Slashdot Mirror

Rick Zeman writes "According to a headline article in the New York Times, they admit to being hacked by the Chinese, and covers the efforts of Mandiant to investigate, and then to eradicate their custom Advanced Persistent Threats (APT). This was alleged to be in reaction to an article which details the sleazy business dealings of the family of Wen Jiabao, China's newest Prime Minister. China's Ministry of National Defense said in denial, 'Chinese laws prohibit any action including hacking that damages Internet security.'" Update: 01/31 15:00 GMT by T : The Times used Symanetic's suite of malware protection software; Symantec has issued a statement that could be taken as slightly snippy about its role in (not) preventing the spyware from taking hold.

itwbennett writes "Now that the ridiculous phone unlocking law is a done deal, and we all understand exactly what that means (i.e., 'fines of up to $500,000 and imprisonment of up to five years'), you might be left wondering what can you do about it. Well, you could start by lending your John Hancock to this petition at the White House's 'We The People' platform. It's already over halfway to the number of signatures required to get a response from the executive branch."

itwbennett writes "Now that the ridiculous phone unlocking law is a done deal, and we all understand exactly what that means (i.e., 'fines of up to $500,000 and imprisonment of up to five years'), you might be left wondering what can you do about it. Well, you could start by lending your John Hancock to this petition at the White House's 'We The People' platform. It's already over halfway to the number of signatures required to get a response from the executive branch."

Nerval's Lobster writes "Research In Motion has whipped the curtain back from BlackBerry 10. The revamped operating system is widely perceived as RIM's best chance at staying relevant in a smartphone market dominated by Google Android and Apple's iOS. Once a significant player in mobility, RIM watched its earnings and market-share crumble over the past few years. BlackBerry 10 abandons the longtime BlackBerry user interface, centered on grids of icons, in favor of one built on the same QNX technology that powers RIM's PlayBook tablet. The BlackBerry 10 home-screen offers 'live tiles' that dynamically refresh with updated information, and RIM is playing up how users can move between apps and alerts by swiping and flicking the screen. Other features include BlackBerry Balance, which divides the 'personal' and 'corporate' sides of the phone, as well as an updated BlackBerry Messenger. More details in the article." RIM also announced they are rebranding themselves as BlackBerry. If you like pictures, omfglearntoplay sent in an article that delivers. Gimmicks of the launch include hiring Alicia Keys as their "Global Creative Director."

Better known by his stage name "The Amazing Randi", James Randi has made it his quest to "debunk psychic nonsense, disprove paranormal fakers, and squash claims of pseudoscience in order to bring the truth to the forefront." Randi worked as a popular magician most of his life and earned international fame in 1972 when he accused the famous psychic Uri Geller of being a fraud and challenged him to prove otherwise. In 1996 Randi founded The James Randi Educational Foundation (JREF) a non-profit organization whose mission includes "educating the public and the media on the dangers of accepting unproven claims, and to support research into paranormal claims in controlled scientific experimental conditions." He began offering $1000 in 1964 to anyone who could demonstrate proof of the paranormal. That amount has grown over the years, and the foundation's prize for such proof is now $1M. Around 1000 people have tried to claim the prize so far without success. Randi has agreed to take a break from busting ghostbusters and giving psychic healers a taste of their own medicine in order to answer your questions. As usual, you're invited to ask as many questions as you'd like, but please divide them, one question per post.

An anonymous reader writes with news that the first successful case was brought before the copyright tribunal under NZ's three strikes law. From the article: "The first music pirate stung under new file-sharing laws has been fined $616 but 'didn't realise' the actions were illegal. The Recording Industry Association of New Zealand (RIANZ) — which represents music studios — took an unnamed offender to the Copyright Tribunal last year for sharing songs on the Internet — a track by Barbadian pop-star Rihanna on two occasions and the other by Nashville band Hot Chelle Rae. In a decision released today, the tribunal found in RIANZ's favor and ordered the offender ... to pay a penalty $616.57." Torrent Freak has a slightly different perspective: a lack of evidence and pushback from the tribunal resulted in much smaller fines than the RIANZ wanted.

pigrabbitbear writes "It's been nearly a decade since Shin Dong-hyuk, an ex-prisoner of North Korea's Camp 14, crawled over the electrocuted body of a friend lying dead on a fence, a boundary he was born inside of and lived within for 23 years. He made his way across the Chinese border on foot and was granted political asylum and citizenship in Seoul. Now, thanks to updated Google maps of the region, you can actually (if somewhat loosely) retrace the steps of his incredible escape. Through its Map Maker program, which crowdsources cartographic info, Google has published finer details of some North Korean roads. More notably, it has included shaded-in locations of the country's notorious prison camps. The data has flowed in from a few different sources, including defected North Korean expats now living in Seoul. Geographically-minded tourists and visitors of North Korea have weighed in, and historic map data from pre-partitioned Korea into has also been helpful. (Google maintains that the recent trip to Pyongyang by CEO Eric Schmidt had nothing to do with this project.)"

alphadogg writes "Five years after the disclosure of a serious vulnerability in the Domain Name System dubbed the Kaminsky bug, only a handful of U.S. ISPs, financial institutions or e-commerce companies have deployed DNS Security Extensions (DNSSEC) to alleviate this threat. In 2008, security researcher Dan Kaminsky described a major DNS flaw that made it possible for hackers to launch cache poisoning attacks, where traffic is redirected from a legitimate website to a fake one without the website operator or end user knowing. While DNS software patches are available to help plug the Kaminsky hole, experts agree that the best long-term fix is DNSSEC, which uses digital signatures and public-key encryption to allow websites to verify their domain names and corresponding IP addresses and prevent man-in-the-middle attacks. Despite the promise of DNSSEC, the number of U.S. corporations that have deployed this added layer of security to their DNS server is minuscule."

An anonymous reader writes "Mozilla on Tuesday announced a massive change to the way it loads third-party plugins in Firefox. The company plans to enable Click to Play for all versions of all plugins, except the latest release of Flash. This essentially means Firefox will soon only load third-party plugins when users click to interact with the plugin. Currently, Firefox automatically loads any plugin requested by a website, unless Mozilla has blocked it for security reasons (such as for old versions of Java, Silverlight, and Flash)."

snydeq writes "Microsoft's release of Office 2013 represents the latest in a series of makeover moves, this time aimed at shifting use of its bedrock productivity suite to the cloud. Early hands-on testing suggests Office 2013 is the 'best Office yet,' bringing excellent cloud features and pay-as-you-go pricing to Office. But Microsoft's new vision for remaining nimble in the cloud era comes with some questions, such as what happens when your subscription expires, not to mention some gray areas around inevitable employee use of Office 2013 Home Premium in business settings." Zordak points to coverage of the new Office model at CNN Money, and says "More interesting than the article itself is the comments. The article closes by asking 'Will you [pay up]?' The consensus in the comments is a resounding 'NO,' with frequent mentions of the suitability of OpenOffice for home productivity." Also at SlashCloud.

