Skip to main content

Posts

Showing posts from January, 2021

Slashdot: While Recreating CentOS as 'Rocky Linux', Gregory Kurtzer Also Launches a Sponsoring Startup

While Recreating CentOS as 'Rocky Linux', Gregory Kurtzer Also Launches a Sponsoring Startup Published on February 01, 2021 at 10:04AM "Gregory Kurtzer, co-founder of the now-defunct CentOS Linux distribution, has founded a new startup company called Ctrl IQ, which will serve in part as a sponsoring company for the upcoming Rocky Linux distribution," Ars Technica reports: Kurtzer co-founded CentOS Linux in 2004 with mentor Rocky McGaugh, and it operated independently for 10 years until being acquired by Red Hat in 2014. When Red Hat killed off CentOS Linux in a highly controversial December 2020 announcement, Kurtzer immediately announced his intention to recreate CentOS with a new distribution named after his deceased mentor. The Rocky Linux concept got immediate, positive community reaction — but there's an awful lot of work and expense that goes into creating and maintaining a Linux distribution. The CentOS Linux project itself made that clear when it went fo

Slashdot: Google Gave Top Spot For 'Home Depot' Searches to a Malicious Ad

Google Gave Top Spot For 'Home Depot' Searches to a Malicious Ad Published on February 01, 2021 at 08:04AM "A malicious Home Depot advertising campaign is redirecting Google search visitors to tech support scams," claims Bleeping Computer. Slashdot reader nickwinlund77 shares their report: BleepingComputer searched for 'home depot' and was shown the malicious advertisement on our first try. Even worse, the ad is the top spot in the research result, making it more likely to be clicked... [T]he ad clearly states it's for www.homedepot.com, and hovering over it shows the site's legitimate destination URL. However, when visitors click on the ad, they will be redirected through various ad services until eventually they are redirected to a tech support scam. Ultimately, the visitor will land at a page showing an incredibly annoying "Windows Defender - Security Warning' tech support scam. This scam will repeatedly open the Print dialog box, as show

Slashdot: To Re-Enable Flash Support, South Africa's Tax Agency Released Its Own Web Browser

To Re-Enable Flash Support, South Africa's Tax Agency Released Its Own Web Browser Published on February 01, 2021 at 06:04AM "The South African Revenue Service (SARS) has released this week its own custom web browser," reports ZDNet, "for the sole purpose of re-enabling Adobe Flash Player support, rather than port its existing website from using Flash to HTML-based web forms." To prevent the app from continuing to be used in the real-world to the detriment of users and their security, Adobe began blocking Flash content from playing inside the app starting January 12, with the help of a time-bomb mechanism... As SARS tweeted on January 12, the agency was impacted by the time-bomb mechanism, and starting that day, the agency was unable to receive any tax filings via its web portal, where the upload forms were designed as Flash widgets. But despite having a three and a half years heads-up, SARS did not choose to port its Flash widgets to basic HTML & JS forms

Slashdot: Biofuel-Powered Rocket Makes Historic Launch in Maine

Biofuel-Powered Rocket Makes Historic Launch in Maine Published on February 01, 2021 at 05:04AM Despite bad weather and early technical difficulties, employee-owned bluShift Aerospace "made history Sunday afternoon when it launched its prototype rocket, Stardust 1.0," reports Maine's Portland Press Herald: The company became the first in Maine to launch a commercial rocket and the first in the world to launch a rocket using bio-derived fuel... It carried three payloads, two commercial and one, free of charge, from Falmouth High School... The rocket and payloads returned to the ground under a parachute shortly after launch and were retrieved by a team of snowmobilers. The rocket is intended to be reusable and environmentally friendly. While the components of the biofuel remain a company secret, bluShift CEO Sascha Deri said it is solid, non-toxic and carbon neutral. "I can tell you this much, I discovered it with a friend of mine on my brothers farm here in Maine,&q

