The title of this article seems a little deceptive to me. Not that I have a particular fondness for some Chinese router company, but I think this should have been titled "Competitor: Huawei Routers Riddled With Vulnerabilities".
Judging from the title and summary, you'd think that Nexus 7s were sealed in clamshell packaging, where are universally hated. Instead, these people are complaining that the Nexus 7 box is sealed with two pieces of tape and the device itself is in an anti-static bag (which you don't need to cut open). You don't even need a knife to get through the tape -- a simple key will do. This story is much ado about nothing.
Apple didn't make it, so the packaging sucks. It's a universal truth (among apple customers).
depending on shipping costs, that's not/that/ much of a markup.
I ordered from element 14, and I paid $45 after tax/shipping.
AND it's backordered 4-5 weeks.
To some people (not me), having it a month earlier is worth the $25 difference
I didn't even think of ebay, I would have done it. I paid 45 to element15 two weeks ago and now I wait..
In addition to the obvious glaring sexist offensiveness, this also bugs me because it ignores the fact that *gasp* not everyone is obsessed with having children, and I'm somewhat sick of the attitude that those who choose not to have children (or not to have children *yet*) are somehow "incomplete" people.
A far better solution that encompasses the only non-idiotic point in this article, is to provide other options for those with the skills to apply themselves to -- it's a lot easier to break into someone else's shit than build a secure system, and a lot easier to destroy than to build. Get them into building worthwhile things younger, building useful infrastructure (or worthless dime-a-dozen startups even; occasionally one takes off). Get them into research to design the next generation of computing or perfect current technology.
Oh wait, we already do this, and we're getting better at it every day. Article is offensive vapor.
Maybe one day you'll experience it for yourself but there is more to human mating than procreation.
Yeah. Let's take some asshole hacker who obviously lacks any basic ethical grounding and reward him by duping some unsuspecting young lady into having sex with him. Sure. Meanwhile, let's also overlook those geeky guys who haven't committed any crimes, because, what they don't need girlfriends?
As one other commenter said, this is retarded. And for lots of reasons. We don't reward stupidity, they should be in jail, and if they're amoral enough to spend so much time hacking, they're likely to not treat their girlfriends well.
Because that's been so effective over the years, right? If a plan isn't working, then it's wise to rethink the plan.
I was thinking the same thng. Probably, what you do with gay hackers is set them up with a boyfriend who isn't also a hacker. (Putting two gay hackers together is probably just asking for worse trouble than you'd get if they were seperate.)
Since hackers are mostly guys, gay hackers probably don't have the same problem finding a mate in their limited circles. This makes that part of the discussion irrelevant.
what about there boot loader lock in that is even bigger.
Are you talking about UEFI secure boot? That's not a "microsoft" thing, that's a UEFI thing. Just to be clear, it was jointly developed by AMD, American Megatrends Inc., Apple Computer, Inc., Dell, Hewlett Packard, IBM, Insyde, Intel, Lenovo, Microsoft, Phoenix Technologies. All this whining about an optional security feature sounds like a lot of whining about nothing to me. If you want to load linux on a machine that shipped with windows (and therefore UEFI Secure boot enabled) you just turn off UEFI secure boot. It would be trivial for anyone capable of installing linux in the first place. If a vendor wants to sell pc's with linux preloaded, they can ship the pc with secure boot disabled. If an OS distributor wants to get their OS properly signed so they can use secure boot, they can do that too.
Prostitution is legal in many countries, and at least in one state in the USA. Perhaps Timothy thinks that prostitutes should be socialized by the government?
NOT CONDUCTIVE makes it worth hundreds of dollars more if you goof up.
So does applying the proper amount. It's not like it's difficult. I'd put it on about the same level of difficulty as avoiding pouring 4 gallons of milk into your glass in the morning. If that's a problem for you, I'd recommend hiring someone else to build your pc.
Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week.
From Article:
Even so, Ray says he won’t post CAD models of the Bonowi or Clejuso models online, given that those keys are harder to obtain and providing blueprints for their reproduction could in fact reduce their real-world security.