An anonymous reader writes "EA's latest SimCity game requires users to log on online even for single player. After being unable to log on for three hours, one of its users chimed in with his very polite $0.02 opinion, only to get himself banned by EA admins. Another great victory for DRM." Update: 01/29 18:00 GMT by S : The player's ban has been lifted, and it seems to have happened for an unrelated issue anyway.

noh8rz10 writes "Holy moly! iPad gets a heavyweight sibling, clicking in at 128GB. This places it in range of storage for Surface Pro and ultrabooks. It's clearly targeted at the professional market, as the press release cites X-rays and CAD files as reasons. Should Microsoft be afraid? Methinks so. Best part, pricing is growing by log 2. Just as the 32GB version is $100 more than the 16, and the 64 is $100 more than the 32, this new version is $100 more than the 64!" Update: 01/29 16:00 GMT by T : Here's Apple's announcement itself.

adeelarshad82 writes "Twitter's new iOS-only app, Vine, was prominently featured by Apple as an 'Editor's Pick' in its App Store the day it launched. However, given Apple's policies for adult content, they may have rushed the whole thing since this past Sunday, a number of news outlets ran stories covering the rise of easily-accessible pornography on the new video sharing app. As Joshua Topolsky explains, the situation draws even more attention to the vague and sometimes confusing rules of Apple's App Store guidelines, and more clearly showcases the sporadic and often unusual criteria the iPhone-maker uses to decide the fates of applications. So it will be interesting to see how Apple handles this given that they've never been shy about banning similarly racy apps in the past."

Nerval's Lobster writes "All your Tweets are belong to us... with a court order. Twitter's second transparency report reinforces what many already know: governments want online user data, and to yank select content from the Internet. Twitter's first two transparency reports cover the entirety of 2012, so there's not a deep historical record to mine for insight. Nonetheless, that year's worth of data shows all types of government inquiry—information requests, removal requests, and copyright notices—either on the increase or holding relatively steady. Governments requested user information from Twitter some 1,009 times in the second half of 2012, up slightly from 849 requests in the first half of that year. Content-removal requests spiked from 6 in the first half of 2012 to 42 in the second. Meanwhile, copyright notices declined a bit, from 3378 in the first half of 2012 to 3268 in the second."

snydeq writes "Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet, InfoWorld reports. 'A cyber war has been brewing for at least the past year, and although you might view this battle as governments going head to head in a shadow fight, security experts say the battleground is shifting from government entities to the private sector, to civilian targets that provide many essential services to U.S. citizens. The cyber war has seen various attacks around the world, with incidents such as Stuxnet, Flame, and Red October garnering attention. Some attacks have been against government systems, but increasingly likely to attack civilian entities. U.S. banks and utilities have already been hit.'"

snydeq writes "Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet, InfoWorld reports. 'A cyber war has been brewing for at least the past year, and although you might view this battle as governments going head to head in a shadow fight, security experts say the battleground is shifting from government entities to the private sector, to civilian targets that provide many essential services to U.S. citizens. The cyber war has seen various attacks around the world, with incidents such as Stuxnet, Flame, and Red October garnering attention. Some attacks have been against government systems, but increasingly likely to attack civilian entities. U.S. banks and utilities have already been hit.'"

snydeq writes "Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet, InfoWorld reports. 'A cyber war has been brewing for at least the past year, and although you might view this battle as governments going head to head in a shadow fight, security experts say the battleground is shifting from government entities to the private sector, to civilian targets that provide many essential services to U.S. citizens. The cyber war has seen various attacks around the world, with incidents such as Stuxnet, Flame, and Red October garnering attention. Some attacks have been against government systems, but increasingly likely to attack civilian entities. U.S. banks and utilities have already been hit.'"

benrothke writes "In its first week, Going Clear: Scientology, Hollywood, and the Prison of Belief was #3 on the New York Times Best Sellers list and will likely be #1 soon. The fact that the book is in print is somewhat miraculous given the voracious appetite Scientology has for litigation. It is the first time that such an expose could have been written and found such wide-scale reading. An interesting analysis of this fact is found in Why the Media Is No Longer Afraid of Scientology by Kim Masters. But as mesmerizing an expose as the book is, I doubt that this will be more than a speed bump to Scientology's growth and fund raising." Keep reading to be clear about what Ben has to say. Going Clear: Scientology, Hollywood, and the Prison of Belief author Lawrence Wright pages 448 publisher Knopf rating 10/10 reviewer Ben Rothke ISBN 978-0307700667 summary Compelling and engrossing book, thoroughly researched and extensively fact checked Scientology has long called anyone who has written against them as having a vendetta. It calls former adherents heretics with a vendetta. But after such hyperbole, it is illogical and questionable that Pulitzer Prize winning author Lawrence Wright would risk a distinguished career to write an expose simply based on those with a vendetta. But to cover all bases, including those of litigation, the books nearly 50 pages of notes puts Wright and his publisher in a strongly defensible position in case the church decided to litigate.

Wright is aware of the dangers of writing against the church, as he details the story of Paulette Cooper. Cooper, whose 1971 book The Scandal of Scientology, was sued nearly 20 times by the church and harassed for years due to its contents. The book details that an FBI raid a few years later found a Scientology file about Operation Freakout, which had the purpose of getting Cooper in a mental institution or jail.

The book places Church President David Miscavige is a negative light (over 20 people in the book accuse him of abuse, including being kicked, punched, slapped, choked and more). Karin Pouw, a Scientology spokeswoman states that details about Miscavige are false and defamatory.

The church created a web site for what it believes are errors in the book. While Wright is short on drama, the web site hyperbolically states that the book is "so ludicrous it belongs in a supermarket tabloid". The web site states that British publishers have chosen not to print it "which speaks volumes about their confidence in its factual accuracy". The truth is that British libel laws are so onerous and archaic, that publishers are reticent to publish such a work. While it might not be published in the UK, it is easily available via the Amazon UK web site.

In Going Clear, Wright has created a fair and balanced overview (if such a thing is actually possible) about Scientology. The book has interview material and facts from over 200 current and former members of the Church of Scientology, and takes a historical look of its history, and that of its founder L. Ron Hubbard and successor, current President David Miscavige.

In the introduction, Wright notes that he was drawn to write the book by the questions that many people have about Scientology; such as: what is it that make the religion so alluring? What do its adherents get out of it? Why do popular personalities associate themselves with a faith that is likely to create a kind of public relations martyrdom? He notes that these questions are not unique to Scientology, but that they certainly underscore its story.

As 372 pages covering 3 parts and 11 chapters, Wright is a mesmerizing author that creates a non-fiction spellbinding page-turner. The 4 main characters of the book are Hubbard, Miscavige and actors Tom Cruise and John Travolta.

In chapter 2, the book details the many discrepancies between the legend of L. Ron Hubbard and fact. While Scientologist's may think that Wright has a vengeance against the group, he writes that it is a fact that Hubbard was genuinely a fascinating man. He writes that Hubbard was an explorer, best-selling author and the founder of a worldwide religious movement. At the same time, Wright's research found that the truth is counter to some of the postulated facts about Hubbard's naval career, his miraculous recovery from wartime injuries and overall naval accomplishments.

As to the manipulation of facts, in the final pages of the book, Wrights notes some of Hubbard's medical records do not corroborate his version of the actual events. Some of the naval medals that Hubbard supposedly won were not created until after Hubbard left active service. The supposed Purple Heart medal for being wounded while serving on duty that Hubbard claimed to receive was also different from the Purple Heart medals given out at the time.

In Dianetics: The Modern Science of Mental Health, Hubbard specifically names psychotherapy as being dangerous and impractical. Hubbard felt that other methods of mental science are based on principles that are opposed to the principles of Scientology, and Hubbard had an anathema of psychiatry and psychology until his dying day.

Wright observes that Dianetics arrived at a moment when the aftershocks of World War 2 were still being felt. And that behind the exhilarations of victory, there was immense trauma for millions of Americans. With Dianetics, Hubbard offered a do-it-yourself manual to that claimed to demystify the secrets of the human mind and produce guaranteed results, for free, and that was bound to attract a large audience.