Slashdot: CNN: Tesla's Net Profit 'Doesn't Come From Selling Cars'

CNN: Tesla's Net Profit 'Doesn't Come From Selling Cars' Published on February 01, 2021 at 04:04AM "Tesla posted its first full year of net income in 2020 — but not because of sales to its customers," reports CNN: Eleven states require automakers sell a certain percentage of zero-emissions vehicles by 2025. If they can't, the automakers have to buy regulatory credits from another automaker that meets those requirements — such as Tesla, which exclusively sells electric cars. It's a lucrative business for Tesla — bringing in $3.3 billion over the course of the last five years, nearly half of that in 2020 alone. The $1.6 billion in regulatory credits it received last year far outweighed Tesla's net income of $721 million — meaning Tesla would have otherwise posted a net loss in 2020. "These guys are losing money selling cars. They're making money selling credits. And the credits are going away," said Gordon Johnson of GLJ Research and

Slashdot: A 'Severe' Bug Was Found In Libgcrypt, GnuPG's Cryptographic Library

A 'Severe' Bug Was Found In Libgcrypt, GnuPG's Cryptographic Library Published on February 01, 2021 at 03:04AM Early Friday the principal author of GNU Privacy Guard (the free encryption software) warned that version 1.9.0 of its cryptographic library Libgcrypt, released January 19, had a "severe" security vulnerability and should not be used. A new version 1.9.1, which fixes the flaw, is available for download, Help Net Security reports: He also noted that Fedora 34 (scheduled to be released in April 2021) and Gentoo Linux are already using the vulnerable version... [I]t's a heap buffer overflow due to an incorrect assumption in the block buffer management code. Just decrypting some data can overflow a heap buffer with attacker controlled data, no verification or signature is validated before the vulnerability occurs. It was discovered and flagged by Google Project Zero researcher Tavis Ormandy and affects only Libgcrypt v1.9.0. "Exploiting this bug is

Slashdot: A 25-Year-Old Bet Comes Due: Has Tech Destroyed Society?

A 25-Year-Old Bet Comes Due: Has Tech Destroyed Society? Published on February 01, 2021 at 02:04AM "Twenty five years ago I made a bet in the pages of Wired. It was a bet whether the world would collapse by the year 2020." So writes the 68-year-old founding executive editor of Wired magazine, Kevin Kelly. He'd made the bet with a "Luddite-loving doomsayer," according to Wired — author Kirkpatrick Sale. "Sale while a student in the 1950s co-wrote a musical with Thomas Pynchon about escaping a dystopian America ruled by IBM," remembers Slashdot reader joeblog. This month a new article in Wired re-visits that 25-year bet: They argued about the Amish, whether printing presses denuded forests, and the impact of technology on work. Sale believed it stole decent labor from people. Kelly replied that technology helped us make new things we couldn't make any other way. "I regard that as trivial," Sale said. Sale believed society was on the verge

Slashdot: Corporate Trolls? A Covert, Pro-Huawei Influence Campaign on Social Media

Corporate Trolls? A Covert, Pro-Huawei Influence Campaign on Social Media Published on February 01, 2021 at 01:04AM "Huawei, the crown jewel of China's technology industry, has suffered from a sustained American campaign to keep its equipment from being used in new 5G networks around the world," reports the New York Times. Now they've identified "a covert pro-Huawei influence campaign in Belgium about 5G networks." [Alternate URL here] It began when trade lawyer Edwin Vermulst was paid to write an article criticizing a Belgian policy that would block Huawei from lucrative contracts: First, at least 14 Twitter accounts posing as telecommunications experts, writers and academics shared articles by Mr. Vermulst and many others attacking draft Belgium legislation that would limit "high risk" vendors like Huawei from building the country's 5G system, according to Graphika, a research firm that studies misinformation and fake social media accounts.

Slashdot: Is Misinformation on Nextdoor Impacting Local Politics?

