Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror

Comment Re:Humans will never have to think again (Score 1) 113

by coastwalker (#63248889) Attached to: Why This Teacher Has Adopted an Open ChatGPT Policy

Math is not sums unless you work in a bar and even then the arithmetic is usually done on a till these days. A lot of "math" now will no longer require you to memorise formula with AI available - but for example you will still have to understand the difference between different statistical tools even if the exact formula escapes your memory.

Comment 13 year olds (Score 1) 181

by coastwalker (#63086572) Attached to: Can't Hear What Actors Are Saying on TV? It's Not You, Probably

All the producers on TV are 13 because the Executives think that this means their output will be relevant. This is why all the presenters shout with gushing enthusiasm and all drama is overlayed with maximum volume Boss scene music from their favourite first person shooter. Basically you need to swap them out for boomers with wrecked hearing from 80's power ballads and the intelligibility will be fixed overnight.Could someone reverse engineer one of those Karaoke boxes to do the opposite of stripping the vocals out of songs and sell us the results. You could potentially make more money than Musk in a couple of months.

Comment Re:How long? (Score 1) 141

by coastwalker (#63082604) Attached to: Intel Officially Introduces Pay-As-You-Go Chip Licensing

Sometimes the babbling of the brain-dead zombies of the Alt-right conspiracy theory death cult actually have it right. "GRRRR WEF GLOBALIST SATANISTS!!! Charles SWAB says you WILL OWN NOTHING and be happy!!!!" (Apologies to any Alt-right death cult conspiracy theorists reading this if I got the wording wrong).. The fact is that renting is the most efficient method of extracting profits from the marks known to capitalism. Generally speaking the parasitic practise is destroyed by competitors offering a disruptively cheaper product for outright purchase. We will see whether the rest of the market behaves as a monopoly and follows Intel's lead.

Comment Re:What He Didn't See (Score 1) 91

He sees that as you do, from the ground and is just as happy to see it as you. What he also sees is that you can climb out of our atmosphere and look at it and suddenly you understand that no one is ever going there in a spacecraft. Meanwhile your body is filling up with microplastics, the climate is tilting and we are living through a great extinction. We have work to do and it is down here, not up there.

Comment Thanks (Score 1) 91

Well said captain Kirk. There are not going to be any trips to the stars and only research outposts on the planets and moons of our solar system. Space is too big for us to get across. Out there is only death, just as there is at the bottom of the ocean and at the south pole. Meanwhile we are turning our beautiful planet into a dead trash can. Appreciate you reminding us of this fact.

Submission + - Hackers Are Stealing Session Cookies to Bypass Multi-factor Authentication (esecurityplanet.com) 1

Submitted by storagedude
storagedude writes: Hackers are stealing cookies from current or recent web sessions to bypass multi-factor authentication (MFA), according to an eSecurity Planet report.

The attack method, reported by Sophos researchers, is already growing in use. The "cookie-stealing cybercrime spectrum" is broad, the researchers wrote, ranging from "entry-level criminals" to advanced adversaries, using various techniques.

Cybercriminals collect cookies or buy stolen credentials "in bulk" on dark web forums. Ransomware groups also harvest cookies and "their activities may not be detected by simple anti-malware defenses because of their abuse of legitimate executables, both already present and brought along as tools," the researchers wrote.

Browsers allow users to maintain authentication, remember passwords and autofill forms. That might seem convenient, but attackers can exploit this functionality to steal credentials and skip the login challenge.

Behind the scenes, browsers use SQLite database files that contain cookies. These cookies are composed of key-value pairs, and the values often contain critical information such as tokens and expiration dates.

Adversaries know the exact name and location of these files for all major browsers such as Chrome, Firefox, and even Brave, on various operating systems. That’s why the attack can be scripted. It’s not uncommon to find such scripts along with other modules in info-stealing and other malware.

For example, the latest version of the Emotet botnet targets cookies and credentials stored by browsers, which include saved credit cards. According to the Sophos researchers, “Google’s Chrome browser uses the same encryption method to store both multi-factor authentication cookies and credit card data.”

To gain initial access, attackers can also perform phishing and spear-phishing campaigns to implant droppers that can deploy cookie-stealer malware stealthily.

The cookies are then used for post-exploitation and lateral movements. Cybercriminals can use them to change passwords and emails associated with user accounts, or trick the victims into downloading additional malware, or even deploy other exploitation tools such as Cobalt Strike and Impacket kit.

Users should not use built-in features to save passwords unless the browser encrypts them with, at least, a master password. It’s recommended that users uncheck the setting called “remember passwords,” and users should probably not allow persistent sessions as well.

Developers can be part of the problem if they don’t secure authentication cookies properly. Such cookies must have a short expiration date. Otherwise, the persistent authentication could turn into a persistent threat. You can have great security processes and still get hacked because the cookies do not have the necessary flags (e.g., HttpOnly, Secure attribute). For example, authentication cookies must be sent using SSL/TLS channels. Otherwise the data could be sent in plain text and attackers would only have to sniff traffic to intercept credentials.

Submission + - Buttons Beat Touchscreens In Cars, and Now There's Data To Prove It (arstechnica.com)

Submitted by Anonymous Coward
An anonymous reader writes: [Swedish car publication Vi Bilägare] tested 11 new cars alongside a 2005 Volvo C70, timing how long it took to perform a list of tasks in each car. These included turning on the seat heater, increasing the cabin temperature, turning on the defroster, adjusting the radio, resetting the trip computer, turning off the screen, and dimming the instruments. The old Volvo was the clear winner. "The four tasks is handled within ten seconds flat, during which the car is driven 306 meters at 110 km/h [1,004 feet at 68 mph]," VB found. Most of the other cars required twice as long, or more, to complete the same tasks. VB says that "one important aspect of this test is that the drivers had time to get to know the cars and their infotainment systems before the test started." VB lays the blame for the shift from bottons to screens with designers who "want a 'clean' interior with minimal switchgear."

Even with touchscreens, though, we can see in the spread of scores VB gave to different all-touch cars that design matters. You'll find almost no buttons in a Tesla Model 3, and we called out the lack of buttons in the Subaru Outback in our review, but both performed quite well in VB's tests. And VW's use of capacitive touch (versus physical) for the controls on the center stack appears to be exactly the wrong decision in terms of usability, with the ID.3 right at the bottom of the pack in VB's scores. I'm not surprised that the BMW iX scored well; although it has a touchscreen, you're not obligated to use it. BMW's rotary iDrive controller falls naturally to hand, and there are permanent controls arrayed around it under a sliver of wood that both looks and feels interesting. It's an early implementation of what the company calls shy tech, and it's a design trend I am very much looking forward to seeing evolve in the future.

Slashdot Top Deals

The rule on staying alive as a program manager is to give 'em a number or give 'em a date, but never give 'em both at once.

Close