Slashdot Mirror
Domain: example.com
Stories and comments across the archive that link to example.com.
Stories · 9
-
Security.txt Standard Proposed, Similar To Robots.txt (bleepingcomputer.com)
An anonymous reader writes: Ed Foudil, a web developer and security researcher, has submitted a draft to the IETF — Internet Engineering Task Force — seeking the standardization of security.txt, a file that webmasters can host on their domain root and describe the site's security policies. The file is akin to robots.txt, a standard used by websites to communicate and define policies for web and search engine crawlers...
For example, if a security researcher finds a security vulnerability on a website, he can access the site's security.txt file for information on how to contact the company and securely report the issue. According to the current security.txt IETF draft, website owners would be able to create security.txt files that look like this:
#This is a comment
Contact: security@example.com
Contact: +1-201-555-0123
Contact: https://example.com/security
Encryption: https://example.com/pgp-key.tx...
Acknowledgement: https://example.com/acknowledg...
Disclosure: Full -
Security.txt Standard Proposed, Similar To Robots.txt (bleepingcomputer.com)
An anonymous reader writes: Ed Foudil, a web developer and security researcher, has submitted a draft to the IETF — Internet Engineering Task Force — seeking the standardization of security.txt, a file that webmasters can host on their domain root and describe the site's security policies. The file is akin to robots.txt, a standard used by websites to communicate and define policies for web and search engine crawlers...
For example, if a security researcher finds a security vulnerability on a website, he can access the site's security.txt file for information on how to contact the company and securely report the issue. According to the current security.txt IETF draft, website owners would be able to create security.txt files that look like this:
#This is a comment
Contact: security@example.com
Contact: +1-201-555-0123
Contact: https://example.com/security
Encryption: https://example.com/pgp-key.tx...
Acknowledgement: https://example.com/acknowledg...
Disclosure: Full -
Security.txt Standard Proposed, Similar To Robots.txt (bleepingcomputer.com)
An anonymous reader writes: Ed Foudil, a web developer and security researcher, has submitted a draft to the IETF — Internet Engineering Task Force — seeking the standardization of security.txt, a file that webmasters can host on their domain root and describe the site's security policies. The file is akin to robots.txt, a standard used by websites to communicate and define policies for web and search engine crawlers...
For example, if a security researcher finds a security vulnerability on a website, he can access the site's security.txt file for information on how to contact the company and securely report the issue. According to the current security.txt IETF draft, website owners would be able to create security.txt files that look like this:
#This is a comment
Contact: security@example.com
Contact: +1-201-555-0123
Contact: https://example.com/security
Encryption: https://example.com/pgp-key.tx...
Acknowledgement: https://example.com/acknowledg...
Disclosure: Full -
ARIA Sells a Licence for DJs to Format Shift Music
lucas writes "The Australian Recording Industry Association (ARIA) has set up a new licence to let DJs format shift their music to use at gigs. DJs will need to pay a licence fee to copy music they already own legally from one format to another for ease of use, and as a back-up in case originals get lost or stolen. Criminal penalties for DJs involved in "music piracy" are up to sixty thousand dollars and 5 years imprisonment. There are also on-the-spot fines of over one thousand dollars." -
Science vs. Homeopathy
Mr. E writes "Ars Technica has an interesting look at pseudoscience as it applies to homeopathy. While most discussions about what science is get derailed by the larger controversies surrounding them, Ars chose a relatively uncontroversial pseudo-science to examine so that they could examine the factors which make homeopathy a psuedo-science: ignoring settled issues in science, misapplication of real science, rejection of scientific standards, claims of suppression, large gaps between the conclusion and evidence, and a focus only on the fringes of what we currently understand." -
New Conservancy Offers Gratis Services to FOSS
Anonymous Coward writes "Yahoo! News is reporting on the launch of the Software Freedom Conservancy. The new organization, started by Bradley Kuhn, Eben Moglen, and Daniel Ravicher, will serve to provide member projects with free financial management and administrative services. The new group was established by the Software Freedom Law Center, which was started by Moglen and Ravicher one year ago." -
Teach A Robot To Drive, Win A Million Bucks
An Anonymous Reader writes "DARPA has released the details of a 'Grand Challenge,' with a $1 million prize. The challenge is to build an autonomous vehicle which can 'navigate on its own over a 250-mile desert course in less than 10 hours.' from L.A. to Vegas, 'without external communication or human control.' The contest is to be conducted in March 2004, and is open to all comers. Can we get at least one entry to represent slashdot?" We've mentioned this contest a few times before: any intended entrants out there want to disclose your secret plans? -
Linus Has Harsh Words For Itanium
Anonymous Coward writes "As a follow up to the earlier story "Intel: No Rush to 64-bit Desktop"... In words that Intel are likely to be far from happy with, the Finnish luminary has stuck the boot into Itanium. His responses to some questions on processor architecture are sure to be music to AMD's ears. Linus, in an Inquirer interview concludes: "Code size matters. Price matters. Real world matters. And ia-64... falls flat on its face on ALL of these."" Of course, Linus works for a chip maker ;) -
Penny Black Project Investigates Sender-Pays E-mail
Anonymous Coward writes "The Inquirer reports: Microsoft contemplating charging for emails. 'MICROSOFT IS UNFOLDING something it calls the Penny Black project in which people sending emails might have to pay for the privilege.' Microsoft's explanation of the project is here: The Penny Black Project." There are a lot of things going on at Microsoft Research -- no guarantee that particular ones are going to be released in the real world. (And Microsoft isn't the only party interested in sender-pays, or at least sender-risks-paying systems.)