Is Misinformation on Nextdoor Impacting Local Politics? Published on February 01, 2021 at 12:04AM Was Nextdoor's impact on the world exemplified by a crucial funding referendum for the Christina School District of Newark, Delaware? Medium's tech site OneZero reports: As the 2019 referendum approached, I saw Nextdoor posts claiming that the district was squandering money, that its administrators were corrupt, and that it already spent more money per student than certain other districts with higher test scores. The last of those was true — but left out the context that Christina hosts both the state's school for the deaf and its largest autism program. District advocates told me later that they had wanted to post counterarguments to the platform, but were hindered by Nextdoor's decentralized structure. Some district officers, for instance, couldn't even access the posts and discussions happening in the city of Newark, because they were only visible to other Newark r

Slashdot: Hitchhiker's Guide To the Galaxy: New Research Says #42 Really Is Our Number

Hitchhiker's Guide To the Galaxy: New Research Says #42 Really Is Our Number Published on January 31, 2021 at 11:04PM Just 11 months before his death in 2001, famous author Douglas Adams answered questions from Slashdot readers. And Slashdot reader Informativity still remembers how Adams (also a Doctor Who script editor) had included a supercomputer named Deep Thought in his first book which spent 7.5 million years to determine that the answer to the Ultimate Question of Life, the Universe, and Everything, was...the number 42: Turns out the entire universe is a product of the number 42, specifically 42 times the collection of lm/2t, such that l, m and t are the Planck Units. In a newly published paper, Measurement Quantization Describes the Physical Constants , both the constants and laws of nature are resolved from a simple geometry between two frames of reference, the non-discrete Target Frame of the universe and the discrete Measurement Frame of the observer. Its only and prim

Slashdot: Researchers Try Using CRISPR To Genetically Engineer Zika-Resistant Mosquitoes

Researchers Try Using CRISPR To Genetically Engineer Zika-Resistant Mosquitoes Published on January 31, 2021 at 10:04PM A new research study at the University of Missouri is using CRISPR gene-editing technology to produce mosquitoes that are unable to replicate Zika virus and therefore cannot infect a human through biting. Slashdot reader wooloohoo shared an announcement from Cornell's Alliance for Science: Alexander Franz, an associate professor in the MU College of Veterinary Medicine, collaborated with researchers at Colorado State University... Their work was recently published in the journal Viruses. Franz added that the genetic modification is inheritable, so future generations of the altered mosquitoes would be resistant to Zika virus as well... "[W]e are simply trying to expand the toolbox and provide a solution by genetically modifying the mosquitoes to become Zika-resistant while keeping them alive at the same time." Franz' research is designed to help pre

Slashdot: Are We Overestimating the Number of COBOL Transactions Each Day?

Are We Overestimating the Number of COBOL Transactions Each Day? Published on January 31, 2021 at 09:04PM An anonymous Slashdot reader warns of a possible miscalculation: 20 years ago today, cobolreport.com published an article, according to which there are 30 billion Customer Information Control System/COBOL transactions per day. This number has since been cited countless times... [T]his number is still to be found in the marketing of most COBOL service providers, compiler vendors (IBM, Micro-Focus and others) and countless articles about how relevant COBOL supposedly still was. The article originally reported 30 billion "CICS transactions", but within 2 years it had already been turned into "COBOL transactions"... The "30 billion" likely originates from a DataPro survey in 1997, in which they still reported 20 billion transactions per day. Only 421 companies participated in that survey. They actually scaled the results from such a small survey up to th

Slashdot: Firefox 85 Isolated Supercookies, But Dropped Progressive Web App Support