Wright notes that given Hubbard's biography, it would be easy to dismiss Hubbard as a fraud. But that would fail to explain his total absorption in his project. Hubbard would spend the rest of his life elaborating his theory and obsessively construct the intricate bureaucracy design to spread and enshrine his understanding of human behavior.

Wright notes that for all of Hubbard's enormous wealth, he spent much of his time in his ship cabin alone, auditing himself with an E-Meter (the electronic device used Scientology auditing sessions) and developing his spiritual technology. Wright rhetorically notes that while Hubbard may have been grandiose and delusional, if Hubbard was a fraud and a con, why would he bother creating such a system?

As objective as Wright is, he takes no quarter when he details Scientology's approach to children. Hubbard viewed children as adults in small bodies. While they were physically small, Hubbard felt that they were responsible for their own behavior. Young children would be sentenced to virtual prisons for weeks, for minor infractions such as messing up an incoming telex.

In Scientology parlance, such an individual was a suppressive person. One young girl, who was deaf and mute was placed in a locker for a week because Hubbard thought it might cure her deafness.

A large part of the book deals with celebrities and how Scientology sees celebrities as a boon to the church. Wrights notes that Scientology orients itself toward celebrities and by doing so, the church awards famousness a spiritual value. People who seek fame in the entertainment industry will gravitate to Hollywood, where the Scientology Celebrity Center is waiting for them, validating their ambitions and promising a recruits a way in. The church has long pursued a marketing strategy that relies on celebrity endorsements to promote the religion.

Some celebrities prominent in the book are Paul Haggis, Travolta, Nancy Cartwright (famous for being the voice of Bart Simpson) and Tom Cruise. Haggis is an ex-Scientologist, recently leaving the church after nearly 40 years, who is interviewed in the book.

Wright is highly critical of Cruise, who he notes that probably no member of the church derives as much material benefit as Cruise does. Cruise then consequently bears a moral responsibility for the myriad indignities (which the book points out in great detail) inflicted on members of the Sea Organization (a unit of the Church, encompassing its most dedicated members), sometimes directly because of his membership.

Wright concludes with the notion that Scientology wants to be understood as a scientific approach to spiritual enlightenment, but has no grounding in science at all. Serious academic study of the church has to date been constrained by the church's vindictive and litigious reputation. Researchers and academics are terrified by Scientology and reluctant to direct their research into the church. The book observes that compared with other religions, the published literature on Scientology is improvised and clouded by bogus assertions.

In Going Clear: Scientology, Hollywood, and the Prison of Belief, Wright has composed a bombshell of an expose. This is a compelling and engrossing book, thoroughly researched and extensively fact checked. The book is a perfect read for a long flight as it is riveting and fascinating. Wright has a unique ability to keep the narrative flowing and interesting.

But with all that, it is not a Silent Spring, which 50 years ago helped launch the environmental movement. Had the book come out 20 years ago, it is likely that lawsuits from the church would have prevented its release until today. Yet the passive public has a short memory and Scientology has believers that sign billion year contracts with the church. As salacious as every page of this book is, one is hard-pressed to envision the church of Scientology contracting or being hurt in any way by this book.

Ben Rothke is the author of Computer Security: 20 Things Every Employee Should Know.

You can purchase Going Clear: Scientology, Hollywood, and the Prison of Belief from amazon.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

benrothke writes "In its first week, Going Clear: Scientology, Hollywood, and the Prison of Belief was #3 on the New York Times Best Sellers list and will likely be #1 soon. The fact that the book is in print is somewhat miraculous given the voracious appetite Scientology has for litigation. It is the first time that such an expose could have been written and found such wide-scale reading. An interesting analysis of this fact is found in Why the Media Is No Longer Afraid of Scientology by Kim Masters. But as mesmerizing an expose as the book is, I doubt that this will be more than a speed bump to Scientology's growth and fund raising." Keep reading to be clear about what Ben has to say. Going Clear: Scientology, Hollywood, and the Prison of Belief author Lawrence Wright pages 448 publisher Knopf rating 10/10 reviewer Ben Rothke ISBN 978-0307700667 summary Compelling and engrossing book, thoroughly researched and extensively fact checked Scientology has long called anyone who has written against them as having a vendetta. It calls former adherents heretics with a vendetta. But after such hyperbole, it is illogical and questionable that Pulitzer Prize winning author Lawrence Wright would risk a distinguished career to write an expose simply based on those with a vendetta. But to cover all bases, including those of litigation, the books nearly 50 pages of notes puts Wright and his publisher in a strongly defensible position in case the church decided to litigate.

Wright is aware of the dangers of writing against the church, as he details the story of Paulette Cooper. Cooper, whose 1971 book The Scandal of Scientology, was sued nearly 20 times by the church and harassed for years due to its contents. The book details that an FBI raid a few years later found a Scientology file about Operation Freakout, which had the purpose of getting Cooper in a mental institution or jail.

The book places Church President David Miscavige is a negative light (over 20 people in the book accuse him of abuse, including being kicked, punched, slapped, choked and more). Karin Pouw, a Scientology spokeswoman states that details about Miscavige are false and defamatory.

The church created a web site for what it believes are errors in the book. While Wright is short on drama, the web site hyperbolically states that the book is "so ludicrous it belongs in a supermarket tabloid". The web site states that British publishers have chosen not to print it "which speaks volumes about their confidence in its factual accuracy". The truth is that British libel laws are so onerous and archaic, that publishers are reticent to publish such a work. While it might not be published in the UK, it is easily available via the Amazon UK web site.

In Going Clear, Wright has created a fair and balanced overview (if such a thing is actually possible) about Scientology. The book has interview material and facts from over 200 current and former members of the Church of Scientology, and takes a historical look of its history, and that of its founder L. Ron Hubbard and successor, current President David Miscavige.

In the introduction, Wright notes that he was drawn to write the book by the questions that many people have about Scientology; such as: what is it that make the religion so alluring? What do its adherents get out of it? Why do popular personalities associate themselves with a faith that is likely to create a kind of public relations martyrdom? He notes that these questions are not unique to Scientology, but that they certainly underscore its story.

As 372 pages covering 3 parts and 11 chapters, Wright is a mesmerizing author that creates a non-fiction spellbinding page-turner. The 4 main characters of the book are Hubbard, Miscavige and actors Tom Cruise and John Travolta.

In chapter 2, the book details the many discrepancies between the legend of L. Ron Hubbard and fact. While Scientologist's may think that Wright has a vengeance against the group, he writes that it is a fact that Hubbard was genuinely a fascinating man. He writes that Hubbard was an explorer, best-selling author and the founder of a worldwide religious movement. At the same time, Wright's research found that the truth is counter to some of the postulated facts about Hubbard's naval career, his miraculous recovery from wartime injuries and overall naval accomplishments.

As to the manipulation of facts, in the final pages of the book, Wrights notes some of Hubbard's medical records do not corroborate his version of the actual events. Some of the naval medals that Hubbard supposedly won were not created until after Hubbard left active service. The supposed Purple Heart medal for being wounded while serving on duty that Hubbard claimed to receive was also different from the Purple Heart medals given out at the time.

In Dianetics: The Modern Science of Mental Health, Hubbard specifically names psychotherapy as being dangerous and impractical. Hubbard felt that other methods of mental science are based on principles that are opposed to the principles of Scientology, and Hubbard had an anathema of psychiatry and psychology until his dying day.

