Slashdot Mirror

This according to the article seems to intercept real-time data.

If "this" refers to the app, it just picks up data from ADS-B receivers out there feeding data to Pinkfroot, as per my posting quoting TFA. If "this" refers to those ADS-B receivers, they note that said receivers cost about GBP 200, and other postings here point to a page telling you how to build an ADS-B receiver.

OMG, I'll save you some money, not even terrorist should go broke on their quests.

"Anything that makes it easier for our enemies to find targets is madness. The Government must look at outlawing the marketing of such equipment."

Perhaps they should consider banning the ADS-B transmitters, then?

In any case, banning the app would do nothing to anyone with the funds for a SAM. See this document to make your own reciever.

So they're using the X-Men villain to fight the edge of a coin? Why that, are they trying to fight against corruption?

Please, can anything be done about http://it.slashdot.org/comments.pl?sid=148774&cid= 12468780">This asshole

He has ripped wikipedia, added adsense, and I belive this is downright WRONG. His website is obviously a ploy at profit garnering...

Please, tell me if there's anything you can do about assholes like this.. really chaps my ass

Adsense is still not working fully. On many sites ( example), clicks on ads only work roughly one time out of three.

Adsense still doesn't work correctly, even now. But apparently, it is very dependant on the page. On some pages, the ad links work 99% percent of the time, but on some others 90% of the clicks fail (i.e. the visitor is directed to a google "sorry for the inconvenience" page, rather than to the advertiser). Wierd.

Adsense still doesn't work correctly, even now. But apparently, it is very dependant on the page. On some pages, the ad links work 99% percent of the time, but on some others 90% of the clicks fail (i.e. the visitor is directed to a google "sorry for the inconvenience" page, rather than to the advertiser). Wierd.

If you go to a page that's supposed to have ads, you'll see that sometimes the ad banner is completely absent, while at other times, it is there, but clicking on the ad links leads to nowhere. And very rarely (about once in 10 times), you do get forwarded to the correct place. Weird...

Google is back. But the AdSense banners are still gone. Could it be that google caught a bad case of mesothelioma? The weird thing is sometimes the ads do display, but clicking on them leads to nowhere...

Luxembourgish banks encourage/force usage of browser targetted by viruses and keystroke loggers

(Almost all) The banks over here use a kind of calculator device. You insert your pass into it. Your normal pass you use for withdrawal from ATM's....

Here is Luxembourg, banks are too cheap for handing out these calculator thingies. Instead they use a scratch-off plastic card with 16 alphanumeric digits on it. When logging in to their service, the site choses 2 (or some 3) positions out of the 16 possible, and you have to enter the corresponding digits.

This key is different every X seconds (I don't know the interval).

Well, here in Luxembourg, the "good" banks do it the same: the key (in our case: choice of scratch card numbers) is valid a set amount of time. However, some of the (less technically savy banks) propose you a different choice of digits each time you hit reload... so a thief who has sniffed some numbers (but not all) can just keep on hitting reload until the bank asks for numbers that he has... not good!

If you want to transfer money, you get another screen. You have to insert the number shown on the screen into the device. After you hit 'OK', another number is shown on the device, you type this in the inputbox of the website. After it is verified, the transfer will be processed.

Our banks do not have this additional security yet... (Apart from maybe Cortal-Consors. I know their German operation has such a system).

This is all done on HTTPS...

In Luxembourg too. No bank is foolish enough to use plain http. and works with most browsers.

Unfortunately, this is not the case in Luxembourg (although some progress was made over the course of last year).

The currently worst offenders have a gateway page which features a Rube-Goldberg like chain of Java Applets, Java Script code, and VB code which only works on Internet Explorer (the Java Applet is MS proprietary java (using the proprietary com.ms.util.SystemVersionManager class...). The output of this is fed, via the VB script, and then the Javascript (!) into a second URL, which gives you access to the Web application itself. Interestingly enough, once that gate is passed, there is no further dependancy on MS-ware, and you can cheat yourself access to the contents (graphs of their mutual funds) by entering that second URL manually.

For their homebanking they have the same "proprietary applet" hack, and in addition a server-implemented browser check. Manually enter the JVM=1 bit into the URL, and fake an Internet Exploder User Agent and you are in! What the hell are they thinking?

