subskrybent kanałów informacyjnych

Opinia o strategii inwestycyjnej TP

Urząd Komunikacji Elektronicznej - 1 godzina 15 minut temu

We wrześniu 2008 r. Telekomunikacja Polska S.A. opublikowała na swoich stronach internetowych oraz przekazała organom Państwa, w tym Prezesowi UKE, dokument pt. „Strategia wsparcia rozwoju inwestycji telekomunikacyjnych w Polsce w latach 2008 – 2011”.

Python w natarciu!

7thGuard.net - 2 godziny 14 minut temu
Kilka dni temu rozpoczęła się rejestracja uczestników na pierwszą polską edycję konferencji PyCon. Ta wyjątkowa impreza, podobnie jak w innych krajach, ma na celu integrację środowisk programistów, projektantów aplikacji, administratorów systemów oraz osó...

Plug-In Hybrids Aren't Coming, They're Here

Slashdot - 3 godziny 4 minuty temu
Wired is running a story about the small but vocal, and growing, number of people who aren't waiting for automakers to deliver plug-in hybrids. They're shelling out big money to have already thrifty cars converted into full-on plug-in hybrids capable of triple-digit fuel economy. "The conversions aren't cheap, and top-of-the-line kits with lithium-ion batteries can set you back as much as $35,000. Even a kit with lead-acid batteries — the type under the hood of the car you drive now — starts at five grand. That explains why most converted plug-ins are in the motor pools of places like Southern California Edison... No more than 150 or so belong to people like [extreme skiing champion Alison] Gannett, who had her $30,000 Ford Escape converted in December. Yes, that's right. The conversion cost more than the truck."

Read more of this story at Slashdot.

Plug-In Hybrids Aren't Coming, They're Here

Slashdot - 3 godziny 4 minuty temu
Wired is running a story about the small but vocal, and growing, number of people who aren't waiting for automakers to deliver plug-in hybrids. They're shelling out big money to have already thrifty cars converted into full-on plug-in hybrids capable of triple-digit fuel economy. "The conversions aren't cheap, and top-of-the-line kits with lithium-ion batteries can set you back as much as $35,000. Even a kit with lead-acid batteries — the type under the hood of the car you drive now — starts at five grand. That explains why most converted plug-ins are in the motor pools of places like Southern California Edison... No more than 150 or so belong to people like [extreme skiing champion Alison] Gannett, who had her $30,000 Ford Escape converted in December. Yes, that's right. The conversion cost more than the truck."

Read more of this story at Slashdot.

"Nie można przełamać czegoś, co nie istnieje" - polski wyrok w sprawie SQL Injection

VaGla.pl Prawo i Internet - 3 godziny 57 minut temu

Sąd Rejonowy w Głogowie VI Wydział Grodzki w dniu 11 sierpnia 2008 r. wydał ważny wyrok w sprawie mężczyzny oskarżonego o to, że używając komputerów nie będąc do tego uprawnionym, po przełamaniu elektronicznego zabezpieczenia, serwera pewnej firmy, uzyskał informacje - dane osobowe - dla niego nie przeznaczone, działając tym samym na szkodę tej firmy, a więc w sprawie oskarżonego o czyn z art. 267 §1 kodeksu karnego. Sąd wyrokiem (sygn. akt VI K 849/07) uniewinnił oskarżonego od zarzutu, nakazał zwrócić oskarżonemu dowody rzeczowe wymienione w wykazie dowodów, a na podstawie art. 632 pkt 2 KPK orzekł, że koszty procesu ma ponieść Skarb Państwa. Wyrok jest prawomocny. To bardzo ważne rozstrzygnięcie (sygnalizowałem, że opublikuję informację na ten temat przy tekście Pochwalił się internetowi, pochwali się wnukom), a dotyczy m.in. granic możliwości przeprowadzania "audytu bezpieczeństwa" serwisów internetowych, a także spraw związanych z tzw. SQL Injection.

czytaj dalej

No Naked Black Holes

Slashdot - 6 godzin 58 minut temu
Science News reports on a paper to be published in Physical Review Letters in which an international team of researchers describes their computer simulation of the most violent collision imaginable: two black holes colliding head-on at nearly light-speed. Even in this extreme scenario, Roger Penrose's weak cosmic censorship hypothesis seems to hold — the resulting black hole (after the gravitational waves have died down) retains its event horizon. "Mathematically, 'naked' singularities, or those without event horizons, can exist, but physicists wouldn't know what to make of them. All known mechanisms for the formation of singularities also create an event horizon, and Penrose conjectured that there must be some physical principle — a 'cosmic censor' — that forbids singularity nakedness..."

Read more of this story at Slashdot.