Wright observes that Dianetics arrived at a moment when the aftershocks of World War 2 were still being felt. And that behind the exhilarations of victory, there was immense trauma for millions of Americans. With Dianetics, Hubbard offered a do-it-yourself manual to that claimed to demystify the secrets of the human mind and produce guaranteed results, for free, and that was bound to attract a large audience.

Wright notes that given Hubbard's biography, it would be easy to dismiss Hubbard as a fraud. But that would fail to explain his total absorption in his project. Hubbard would spend the rest of his life elaborating his theory and obsessively construct the intricate bureaucracy design to spread and enshrine his understanding of human behavior.

Wright notes that for all of Hubbard's enormous wealth, he spent much of his time in his ship cabin alone, auditing himself with an E-Meter (the electronic device used Scientology auditing sessions) and developing his spiritual technology. Wright rhetorically notes that while Hubbard may have been grandiose and delusional, if Hubbard was a fraud and a con, why would he bother creating such a system?

As objective as Wright is, he takes no quarter when he details Scientology's approach to children. Hubbard viewed children as adults in small bodies. While they were physically small, Hubbard felt that they were responsible for their own behavior. Young children would be sentenced to virtual prisons for weeks, for minor infractions such as messing up an incoming telex.

In Scientology parlance, such an individual was a suppressive person. One young girl, who was deaf and mute was placed in a locker for a week because Hubbard thought it might cure her deafness.

A large part of the book deals with celebrities and how Scientology sees celebrities as a boon to the church. Wrights notes that Scientology orients itself toward celebrities and by doing so, the church awards famousness a spiritual value. People who seek fame in the entertainment industry will gravitate to Hollywood, where the Scientology Celebrity Center is waiting for them, validating their ambitions and promising a recruits a way in. The church has long pursued a marketing strategy that relies on celebrity endorsements to promote the religion.

Some celebrities prominent in the book are Paul Haggis, Travolta, Nancy Cartwright (famous for being the voice of Bart Simpson) and Tom Cruise. Haggis is an ex-Scientologist, recently leaving the church after nearly 40 years, who is interviewed in the book.

Wright is highly critical of Cruise, who he notes that probably no member of the church derives as much material benefit as Cruise does. Cruise then consequently bears a moral responsibility for the myriad indignities (which the book points out in great detail) inflicted on members of the Sea Organization (a unit of the Church, encompassing its most dedicated members), sometimes directly because of his membership.

Wright concludes with the notion that Scientology wants to be understood as a scientific approach to spiritual enlightenment, but has no grounding in science at all. Serious academic study of the church has to date been constrained by the church's vindictive and litigious reputation. Researchers and academics are terrified by Scientology and reluctant to direct their research into the church. The book observes that compared with other religions, the published literature on Scientology is improvised and clouded by bogus assertions.

In Going Clear: Scientology, Hollywood, and the Prison of Belief, Wright has composed a bombshell of an expose. This is a compelling and engrossing book, thoroughly researched and extensively fact checked. The book is a perfect read for a long flight as it is riveting and fascinating. Wright has a unique ability to keep the narrative flowing and interesting.

But with all that, it is not a Silent Spring, which 50 years ago helped launch the environmental movement. Had the book come out 20 years ago, it is likely that lawsuits from the church would have prevented its release until today. Yet the passive public has a short memory and Scientology has believers that sign billion year contracts with the church. As salacious as every page of this book is, one is hard-pressed to envision the church of Scientology contracting or being hurt in any way by this book.

Ben Rothke is the author of Computer Security: 20 Things Every Employee Should Know.

You can purchase Going Clear: Scientology, Hollywood, and the Prison of Belief from amazon.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

Frequent contributor Bennett Haselton writes "With the announcement of Verizon's "six strikes plan" for movie pirates (which includes reporting users to the RIAA and MPAA), and content companies continuing to sue users en masse for peer-to-peer downloads, I think it's inevitable that we'll see the rise of p2p software that proxifies your downloads through other users. In this model, you would not only download content from other users, but you also use other users' machines as anonymizing proxies for the downloads, which would make it impossible for third parties to identify the source or destination of the file transfer. This would hopefully put an end to the era of movie studios subpoenaing ISPs for the identities of end users and taking those users to court." Read below for the rest of Bennett's thoughts.

Now, I'm not advocating the creation of software that enables piracy. And I don't mean that in a nudge-wink kind of a way, I'm serious: I think people should reward movie studios for making content that they like, if only because that means studios will make more of that type of content. For my last cross-country flight I paid an honest-to-God four dollars to download a movie from Amazon Unbox to watch on the plane, even though I fondly like to think of myself as smart enough that I could have figured out how to find and download the movie for free. (Well, not all that smart; the movie was Lockout.)

However, the idea of users anonymizing each others' downloads is so elementary, that I literally mean it's inevitable that we will see the rise of such software. Whether I'm in favor of it or not, it's going to happen. In fact, under certain assumptions, there's really only one logical direction that it can evolve in.

First, some background. Under the current BitTorrent protocol -- with no built-in support for anonymization -- some server S makes a large file available for download. When the first downloader, say user D1, requests a copy of the file, they have to begin the process of downloading it from S. But when the next downloader, say user D2, requests a copy of the same file while user D1 is still downloading, the BitTorrent server S tells D2 to start downloading the file from D1 instead of from S directly. (D1 is required at this point to share out the file for download, in order to earn enough "credits" to continue downloading from S.) Subsequent downloaders are similarly told to download from other downloaders instead of from the original server S. In this way, the server S avoids incurring massive bandwidth charges (since S only actually served the file one time), and each user on average only has to share out the file once in return for downloading it themselves.

Note that this still means that in order to initiate the download, the server S has to serve out the whole file at least once, to the first downloader -- and if the file is being distributed without the copyright owner's permission, then the operators of server S can be taken to court. This legal pressure was the reason that the Pirate Bay switched from serving BitTorrent files to serving magnet links, which enable users to download content purely from each other, without the Pirate Bay ever actually serving the content themselves. But with both BitTorrent and magnet links, users who are downloading content from other users, can see those other users' IP addresses -- and they know that those other users are serving the content from files stored on their own hard drives. This means that if you're the copyright owner of that content, you can subpoena the identities of the users behind those IP addresses, and taken them to court for unauthorized possession and distribution of copyrighted material.

So what would a protocol look like with built-in support for anonymization? In my first draft of an idea, I thought that each download could take place using one intermediate user as a proxy, so that instead of server S telling D2 to download from D1, the server would tell D2 to use download D3 as a proxy, and tell D3 to proxy the connection from D1. (As with BitTorrent, the downloader D3 would be required to allow their machine to be used as a proxy, in order to earn credits to continue with their own download.) So D1 would not be able to see the IP address of user D2 downloading from them, and D2 would not be able to see the IP address of user D1 that they were downloading from. Both of them would be able to see the IP address of user D3 which is acting as the proxy between them, but as long as it's not against the law to simply proxy a connection for someone else, that would not be grounds to subpoena the user D3's identity. And D3 would be able to see the IP address of D1 and D2, but if the D1 and D2 are communicating using a shared encryption key, then D3 would have no idea what content is flowing between D1 and D2, even as it proxies the connection between them. So even if one of D1, D2 or D3 were an "adversary" (i.e. a copyright holder intent on suing illegal file sharers), none of the three would be able to see the IP address of another user that they knew was either downloading particular content, or serving it out.