I believe this is one of the most secure methods I can imagine. It is not flawless maybe, but it works and there is much needed to hijack information from the sessions. Without the device, the pass and the account number one can do nothing. Without the PIN you still go nowhere....

Indeed, the number generated by the device makes it secure even against keystroke loggers that may be installed (but don't challenge your luck either...)

Well, if he's good with a knife..

doing so would be like hiring a butcher's son to manage your country's economy. Oh wait....

Note for the non-Luxembourgers: yes, we did have a general election in the meantime, and the guy in the picture's party lost big time, hehe. Our new government is not yet formed, but probability is quite high that this guy won't be butchering any penguins anytime soon!

Any software patents on it?

Actually, only the last step needs to happen in Parma. The pigs are raised in the Netherlands, then carted all the way through Belgium, Luxembourg, France to Italy, where they are slaughtered and made into ham.

The nice thing is that if there are more pigs in the truck than is allowed by the Luxembourgish legislation, they may be forced to have their pigs slaughtered right on the spot. This is not only an appropriate punishment for the evildoers (by destroying the resale value of the meat, which can no longer legally become Parma ham), but it also helps the local butchery industry. Sigh, I guess that's what we get when we make a butcher's son the Minister of Transportation.

And as Minister of Economy, he fares far worse.

I dunno. Ask your friendly neighboorhood butcher's son? Although, I'm pretty sure that the cows and pigs don't agree!

Lobby your representative before May 27th to prevent the worst!

Result: today, we're just two votes short of blocking the controversial software patent directive.

We're now at a stage were even the smallest European countries can make a difference! If any small country, who so far has voted yes, changes its vote into no or abstain, we can send back the proposal to COREP, and prevent the worst from happening.

However, eventually we gave up on this setup due to bandwidth considerations: it takes a much higher bandwidth to send X commands (containing uncompressed bitmaps) over the network, than it does to send html, gifs and jpegs. So, eventually, we moved to a solution where the browser runs natively on Windows (first netscape, now mozilla), and the Linux box does only the squid caching (for better usage of our WAN connectivity) and file serving (for roaming profiles).

(Of course, the Linux box does lots of other stuff as well (print serving, web server, firewall, user administration, udpcast server, ...), but these are unrelated to the browser issue that we are discussing here ;-) )

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Run]
"Mozilla Quick Launch"="\"C:\\PROGRA~1\\MOZILLA.ORG\\MOZILLA\\MOZ ILLA.EXE\" -turbo"

Other registry entries might be necessary to set Mozilla as the default browser.

Other handy tips for mozilla configuration (such as locked config items, automatically generated personal config, etc) can be found at http://www.alain.knaff.lu/howto/MozillaCustomizati on/

This is used in the schools participating in the LLL project.

Some Highlights:

• Any configuration options accessible in prefs.js can be stored in a locate mozilla.cfg file (optionnally locked in such a way that it can no longer be overridden by the user):
  • Disable 'Open Unrequested Windows' (kill pop-ups),
  • Enable HTTP Pipelining,
  • Set toolbar to 'Pictures only',
  • Set Home Page to my organization's intranet site,
  • Set start page to 'Blank page',
  • Enable Middle-click for new tab,
  • Enable control+enter for new tab,
  • Default downloads to 'open a progress dialog',
  • Disable Javascript and Plugins for Mail & News
• Using mozilla's own registry (%USERPROFILE%\Application Data\Mozilla\registry.dat) set the profile directory (which contains prefs.js et al.) to be on the user's home directory (H:\). That way, you can have a personalized configuration (Mail & News) automatically created by a script. When the user first logs in, he doesn't need to set his email address, server name, etc for using Mail & News, everything is already done for him!
• Disabling of the bulky XUL.mfl file (whose sizes quickly add up if you have thousands of users): just create a directory named XUL.mfl, and Mozilla will be unable to create that file, and it will still work correctly!
• Automatical loading of the needed registry entries as soon as user logs in, using a netlogon script

maintainer of floppy driver and mtools. Author of fdutils and zlibc . Local linux activist: http://www.lll.lu

Thanks