Firefox 85 Isolated Supercookies, But Dropped Progressive Web App Support Published on January 31, 2021 at 06:04PM Tech blogger Paul Thurrott writes: Firefox 85 now protects users against supercookies, which Mozilla says is "a type of tracker that can stay hidden in your browser and track you online, even after you clear cookies. By isolating supercookies, Firefox prevents them from tracking your web browsing from one site to the next." It also includes small improvements to bookmarks and password management. Unfortunately, Mozilla has separately — and much more quietly — stopped work on Site Specific Browser (SSB) functionality... This feature allowed users to use Firefox to create apps on the local PC from Progressive Web Apps and other web apps, similar to the functionality provided in Chrome, Microsoft Edge, and other Chromium-based web browsers. "The SSB feature has only ever been available through a hidden [preference] and has multiple known bugs," Mozilla&#

Slashdot: Perl.com Domain Stolen, Now Using IP Address of Past Malware Campaigns

Perl.com Domain Stolen, Now Using IP Address of Past Malware Campaigns Published on January 31, 2021 at 02:04PM "The domain name perl.com was stolen and now points to an IP address associated with malware campaigns," reports Bleeping Computer: Perl.com is a site owned by Tom Christiansen and has been used since 1997 to post news and articles about the Perl programming language. On January 27th, Perl programming author and Perl.com editor brian d foy tweeted that the perl.com domain was suddenly registered under another person. Intellectual property lawyer John Berryhill later replied to the tweet that the domain was stolen in September 2020 while at Network Solutions, transferred to a registrar in China on Christmas Day, and finally moved to the Key-Systems registrar on January 27th, 2020. It wasn't until the last transfer that the IP addresses assigned to the domain were changed from 151.101.2.132 to the Google Cloud IP address 35.186.238[.]101... On the 28th, d foy tw

Slashdot: Will Mark Zuckerberg Retire From Facebook in 2022?

Will Mark Zuckerberg Retire From Facebook in 2022? Published on January 31, 2021 at 11:04AM Among tech pundit Robert Cringley's predictions for 2021? "This year is going to be a tough one for Mark Zuckerberg." [W]hile I don't expect Zuckerberg to abandon his CEO job this year, he eventually will, simply because it isn't as much fun as it used to be and there will come a point (maybe in 2022) when leaving the top job will help Facebook's stock... Zuckerberg no longer has any who have faced what he is facing today. He has outgrown his own psychological support system... Zuckerberg's primary role models have been Steve Jobs, Bill Gates, and Larry Page. Each modeled different ways to manage through dominance. Steve was a brilliant tyrant ("I know I'm an asshole," he told me more than once); Bill tried to technically dominate by claiming to identify bad code from across a room (he really can't); Larry taught by example to hide behind the alg

Slashdot: With New User-Defined Functions, Microsoft Excel is Now Turing Complete

With New User-Defined Functions, Microsoft Excel is Now Turing Complete Published on January 31, 2021 at 08:04AM Visual Studio Magazine reports: Microsoft, which calls its Excel spreadsheet a programming language, reports that an effort called LAMBDA to make it even more of a programming language is paying off, recently being deemed Turing complete. Being Turing complete is the litmus test of a full-fledged programming language, marking the ability to imitate a Turing machine. According to one definition, that means, "A programming language is Turing complete if you can implement any possible algorithm with it." And that's exactly what LAMBDA can now do. "You can now, in principle, write any computation in the Excel formula language," said Microsoft researchers in a Jan. 25 blog post. To get there, researchers at the Calc Intelligence project addressed two shortcomings to the LAMBDA project, which is conducted in coordination with the Excel team and which was

Slashdot: 'Recovering' QAnon Members Seek Help from Therapists, Subreddits, and On Telegram

'Recovering' QAnon Members Seek Help from Therapists, Subreddits, and On Telegram Published on January 31, 2021 at 06:04AM "More than at any point since the QAnon conspiracy began, there is a tremendous opportunity to pull disaffected followers out of the conspiracy," writes FiveThirtyEight. And while it's just one of three possible scenarios, online posts suggest at least some members are abandoning the group, "but they will need support to really sever their connection." ABC News reports that some QAnon adherents "are turning to therapy and online support groups to talk about the damage done when beliefs collide with reality," including Ceally Smith, a working single mom in Kansas City: "We as a society need to start teaching our kids to ask: Where is this information coming from? Can I trust it?" she said. "Anyone can cut and paste anything." After a year, Smith wanted out, suffocated by dark prophesies that were taking

