Dell Gives Android the Boot, Boots Up More Windows 8

hugheseyau writes “Dell vice chairman Jeff Clarke made a less than shocking announcement at this year’s Dell World Conference in Austin. The company is officially giving up on Android phones and tablets. … So if Dell is giving up on Android, what comes next? The company claims its doubling down on Windows 8, and the enterprise market.” Read more of this story at Slashdot.

Read the original post:
Dell Gives Android the Boot, Boots Up More Windows 8

Huge Security Hole In Recent Samsung Devices

An anonymous reader writes “A huge security hole has been discovered in recent Samsung devices including phones like the Galaxy S2 and S3. It is possible for every user to obtain root due to a custom faulty memory device created by Samsung.” The problem affects phones with the Exynos System-on-Chip. Read more of this story at Slashdot.

More:
Huge Security Hole In Recent Samsung Devices

Linux 3.7 Released

The wait is over; diegocg writes “Linux kernel 3.7 has been released. This release adds support for the new ARM 64-bit architecture, ARM multiplatform — the ability to boot into different ARM systems using a single kernel; support for cryptographically signed kernel modules; Btrfs support for disabling copy-on-write on a per-file basis using chattr; faster Btrfs fsync(); a new experimental ‘perf trace’ tool modeled after strace; support for the TCP Fast Open feature in the server side; experimental SMBv2 protocol support; stable NFS 4.1 and parallel NFS; a vxlan tunneling protocol that allows to transfer Layer 2 ethernet packets over UDP; and support for the Intel SMAP security feature. Many small features and new drivers and fixes are also available. Here’s the full list of changes.” Read more of this story at Slashdot.

Continued here:
Linux 3.7 Released

New 25-GPU Monster Devours Strong Passwords In Minutes

chicksdaddy writes “A presentation at the Passwords^12 Conference in Oslo, Norway (slides), has moved the goalposts on password cracking yet again. Speaking on Monday, researcher Jeremi Gosney (a.k.a epixoip) demonstrated a rig that leveraged the Open Computing Language (OpenCL) framework and a technology known as Virtual Open Cluster (VCL) to run the HashCat password cracking program across a cluster of five, 4U servers equipped with 25 AMD Radeon GPUs communicating at 10 Gbps and 20 Gbps over Infiniband switched fabric. Gosney’s system elevates password cracking to the next level, and effectively renders even the strongest passwords protected with weaker encryption algorithms, like Microsoft’s LM and NTLM, obsolete. In a test, the researcher’s system was able to generate 348 billion NTLM password hash checks per second. That renders even the most secure password vulnerable to compute-intensive brute force and wordlist (or dictionary) attacks. A 14 character Windows XP password hashed using LM for example, would fall in just six minutes, said Per Thorsheim, organizer of the Passwords^12 Conference. For some context: In June, Poul-Henning Kamp, creator of the md5crypt() function used by FreeBSD and other, Linux-based operating systems, was forced to acknowledge that the hashing function is no longer suitable for production use — a victim of GPU-powered systems that could perform ‘close to 1 million checks per second on COTS (commercial off the shelf) GPU hardware,’ he wrote. Gosney’s cluster cranks out more than 77 million brute force attempts per second against MD5crypt.” Read more of this story at Slashdot.

See original article:
New 25-GPU Monster Devours Strong Passwords In Minutes

Wiki Weapon Project Test-Fires a (Partly) 3D-Printed Rifle

MrSeb writes “In its continuing mission to build a ‘Wiki Weapon,’ Defense Distributed has 3D printed the lower receiver of an AR-15 and tested it to failure. The printed part only survives the firing of six shots, but for a first attempt that’s quite impressive. And hey, it’s a plastic gun. Slashdot first covered 3D-printed guns back in July. The Defense Distributed group sprung up soon after, with the purpose of creating an open-source gun — a Wiki Weapon — that can be downloaded from the internet and printed out. The Defense Distributed manifesto mainly quotes a bunch of historical figures who supported the right to bear arms. DefDist (its nickname) is seeking a gun manufacturing license from the ATF, but so far the feds haven’t responded. Unperturbed, DefDist started down the road by renting an advanced 3D printing machine from Stratasys — but when the company found out what its machine was being used for, it was repossessed. DefDist has now obtained a 3D printer from Objet, which seemingly has a more libertarian mindset. The group then downloaded HaveBlue’s original AR-15 lower receiver from Thingiverse, printed it out on the Objet printer using ABS-like Digital Material, screwed it into an AR-57 upper receiver, loaded up some FN 5.7x28mm ammo, and headed to the range. The DefDist team will now make various modifications to HaveBlue’s design, such as making it more rugged and improving the trigger guard, and then upload the new design to Thingiverse.” Sensible ammo choice; 5.7x28mm produces less recoil than the AR-15’s conventional 5.56mm. I wonder how many of the upper’s components, too, can one day be readily replaced with home-printable parts — for AR-15 style rifles, the upper assembly is where the gun’s barrel lives, while the lower assembly (the part printed and tested here) is the legally controlled part of the firearm. Read more of this story at Slashdot.

