Slashdot Mirror

Crackers broke into the external server and used that to get past a firewall to the server with their customer credit card database.

According to Netcraft, www.realnames.com runs Microsoft IIS/4.0 on Windows NT or Windows 98.

My favorite quote: "I'd run naked on Market Street before I'd want this", [CEO] Teare said.

A News.com article says that the FBI is now looking for a German programmer named, "Mixter" who allegedly wrote the programs that were used in the DoS attacks.

He vehemently denies any involvement with these incidents and does not condone people using his tools for such nefarious purposes. The article goes on to say, "Their[people who write these kind of tools] work is controversial, however, because the programs they write can fall into the wrong hands when posted on the Web." This brings up an interesting point. Since these tools have been written everybody needs to assume that they are already in the wrong hands, and anyone responsible for the security of their networks should be pounding themselves with DoS attempts using these tools, so that they can learn how to protect themselves.

While we're on the topic of AOL and their crazy hijinks, what's up with this?

From news.com

The attack software was installed primarily on computers using Sun Microsystems' Solaris and Linux--both variations of the Unix operating system. To break into those computers, the intruder took advantage of known vulnerabilities that allowed him or her to take almost complete control of a computer then erase his or her tracks, Dittrich said.

Interesting that, I've have thought having them on Win NT boxes would have been easier.

Cyberattack Cripples Yahoo (APBNews)
Who's Behing Yahoo Attack? (ZDNet)
FBI talks with Yahoo! about attack (ZDNet)
How a basic attack crippled Yahoo (CNet) (with stupid protocol animations too!)

And in other news: A different type of DoS attack is being carried out against Yahoo. At least 40 web articles have been written so far, showing evidence of how many reporters must be calling Yahoo right now. Once the second round of DoS attacks are stopped, the techies can finally get some work done beefing up the site.

AP via CNN: Yahoo! suffers attack from hackers, overwhelms popular site

CNET: Outage a deliberate attack, Yahoo says

DoS attacks in general and a few more details from CNET: How a basic attack crippled Yahoo

AP via CNN: Yahoo! suffers attack from hackers, overwhelms popular site

CNET: Outage a deliberate attack, Yahoo says

DoS attacks in general and a few more details from CNET: How a basic attack crippled Yahoo

No links... so here are a couple on that story... Cnet explanation and Cnet coverage

No links... so here are a couple on that story... Cnet explanation and Cnet coverage

Story

The terms that clearly shout "Crusoe" are 'heat-dissapation' and 'low-power consumption'

Hello, those terms shout "mobile processing," not "Crusoe." Those are the two things that notebook makers have been struggling with for years. Just on a lark, I searched News.com for that subject, and turned up this article about that very topic. Wow, Intel must have some top-notch industrial spies on their payroll to have stolen Transmeta's plans way back in 1997!!

Transmeta could really have a field day if they ever decided to sue Intel for stealing their completely original idea that "heat-dissipation" and "low-power consumption" are good for notebook CPUs! Just look at this 1994 Byte article, where those thieving bastards at Intel mention the improvments in their (obviously stolen!) 486DX4 CPU design:

"The DX4 chips also introduce other improvements, including 3.3-V operation; pin compatibility with existing 486 sockets and 5-V parts; lower power consumption and heat dissipation; 0.6-micron process technology; and a 16-KB instruction/data cache, twice as big as a normal Intel 486 cache."

Damn, it's truly hilarious watching you naïve Linus Torvalds fanboys making asses of yourselves as you slavishly scramble to heap greater and greater praise upon anything with which he's associated.

Cheers,
ZicoKnows@hotmail.com

This is the same Gov. Ridge who made an all-encompassing deal with the devil, er... Microsoft. C.f. this old /. article and accompanying link.

I think this is a cool idea. Five dollars a month is way less than just an Internet connection would cost, let alone renting a computer and a printer. I have to wonder why the printer though. It's an extra expense for Ford, and does it add much value for the home users?