Of course you could also argue that if D3 is among the users that server S is making available to others as an anonymizing proxy, then that constitutes proof that D3 must be downloading something else from S (otherwise, D3 wouldn't need to earn credits by acting as an anonymizing proxy), and if either D1 or D2 is an adversary, they can see D3's IP address and reason that D3 must be guilty of some copyright violation. Similarly, if D3 is the adversary, they can see D1 and D2's IP addresses and reason that both of them are probably guilty of some copyright infraction, even if D3 can't actually see what they're trading. Basically, anybody could be considered "guilty by association" simply by virtue of being in the community of users being coordinated by server S. But (1) that accusation could be deflected if some of the files being served by S were in fact legal and being distributed with the copyright holder's permission; and (2) in any case, the Digital Millennium Copyright Act requires you to claim that your specific copyrighted content is being distributed by a user, before you can unmask that user's identity; it's not enough to claim that the user is part of a network that distributes "some" copyrighted content illegally. D3 may be proxying a connection between D1 and D2 in order to earn credits so that D3 can download some content for themselves, but even though D1 and D2 can both see D3's IP address, there's no way for them to know what D3 could be downloading.

Unfortunately, this three-user-chain idea is not secure, because an adversary could still create a large number of users co-ordinated through server S, and sooner or later, a chain would arise where both the proxy and the downloader controlled by the adversary, and at that point, they would know the IP address of the user serving out the copyrighted content. In other words, eventually you'll get a situation where D2 is downloading content from D1 by going through proxy D3 -- but where D2 and D3 are both controlled by the adversary. So D2 knows the content that's being downloaded via D3, and D3 knows the IP address of D1 that's actually serving out the content -- at which point they can subpoena the identity of user D1, and sue them.

So consider this idea instead: When user D1 sends a request to server S to download a file, server S gives them the IP address of another user, D2, from which they can download the file. Now, 40% of the time, user D2 actually does have the file on their hard drive and is serving it to user D1, with no proxying. The other 60% of the time, user D2 is told by S to proxy the connection from D1 and connect to a third user, D3. Now in 40% of these cases, D3 actually does have the file and is serving it out directly; the other 60% of the time, D3 is proxying the connection for yet another user, D4...

So you end up with chains of varying length, with longer chains having a progressively smaller probability of forming:

40% of chains will be of length 1 (one user downloads directly from another)
60% x 40% of chains (24%) will be of length 2
60% x 60% x 40% of chains (14.4%) will be of length 3
60% x 60% x 60% x 40% of chains (8.64%) will be of length 4 etc.

These proportions of course sum to 1, and a little math shows that the length of the average chain is 3.5 nodes. The number of downloads in a chain -- the connections between users -- is one less than the number of nodes in the chain, so this means that to complete one download, the content will have to be transferred an average of 2.5 times -- compared to being transferred only once, when one user downloads from another directly. In order to ensure that users contribute enough to the system as they take from it, that means that in order to download a file, users would be required to provide enough "proxying" to support the equivalent of 2.5 full downloads of that same file.

These chains have a useful property: any time you're downloading content "from" another user, there's only a 40% chance that user is serving content off of their own hard drive, and a 60% chance that they're proxying the connection from somewhere else (another node that may in turn be proxying the connection from yet another node, etc.). So even if the adversary controls three nodes D1, D2, and D3, and D1 is downloading from D2 who is downloading from D3 who is downloading from D4 (and D4 is not controlled by the adversary), from the adversary's point of view there's only a 40% chance that D4 is actually originating the content. This is always true no matter how many nodes in the chain the adversary controls -- in the end, if they want to nail someone for serving out copyrighted content, they have to download the content from some node that they don't control, and there will only be a 40% that user is actually serving the content from their hard drive.

And the 40% number was deliberately chosen in order to weaken the adversary's legal grounds for subpoenaing the identity of the user they're downloading from -- even if they can show that they downloaded content from another user's IP address, it's more likely than not that the other user was not actually hosting the content. (Of course, there might be other details in context that render that probability calculation useless. For example, if the server S only links to one downloadable file, then all users coordinated by that server S are presumably downloading that same file, and anybody that server S connects you to, can be presumed guilty of downloading and sharing that file, 40% figure be damned.)

At this point you might also wonder: Why not just connect over a protocol like Tor, which provides secure anonymity for all transactions, and then use BitTorrent or some other file-sharing system on top of that? The answer is that Tor's connection is likely to be much slower, for at least two reasons. First, Tor servers are a limited resource, and the more people use them (especially for large file trading), the slower they are likely to become. (By contrast, in the peer-to-peer proxying model outlined above, every new downloader can also be made to act as a proxy for other users, so additional users don't slow down the system because they contribute as much as they take out of it.) Second, Tor always routes your connection through multiple servers to guarantee secure anonymity, which means it would be slower on average than the variable-length chains described above, where only about 20% of chains are of length 4 or more.

The key difference is that Tor provides true anonymity whereas the protocol above only provides plausible deniability. In high-risk settings where Tor is often used, it would not be acceptable if there were a 40% chance of your IP address being revealed to your adversary. But for file sharing, the 40% figure might be acceptable if it's just low enough to stave off a subpoena. This trade-off makes it possible to use shorter chains, resulting in faster downloads and less total bandwidth consumption.

You also already have the option today of using a VPN service to download files through an anonymous third-party connection, which renders the rest of these issues moot. But users have to jump through several hoops (and pay some money) to set this up as an option, which means that most users will not be using VPNs any time soon, leaving plenty of naive users for the RIAA and MPAA to go after. The use of peer-proxying links would mean that all users downloading through the system would be protected.

At the moment, the major impediment to a peer-proxying system like this would be that the chained downloads would still consume an average of 2.5 as much bandwidth as direct peer-to-peer downloads. Even with today's high-speed connections, this increase in inconvenience is great enough that some users might just prefer to use plain old BitTorrent to download files directly from peers, and run the (admittedly small) risk of getting in trouble. But as bandwidth speeds continue to grow literally exponentially, eventually the difference in inconvenience will be so small, that users would be foolish not to use proxified downloads if it provided free legal protection.

Note that the viability of this system does depend on the ISP's attitude towards it. In particular, if your ISP only goes after pirates because of legal pressure from content holders, then if the ISP's users are using this peer-proxying protocol instead of a direct download protocol like BitTorrent, then the ISP can quite truthfully claim that they don't have any hard evidence to disconnect any particular users or turn over their identities (because the ISP doesn't know which users are actually storing pirated files and which users are just acting as proxies). On the other hand, if your ISP sincerely wants to stop piracy because your ISP is also a content company (Comcast, for example), then they might also try to squelch the use of any protocol that enables piracy, even if they can't prove that any particular users are using it for anything illegal. Thus Comcast might try to slow the use of the peer-proxy protocol. But in that case they could be forced by Net Neutrality regulations to stop throttling it, in the same way that the FCC ordered Comcast to stop throttling BitTorrent.

As long as those conditions hold true -- content owners continue cracking down on file sharers, but proxying remains legal and bandwidth keeps getting cheaper, and ISPs are restrained from blocking the protocols themselves -- I think that p2p will have to evolve into something like the chained-download system described above, to provide plausible deniability to users, without resorting to the long chains (and subsequently slower downloads) provided by full-anonymity systems like Tor.

But again, I'm just saying it's inevitable, not that it's right. I actually do wish that people would pay the studios' prices for the movies that they watch; part of it is that I think most blockbusters are actually pretty good and deserve to make money. When you refuse to pay for movies, you're casting a vote against fun, big-budget movies that are made for the purpose of getting lots of people to come see them and enjoy them, and instead voting in favor of excruciatingly boring low-budget films that are made primarily so that the director could whine that the cheese-puff-snarfing American public wouldn't know great art if it bit them on their big bloated behind and subsequently didn't even buy enough tickets for the director to pay off the lien he took out on his Honda Civic to get the movie produced. Forget prosecution and civil suits; just make movie pirates sit through The Brown Bunny.