No Naked Black Holes

Slashdot - 6 godzin 58 minut temu
Science News reports on a paper to be published in Physical Review Letters in which an international team of researchers describes their computer simulation of the most violent collision imaginable: two black holes colliding head-on at nearly light-speed. Even in this extreme scenario, Roger Penrose's weak cosmic censorship hypothesis seems to hold — the resulting black hole (after the gravitational waves have died down) retains its event horizon. "Mathematically, 'naked' singularities, or those without event horizons, can exist, but physicists wouldn't know what to make of them. All known mechanisms for the formation of singularities also create an event horizon, and Penrose conjectured that there must be some physical principle — a 'cosmic censor' — that forbids singularity nakedness..."

Read more of this story at Slashdot.

Linux Turns 17 Today

Slashdot - 9 godzin 21 minut temu
Meshach writes "Over at the Linux Journal, Doc Searles is noting that today marks 17 years since Linus posted to Usenet, starting Linux (post). As a Linux user at work and at home I say, thanks Linus!" The anniversary is also featured on the top page of the Encyclopedia Britannica.

Read more of this story at Slashdot.

Linux Turns 17 Today

Slashdot - 9 godzin 21 minut temu
Meshach writes "Over at the Linux Journal, Doc Searles is noting that today marks 17 years since Linus posted to Usenet, starting Linux (post). As a Linux user at work and at home I say, thanks Linus!" The anniversary is also featured on the top page of the Encyclopedia Britannica.

Read more of this story at Slashdot.

Jobs Rumor Debacle Besmirches Citizen Journalism

Slashdot - 11 godzin 40 minut temu
On Friday someone posted a false rumor that Steve Jobs had suffered a heart attack on CNN's unverified citizen journalism site, iReport. Apple's stock price went vertical, losing 9% before Apple stepped in and denied the rumor; the stock then recovered most of its loss. The SEC is investigating. PCWorld looks at the hit taken by citizen journalism as a result of this incident. "[The] increasingly blurred line between journalism and rumor is a serious concern for Al Tompkins, the broadcast/online group leader at The Poynter Institute — a specialized school for journalists of all media forms. 'How could you possibly allow just anybody to post just anything under your [CNN] label unless you have blazing billboards that say, "None of this has been verified, we've not looked at any of this, we have no idea if this is true?"' he asks."

Read more of this story at Slashdot.

Jobs Rumor Debacle Besmirches Citizen Journalism

Slashdot - 11 godzin 40 minut temu
On Friday someone posted a false rumor that Steve Jobs had suffered a heart attack on CNN's unverified citizen journalism site, iReport. Apple's stock price went vertical, losing 9% before Apple stepped in and denied the rumor; the stock then recovered most of its loss. The SEC is investigating. PCWorld looks at the hit taken by citizen journalism as a result of this incident. "[The] increasingly blurred line between journalism and rumor is a serious concern for Al Tompkins, the broadcast/online group leader at The Poynter Institute — a specialized school for journalists of all media forms. 'How could you possibly allow just anybody to post just anything under your [CNN] label unless you have blazing billboards that say, "None of this has been verified, we've not looked at any of this, we have no idea if this is true?"' he asks."

Read more of this story at Slashdot.

Mimicking Electric Eel Cells

Slashdot - 12 godzin 52 minuty temu
An anonymous reader writes "A team of US researchers has asked the following question in the new field of systems biology: 'Do we understand how a cell produces electricity well enough to design one, and to optimize that design?' They believe it should be possible to build artificial cells replicating the electrical behavior of electric eel cells. In fact, such artificial cells could deliver better performance — as much as 40% more energy than real eel cells, a computer model suggests. They could be used to power medical implants and other small devices."

Read more of this story at Slashdot.

Mimicking Electric Eel Cells

Slashdot - 12 godzin 52 minuty temu
An anonymous reader writes "A team of US researchers has asked the following question in the new field of systems biology: 'Do we understand how a cell produces electricity well enough to design one, and to optimize that design?' They believe it should be possible to build artificial cells replicating the electrical behavior of electric eel cells. In fact, such artificial cells could deliver better performance — as much as 40% more energy than real eel cells, a computer model suggests. They could be used to power medical implants and other small devices."

Read more of this story at Slashdot.

A Wikipedia Conspiracy and the Wall Street Meltdown

Slashdot - Nie, 2008-10-05 23:14
PatrickByrne writes "This is The Register's world-class investigative piece concerning one aspect of the meltdown on Wall Street ('naked short selling') and how the criminals engaged a journalist to distort Wikipedia to confuse the discourse. The article explicitly and formally accuses a well-known US financial journalist, Gary Weiss, of lying about his efforts to distort a Wikipedia page under assumed names, and accuses the Powers That Be in Wikipedia (right up to and including Jimbo Wales) of complicity in protecting Weiss. This is not another story about a 15-year-old farm kid in Iowa pretending to be a professor. This is like the worst Chomskian view of Elites manipulating mass opinion. But it is all documented." We discussed the alleged Wikipedia manipulation when The Register first wrote about it last December. The submitter is the CEO of Overstock.com and a major player in this drama from the beginning.

