Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment Slashdot. Slashdot never changes. (Score 3, Insightful) 111

Microsoft: *Resists any sort of integration with Linux even if it has to violate a standard* Slashdot: This is Bullshit! MIcrosoft needs to allow integration and follow standards and allow interoperability with linux! *22 years pass* Microsoft: *Litearally allows you to install, by name, several popular linux distros and offers deep hooks into their operating system to make switching between linux tools and windows tools painless* Slashdot: Microsoft is trying to take over linux! This is bullshit!

Comment Re:Allow certain msg apps instead (Score 1) 40

Frankly, I'd prefer a more disconnected approach, like Authy/Google Authenticator TBOTP. But half the time, that turns into "buy this token/download our app" rather than "Here's a QR code with the seed" (looking at you, Square and Blizzard), so forcing that might just create more situations where I'm forced to install Yet Another Crap App rather than being able to use tools I have already.

Comment I mean... (Score 2) 40

If the answer is between "Leave SMS OTPs alone" and "Improve the experience somewhat", there's no reason not to take the latter path; I agree that phasing out SMS auth, given the insecurity of it, is the direction we need to go, but that's not going to happen instantly, and as we move to sunsetting the idea of SMS OTPs, we should do what we can to make the experience as good as is reasonable.

Comment Smart TVs always miss the mark (Score 3, Insightful) 66

I'm not exactly averse to IoT products (I really do enjoy my smart lights), but it seems like Smart TVs always miss the mark on this kinda stuff (Too slow to update, to slow to USE, pointless buttons on the remote for long-dead services, wasn't Samsung the one caught slipping ads into shows or something using their Smart TVs or did I just hallucinate that?) Like, the only product I'm less willing to buy than a smart TV would be a smart lock.

Submission + - Easy-To-Pick 'Smart' Locks Gush Personal Data, FTC Finds (arstechnica.com)

An anonymous reader writes: A padlock—whether it uses a combination, a key, or "smart" tech—has exactly one job: to keep your stuff safe so other people can't get it. Tapplock, Inc., based in Canada, produces such a product. The company's locks unlock with a fingerprint or an app connected by Bluetooth to your phone. Unfortunately, the Federal Trade Commission said, the locks are full of both digital and physical vulnerabilities that leave users' stuff, and data, at risk. The FTC's complaint (PDF) against Tapplock, released Monday, basically alleges that the company misrepresented itself, because it marketed its products as secure and tested when they were neither. A product—any product—simply being kind of crappy doesn't necessarily fall under the FTC's purview. Saying untrue things about your product in your advertisement or privacy policy, however, will make the commission very unhappy with you indeed.

The lock may be built with "7mm reinforced stainless steel shackles, strengthened by double-layered lock design with anti-shim and anti-pry technologies," as Tapplock's website promises, but according to the FTC, perhaps it should have considered anti-screwdriver technologies. As it turns out, a researcher was able to unlock the lock "within a matter of seconds" by unscrewing the back panel. Oops. The complaint also pointed to several "reasonably foreseeable" software vulnerabilities that the FTC alleges Tapplock could have avoided if the company "had implemented simple, low-cost steps."

One vulnerability security researchers identified allowed a user to bypass the account authentication process entirely in order to gain full access to the account of literally any Tapplock user, including their personal information. And how could this happen? "A researcher who logged in with a valid user credential could then access another user’s account without being re-directed back to the login page, thereby allowing the researcher to circumvent Respondent’s authentication procedures altogether," the complaint explains. A second vulnerability allowed researchers the ability to access and unlock any lock they could get close enough to with a working Bluetooth connection. That's because Tapplock "failed to encrypt the Bluetooth communication between the lock and the app," leaving the data wide open for the researchers to discover and replicate. The third vulnerability outlined in the complaint also has to do with a failure to secure communication data. That app that allows "unlimited" connections? The primary owner can of course add and revoke authorized users from the lock. But someone whose access was revoked could still access the lock because the vulnerability allowed for sniffing out the relevant data packets.

Comment Re: 'Social networking has robbed us of our nostal (Score 2) 168

>Facebook is redundant
One thing we agree on. My account there is basically vestigial at this point, used only to communicate with people who don't know me on Twitter or Google Plus and I don't feel like texting.
That said, the first half of your post has nothing to do with the last half. I get that reuniting with someone after a long way away is a nice feeling, but, in terms specifically of high school Reunions, is largely a fake feeling. It's not "Oh, here's my long lost aunt/niece/brother/friend I haven't seen in years, lets catch up", it's "Oh, here's a bunch of people who happened to be born around the same time as me, most of whom I don't care about." Maybe I'm just cynical for my age (I'm only a few years younger than you, born in '85), but most of the people I care about from high school I kept in touch with. The rest were noise to my life.

Comment 'Social networking has robbed us of our nostalgia (Score 5, Insightful) 168

So? It seems like every few days we get some article from somewhere that basically amounts to "things are different now". It's also bonus points when the thing that's changed was only something Baby Boomers really experienced, and they act like it was a universal, awesome thing that OH NO THE INTERNETS KILLING NOW.
Advertising

Your Face Will Soon Be In Facebook Ads 344

jfruhlinger writes "If you're planning on checking into Starbucks using Facebook Places, your friends may soon see your profile picture in a Facebook ad for Starbucks — and, it goes without saying, you won't be paid a dime. You can't opt out, unless, as Dan Tynan puts it, "studiously avoid clicking "Like" or checking into any place that has a six- or seven-figure ad budget." The ad will also include whatever text you use in your checkin, so Tynan suggests some judicious pranksterism ("Just checked into the Starbucks around the corner and this doppio mocha latte tastes like goat urine")."

Slashdot Top Deals

Are you having fun yet?

Working...