パスワードを忘れた? アカウント作成
21620060 feed

Slashdot: AT&T Says Data From 73 Million Customers Has Leaked Onto the Dark Web

フィード by slashdotorg-feed
Personal data from 73 million AT&T customers has leaked onto the dark web, reports CNN — both current and former customers. AT&T has launched an investigation into the source of the data leak... In a news release Saturday morning, the telecommunications giant said the data was "released on the dark web approximately two weeks ago," and contains information such as account holders' Social Security numbers. ["The information varied by customer and account," AT&T said in a statement, " but may have included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number and passcode."] "It is not yet known whether the data ... originated from AT&T or one of its vendors," the company added. "Currently, AT&T does not have evidence of unauthorized access to its systems resulting in exfiltration of the data set." The data seems to have been from 2019 or earlier. The leak does not appear to contain financial information or specifics about call history, according to AT&T. The company said the leak shows approximately 7.6 million current account holders and 65.4 million former account holders were affected. CNN says the first reports of the leak came two weeks ago from a social media account claiming "the largest collection of malware source code, samples, and papers. Reached for a comment by CNN, AT&T had said at the time that "We have no indications of a compromise of our systems." AT&T's web site now includes a special page with an FAQ — and the tagline that announces "We take cybersecurity very seriously..." "It has come to our attention that a number of AT&T passcodes have been compromised..." The page points out that AT&T has already reset the passcodes of "all 7.6 million impacted customers." It's only further down in the FAQ that they acknowledge that the breach "appears to be from 2019 or earlier, impacting approximately 7.6 million current AT&T account holders and 65.4 million former account holders." Our internal teams are working with external cybersecurity experts to analyze the situation... We encourage customers to remain vigilant by monitoring account activity and credit reports. You can set up free fraud alerts from nationwide credit bureaus — Equifax, Experian, and TransUnion. You can also request and review your free credit report at any time via Freecreditreport.com... We will reach out by mail or email to individuals with compromised sensitive personal information and offering complimentary identity theft and credit monitoring services... If your information was impacted, you will be receiving an email or letter from us explaining the incident, what information was compromised, and what we are doing for you in response.

Read more of this story at Slashdot.


情報元へのリンク
21620056 comment

コメント: Re:xzにバックドア仕込まれる (スコア 0) 937

by Anonymous Coward (#4603554) ネタ元: スラドとOSDN、閉鎖せず受け入れ先募集へ

自分は、XZ Utilsよりも、libsystemd依存への見直しが進むといいなあと思う。

いま分かっている話では、sshdがlibsystemdを読み込み、それがliblzmaに依存しているので、sshdのプロセスにliblzmaが読み込まれ、それでバックドアを作れたという話ではないか。本来OpenSSH sshdにlibsystemd依存なんかないのに、主要ディストリビューションみんながlibsystemdパッチを当てているという。

Systemdは嫌いではないけど、様々なソフトウェアでlibsystemdをリンクする状況は好ましくないと思っている。せめてlibsystemdを細分化して、libsystemd-notification-client.soとかに分けていこうぜ、と思う。

21620045 feed

Slashdot: Will EVs Kill the Stick Shift Car?

フィード by slashdotorg-feed
A CNN opinion piece looks at "the moaning about manual transmission's demise," noting that "it's not just Europeans (literally) clinging on. In the U.S., there's apparently a young (also predominantly male) demographic that is embracing manual driving — championing it as retro, much like Gen Z's affinity to typewriters and vintage cameras. "They feel there's something authentic about it: a connection between driver and vehicle that automatization cuts out." But CNN's writer argues the case against stick shifts... [Automatic vehicles] chalk up better mileage and drive faster than their stick-shift counterparts. The explanation: automatics select the right gear for the vehicle, usually the highest gear possible. The average manual driver is not always so proficient. In getting the gear right, automatics consume less fuel, save money and emit fewer emissions. These are among the reasons why it's ever harder to buy a new manual-transmission model of any kind in many countries. In the US, less than 1% of new models have stick shifts (compared to 35% in 1980), according to the Environmental Protection Agency. It's really only sports cars, off-road truck SUVs and a handful of small pickups that still have clutches.... While all gasoline-run cars and trucks are climate killers with stick shifts being the slightly worse of two evils, combustion-engine automatics themselves are on their way out. They are tooling along the highway side-by-side with their stick-and-clutch counterparts toward the junkyard of history. Electric vehicles have gear systems, too: a single speed transmission that transmits energy from the motor to the wheels. But because only one gear exists, there is no switching of gears, neither automatically nor manually... Road transportation accounts for 15% of the world's greenhouse gas emissions, according to Our World Data, as well as being a huge contributor to the air pollution that claims around nine million deaths a year from respiratory and lung diseases. Transportation noise, though less deadly, also contributes to stress and sleep disorders. Thankfully, there's a convenient way to circumvent these blights: electric vehicles... But for those aficionados who really can't go without a clutch and gear shifter, Toyota is planning a realistic-feeling fake manual transmission for some EV models. It serves no purpose whatsoever — save to comfort bruised egos.