How dare they compare themselves to me! I'm not a useless, afunctional load of code. I work.

Check it out at C/Net

One problem is that Bernstein is not binding on this court. In fact, it may be rendered moot.

The 9th Circuit was reviewing Patel's ruling en banc, but they just pushed it back down to the original panel to be reconsidered in light of the new relaxed encryption export regulations.

Here's the most recent update from news.com and basically the same info from cryptome.org.
EFF has not updated their collection of Bernstein issues with this yet.

Ahh, damn, sorry -- I was rushing out the door to lunch with some folks and didn't doublecheck the link. Here's the C|net story about FreeMac's frustrations with Apple, doublechecked this time: http://news.cnet. com/news/0-1006-200-1540302.html?tag=st.ne.1002.

And no, FreeMac didn't want a credit line or anything -- they just wanted to buy the computers, even if that meant buying them from a reseller or from a retailer like CompUSA. Check out the article now that I've finally posted the URL correctly, it's interesting.

Are you referring to /. -> VA sale?

Are you referring to /. -> Andover -> VA sale?

Borgificatio n continues as usual . You will be assimilated.

Borgificatio n continues as usual . You will be assimilated.

CNET article

For those of you who are un-aware of the amazon.com fiasco (neat!), read the below links:

Yahoo - Amazon.com Receives Patent for 1-Click
CNET.com - News - E-commerce - Amazon sues Barnesandnoble.com over patent
Slashdot | Articles | Amazon Sues B&N over Software Patent
The New York Times: News That's Unfit

That is probably enough reading to get the general gist of things.

Ben Brewer
brewer@nullified.org

I can't believe you guys!
You are allways making fun of Windows.

Have you forgotten the news from earlier this week?

"Corel hurries to fix Linux security hole"
http://news.cnet. com/news/0-1003-200-1533081.html?tag=st.ne.1002.

"It took us a while to get here, but that's because we were not ready to compromise," Valentine said, promising that the first version of the operating system will not need service packs or bug fixes like other software releases. --Brian Valentine, Windows Division Senior VP http://news.cnet.com/news/0-1003-200-1497019.html? tag=st.ne.ron.lthd.1003-200-1497019

There was a CNET article here.

Not a direct MS quote though, just the CNet reporter paraphrasing Brian Valentine, senior vice president of the Windows Division. Saying that "the first version of the operating system will not need service packs or bug fixes like other software releases". Probably a case of sloppy journalism.

How come? Because according to /. zealots there are no problems with Linux. It's perfect.
http://news.cnet.com/news/ 0-1003-200-1533081.html?tag=st
"Corel is working to patch a bug with its version of Linux that could let unauthorized users gain access to machines running Corel Linux."

• DoubleClick is not sweating over the plans of privacy watchdogs to upset the $1 billion merger of the Internet advertiser and market researcher Abacus Direct, a top DoubleClick executive said today.

  "We don't think it's an issue," said Kevin Ryan, DoubleClick's president.

  DoubleClick says there is no demand for prior consent. For instance, of the 75 million people per month who view DoubleClick network ads, only ten per day elect to remove the company's cookie, which tracks surfing habits, from their computers.

  "I've been very active on the online privacy issues with the FTC since 1997," he added. "We spent a lot of time on this in discussing the merger--if consumers are not happy, neither one of us has a business."

But I have to say this..

From the C|net article:
"Court papers are generally considered public documents, available to anyone for the asking."

Isn't the LiViD code under the GPL? Doesn't this make it qualify as a public document, as anyone who asks can get the source? I just don't understand the crazy US legal system :-)
---

From CNET:
A digital rights licensing group seeking to ban the controversial DVD decryption program known as DeCSS has shut down yet another potential distributor: a California state courthouse.

Read the full article here.

My favorite quote: "If they didn't file it under seal, they could be seen to have given up the their (trade secret) rights."

Gosh, I hope so!

