|
Is there anything you cannot do better with spinach?
"If you don't fail at least 90 percent of the time, you're not aiming high enough."
Alan Kay.
|
|
|
|
|
To make matters worse, Google says it is aware that this critical Windows vulnerability is being actively exploited in the wild. Better than 10 days before?
|
|
|
|
|
It's suitable that Google's motto is no longer "Do No Evil".
cheers
Chris Maunder
|
|
|
|
|
That article and most of the other hysteria I've seen are missing the point. The bug was being ACTIVELY EXPLOITED IN THE WILD. The bad guys ALREADY KNEW ABOUT IT, but people on the defense didn't meaning mitigation wasn't possible.
That's a hugely different scenario from when only the security researcher who found the bug knows about it but attackers are in the dark. In one case maintaining silence until its patched is responsible (unless the affected company is blowing you off anyway); in the other it's playing into attackers hands.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
Agreed. My problem with it was that Microsoft had 10 days (and probably knew people were already hitting it) to fix it and didn't. Now, it could be that it's in the queue for next Tuesday, but the reporters could have found that out.
Adobe received a warning from Google the same day, and got a fix out. Although they do need to be pushing fixes out hourly, so I'm sure their fix team is pretty peppy. 
TTFN - Kent
|
|
|
|
|
Kent Sharkey wrote: Now, it could be that it's in the queue for next Tuesday, but the reporters could have found that out.
Does MS comment on these sorts of things? I didn't think they normally did.
And as for waiting until Tuesday, MS has honestly shot themselves in the foot on that front by pushing W10 fixes outside of that cycle on a semi-regular basis. 
Kent Sharkey wrote: Adobe received a warning from Google the same day, and got a fix out. Although they do need to be pushing fixes out hourly, so I'm sure their fix team is pretty peppy.
Of course since their updater only looks for a new version at boot time, for 99% of users it'll actually come out with the next OS patch.  Adobe really needs to update their updater to do daily checks and start pushing them in users faces despite the hassle of browser restarts. (Well that or Flash just needs to die. One or the other.)
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
The Corrode project automatically ports C codebases to Rust as a way to give older C projects like CVS a new lease on life I'm not sure "Corrode" gives the right impression for your project fellows.
Then again, maybe they're right?
|
|
|
|
|
Quote: Sharp's quest for such projects led him to CVS, the version control system that was last updated in 2008 and has a code base of 50,000 lines of C. Most projects use one of CVS's replacements, such as Subversion or Git, but Sharp pointed out that "there are still tons of open source projects where their history is only available via CVS." Bringing CVS up to date would allow the histories of those projects to be more readily preserved.
If it wasn't for a handful of major projects like at least one of the BSDs still using CVS as their primary source control, I'd suggest building tools to automate finding and importing legacy CVS repos into a more modern SCC would be a much better investment of time and money.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
Matt Mullenweg, the founder of Automattic, downloaded his competitor Wix’s iOS app. It looked eerily familiar, and he confirmed it contains source code stolen from WordPress. There is no free beer?
|
|
|
|
|
Pretty straightforward.
Kent Sharkey wrote: no free beer
Yes, that which you make for yourself.
#SupportHeForShe
Government can give you nothing but what it takes from somebody else. A government big enough to give you everything you want is big enough to take everything you've got, including your freedom.-Ezra Taft Benson
You must accept 1 of 2 basic premises: Either we are alone in the universe or we are not alone. Either way, the implications are staggering!-Wernher von Braun
|
|
|
|
|
That's not free either. That is, unless you grow the grains and yeast yourself.
|
|
|
|
|
True, nothing in life is truly "free"
#SupportHeForShe
Government can give you nothing but what it takes from somebody else. A government big enough to give you everything you want is big enough to take everything you've got, including your freedom.-Ezra Taft Benson
You must accept 1 of 2 basic premises: Either we are alone in the universe or we are not alone. Either way, the implications are staggering!-Wernher von Braun
|
|
|
|
|
Kent Sharkey wrote: contains source code stolen from WordPress.
Wix prefers you use the phrase "borrowed silently" when referring to their code. 
|
|
|
|
|
Welcome to the future: Vision APIs, Bots, Hololens, reading brain waves, and so much more. Welcome to the future: reading articles before they're on paper!
|
|
|
|
|
Shut it down, NASA wins. They made your pumpkin carving game look like child’s play. Who knew Jack O'Lanterns really were rocket science?
|
|
|
|
|
A revolutionary and emerging class of energy-harvesting computer systems require neither a battery nor a power outlet to operate, instead operating by harvesting energy from their environment. I'm guessing you can't play Battlefront on them?
Or whatever game the cool kids are playing these days.
|
|
|
|
|
|
Kent Sharkey wrote: ...harvesting energy from their environment
Erm....Wait a sec...Are these things running on...
Methane!!
modified 31-Oct-16 16:38pm.
|
|
|
|
|
|
Article? I just read the headline / summary.
|
|
|
|
|
We built a fake web toaster, and it was compromised in an hour. I don't know if I want to live in a world where we can't even trust our Web-connected toasters
|
|
|
|
|
Interesting idea and article. Amazing that they found it in an hour.
|
|
|
|
|
So they've basically replicated security research from 20 years ago, wrapped it in OMGWTFLOLBBQ and called it journalism. 
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
I'm actually surprised it took that long. I remember setting up my very first Win 2K server exposed to the internet some 15 years ago, and it was under attack within 10 minutes. I hadn't even finished downloading all the updates. If I hadn't turned off IIS, it would have been taken over before the 30 minute mark is my guess.
|
|
|
|
|
"Renting a small server from Amazon..."
Questionable test since that range of IPs are likely being constantly monitored (to be fair, the author deconstructs his own "test" with the same point.) Moreover, a web-connected toaster deserves to be hacked.
modified 31-Oct-16 12:13pm.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