Slashdot: The Problems of Touchscreens In the F-35 Joint Strike Fighter

The Problems of Touchscreens In the F-35 Joint Strike Fighter Published on January 31, 2021 at 05:04AM Long-time Slashdot reader AmiMoJo quotes a recent blog post from BoingBoing: The F-35 Joint Strike Fighter is the most crammed-with-digital-tech fighter jet in history, the product of a multi-decade, trillion-dollar design process that has been famously messy. But the jet is out there, and pilots are flying it. One big design shift with the F-35 is that it removes many of the small physical switches that crowded older jet cockpits, and replaces them with a big touchscreen... The folks at the Husk-Kit aviation magazine got an (anonymous) pilot of the F-35 to give their candid assessment of the plane, and it turns out the touchscreen causes some serious problems — for this pilot, anyway, an astounding error rate of 20% while trying to activate a feature. Read more of this story at Slashdot.

Slashdot: Could This Powerful New Fusion Rocket Thruster Propel Us Beyond Mars?

Could This Powerful New Fusion Rocket Thruster Propel Us Beyond Mars? Published on January 31, 2021 at 03:04AM Long-time Slashdot reader schwit1 shared this article from Sky.com: Dr. Fatima Ebrahimi "has invented a new fusion rocket thruster concept which could power humans to Mars and beyond," writes Sky.com Long-time Slashdot reader schwit1 shared their report: The physicist who works for the U.S. Department of Energy's Princeton Plasma Physics Laboratory designed the rocket which will use magnetic fields to shoot plasma particles — electrically charged gas — into the vacuum of space. According to Newton's second and third laws of motion, the conservation of momentum would mean the rocket was propelled forwards — and at speeds 10 times faster than comparable devices. While current space-proven plasma propulsion engines use electric fields to propel the particles, the new rocket design would accelerate them using magnetic reconnection... Dr. Ebrahimi's new conc

Slashdot: Phone Numbers For 533 Million Facebook Users Were Being Sold On Telegram

Phone Numbers For 533 Million Facebook Users Were Being Sold On Telegram Published on January 31, 2021 at 02:04AM Slashdot reader DevNull127 writes: This week a security researcher discovered a bot on Telegram that sold the phone numbers of Facebook users for $20 apiece. "The security researcher who found this vulnerability, Alon Gal, says that the person who runs the bot claims to have the information of 533 million users, which came from a Facebook vulnerability that was patched in 2019," reported the Verge. Motherboard reported the bot was also offering "bulk" pricing, selling 10,000 phone numbers for $5,000. Telegram told the New York Post that they'd blocked the bot Tuesday morning, while Facebook downplayed the incident, reminding the Post "This is old data." But the Post notes that Facebook already had more than 1.6 billion daily active users in September 2019, and security researcher Alon Gal posted a count of the millions of affected users i

Slashdot: Study Finds The Least-Affordable City for Tech Workers: Silicon Valley's San Jose

Study Finds The Least-Affordable City for Tech Workers: Silicon Valley's San Jose Published on January 31, 2021 at 01:04AM The Bay Area Newsgroup reports: Despite high salaries and world-class amenities, San Jose is the least affordable place for tech workers to buy a home. [Alternate URL here] A new analysis by the American Enterprise Institute found the typical tech worker and his or her partner — with two incomes totaling $200,000 — can afford just 12 percent of the homes for sale in the San Jose metro area. The picture in San Francisco and the East Bay is nearly as bad, with just 21 percent of homes for sale fitting in the budget of an average tech couple. The high-hurdles to home ownership are fueling a Bay Area exodus that has contributed to the state's sluggish population growth in recent years, researchers say. Study author Ed Pinto, director of the AEI Housing Center, said tech workers can afford their pick of homes in almost every other U.S. city. "But in those

Slashdot: Are the US Military's GPS Tests Threatening Airline Safety?