God damn right, and what will drive the last nail in is if "Shrub" Bush take the White House in November. Not that the Democrats are so much better, look at how eager Clinton's Reno's Department of "Justice" has been to trample all over citizens's freedoms, but at least no Dem ever put anybody close to as awful as Rehnquist or Scalia on the Supreme Court, not in my lifetime, anyway. If Shrub wins, expect him to nominate at least another one or two Rehnquist/Scalia clones to the Supreme Court, and then the game's up. The Scalia gang clearly don't believe that any constitutional rights at all exist for anyone besides corporations and cops. Shrub's new revanchist Supreme Court will rule those evanescent "constitutional rights" of yours right out of existence; we'll graduate to a full-fledged police state.

Take the current full-bore legal assault upon open-source software to the next step. I wouldn't put it past such a Supreme Court to rule that possession of gcc could be considered a felony. After all, isn't that the master software tool that those villainous, felonious "hackers" all use to break into high-security Internet messaging systems and manufacture malicious, insidious, destructive computer viruses?

Well, no it's not, you know that and I know that, but the wide public doesn't know Jack and the press are in full propaganda/panic mode over hackers and that evil Internet (as they see themselves being scooped out of business by the likes of a Matt Drudge, that is, a nobody, a zero like you or me, with a web page). Besides, when has unwillingness to promote a lie ever even once restrained a cop on a mission of righteousness or a politician trying to panic a herd of voters into the chute?

Yours WDK - WKiernan@concentric.net

Win98 telnet is just as bad. It always cuts off the last line when you use 'less', for example, which really annoys me, not to mention that the arrow keys, page-up and page-down, and a bunch of other stuff simply does not work. I recommend getting one of the many freeware/shareware telnet clients available at download.com in the Windows:Internet section (this direct link may work).

Not complely clear about this (translation is kind of muddled) but do they have a "CD Digital Audio" logo on them? If they do, go ahead and sue. If they don't have such a logo, it doesn't have to be CD Digital Audio.

Win98 telnet is just as bad. It always cuts off the last line when you use 'less', for example, which really annoys me, not to mention that the arrow keys, page-up and page-down, and a bunch of other stuff simply does not work. I recommend getting one of the many freeware/shareware telnet clients available at download.com in the Windows:Internet section (this direct link may work).

Not complely clear about this (translation is kind of muddled) but do they have a "CD Digital Audio" logo on them? If they do, go ahead and sue. If they don't have such a logo, it doesn't have to be CD Digital Audio.

CNet: Court blocks online publishing of DVD decryption tool... yes.. a truly sad day.

If your interested, I've compiled a quick list of links pertaining to this case below

You can find the mp3.com press release here.which includes the full text of the suit that was filed.

Cnet has coverage here.

And last, but not least, if you like zdnet.com, then you can get their story here .

If your interested, I've compiled a quick list of links pertaining to this case below

You can find the mp3.com press release here.which includes the full text of the suit that was filed.

Cnet has coverage here.

And last, but not least, if you like zdnet.com, then you can get their story here .

The Win2K box wasn't hacked it went down from the load and Microsoft claimed it was due to electri cal storm interference, then refused to put the machine back up. The Win2K box wasn't hacked because nobody got a chance it was slashdotted. :) PS: They did put it back up again but took it down soon after the machine's guestbook got hacked

The Win2K box wasn't hacked it went down from the load and Microsoft claimed it was due to electri cal storm interference, then refused to put the machine back up. The Win2K box wasn't hacked because nobody got a chance it was slashdotted. :) PS: They did put it back up again but took it down soon after the machine's guestbook got hacked

What's even better is that the other lose from the i820 deal, Rambus is now trying to sue makers of SDRAM. Beautiful. Two companies fuck up and then lash out by sueing everybody in sight who makes successful products.

Were'nt patents suppose to increase innovation?

They paid $9.2 billion for them in October. So I don't think that lawsuit is being filed anytime soon.

http://news.cnet.com/news/0-1006-2 00-806223.html

But in this case what iCrave is doing is clearly illegal.