Read more of this story at Slashdot.

A Wikipedia Conspiracy and the Wall Street Meltdown

Slashdot - Nie, 2008-10-05 23:14
PatrickByrne writes "This is The Register's world-class investigative piece concerning one aspect of the meltdown on Wall Street ('naked short selling') and how the criminals engaged a journalist to distort Wikipedia to confuse the discourse. The article explicitly and formally accuses a well-known US financial journalist, Gary Weiss, of lying about his efforts to distort a Wikipedia page under assumed names, and accuses the Powers That Be in Wikipedia (right up to and including Jimbo Wales) of complicity in protecting Weiss. This is not another story about a 15-year-old farm kid in Iowa pretending to be a professor. This is like the worst Chomskian view of Elites manipulating mass opinion. But it is all documented." We discussed the alleged Wikipedia manipulation when The Register first wrote about it last December. The submitter is the CEO of Overstock.com and a major player in this drama from the beginning.

Read more of this story at Slashdot.

Encrypted Images Vulnerable To New Attack

Slashdot - Nie, 2008-10-05 22:04
rifles only writes "A German techie has found a remarkably simple way to discern some of the content of encrypted volumes containing images. The encrypted images don't reveal themselves totally, but in many cases do let an attacker see the outline of a high-contrast image. The attack works regardless of the encryption algorithm used (the widely-used AES for instance), and affects all utilities that use single symmetric keys. More significant to police around the world struggling with criminal and terrorist use of encryption, the attack also breaks the ability of users to 'hide' separate encrypted volumes inside already encrypted volumes, whose existence can now for the first time be revealed." The discoverer of this attack works for a company making full-disk encryption software; their product, TurboCrypt, has already been enhanced to defeat the attack. Other on-the-fly encryption products will probably be similarly enhanced, as the discoverer asserts: "To our knowledge is the described method free of patents and the author can confirm that he hasn't applied for protection."

Read more of this story at Slashdot.

Encrypted Images Vulnerable To New Attack

Slashdot - Nie, 2008-10-05 22:04
rifles only writes "A German techie has found a remarkably simple way to discern some of the content of encrypted volumes containing images. The encrypted images don't reveal themselves totally, but in many cases do let an attacker see the outline of a high-contrast image. The attack works regardless of the encryption algorithm used (the widely-used AES for instance), and affects all utilities that use single symmetric keys. More significant to police around the world struggling with criminal and terrorist use of encryption, the attack also breaks the ability of users to 'hide' separate encrypted volumes inside already encrypted volumes, whose existence can now for the first time be revealed." The discoverer of this attack works for a company making full-disk encryption software; their product, TurboCrypt, has already been enhanced to defeat the attack. Other on-the-fly encryption products will probably be similarly enhanced, as the discoverer asserts: "To our knowledge is the described method free of patents and the author can confirm that he hasn't applied for protection."

Read more of this story at Slashdot.

Birth of a New African Ocean

Slashdot - Nie, 2008-10-05 20:53
Khemisty writes "Formation of an ocean is a rare event, one no scientist has ever witnessed. Yet this geophysical nativity is unfolding today in one of the hottest and most inhospitable corners of the globe. Africa is splitting apart at the seams. From the southern tip of the Red Sea southward through Eritrea, Ethiopia, Kenya, Tanzania, and Mozambique, the continent is coming unstitched along a zone called the East African Rift." This stretching of the earth's crust has been going on for 20 million years, and within another 10 million the Red Sea will have broken through to create a new sea.

Read more of this story at Slashdot.

Birth of a New African Ocean

Slashdot - Nie, 2008-10-05 20:53
Khemisty writes "Formation of an ocean is a rare event, one no scientist has ever witnessed. Yet this geophysical nativity is unfolding today in one of the hottest and most inhospitable corners of the globe. Africa is splitting apart at the seams. From the southern tip of the Red Sea southward through Eritrea, Ethiopia, Kenya, Tanzania, and Mozambique, the continent is coming unstitched along a zone called the East African Rift." This stretching of the earth's crust has been going on for 20 million years, and within another 10 million the Red Sea will have broken through to create a new sea.

Read more of this story at Slashdot.

Time for Self Reflection

CircleID - Nie, 2008-10-05 20:12

In case you don't read any of what I have to say below, read this: I have dual citizenship. Along with my homeland citizenship, I am of the Internet, and see it as my personal duty to try and make the Internet safe.