View the original here:
Wiki Weapon Project Test-Fires a (Partly) 3D-Printed Rifle

DOE Wants 5X Improvement In Batteries In 5 Years

dcblogs writes “The U.S. Dept. of Energy has set a goal to develop battery and energy storage technologies that are five times more powerful and five times cheaper within five years. DOE is creating a new center at Argonne National Laboratory, at a cost of $120 million over five years, that’s intended to reproduce development environments that were successfully used by Bell Laboratories and World War II’s Manhattan Project. ‘When you had to deliver the goods very, very quickly, you needed to put the best scientists next to the best engineers across disciplines to get very focused,’ said U.S. Energy Secretary Stephen Chu, on Friday. The Joint Center for Energy Storage Research isn’t designed to seek incremental improvements in existing technologies. This technology hub, according to DOE’s solicitation (PDF), ‘should foster new energy storage designs that begin with a “clean sheet of paper” — overcoming current manufacturing limitations through innovation to reduce complexity and cost.’ Other research labs, universities and private companies are participating in the effort.” Read more of this story at Slashdot.

See the article here:
DOE Wants 5X Improvement In Batteries In 5 Years

“Anonymous” File-Sharing Darknet Ruled Illegal By German Court

An anonymous reader writes “A court in Hamburg, Germany, has granted an injunction against a user of the anonymous and encrypted file-sharing network RetroShare. RetroShare users exchange data through encrypted transfers and the network setup ensures that the true sender of the file is always obfuscated. The court, however, has now ruled that RetroShare users who act as an exit node are liable for the encrypted traffic that’s sent by others.” Read more of this story at Slashdot.

Read More:
“Anonymous” File-Sharing Darknet Ruled Illegal By German Court

The World Falls Back In Love With Coal

Hugh Pickens writes “Richard Anderson reports on BBC that despite stringent carbon emissions targets in Europe designed to slow global warming and massive investment in renewable energy in China, coal, the dirtiest and most polluting of all the major fossil fuels, is making a comeback with production up 6% over 2010, twice the rate of increase of gas and more than four times that of oil. ‘What is going on is a shift from nuclear power to coal and from gas to coal; this is the worst thing you could do, from a climate change perspective,’ says Dieter Helm. Why the shift back to coal? Because coal is cheap, and getting cheaper all the time. Due to the economic downturn, there has been a ‘collapse in industrial demand for energy,’ leading to an oversupply of coal, pushing the price down. Meanwhile China leads the world in coal production and consumption. It mines over 3 billion tons of coal a year, three times more than the next-biggest producer (America), and last year overtook Japan to become the world’s biggest coal importer. Although China is spending massive amounts of money on a renewable energy but even this will not be able to keep up with demand, meaning fossil fuels will continue to make up the majority of the overall energy mix for the foreseeable future and when it comes to fossil fuels, coal is the easy winner — it is generally easier and cheaper to mine, and easier to transport using existing infrastructure such as roads and rail, than oil or gas. While China is currently running half a dozen carbon capture and storage (CCS) projects — which aim to capture CO2 emissions from coal plants and bury it underground — the technology is nowhere near commercial viability. ‘Renewed urgency in developing CCS globally, alongside greater strides in increasing renewable energy capacity, is desperately needed,’ writes Anderson, ‘but Europe’s increasing reliance on coal without capturing emissions is undermining its status as a leader in clean energy, and therefore global efforts to reduce CO2 emissions.'” Read more of this story at Slashdot.

Follow this link:
The World Falls Back In Love With Coal

HTTP Strict Transport Security Becomes Internet Standard

angry tapir writes “A Web security policy mechanism that promises to make HTTPS-enabled websites more resilient to various types of attacks has been approved and released as an Internet standard — but despite support from some high-profile websites, adoption elsewhere is still low. HTTP Strict Transport Security (HSTS) allows websites to declare themselves accessible only over HTTPS (HTTP Secure) and was designed to prevent hackers from forcing user connections over HTTP or abusing mistakes in HTTPS implementations to compromise content integrity.” Read more of this story at Slashdot.

More here:
HTTP Strict Transport Security Becomes Internet Standard

Israeli Infrastructure Proves Too Strong For Anonymous

Mephistophocles writes “Ever since the beginning of Operation Pillar of Defense, hackers have been working overtime to strike a blow against the Israeli government’s computer systems, Finance Minister Yuval Steinitz said Sunday. No fewer than 44 million attacks have been recorded since the operation began five days ago — with nearly all of them failing, thanks to the recent strengthening of computer defense systems in Israel. Speaking at a special press conference at the Government Computing Center in Jerusalem about the cyber war against Israel that has accompanied Hamas’s rocket attacks, Steinitz said that hackers ‘are trying to disable the symbols of Israeli sovereignty, to enter web sites and install anti-Israel content, thus compromising information and data and damaging the government’s ability to serve the public.’ Most of the attacks, he said, were against government sites, like the Prime Minister’s Office site, and security-related sites, such as that of the Home Front Command, the body charged with informing Israelis on how to protect themselves in the event of an attack. Out of those 44 million-plus attacks on government and defense related sites, said Steinitz, only one succeeded – partially. One site, which he did not name, was ‘wobbly for a few minutes,’ but quickly recovered. Even though the government has been successful in warding off hack attacks, Steinitz said that government sites were fully backed up and mirrored, meaning that they could be replaced by a duplicate site instantly if the original site were compromised.” Read more of this story at Slashdot.

Read this article:
Israeli Infrastructure Proves Too Strong For Anonymous