Are the US Military's GPS Tests Threatening Airline Safety? Published on January 31, 2021 at 12:04AM Long-time Slashdot reader cusco quotes a new report from IEEE Spectrum: In August 2018, a passenger aircraft in Idaho, flying in smoky conditions, reportedly suffered GPS interference from military tests and was saved from crashing into a mountain only by the last-minute intervention of an air traffic controller. "Loss of life can happen because air traffic control and a flight crew believe their equipment are working as intended, but are in fact leading them into the side of the mountain," wrote the controller. "Had [we] not noticed, that flight crew and the passengers would be dead...." There are some 90 reports on NASA's Aviation Safety Reporting System forum detailing GPS interference in the United States over the past eight years, the majority of which were filed in 2019 and 2020. Now IEEE Spectrum has new evidence that GPS disruption to commercial avi

Slashdot: 'Terms of Service' Agreements Are Unbalanced, Need Reforming, Urges New York Times

'Terms of Service' Agreements Are Unbalanced, Need Reforming, Urges New York Times Published on January 30, 2021 at 11:04PM "The same legalese that can ban Donald Trump from Twitter can bar users from joining class-action lawsuits," warns the official Editorial Board of the New York Times, urging "It's time to fix the fine print." [Alternate URL here] [M]ost people have no idea what is signed away when they click "agree" to binding terms of service contracts — again and again on phones, laptops, tablets, watches, e-readers and televisions. Agreeing often means allowing personal data to be resold or waiving the right to sue or join a class-action lawsuit... Because corporations and their lawyers know most consumers don't have the time or wherewithal to study their new terms, which can stretch to 20,000 words — about the length of Shakespeare's "Julius Caesar" — they stuff them with opaque provisions and lengthy legalistic exp

Slashdot: Can Oklahoma Return Its $2 Million Stockpile of Hydroxychloroquine?

Can Oklahoma Return Its $2 Million Stockpile of Hydroxychloroquine? Published on January 30, 2021 at 10:04PM A nonprofit watchdog news site in Tulsa, Oklahoma reports: The Oklahoma Attorney General's Office has been tasked with attempting to return a $2 million stockpile of a malaria drug once touted by former President Donald Trump as a way to treat the coronavirus. In April, Gov. Kevin Stitt, who ordered the hydroxychloroquine purchase, defended it by saying that while it may not be a useful treatment for the coronavirus, the drug had multiple other uses and "that money will not have gone to waste in any respect." But nearly a year later the state is trying to offload the drug back to its original supplier, California-based FFF Enterprises, Inc, a private pharmaceutical wholesaler... It's unclear yet how much of the initial $2 million investment in the hydroxychloroquine the state could recoup. "While governments in at least 20 other states obtained more than

Slashdot: The US Government's Entire 645,000-Vehicle Fleet Will Go All-Electric

The US Government's Entire 645,000-Vehicle Fleet Will Go All-Electric Published on January 30, 2021 at 09:54PM Jalopnik reports: The United States government operates a fleet of about 645,000 vehicles, from mail delivery trucks to military vehicles and passenger cars. On Monday, President Joe Biden announced that his administration intends to replace them all with American-made, electric alternatives... In 2015, the government operated 357,610 gasoline vehicles and 3,896 electric ones; in 2019, those numbers grew to 368,807 and 4,475, respectively. That's excluding the tens of thousands of E-85 ["flex fuel"] and diesel-based vehicles on the road, which, together, comprise nearly a third of the 645,047 total. So, yeah, there's certainly a lot of work to do... The Washington Post reports: The declaration is a boon to the fledgling electric vehicle industry, which has grown exponentially in the past decade but still represents less than 2 percent of automobiles sol