Dupple writes "After settling with the FTC, Google is under pressure again regarding user privacy. From the BBC: 'A group of Apple's Safari web browser users has launched a campaign against Google over privacy concerns. They claim that Google bypassed Safari's security settings to install cookies which tracked their movements on the internet. Between summer 2011 and spring 2012 they were assured by Google this was not the case, and believed Safari's settings to be secure. Judith Vidal-Hall, former editor of Index On Censorship magazine, is the first person in the UK to begin legal action. 'Google claims it does not collect personal data but doesn't say who decides what information is "personal,"' she said. 'Whether something is private or not should be up to the internet surfer, not Google. We are best placed to decide, not them.'"

SternisheFan writes "Airline safety inspectors have found no faults with the battery used on Boeing's 787 Dreamliner, Japan's transport ministry has said. The battery was initially considered the likely source of problems on 787s owned by two Japanese airlines. The world's entire fleet of 50 787s has been grounded while inspections are carried out. Attention has now shifted to the electrical system that monitors battery voltage, charging and temperature. Transport ministry official Shigeru Takano said 'we have found no major quality or technical problem' with the lithium-ion batteries. Shares in GS Yuasa, which makes the batteries, jumped 5% on the news. 'We are looking into affiliated parts makers,' he said. 'We are looking into possibilities.'"

The recipient of nineteen honorary doctorates, and honors from three U.S. presidents, Ray Kurzweil's accolades are almost too many to list. A prolific inventor, Kurzweil created the first CCD flatbed scanner, the first omni-font optical character recognition, the first print-to-speech reading machine for the blind, the first text-to-speech synthesizer, and the first music synthesizer capable of recreating the grand piano and other orchestral instruments. His book, The Singularity Is Near, was a New York Times best seller. and is considered one of the best books about futurism and transhumanism ever written. Mr. Kurzweil was hired by Google in December as Director of Engineering to "work on new projects involving machine learning and language processing." He has agreed to take a short break from creating and predicting the future in order to answer your questions. As usual, you're invited to ask as many questions as you'd like, but please divide them, one question per post.

The recipient of nineteen honorary doctorates, and honors from three U.S. presidents, Ray Kurzweil's accolades are almost too many to list. A prolific inventor, Kurzweil created the first CCD flatbed scanner, the first omni-font optical character recognition, the first print-to-speech reading machine for the blind, the first text-to-speech synthesizer, and the first music synthesizer capable of recreating the grand piano and other orchestral instruments. His book, The Singularity Is Near, was a New York Times best seller. and is considered one of the best books about futurism and transhumanism ever written. Mr. Kurzweil was hired by Google in December as Director of Engineering to "work on new projects involving machine learning and language processing." He has agreed to take a short break from creating and predicting the future in order to answer your questions. As usual, you're invited to ask as many questions as you'd like, but please divide them, one question per post.

theodp writes "On Saturday, questions for MIT's Aaron Swartz investigation were posted on Slashdot with the hope that MIT'ers might repost some to the MIT Swartz Review site. So it's good to see that MIT's Hal Abelson, who is leading the analysis of MIT's involvement in the matter, is apparently open to this workaround to the ban on questions from outsiders. In fact, on Sunday Abelson himself reposted an interesting question posed by Boston College Law School Prof. Sharon Beckman: 'What, if anything, did MIT learn from its involvement in the federal prosecution of its student David LaMacchia back in 1994?' Not much, it would appear. LaMacchia, an apparent student of Abelson's whose defense team included Beckman, was indicted in 1994 and charged with the 'piracy of an estimated million dollars' in business and entertainment computer software after MIT gave LaMacchia up to the FBI. LaMacchia eventually walked from the charges, thanks to what became known as the LaMacchia Loophole, which lawmakers took pains to close. 'MIT collaborated with the FBI to wreck LaMacchia's life,' defense attorney Harvey Silverglate charged in 1995 after a judge dismissed the case. 'I hope that this case causes a lot of introspection on the part of MIT's administration. Unfortunately, I doubt it will.'"

Now that unlocking a new phone is under many circumstances illegal in the U.S. (!), Digital Trends has collected a useful set of answers outlining just what that means. As they put it, a "quick guide to answer all your why, how, and WTF questions." Among them, some explanation of the rule-making process, the reasoning that led to the end to the unlocking exception to the DMCA (including the Ninth Circuit's 2010 Vernor v. Autodesk decision), and illustrations of situations in which it is not illegal to unlock your phone.

rtfa-troll writes "The Register tells us that Microsoft has begun squabbling with PC manufacturers over the reasons behind the failure of Windows 8. Microsoft is 'frustrated with major OEMs who didn't build nearly enough touch systems.' PC manufacturers have hit back, saying that they 'would have been saddled with the costs of a huge pile of unsold units,' claiming that customers actually avoided higher-end touch products which were available and instead bought lower-end, cheaper laptops while 'Microsoft is not blaming itself for' the failure of its own touch device, the Surface RT. The PC manufacturers' claims that touch is the problem seem to be backed by reviews, and some educational rants from users and opinions from user interface design experts. However, Microsoft sees this differently. Microsoft is planning to strike back at the PC vendors in February with Surface Pro; with a shorter battery life and much heavier than a normal tablet, this is being seen as a direct competitor to traditional laptops. By using its desktop operating system franchise as a lever, Microsoft will be able to enter the lower-specification end of the laptop market with a cost advantage which make make life difficult for former partners such as HP and Dell. We've discussed previously how some PC manufactures such as Dell have failed in generational change whilst others have diversified to survive market changes; Samsung with Android and the (still) bestselling Chromebook. ASUS with their successful Nexus tablets. We also discussed the ergonomic problems which are claimed to make touch screens unsuitable for PC use."

rtfa-troll writes "The Register tells us that Microsoft has begun squabbling with PC manufacturers over the reasons behind the failure of Windows 8. Microsoft is 'frustrated with major OEMs who didn't build nearly enough touch systems.' PC manufacturers have hit back, saying that they 'would have been saddled with the costs of a huge pile of unsold units,' claiming that customers actually avoided higher-end touch products which were available and instead bought lower-end, cheaper laptops while 'Microsoft is not blaming itself for' the failure of its own touch device, the Surface RT. The PC manufacturers' claims that touch is the problem seem to be backed by reviews, and some educational rants from users and opinions from user interface design experts. However, Microsoft sees this differently. Microsoft is planning to strike back at the PC vendors in February with Surface Pro; with a shorter battery life and much heavier than a normal tablet, this is being seen as a direct competitor to traditional laptops. By using its desktop operating system franchise as a lever, Microsoft will be able to enter the lower-specification end of the laptop market with a cost advantage which make make life difficult for former partners such as HP and Dell. We've discussed previously how some PC manufactures such as Dell have failed in generational change whilst others have diversified to survive market changes; Samsung with Android and the (still) bestselling Chromebook. ASUS with their successful Nexus tablets. We also discussed the ergonomic problems which are claimed to make touch screens unsuitable for PC use."