Read more of this story at Slashdot.


情報元へのリンク
21620031 feed

Slashdot: WSJ: 'America Made a Huge Bet On Sports Gambling. The Backlash Is Here'

フィード by slashdotorg-feed
In 2018 the U.S. Supreme Court overturned the outlawing of sports betting in America. But the Wall Street Journal reports that since then all the major professional sports bodies "now realize just how much they have to lose as the new era unfolds." "All it takes is for a reasonable fan to go, 'Am I just watching theater, or is this actually sport?' for the credibility of a sport to start crumbling,'" said Declan Hill, an expert on match fixing at the University of New Haven. Since the prohibition on sports gambling was lifted, leagues that had once viewed betting as an existential threat to their integrity scrambled to partner with gambling companies and brought them into the tent.... The NBA itself also announced a new feature designed to mesh the betting experience with live action: Fans watching games on League Pass, the flagship streaming platform, would be able to opt in to view betting odds on the app's interface and click through to place wagers... Cleveland Cavaliers head coach J.B. Bickerstaff said that gambling had "gone too far... I personally have had my own instances with some of the sports gamblers," he added, "where they got my telephone number, were sending me crazy messages about where I live, and my kids and all that stuff." NBA spokesman Mike Bass said that instances of reported harassment related to sports betting are investigated. Then, just days after Haliburton and Bickerstaff's complaints, the NBA found itself grappling with a new case... The league is investigating suspicious activity around [Toronto Raptors forward Jontay] Porter, after app users placed sizable wagers that his totals for points, rebounds and assists in a pair of games would all come in under the lines set by oddsmakers. When Porter's numbers fell below those marks and the bets paid out, it raised a red flag signaling possible irregularities.... The NCAA has turned to state legislatures to impose regulations that would take single players out of gamblers' crosshairs. The group is lobbying to ban player-specific proposition bets that aren't directly related to the final score of the game — the exact kind of wagers at the center of the Porter situation in the NBA After noticing "the gambling-related negativity taking over his social-media feeds," pro basketball player Tyrese Haliburton gave the Journal his own assessment of how it's affecting the fan base. "To half the world, I'm just helping them make money on DraftKings." Thanks to long-time Slashdot reader schwit1 for sharing the article.

Read more of this story at Slashdot.


情報元へのリンク
21620030 comment

seiseiのコメント: Re:致命的な何かに見舞われるまで、機能不全ながらも (スコア 1) 937

by seisei (#4603545) ネタ元: スラドとOSDN、閉鎖せず受け入れ先募集へ

ホモサピエンスの寿命に付いては将来の医学なりの爆発的進歩の点からの見方もできましょうが
さて置き

>詳しく引用するとSPAM扱いになっ

これには投稿意欲など少々削がれます方も些かおられましょう
( ※ 但し 量より質という意味では現状こそが至高とも )

さてこのまま 1 ポスト内で続けますと余談的に見えるかも知れまぜんが
関連してコメント増加策 ?

a. アーカイブ化解除
b. a. + 追記制限
c. a. + 解除制限
d. ...

追記制限 : 新規スレッドのみ更新可能にする etc.
解除制限 : 今日は何の日的に ? 同月同日のストーリーなりのみ解除する etc.
その際に単純日次でなく正午から 10 分毎に一つずつ解除する etc.
その際に前月時点で解除予定表公開があれば尚可

+ トップページでは最新ストーリー紹介よりも最新コメント紹介を優先
( 或いは最新ストーリーだけでなくコメント追加があったストーリーも紹介 ) ?

# 過去の国民投票にはこの様なものもあった様ですね
# 4月1日は何の日?
# http://srad.jp/poll/58

21620016 feed

Slashdot: Do Age Verification Laws Drag Us Back to the Dark Ages of the Internet?

