Slashdot

Ron writes "Symantec security researcher Yazan Gable has put forward an explanation as to why the number of denial of service attacks has been declining (coincident with the rise of spam). His theory is that DoS attacks are no longer profitable to attackers. While spam and phishing attacks directly generate profit, he argues that extortion techniques often used with DoS attacks are far more risky and often make an attacker no profit at all. Gable writes: 'So what happens if the target of the attack refuses to pay? The DoS extortionist is obligated to carry out a prolonged DoS attack against them to follow through on their threats. For a DoS extortionist, this is the worst scenario because they have to risk their bot network for nothing at all. Since the target has refused to pay, it is likely that they will never pay. As a consequence, the attacker has to spend time and resources on a lost cause.'"

Read more of this story at Slashdot.

RulerOf writes "Musicians recently unlocked a 600 year old mystery that had been encoded into the walls of the Rosslyn Chapel in Scotland, the one featured in The Da Vinci Code. The song was carved into the walls of the chapel in the form of geometric shapes that a father-son team — both are musicians and the father is an ex-Royal Air Force code breaker — finally matched to so-called Chladni patterns (see the Wikipedia article on cymatics). The recovered melody was paired with traditional lyrics (translated into Latin) and recorded; the result can be heard in this video (also linked from the musicians' website). The video also gives a visual representation of how the engravings match up to the cymatic patterns." From the Reuters article: "'The music has been frozen in time by symbolism... [The carvings] are of such exquisite detail and so beautiful that we thought there must be a message here.' The two men matched each of the patterns on the carved cubes to a Chladni pitch, and were able finally to unlock the melody."

Read more of this story at Slashdot.

An anonymous reader writes "IDEMA has finally released the LBD (Long Block Data) standard. This standard, in work since 2000, increases the length of the data blocks of each sector from 512 bytes to 4,096 bytes. This is an update that has been requested for some time by the hard-drive industry and the development of new drives will start immediately. The new standard offers many advantages — improved reliability and higher transfer rates are the two most obvious. While some manufacturers say the reliability may increase as much as tenfold, the degree of performance improvement to be expected is a bit more elusive. Overall improvements include shorter time to format and more efficient data transfers due to smaller overhead per block during read and write operations."

Read more of this story at Slashdot.

axlrosen alerts us to a Microsoft sleeper announcement from Mix07: a version of its Common Language Runtime will be available cross-platform. The Core CLR shows up as part of the Silverlight SDK that Redmond is open sourcing. From the blog posting: "The biggest Mix '07 announcement made on opening day of this week's show was one that Microsoft didn't call out in any of its own press releases: Microsoft is making a version of its Common Language Runtime available cross-platform. The CLR is the heart of Microsoft's .Net Framework programming model. So, by association, the .Net Framework isn't just for Windows any more."

Read more of this story at Slashdot.

Rudd-O writes "Months after successful discovery of the HD-DVD processing key, an unprecedented campaign of censorship, in the form of DMCA takedown notices by the MPAA, has hit the Net. For example Spooky Action at a Distance was killed. More disturbingly, my story got Dugg twice, with the second wave hitting 15,500 votes, and today I found out it had simply disappeared from Digg. How long until the long arm of the MPAA gets to my own site (run in Ecuador) and the rest of them holding the processing key? How long will we let rampant censorship go on, in the name of economic interest?" How long before the magic 16-hex-pairs number shows up in a comment here?

Read more of this story at Slashdot.

Billosaur writes "Imagine the PayPal security tool embedded on a credit card. VeriSign is announcing that a deal is in the works to provide credit cards with one-time-use passwords. By placing the technology directly on the card, it becomes more convenient and provides an extra layer of security for online credit-card transactions. A cardholder would type in their information as normal and then would be prompted to enter the passcode displayed on the card. This means a user would need to have the physical card in hand in order to use it, thus thwarting identity thieves who steal credit card information but do not possess the card itself. VeriSign said it expects to announce a major bank using its cards in May."

Read more of this story at Slashdot.

mrogers sends us to Infowars for the following news from the UK, "which is fast becoming the front line of the war on privacy": "'Read my lips..."' used to be a figurative saying. Now the British government is considering taking it literally by adding lip reading technology to some of the four million or so surveillance cameras in order identify terrorists and criminals by watching what everyone says. Perhaps the lip-reading cameras and the shouting cameras will find something to talk about."

Read more of this story at Slashdot.

Poll

Which camera development is most worrisome?
Talking / Shouting cameras
X-Ray firing cameras
Eavesdropping cameras
Face scanning cameras
Behaviour monitoring cameras
CowboyNealCam
[ Results | Polls ]

COA writes "Many Vista adopters find User Account Control irritating, but Microsoft thinks it's an approach other OSes should emulate. Microsoft Australia's Chief Security Adviser Peter Watson calls UAC a great idea and 'strategically a direction that all operating systems and all technologies should be heading down.' He also believes Microsoft is charting new territory with UAC. 'The most controversial aspect of Watson's comments all center around the idea that Microsoft is a leader with UAC, and that other OSes should follow suit. UAC is a cousin of myriad "superuser" process elevation strategies, of which Mac OS X and all flavors of Linux already enjoy. The fact is that Microsoft is late to the party with their Microsoftized version of sudo. That's really what UAC is, after all: sudo with a fancy display mechanism (to make it hard to spoof) and extra monitoring to pick up on "suspicious" behavior.'"