rtfa-troll writes "The Register tells us that Microsoft has begun squabbling with PC manufacturers over the reasons behind the failure of Windows 8. Microsoft is 'frustrated with major OEMs who didn't build nearly enough touch systems.' PC manufacturers have hit back, saying that they 'would have been saddled with the costs of a huge pile of unsold units,' claiming that customers actually avoided higher-end touch products which were available and instead bought lower-end, cheaper laptops while 'Microsoft is not blaming itself for' the failure of its own touch device, the Surface RT. The PC manufacturers' claims that touch is the problem seem to be backed by reviews, and some educational rants from users and opinions from user interface design experts. However, Microsoft sees this differently. Microsoft is planning to strike back at the PC vendors in February with Surface Pro; with a shorter battery life and much heavier than a normal tablet, this is being seen as a direct competitor to traditional laptops. By using its desktop operating system franchise as a lever, Microsoft will be able to enter the lower-specification end of the laptop market with a cost advantage which make make life difficult for former partners such as HP and Dell. We've discussed previously how some PC manufactures such as Dell have failed in generational change whilst others have diversified to survive market changes; Samsung with Android and the (still) bestselling Chromebook. ASUS with their successful Nexus tablets. We also discussed the ergonomic problems which are claimed to make touch screens unsuitable for PC use."

rtfa-troll writes "The Register tells us that Microsoft has begun squabbling with PC manufacturers over the reasons behind the failure of Windows 8. Microsoft is 'frustrated with major OEMs who didn't build nearly enough touch systems.' PC manufacturers have hit back, saying that they 'would have been saddled with the costs of a huge pile of unsold units,' claiming that customers actually avoided higher-end touch products which were available and instead bought lower-end, cheaper laptops while 'Microsoft is not blaming itself for' the failure of its own touch device, the Surface RT. The PC manufacturers' claims that touch is the problem seem to be backed by reviews, and some educational rants from users and opinions from user interface design experts. However, Microsoft sees this differently. Microsoft is planning to strike back at the PC vendors in February with Surface Pro; with a shorter battery life and much heavier than a normal tablet, this is being seen as a direct competitor to traditional laptops. By using its desktop operating system franchise as a lever, Microsoft will be able to enter the lower-specification end of the laptop market with a cost advantage which make make life difficult for former partners such as HP and Dell. We've discussed previously how some PC manufactures such as Dell have failed in generational change whilst others have diversified to survive market changes; Samsung with Android and the (still) bestselling Chromebook. ASUS with their successful Nexus tablets. We also discussed the ergonomic problems which are claimed to make touch screens unsuitable for PC use."

rtfa-troll writes "The Register tells us that Microsoft has begun squabbling with PC manufacturers over the reasons behind the failure of Windows 8. Microsoft is 'frustrated with major OEMs who didn't build nearly enough touch systems.' PC manufacturers have hit back, saying that they 'would have been saddled with the costs of a huge pile of unsold units,' claiming that customers actually avoided higher-end touch products which were available and instead bought lower-end, cheaper laptops while 'Microsoft is not blaming itself for' the failure of its own touch device, the Surface RT. The PC manufacturers' claims that touch is the problem seem to be backed by reviews, and some educational rants from users and opinions from user interface design experts. However, Microsoft sees this differently. Microsoft is planning to strike back at the PC vendors in February with Surface Pro; with a shorter battery life and much heavier than a normal tablet, this is being seen as a direct competitor to traditional laptops. By using its desktop operating system franchise as a lever, Microsoft will be able to enter the lower-specification end of the laptop market with a cost advantage which make make life difficult for former partners such as HP and Dell. We've discussed previously how some PC manufactures such as Dell have failed in generational change whilst others have diversified to survive market changes; Samsung with Android and the (still) bestselling Chromebook. ASUS with their successful Nexus tablets. We also discussed the ergonomic problems which are claimed to make touch screens unsuitable for PC use."

theodp writes "Late Friday, Violet Blue reports, the U.S. Sentencing Commission website was hacked and government files distributed by Anonymous in 'Operation Last Resort.' The U.S. Sentencing Commission sets guidelines for sentencing in United States Federal courts, and on the defaced ussc.gov website Anonymous cited the recent suicide of Aaron Swartz as 'a line that has been crossed.' Calling the launch of its new campaign a "warhead," Anonymous vowed, 'This time there will be change, or there will be chaos.'" Adds reader emil: "Anonymous has not specified exactly what files they have obtained. The various files were named after Supreme Court judges. At a regular interval commencing today, Anonymous will choose one media outlet and supply them with heavily redacted partial contents."

FunPika writes "Jonathan Coulton, who is known for songs such as "Code Monkey", is claiming that his cover of "Baby Got Back" was used without permission on Glee, a television show aired by Fox Broadcasting Company. When the Glee version appeared on YouTube last week, Coulton suspected that it sounded similar to his cover, and several of his fans confirmed this by analyzing the two tracks. Despite Coulton contacting Fox, they continued with airing the episode and have placed the song on sale in iTunes."

hypnosec writes "Microsoft upped its security ante with Address Space Layout Randomization (ASLR) in Windows 7 and Windows 8, but it seems this mechanism to prevent hackers from jumping to a known memory location can be bypassed. A hacker has released a brilliant, yet simple trick to circumvent this protection. KingCope, a hacker who released several exploits targeting MySQL in December, has detailed a mechanism through which the ASLR of Windows 7, Windows 8 and probably other operating systems can be bypassed to load a DLL file with malicious instructions to a known address space."

Trailrunner7 writes "Ten years ago today, on Jan. 25, 2003, a new worm took the Internet by storm, infecting thousands of servers running Microsoft's SQL Server software every minute. The worm, which became known as SQL Slammer, eventually became the fastest-spreading worm ever and helped change the way Microsoft approached security and reshaped the way many researchers handled advisories and exploit code. This is the inside story of SQL Slammer, told by David Litchfield, the researcher who found the bug and wrote the exploit code that was later taken by Slammer's authors and used as part of the worm."

redletterdave writes "On Friday morning, BitTorrent launched the alpha test of a new, free public service called BitTorrent Sync, which allows users to securely back up and sync files over the Web using BitTorrent's platform. Unlike competing services such as Box or Dropbox, BitTorrent Sync doesn't store files on remote servers (which means that no third party has access to one's files), and also has no storage limits other than what your devices can hold."

judgecorp writes "China's Lenovo could take over RIM, according to Lenovo chief financial officer Wong Mai Ming, speaking at the World Economic Forum in Davos Switzerland. The Canadian authorities might object, and so might BlackBerry users, after what ultimately happened to the ThinkPad brand under Lenovo's guidance. Canadian Finance Minister Jim Flaherty said, 'It’s something that we would look carefully at. We always look at foreign investment in Canada as a cause for reflection. We have to look at intelligence concerns.'"

Nerval's Lobster writes "Twitter has rolled out Vine, a free app for iOS devices that allows users to shoot and post short videos. Twitter's strategic focus on brevity—the company has long resisted calls to lengthen Tweets beyond the current 140-character limit—extends to Vine videos, which can only be six seconds in length. 'Posts on Vine are about abbreviation — the shortened form of something larger,' Dom Hoffman, Vine's co-founder and general manager, wrote in a blog posting. 'They're little windows into the people, settings, ideas and objects that make up your life.' It's easy to see the Vine acquisition as part of Twitter's larger push into multimedia. The company launched a muscled-up photo service Dec. 10, complete with Instagram-style filters and editing tools. That photo launch came on the heels of an escalating battle with Instagram, the Facebook subsidiary, which decided to disable photo integration with Twitter; that same month, Yahoo also decided to jump into the fray with a new Flickr app for iPhone, complete with special filters and the ability to post images to various social networks."