フィード by slashdotorg-feed
404 Media claims to have identified "the fundamental flaw with the age verification bills and laws" that have already passed in eight state legislatures (with two more taking effect in July): "the delusional, unfounded belief that putting hurdles between people and pornography is going to actually prevent them from viewing porn." They argue that age verification laws "drag us back to the dark ages of the internet." Slashdot reader samleecole shared this excerpt: What will happen, and is already happening, is that people — including minors — will go to unmoderated, actively harmful alternatives that don't require handing over a government-issued ID to see people have sex. Meanwhile, performers and companies that are trying to do the right thing will suffer.... The legislators passing these bills are doing so under the guise of protecting children, but what's actually happening is a widespread rewiring of the scaffolding of the internet. They ignore long-established legal precedent that has said for years that age verification is unconstitutional, eventually and inevitably reducing everything we see online without impossible privacy hurdles and compromises to that which is not "harmful to minors." The people who live in these states, including the minors the law is allegedly trying to protect, are worse off because of it. So is the rest of the internet. Yet new legislation is advancing in Kentucky and Nebraska, while the state of Kansas just passed a law which even requires age-verification for viewing "acts of homosexuality," according to a report: Websites can be fined up to $10,000 for each instance a minor accesses their content, and parents are allowed to sue for damages of at least $50,000. This means that the state can "require age verification to access LGBTQ content," according to attorney Alejandra Caraballo, who said on Threads that "Kansas residents may soon need their state IDs" to access material that simply "depicts LGBTQ people." One newspaper opinion piece argues there's an easier solution: don't buy your children a smartphone: Or we could purchase any of the various software packages that block social media and obscene content from their devices. Or we could allow them to use social media, but limit their screen time. Or we could educate them about the issues that social media causes and simply trust them to make good choices. All of these options would have been denied to us if we lived in a state that passed a strict age verification law. Not only do age verification laws reduce parental freedom, but they also create myriad privacy risks. Requiring platforms to collect government IDs and face scans opens the door to potential exploitation by hackers and enemy governments. The very information intended to protect children could end up in the wrong hands, compromising the privacy and security of millions of users... Ultimately, age verification laws are a misguided attempt to address the complex issue of underage social media use. Instead of placing undue burdens on users and limiting parental liberty, lawmakers should look for alternative strategies that respect privacy rights while promoting online safety. This week a trade association for the adult entertainment industry announced plans to petition America's Supreme Court to intervene.

Read more of this story at Slashdot.


情報元へのリンク
21619974 comment

コメント: Re:xzにバックドア仕込まれる (スコア 0) 937

by Anonymous Coward (#4603543) ネタ元: スラドとOSDN、閉鎖せず受け入れ先募集へ

その開発者が信用できないから、機械的に、その開発者のcommitをすべてrevertする場合って話だと思う。

まあ、それは現実的ではないから、最近のやばそうなcommitだけをrevertするんだろうけど。

21619967 comment

コメント: Re:xzにバックドア仕込まれる (スコア 0) 937

by Anonymous Coward (#4603542) ネタ元: スラドとOSDN、閉鎖せず受け入れ先募集へ

そんなことは常識。
たとえば過去3,000回のコミットをしている開発者に実は悪意があったと判明した場合に
その3,000回すべてのレビューをするのはすげえ大変だよね、という話でしょう。
「意図して脆弱性が作りこまれているかもしれない」という前提でコードレビューを行うのは
普通のコードレビューとは難易度もかかる時間も全然違う。

21619966 feed

Slashdot: In Development Since 2019, NetBSD 10.0 Finally Released

フィード by slashdotorg-feed
"After being in development since 2019, the huge NetBSD 10.0 is out today as a wonderful Easter surprise," reports Phoronix: NetBSD 10 provides WireGuard support, support for many newer Arm platforms including for Apple Silicon and newer Raspberry Pi boards, a new Intel Ethernet drive, support for Realtek 2.5GbE network adapters, SMP performance improvements, automatic swap encryption, and an enormous amount of other hardware support improvements that accumulated over the past 4+ years. Plus there is no shortage of bug fixes and performance optimizations with NetBSD 10. Some tests of NetBSD 10.0 in development back during 2020 showed at that point it was already 12% faster than NetBSD 9. "A lot of development went into this new release," NetBSD wrote on their blog, saying "This also caused the release announcement to be one of the longest we ever did." Among the new userspace programs is warp(6), which they describe as a "classic BSD space war game (copyright donated to the NetBSD Foundation by Larry Wall)."

Read more of this story at Slashdot.


情報元へのリンク
21619962 comment

コメント: Re:xzにバックドア仕込まれる (スコア 0) 937

by Anonymous Coward (#4603541) ネタ元: スラドとOSDN、閉鎖せず受け入れ先募集へ

> (すべてを revertすることは容易いけど、それで復活する脆弱性もあるだろうのが悩ましい)

そんなわけないでしょ。
今時のオープンソースは、gitみたいなツールを使っていて、commit 単位で管理されてる。revertもcommit単位でやればいい。全てをrevertする必要はありません。

21619956 feed

Slashdot: Can Apps Turning Us Into Unpaid Lobbyists?