Read more of this story at Slashdot.

madonna writes "CNET extensively explains why the new We7.com download service — which offers ad-embedded free music downloads without DRM — is doomed to failure. 'This service absolutely, categorically will not succeed. You can quote us on that. It's true the best way to combat piracy is to provide a realistic and affordable alternative, and free is certainly affordable. But music downloaders are not going to switch to using a service that costs the same as using BitTorrent or Limewire, but comes with abominable disclaimers or advertisements.'"

Read more of this story at Slashdot.

Theaetetus writes "In an interview with USA Today, Microsoft CEO Steve Ballmer claimed there is no chance that the iPhone is going to get any significant market share. The article also deals with Microsoft's friction with the Justice Department, friction with Google, and the profitability of MSN. 'No chance. It's a $500 subsidized item. They may make a lot of money. But if you actually take a look at the 1.3 billion phones that get sold, I'd prefer to have our software in 60% or 70% or 80% of them, than I would to have 2% or 3%, which is what Apple might get. In the case of music, Apple got out early. They were the first to really recognize that you couldn't just think about the device and all the pieces separately. Bravo. Credit that to Steve (Jobs) and Apple. They did a nice job. But it's not like we're at the end of the line of innovation that's going to come in the way people listen to music, watch videos, etc. I'll bet our ads will be less edgy. But my 85-year-old uncle probably will never own an iPod, and I hope we'll get him to own a Zune.'"

Read more of this story at Slashdot.

food4thought writes "The Economic Times reports that Orkut has signed a pact with Indian Cyber Crime Cell. They have now pledged to block any 'defamatory or inflammatory content', or hand over IP address information to police if asked.' Deputy Commissioner of Police (enforcement) Sanjay Mohite said the pact means they do not have to go through the lengthy process of asking the Central government to communicate with Orkut. The practice so far has been to first send a request to the Centre's computer emergency response team in New Delhi. This team processes the request through its channels and even if a forum is finally blocked, the "culprits" still remain untraceable as no IP addresses can be obtained ... "Now we can do away with the process and not just directly ban content but also obtain details of IP addresses and service providers quickly," Mohite said.' How long before we see these 'informal arrangements' elsewhere?"

Read more of this story at Slashdot.

denebian devil writes "In an Editorial/Blog at ITPRO, Davey Winder writes of a keynote speech at Infosecurity Europe by Member of Parliament Derek Wyatt. In this speech, which was about the IT security demands of running the 2012 London Olympics, Derek Wyatt MP dropped the bombshell that IT Security at the Olympics will hinge not on which companies show themselves to be the best in their field or to have the technology that best meets the needs of the Olympics, but rather on whether or not the companies were a 'major sponsor' of the Olympics. So who has bought their way into being the security experts of choice, and with whom our security and that of the visiting millions will rest? Visa."

Read more of this story at Slashdot.

kotj.mf writes "Cnet is reporting that Dell will shortly announce a partnership with Canonical to offer Ubuntu pre-loaded on certain consumer-oriented desktops and notebooks. The announcement comes after a groundswell of support for pre-installed Linux on Dell's IdeaStorm site. 'The company is starting its business by trying to appeal to users of desktop computers. From there, Canonical Chief Executive Mark Shuttleworth has said, the company plans to head to the server market, where the real Linux bread and butter can be found. [Dell spokesman Kent] Cook wouldn't comment on whether Dell plans to offer Ubuntu on its servers as well.'."

Read more of this story at Slashdot.

whoever57 writes "Forbes has up an article on the consequences of being dumped into a claimed 'supplemental index', also known as 'Google Hell'. It uses the example of Skyfacet, a site selling diamonds rings and other jewelery, which has dropped in Google's rankings and saw a $500,000 drop in revenue in only three months after the site owner paid a marketing consultant to improve the sites. The article claims that sites in the supposed 'supplemental index' may be visited by Google's spiders as infrequently as once per year. The problem? Google's cache shows that Google's spiders visited the site ss recently as late April. 'Google Hell is the worst fear of the untold numbers of companies that depend on search results to keep their business visible online. Getting stuck there means most users will never see the site, or at least many of the site's pages, when they enter certain keywords. And getting out can be next to impossible--because site operators often don't know what they did to get placed there.'"

Read more of this story at Slashdot.

ColinPL writes with a link to an AP article about a public scolding the US has given China, Russia, and several other nations. Failure to 'sufficiently protect' American copyrights is the cause of the Bush administration's ire, and has resulted in these countries showing up on a 'priority watch list' that could eventually lead to economic sanctions. "In addition to Russia and China, the 10 countries placed on the priority watch list were Argentina, Chile, Egypt, India, Israel, Lebanon, Thailand, Turkey, Ukraine and Venezuela. In elevating Thailand to the priority watch list, the administration said it was concerned by a range of issues including a 'deteriorating protection for patents and copyrights.' Thailand is currently in a dispute with international drug companies including Abbott Laboratories of the United States over the cost of drugs to fight AIDS and other diseases. The Thai government in January issued compulsory licenses allowing the use of much cheaper generic versions of two leading drugs in Thailand."

Read more of this story at Slashdot.