I have been doing game hacks (trainers and multiplayer hacks) on Windows for over a decade. Windows - or it's compilers - have always had data and code location randomization. As a result we don't rely on specific code addresses but make our code universally working anywhere.
One popular method of establishing this is to rely on fingerprints. Instead of hard coding addresses, you provide fingerprint that finds the right place first. Lets say you have a specific code. Then your fingerprint might be as follows:
90 32 ?? ?? ?? ?? 30 ?? ?? ?? 90 90 90 90 ?? ?? 32 40 4B ??
Then you will run thru the code searching for such piece of code. Anything can be in place of ??, such as other addresses. Sure, you can't hard code anymore.. but your code will be much better after adding this kind of function because then it will also work between all versions of software, even if updates.
So basically Google is adding something that other OSes have had for decades and making a huge noise about it, while it actually establishes nothing and even forces hackers to deliver better code. It seems like Google does not know at all what they're doing with their OS.
How did this get modded troll? Someone on google's android team must have a slashdot account...
And don't get me even started with countries that have other character sets like Russia, Germany or Thailand. Come on Slashdot, how hard it is to know anything outside US?
I believe the critical part of the Slashdot slogan that applies here is "stuff that matters."
Slashdot Mirror
The title of this article seems a little deceptive to me. Not that I have a particular fondness for some Chinese router company, but I think this should have been titled "Competitor: Huawei Routers Riddled With Vulnerabilities".
The one wearing the uniform. Firefighter is a job.
who uses instant messengers these days
I do.
Judging from the title and summary, you'd think that Nexus 7s were sealed in clamshell packaging, where are universally hated. Instead, these people are complaining that the Nexus 7 box is sealed with two pieces of tape and the device itself is in an anti-static bag (which you don't need to cut open). You don't even need a knife to get through the tape -- a simple key will do. This story is much ado about nothing.
Apple didn't make it, so the packaging sucks. It's a universal truth (among apple customers).
Apple sells low value high cost products. Google sells high value low cost products.
I have to admit I was a bit surprised to see "troll" on my post just now...
depending on shipping costs, that's not /that/ much of a markup.
I ordered from element 14, and I paid $45 after tax/shipping.
AND it's backordered 4-5 weeks.
To some people (not me), having it a month earlier is worth the $25 difference
I didn't even think of ebay, I would have done it. I paid 45 to element15 two weeks ago and now I wait..
Depending on where you live, the rasberry pi is a bit more than the advertised 35 dollars. In the USA I just paid $45 usd for one from element14.com
In addition to the obvious glaring sexist offensiveness, this also bugs me because it ignores the fact that *gasp* not everyone is obsessed with having children, and I'm somewhat sick of the attitude that those who choose not to have children (or not to have children *yet*) are somehow "incomplete" people.
A far better solution that encompasses the only non-idiotic point in this article, is to provide other options for those with the skills to apply themselves to -- it's a lot easier to break into someone else's shit than build a secure system, and a lot easier to destroy than to build. Get them into building worthwhile things younger, building useful infrastructure (or worthless dime-a-dozen startups even; occasionally one takes off). Get them into research to design the next generation of computing or perfect current technology.
Oh wait, we already do this, and we're getting better at it every day. Article is offensive vapor.
Maybe one day you'll experience it for yourself but there is more to human mating than procreation.
Yeah. Let's take some asshole hacker who obviously lacks any basic ethical grounding and reward him by duping some unsuspecting young lady into having sex with him. Sure. Meanwhile, let's also overlook those geeky guys who haven't committed any crimes, because, what they don't need girlfriends?
As one other commenter said, this is retarded. And for lots of reasons. We don't reward stupidity, they should be in jail, and if they're amoral enough to spend so much time hacking, they're likely to not treat their girlfriends well.
Because that's been so effective over the years, right? If a plan isn't working, then it's wise to rethink the plan.
First of all, where are you going to find girls that are interested in geeks? Are you going to import mail order brides from China or something?