フィード by slashdotorg-feed
"Today's most effective corporate lobbying no longer involves wooing members of Congress..." writes the Wall Street Journal. Instead the lobbying sector "now works in secret to influence lawmakers with the help of an unlikely ally: you." [Lobbyists] teamed up with PR gurus, social-media experts, political pollsters, data analysts and grassroots organizers to foment seemingly organic public outcries designed to pressure lawmakers and compel them to take actions that would benefit the lobbyists' corporate clients... By the middle of 2011, an army of lobbyists working for the pillars of the corporate lobbying establishment — the major movie studios, the music industry, pharmaceutical manufacturers and the U.S. Chamber of Commerce — were executing a nearly $100 million campaign to win approval for the internet bill [the PROTECT IP Act, or "PIPA"]. They pressured scores of lawmakers to co-sponsor the legislation. At one point, 99 of the 100 members of the U.S. Senate appeared ready to support it — an astounding number, given that most bills have just a handful of co-sponsors before they are called up for a vote. When lobbyists for Google and its allies went to Capitol Hill, they made little headway. Against such well-financed and influential opponents, the futility of the traditional lobbying approach became clear. If tech companies were going to turn back the anti-piracy bills, they would need to find another way. It was around this time that one of Google's Washington strategists suggested an alternative strategy. "Let's rally our users," Adam Kovacevich, then 34 and a senior member of Google's Washington office, told colleagues. Kovacevich turned Google's opposition to the anti-piracy legislation into a coast-to-coast political influence effort with all the bells and whistles of a presidential campaign. The goal: to whip up enough opposition to the legislation among ordinary Americans that Congress would be forced to abandon the effort... The campaign slogan they settled on — "Don't Kill the Internet" — exaggerated the likely impact of the bill, but it succeeded in stirring apprehension among web users. The coup de grace came on Jan. 18, 2012, when Google and its allies pulled off the mother of all outside influence campaigns. When users logged on to the web that day, they discovered, to their great frustration, that many of the sites they'd come to rely on — Wikipedia, Reddit, Craigslist — were either blacked out or displayed text outlining the detrimental impacts of the proposed legislation. For its part, Google inserted a black censorship bar over its multicolored logo and posted a tool that enabled users to contact their elected representatives. "Tell Congress: Please don't censor the web!" a message on Google's home page read. With some 115,000 websites taking part, the protest achieved a staggering reach. Tens of millions of people visited Wikipedia's blacked-out website, 4.5 million users signed a Google petition opposing the legislation, and more than 2.4 million people took to Twitter to express their views on the bills. "We must stop [these bills] to keep the web open & free," the reality TV star Kim Kardashian wrote in a tweet to her 10 million followers... Within two days, the legislation was dead... Over the following decade, outside influence tactics would become the cornerstone of Washington's lobbying industry — and they remain so today. "The 2012 effort is considered the most successful consumer mobilization in the history of internet policy," writes the Washington Post — agreeing that it's since spawned more app-based, crowdsourced lobbying campaigns. Sites like Airbnb "have also repeatedly asked their users to oppose city government restrictions on the apps." Uber, Lyft, DoorDash and other gig work companies also blitzed the apps' users with scenarios of higher prices or suspended service unless people voted for a 2020 California ballot measure on contract workers. Voters approved it." The Wall Street Journal also details how lobbyists successfully killed higher taxes for tobacco products, the oil-and-gas industry, and even on private-equity investors — and note similar tactics were used against a bill targeting TikTok. "Some say the campaign backfired. Lawmakers complained that the effort showed how the Chinese government could co-opt internet users to do their bidding in the U.S., and the House of Representatives voted to ban the app if its owners did not agree to sell it. "TikTok's lobbyists said they were pleased with the effort. They persuaded 65 members of the House to vote in favor of the company and are confident that the Senate will block the effort." The Journal's article was adapted from an upcoming book titled "The Wolves of K Street: The Secret History of How Big Money Took Over Big Government." But the Washington Post argues the phenomenon raises two questions. "How much do you want technology companies to turn you into their lobbyists? And what's in it for you?"

Read more of this story at Slashdot.


