windows in the same directory, some settings are stored in a binary format (sqlite) and are difficult to move to another PC, annoying popup suggestions which can be fortunately turned off, setting up debugger can be difficult

Comment Re:was Oppenheimer gay? (Score 1) 133

The more of you Russian-paid trolls I read, the more I lean toward an aggressive response to Russia. Poland should take Konigsberg back as the inheritor of East Prussia. Finland should take all of Karelia back as well. Fund the caucus armies to drive out Russia, fund the caucus groups to drive out Russia, fund the Siberian locals movement to drive out Russia. Dismantle the imperial vestige of Russia and its successors until it has nothing with which to fight. At all costs.

That is very bad idea. I think that it is what Russia is trying to provoke us to do. To drag others into their misery.

Comment Add a test for bad page code (Score 2) 26

They should test that the browsers can handle pages created by bad development. My mouse cursor stops moving, Firefox is not responding and my Linux box is dead when I load like a hundred of posts on Reedit. I experienced the same issue with other sites which have endless scrolling of some content. I do not have 8 GB RAM, which would probably only postpone this issue after few more hours of scrolling.

Comment Wrong approach (Score 2) 80

Lawsuits with your players is totally wrong approach. Just create new server instance and move there all cheaters. Without letting them know.

Inspired by Apple TV+ comedy series Mythic Quest in which they create extra separated server for all nazi players. (When I was looking for the link, I just found that it will be soon expanded with new series Mere Mortals)

I can imagine that for some players, writing cheats or to modify a game is another way to have fun.

I wrote one cheat program myself when I got stuck because of some bug. It was for single player game Albion. I guess that it influenced my career choices later.

Submission + - Researchers propose new structures to harvest untapped source of freshwater (illinois.edu)

L.Kynes writes: ScienceDaily reports research from The University of Illinois:
An almost limitless supply of fresh water exists in the form of water vapor above Earth's oceans, yet remains untapped, researchers said. A new study from the University of Illinois Urbana-Champaign is the first to suggest an investment in new infrastructure capable of harvesting oceanic water vapor as a solution to limited supplies of fresh water in various locations around the world.

Water scarcity is a global problem and hits close to home here in the U.S. regarding the sinking water levels in the Colorado River basin, which affects the whole Western U.S.

Previous wastewater recycling, cloud seeding and desalination techniques have met only limited success.

Eventually, we will need to find a way to increase the supply of fresh water as conservation and recycled water from existing sources, albeit essential, will not be sufficient to meet human needs. We think our newly proposed method can do that at large scales.

Slashdot Top Deals

Computers are useless. They can only give you answers. -- Pablo Picasso

Working...