Nope, Russia. http://bride.ru/
I was thinking the same thng. Probably, what you do with gay hackers is set them up with a boyfriend who isn't also a hacker. (Putting two gay hackers together is probably just asking for worse trouble than you'd get if they were seperate.)
Since hackers are mostly guys, gay hackers probably don't have the same problem finding a mate in their limited circles. This makes that part of the discussion irrelevant.
It has replaced the BIOS and i's known as EFI or UEFI and prevents any other OS from being installed unless you pay US$99.- for a 'licence' to MS.
You should probably find out a little about this before you go posting misinformation about it.
what about there boot loader lock in that is even bigger.
Are you talking about UEFI secure boot? That's not a "microsoft" thing, that's a UEFI thing. Just to be clear, it was jointly developed by AMD, American Megatrends Inc., Apple Computer, Inc., Dell, Hewlett Packard, IBM, Insyde, Intel, Lenovo, Microsoft, Phoenix Technologies. All this whining about an optional security feature sounds like a lot of whining about nothing to me. If you want to load linux on a machine that shipped with windows (and therefore UEFI Secure boot enabled) you just turn off UEFI secure boot. It would be trivial for anyone capable of installing linux in the first place. If a vendor wants to sell pc's with linux preloaded, they can ship the pc with secure boot disabled. If an OS distributor wants to get their OS properly signed so they can use secure boot, they can do that too.
Get over this non-issue.
Prostitution is legal in many countries, and at least in one state in the USA. Perhaps Timothy thinks that prostitutes should be socialized by the government?
This is not news for nerds or stuff that matters.
Slashdot needs to allow a +10 insightful for this comment...
The truth is, we're all winners. Because out of all those sperm, we're the ones who made it!
AT&T is sponsoring a hacking contest? They're also giving away an ipad? Apple is going to be furious!
NOT CONDUCTIVE makes it worth hundreds of dollars more if you goof up.
So does applying the proper amount. It's not like it's difficult. I'd put it on about the same level of difficulty as avoiding pouring 4 gallons of milk into your glass in the morning. If that's a problem for you, I'd recommend hiring someone else to build your pc.
Uh, Nokia haven't abandoned their other OSs. They're still selling Symbian, dumb and Linux phones.
Never end a completely uninformed argument with the facts. It's just not nice.
Ray plans to post the CAD file for the key on the 3D printing site Thingiverse after LockCon later this week.
From Article:
Even so, Ray says he won’t post CAD models of the Bonowi or Clejuso models online, given that those keys are harder to obtain and providing blueprints for their reproduction could in fact reduce their real-world security.
WTF, Sparrowvsrevolution?
How about a real distro, like CentOS or Scientific Linux?
Get a real man's distro, slackware.
I have been doing game hacks (trainers and multiplayer hacks) on Windows for over a decade. Windows - or it's compilers - have always had data and code location randomization. As a result we don't rely on specific code addresses but make our code universally working anywhere. One popular method of establishing this is to rely on fingerprints. Instead of hard coding addresses, you provide fingerprint that finds the right place first. Lets say you have a specific code. Then your fingerprint might be as follows: 90 32 ?? ?? ?? ?? 30 ?? ?? ?? 90 90 90 90 ?? ?? 32 40 4B ?? Then you will run thru the code searching for such piece of code. Anything can be in place of ??, such as other addresses. Sure, you can't hard code anymore.. but your code will be much better after adding this kind of function because then it will also work between all versions of software, even if updates. So basically Google is adding something that other OSes have had for decades and making a huge noise about it, while it actually establishes nothing and even forces hackers to deliver better code. It seems like Google does not know at all what they're doing with their OS.
How did this get modded troll? Someone on google's android team must have a slashdot account...
And don't get me even started with countries that have other character sets like Russia, Germany or Thailand. Come on Slashdot, how hard it is to know anything outside US?
I believe the critical part of the Slashdot slogan that applies here is "stuff that matters."
Getting herpes would also be a refreshing change, but I think I'm better off with the mundane life of being STD free.
Personally, I don't think I'd describe contracting an STD as refreshing. It would be a change, but not a refreshing one in my opinion.