情報元へのリンク
21619954 feed

Slashdot: Major Mobile NFT Shooter Game 'MadWorld' Uses Linux Foundation Subsidiary's Game

フィード by slashdotorg-feed
A Linux Foundation subsidiary has developed a free and open-source 3D game engine distributed under the Apache license. And last week the Open 3D Foundation announced "a big step forward, showcasing the power of open-source technologies in giving gamers around the globe unforgettable gaming experiences." "We are proud to unveil MadWorld as the first mobile title powered by O3DE," said Joe Bryant, Executive Director of the Open 3D Foundation, "demonstrating the large potential of open-source technologies in game development." And then this week Los Angeles Business Journal reported that El Segundo-based gaming studio Carbonated Inc. "has raised $11 million of series A funding to finance the development and release of its debut game title... Prior to its most recent round, Carbonated closed an $8.5 million seed funding round in 2020, which also included participation from Andreessen and Bitkraft." Since its founding [in 2015], the company has been focusing on research and development for its upcoming first title, called "MadWorld." The third-person, multiplayer shooter game is set in a post-apocalyptic world and features both player-versus-player and player-versus-environment features. Players of the game will battle for land control in a dystopian setting. Using a combination of open-source mapping tools and Carbonated's proprietary custom operations technology, called Carbyne, the game's world is designed around real-life cities and locations. Players are initially dropped into the game's version of their own real-time location. The game allows players to optionally engage using blockchain technology with a digital asset-ownership layer powered by a blockchain network called XPLA. Earlier this month Madworld "opened up for Early Access registration," reports the egamers web site, arguing that the game "is set to redefine the gaming landscape and will make its public debut later this year." After a catastrophic event named "The Collapse," MadWorld takes place in a desolate Earth where players engage in a battle for survival, highlighting the game's unique setting and immersive experience. The game's world is intricately designed with 250,000 land plots mapped out on a hexagonal grid, each presenting unique resources and strategic benefits. This innovative approach to game design enhances the gameplay experience and introduces a new layer of strategy and competition. MadWorld's gameplay is centered around integrating Web3 technologies, which allows for the ownership, enhancement, and trading of tokenized representations of real-world locations. This feature encourages players to create clans and work together or compete for essential resources that are spread across the vast game world. Clans can acquire these resources by paying tributes to NFT landowners using "Rounds," the in-game currency. This mechanism not only fosters a sense of community and teamwork but also creates unique economic opportunities within the game by blending traditional gaming elements with the emerging field of digital assets. "With its use of O3DE, Carbonated can enhance the game's visual fidelity, performance, and scalability," according to the Linux Foundation's announcement, "in order to deliver a fast-paced adventure on mobile platforms." O3DE is an open-source game engine developed by a collaborative community of industry experts. It includes state-of-the-art rendering capabilities, dynamic lighting, and realistic physics simulation. These features have enabled Carbonated to build realistic dystopian environments and create action-packed gameplay in MadWorld. According to its official site, MadWorld "is set to be released to the public sometime in 2024 and is currently being tested on iOS and Android operating systems." Carbonated's CEO Travis Boatman made this prediction to the site Decrypt. "We think mobile is where the breakout will happen for Web3."

Read more of this story at Slashdot.


情報元へのリンク
21619953 feed

Slashdot: More AI Safeguards Coming, Including Right to Refuse Face-Recognition Scans at U

フィード by slashdotorg-feed
This week every U.S. agency was ordered to appoint a "chief AI officer". But that wasn't the only AI policy announced. According to CNN, "By the end of the year, travelers should be able to refuse facial recognition scans at airport security screenings without fear it could delay or jeopardize their travel plans." That's just one of the concrete safeguards governing artificial intelligence that the Biden administration says it's rolling out across the U.S. government, in a key first step toward preventing government abuse of AI. The move could also indirectly regulate the AI industry using the government's own substantial purchasing power... The mandates aim to cover situations ranging from screenings by the Transportation Security Administration to decisions by other agencies affecting Americans' health care, employment and housing. Under the requirements taking effect on December 1, agencies using AI tools will have to verify they do not endanger the rights and safety of the American people. In addition, each agency will have to publish online a complete list of the AI systems it uses and their reasons for using them, along with a risk assessment of those systems... [B]ecause the government is such a large purchaser of commercial technology, its policies around procurement and use of AI are expected to have a powerful influence on the private sector. CNN notes that Vice President Harris told reporters that the administration intends for the policies to serve as a global model. "Meanwhile, the European Union this month gave final approval to a first-of-its-kind artificial intelligence law, once again leapfrogging the United States on regulating a critical and disruptive technology." CNN adds that last year, "the White House announced voluntary commitments by leading AI companies to subject their models to outside safety testing."

Read more of this story at Slashdot.


情報元へのリンク
typodupeerror

一つのことを行い、またそれをうまくやるプログラムを書け -- Malcolm Douglas McIlroy

読み込み中...