John "Jack" R. Horner is the Curator of Paleontology at the Museum of the Rockies, adjunct curator at the National Museum of Natural History, and one of the most famous paleontologists in the world. Known in the scientific community for his research on dinosaur growth and whether or not some species lived in social groups, he is most famous for his work on Jurassic Park and being the inspiration for the character of Alan Grant. Horner caused quite a stir with the publication of his book, How to Build a Dinosaur: Extinction Doesn't Have to Be Forever, in which he proposes creating a "chickensaurus" by genetically "nudging" the DNA of a chicken. Jack has agreed to step away from the genetics lab and put down the bones in order to answer your questions. As usual, you're invited to ask as many questions as you'd like, but please divide them, one question per post.

Nerval's Lobster writes "Wolfram Alpha has upgraded its Personal Analytics for Facebook module, giving users the ability to dissect their own social-networking data in new ways. Wolfram Alpha's creators first launched its Facebook data-mining module in August 2012. Users could leverage the platform's computational abilities to analyze and visualize their weekly distribution of Facebook posts, types of posts (photos, links, status updates), weekly app activity, frequency of particular words in posts, and more. This latest update isn't radical, but it does offer some interesting new features, including added color coding for 'interesting' friend properties, including relationship status, age, sex, and so on; users can also slice their network data by metrics such as location and age." Wolfram users could also use some of that new site-specific searching power to come up with some unsavory results.

Zothecula writes "NASA and the Canadian Space Agency (CSA) have begun practicing satellite refueling in space on a test bed outside the International Space Station (ISS). In a series of tests that started on January 14 and are scheduled to continue until the 25th, the two space agencies are using the Robotic Refueling Module (RRM) and Canada's Special Purpose Dexterous Manipulator, or Dextre, robot to carry out simulated refueling operations. The purpose of these tests is to develop refueling methods aimed at extending the life of satellites and reducing the amount of space debris orbiting the Earth."

An anonymous reader writes "The Security Ledger writes that the expulsion of Ahmed Al-Khabaz, a 20-year-old computer sciences major at Dawson College in Montreal, has exposed a yawning culture gap between academic computer science programs and the contemporary marketplace for software engineering talent. In an opinion piece in the Montreal Gazette on Tuesday, Dawson computer science professor Alex Simonelis said his department forbids hacking as an 'extreme example' of 'behavior that is unacceptable in a computing professional.' And, in a news conference on Tuesday, Dawson's administration stuck to that line, saying that Al-Khabaz's actions show he is 'no longer suited for the profession.' In the meantime, Al-Khabaz has received more than one job offer from technology firms, including Skytech, the company that makes Omnivox. Chris Wysopal, the CTO of Veracode, said that the incident shows that 'most computer science departments are still living in the pre-Internet era when it comes to computer security.' 'Computer Science is taught in this idealized world separate from reality. They're not dealing with the reality that software has to run in a hostile environment,' he said. 'Teaching students how to write applications without taking into account the hostile environment of the Internet is like teaching architects how to make buildings without taking into account environmental conditions like earthquakes, wind and rain,' Wysopal said."

Titus Andronicus writes "fuse-exfat, a GPLv3 implementation of the exFAT file system for Linux, FreeBSD, and OS X, has reached 1.0 status, according to an announcement from Andrew Nayenko, the primary developer. exFAT is a file system designed for sneaker-netting terabyte-scale files and groups of files on flash drives and memory cards between and among Windows, OS X, and consumer electronics devices. It was introduced by Microsoft in late 2006. Will fuse-exfat cut into Microsoft's juicy exFAT licensing revenue? Will Microsoft litigate fuse-exfat's developers and users into patent oblivion? Will there be a DKMS dynamic kernel module version of the software, similar to the ZFS on Linux project? All that remains to be seen. ReadWrite, The H, and Phoronix cover the story."

judgecorp writes "The latest Google Transparency Report, which tallies the number of times personal data is requested from Google, shows that governments are becoming more inquisitive than ever. Requests for user data have gone up by 70 percent since Google started these reports in 2009 — but the report shows Google is getting better at saying no: in 2009 it complied — fully or partially — with 76 percent of requests, and that figure is now down to 66 percent." This report is the first to feature requests broken down by the legal process used.

jrepin wrote in with a link to an article about the steps being taken toward a Qt5 based KDE 5 and Plasma Workspaces 2. From the article: "KDE's Next Generation user interfaces will run on top of Qt5. On Linux, they will run atop Wayland or Xorg as display server. The user interfaces move away from widget-based X11 rendering to OpenGL. Monolithic libraries are being split up, inter-dependencies removed, and portability and dependencies cut by stronger modularization. For users, this means higher quality graphics, more organic user interfaces and availability of applications on a wider range of devices. Developers will find an extensive archive of high-quality, libraries and solutions on top of Qt."

An anonymous reader writes "The Arch Linux distribution has been modified to run off the FreeBSD 9.0 kernel as an alternative to using Linux. The developer of Arch BSD explained his reasoning as enjoying FreeBSD while also liking the Arch Linux philosophy of a 'fast, lightweight, optimized distro,' so he sought to combine the two operating systems to have FreeBSD at its core while being encircled by Arch. The Arch BSD initiative is similar to Debian GNU/kFreeBSD."

Dangerous_Minds writes "Recently, Slashdot posted about how cloud storage company Mega was 'riddled' with security holes. Freezenet points out that Mega has issued a response to some of these criticisms including one which criticized its use of SSL. Mega responded saying that if you could break SSL, you could break things much more interesting than Mega."

An anonymous reader writes with more news about the no-poach agreements that seemed to plague tech companies. From the article: "Steve Jobs threatened patent litigation if Palm wouldn't agree to stop hiring Apple employees, says former Palm CEO Edward Colligan in a statement dated August 7th, 2012. The allegation is backed up by a trove of recently-released evidence that shows just how deeply Silicon Valley's no-hire agreements pervaded in the mid-2000s. Apple, Google, Intel, and others are the focus of a civil lawsuit into the 'gentleman's agreements,' in which affected employees are fighting for class action status and damages from resulting lost wages, potentially reaching into the hundreds of millions of dollars."

TrueSatan writes "Andrew Auernheimer doesn't appear suicidal, no thanks to U.S. prosecutors, yet he has been under attack for his act of altering an API URL that revealed a set of user data and posting details of same. 'In June of 2010 there was an AT&T webserver on the open Internet. There was an API on this server, a URL with a number at the end. If you incremented this number, you saw the next iPad 3G user email address. I thought it was egregiously negligent for AT&T to be publishing a complete target list of iPad 3G owners, and I took a sample of the API output to a journalist at Gawker.' Auernheimer has been under investigation from that point onward, with restrictions on his freedom and ability to earn a living that are grossly disproportionate to any perceived crime. This is just as much a case of legislative overreach and the unfettered power of prosecutors as was Swartz's case."

adeelarshad82 writes "According to Microsoft, the Surface Windows 8 Pro will be available for purchase on Feb. 9 in the U.S. and Canada. As anticipated, the Surface Pro will be slightly thicker than the Surface with Windows RT, and will weigh about two pounds. The tablet is powered with an Intel Core i5 processor and 4GB of memory. It also includes an 802.11 a/b/g/n dual band Wi-Fi, a stylus for pressure-sensitive input, dual 720p HD webcams, a full-sized USB 3.0 port, microSDXC slot, and mini DisplayPort. Since the Surface Pro runs Windows 8 Pro, it will work with your corporate infrastructure, as well as any older apps that you used on Windows XP to 7. In terms of pricing, the 64GB version will cost $899 while the 128GB will set you back by $999."