Atrivo (also known as Intercage), is a network known to host criminal activity for many years, is no more.

Not being sarcastic for once, this is the time for some self reflection.

I wish I was one of those who sleep soundly tonight. Being clear in my conviction that Atrivo should be out of business, and being positive, my decision to help that happen was sound. While I would do it again, I am sad.

I won't sleep soundly tonight, as that company, criminal and abusive as it clearly and contemptuously was, still sustained quite a few families in several layers of employment, from sysadmins sitting in the US of A all the way to minor low-level fraudsters employed by their clients' clients.

I will however, be able to look myself in the mirror for my part in the effort to get rid of them—and even gloat some. My conscious is as clear to me as my sadness is crystal. We may not have changed the wall of battle in the long term and whenever one criminal falls, another jumps up to the opportunities of the land of the free—the Internet. But for once, just for a while, we halted the machine. We stopped the wheels of evil, even if only for a fortnight.

While doing so, it also touched some lives in a destructive fashion. The criminals'.

No villain ever sees himself as the bad guy, as the saying goes. A friend recently showed me Russian language comments written on Brian Krebs' recent Washington Post story. In them, the posters ask: "why do you take our bread away?"

In a lecture during ISOI 5, some folks just didn't understand the meaning. Their bread. Their bread. We in the Western world, behind the cultural divide speak a different language. Their culture isn't poorer than ours, it is unequivocally different.

We can not truly comprehend what it means for some folks in Russia to no longer be able to feed their children this month. Nor can we understand that by sending email, we made those children starve. Cheap theatrics on my part, you say? You got that right. It doesn't make it any less true.

Cyber crime is a war waged against the Western world. At first, no one even noticed and it was a niche… an art. While the artists still exist, they are a minority, the hackers. For the criminals however, motive is as irrelevant as nationality. Whatever actions are taken, be it a political defacement, fraud or spam, the unavoidable secondary impact remains the same: damage to the Western economy and security in an exponential growth which will become ever clearer in the coming years.

Yes, my friends. I would do the same again. I feel sorry for Atrivo, but they were harboring the equivalent for the Internet of active missile launchers firing on Israel from the Gaza strip. They are human beings who hit a curve in the road to their success. Cyber criminals, however, establish such growth as parasites and whatever I may feel for needing to resort to the end game weaponry, these people need to be smacked down like cockroaches.

Ten years ago they were a pride to their parents, today they are a scourge. What will they be in ten years?

If all reasonable and even some unreasonable approaches fail. That does not mean I don't have to feel sorry for them, and me. But it also doesn't mean we don't need to fight back.

Not even a hundred years ago, disastrously, war was business and an acceptable horrifying part of life. A few years later, in 1918, war was unthinkable. In the century since we who live in or are influenced by Western culture made war no longer an option we can publicly stomach, while facing those who would play us like children because of it.

War is horrifying and evil, it is also a last resort in a world not as ascendant as we would like to think. The Internet has its own "liberals" and I am proud to be one of them. However, I am also practical and see that wishing for a world we once had is not. A world where I could host files on my neighbor's servers openly, where children could happily use pocket calculators and go to libraries for their school work rather than Google and read Wikipedia. You did so, do your children?

This new world has its price, and that price is a complete loss of public privacy, and a culture of ineffective security.

We are reliant on our Auntie Jane's computer knowledge for our own security, and while not many would follow us to our bathrooms to infringe on our personal privacy, online we have no privacy, however much it helps us to lie to ourselves that something we do publicly (read, on the Internet) is private.

I accepted that, but that is because I am in the trenches for years. Others live better not knowing. But it doesn't mean I won't work diligently to make it remain… functional.

Indeed, taking a step back from my niche in security, and seeing how bad things truly are—people can still surf for porn, and argue over who the best Star Trek captain is. Cyber crime, in all its immense activity of billions of incidents an hour, is background noise. But the background noise continually increases. When will it overflow?

All I really want is to maintain the functionality we have, regardless of the abuse. And yet… Going back to Atrivo, they made enough money by now. And regardless once more, their criminal clients are already back online elsewhere—in some places possibly hosted by what seems like Atrivo, only under a different name.

We did not win, but boy does it feel good to have a victory once in a while for morale's sake. We halted the machine, even if only just for a short time. That, my friends, also has strategic implications as far as our ability is to influence networks running clean on the Internet, although only time will determine if I am right on that.

Enough whining though. Who is next on the target list? :)

More seriously, why do I care so much? I have dual citizenship. Along with my homeland citizenship, I am of the Internet, and see it as my personal duty to try and make the Internet safe.

Follow CircleID on Twitter

More under: Cyberattack, Privacy, Security

We Value Your Opinion: Please participate in this quick survey

Subskrybuj zawartość