** I would use whatever is cheapest and works well. I have used 3 computers in my home environment over my computing time and all three were Intel machines**
Funny - that's a contradiction. Show me one Intel processor that is being sold for LESS than it's AMD equivalent. You also said that you use what is readily available: Intel is having chip shortages. That is why Gateway and other computor manufacturers are going to AMD. Check out this article for more info.

kwsNI

WDC drives are so bad, they make the news:

pcweek article from Feb 1997
cnet article from last year

BTW, Arstechnica is promising an in-depth look at the CPU later today from their CPU expert.

BTW, Arstechnica is promising an in-depth look at the CPU later today from their CPU expert.

one by cnet, pretty thorough, and
one by techweb with more details than the other articles, and
one from Infoworld

--LP

According to this Yahoo/CNet link, Streambox can't distribute or market two of their three products for the duration of the trial. By looking at both press releases I managed to figure out that it's now OK for Streambox to distribute the Ripper, but not Ferret or VCR. It says as much in the Real press release, but it's buried way toward the bottom of the release and spun so it sounds like an OK thing.

So it's not the exact opposite, exactly. Both sides are claiming victory in a big way, but you have to dig to find that out. So remember, kiddies, never get all of your news from one source!
--

http://news .cnet.com/news/0-1004-200-1526165.html?tag=st.cn.1 .lthdne

-JB

Download.com is where I got my copy of DeCSS, but I just checked now, and it's not there anymore. Looks like they bowed to pressure just like everyone else.

~Sentry21~

Hey chill out, I remember being online and reading slashdot when passport.com went down (yes I know it was Christmas day), and reading the article and all the threads when Micheal Chaney paid the bill. I remember that his post when he paid had "Merry Christmas, Microsoft" on it.
I was actually surprised it took that long for 1 of us to pay it because several people (myself included) went to the NSI payment site to verify if it was down but for hours nobody paid it until Micheal Chaney did. Upon reflection it seems very telling upon the character of slashdot readers (during Christmas) that it took that long for one of us to pay it...(it's not like we suspected MSFT wouldn't reimburse the check).
Here's the offending ZDNet and C|Net articles that made everyone start calling him a money hungry opportunist.
Quotes...
ZDNet : Microsoft said it would refund Chaney the $35, although Chaney hinted his bailout of the world's biggest software company was worth more. "Microsoft is under no legal obligation to repay the $35 to me, and it doesn't really matter to me if they do or not. If they do ... I would ask that when they make out a check they consider how much revenue would have otherwise been lost had this been down for another day or two, "

C|Net: As for Microsoft's promised check, Chaney said he plans to frame it. "I'm not going to cash it," he said, "unless it's a huge amount." Pointing out the value of restoring service to millions of Microsoft customers and the preservation of advertising revenues, Chaney suggested that his Christmas charity is arguably worth more than a simple thanks. "In a perfect world, I wish they'd take that into account," he said. "But I'm not relying on it. It's their choice."

What he claimed is that he felt what he did was worth more than a $35 check and a thank you. .He pointing out that he saved a multi-billion $ corporation's most popular Internet service (yes, Hotmail provides the most hits to MSN.com via the cute little logout redirection trick) from at least 24 hours of outage maybe more and that is worth more than a thank you and $35. I've seen his web-page he's a regular hack just like me (i'm probably worse off since i'm still in school) and I would have done the same thing, the least they could do was give a little extra (rebate check, free software, extra $$$). If that's greed to you then I say not giving a reward would have been the height of ingratitude and corporate penny pinching from a company who's CEO can afford to burn a million dollars a day from now till he dies and still will die a billionairre.

According to this article at news.com, this is the start of them open-sourcing their software.

Which makes sense - make it open so people can check the security. Other people can do the work of porting it to numourous wierd and wonderful platforms. They still make revenue because they're providing a service (including to users of unoffical, say, Linux ports). Everyone wins.

Hurrah for open source! Etc!

...j