RSS 생중계

Subversion SHA1 collision problem statement

lwn.net - 37분 35초 지남
Users of the Subversion source-code management system may want to take a look at this post from Mark Phippard. He explains how hash collisions can corrupt a repository and a couple of short-term workarounds. "The quick summary if you do not want to read this entire post is that the problem is really not that bad. If you run into it there are solutions to resolve it and you are not going to run into it in normal usage. There will also likely be some future updates to Subversion that avoid it entirely so if you regularly update your server and client when new releases come out you are probably safe not doing anything and just waiting for an update to happen."

카테고리:

Microsoft Announces Xbox Game Pass, Netflix-Style Gaming For the Xbox One

Slashdot - 59분 58초 지남
Microsoft today announced it is moving into the world of Netflix-style game subscriptions with Xbox Game Pass, a monthly service coming this spring that will give you a selection of games you can download and play on your Xbox One for $9.99 a month. From a report on Polygon: The service will include "over 100 games," including Halo 5: Guardians, Payday 2, NBA 2K16 and SoulCalibur II. "One of the best things about Xbox Game Pass is that you can discover and download the full titles directly on your Xbox One," the official post states. Any game you buy through the service will be sold to you at a 20 percent discount. An alpha preview of the program begins today with "a very limited" number of games, and Xbox Live Gold subscribers will get first crack at the program this spring. It also sounds as if the service may be available, at least in part, on the PC.

Read more of this story at Slashdot.

카테고리:

Netflix CEO Predicts Mobile Operators Will Soon Offer Unlimited Video

Slashdot - 1시간 39분 지남
An anonymous reader shares an AFP report: Netflix head Reed Hastings predicted Monday that mobile carriers will soon offer data plans that give users unlimited video streaming to meet the rising popularity of watching TV and movies on mobile devices. Carriers offer unlimited data caps but they are usually very expensive. But Hastings said he believed mobile carriers will eventually create a two-tear system where video data is unlimited to meet the growing demand for watching TV series and movies on mobile devices. "What we are going to see I think is a number of companies pioneering new ways of offering services to the consumers where it is unlimited video data but it is limited to say one megabit speed," he said. "So it is a slower speed but you get unlimited data on that and that turns out to be very efficient on network so an operator can offer unlimited viewing."

Read more of this story at Slashdot.

카테고리:

Raspberry Pi Zero W is a $10 Computer With Wi-Fi and Bluetooth

Slashdot - 화, 2017/02/28 - 11:45오후
On the fifth birthday of the original Raspberry Pi, the foundation has announced the Raspberry Pi Zero W, a slightly more capable variant of the miniature computer. From a report on BetaNews: It's essentially a Pi Zero with the addition of the two features many people have been requesting -- wireless LAN and Bluetooth. Priced at $10, the Pi Zero W uses the same Cypress CYW43438 wireless chip as Raspberry Pi 3 Model B to deliver 802.11n wireless LAN and Bluetooth 4.0 connectivity. The full list of features is as follows: 1GHz, single-core CPU, 512MB RAM, mini-HDMI port, micro-USB On-The-Go port, micro-USB power, HAT-compatible 40-pin header, composite video and reset headers, CSI camera connector, 11n wireless LAN, and Bluetooth 4.0.

Read more of this story at Slashdot.

카테고리:

For This Year's iPhone, Apple Is Ditching Lightning Connector and Home Button, But Embracing USB Type-C and Curved Display

Slashdot - 화, 2017/02/28 - 11:05오후
Apple has decided to adopt a flexible display for at least one model of the new iPhone, reports WSJ. From the report: People with direct knowledge of Apple's production plans said the Cupertino, Calif., company has decided to go ahead with the technology, and it will release a phone model using the OLED screens this year (Editor's note: the link could be paywalled; alternate source). The technology allows manufacturers to bend screens in ways they couldn't previously -- such as by introducing a curve at the edge of the phone as in some Samsung models. However, once the phone is manufactured, the OLED screen can't be bent or folded by the user, at least with current technology. Using OLED displays would allow Apple to introduce a phone with a new look to fuel sales. They said Apple would introduce other updates including a USB-C port for the power cord and other peripheral devices instead of the company's original Lightning connector. The models would also do away with a physical home button, they said. Those updates would give the iPhone features already available on other smartphones.

Read more of this story at Slashdot.

카테고리:

CloudPets IoT Toys Leaked and Ransomed, Exposing Kids' Voice Messages

Slashdot - 화, 2017/02/28 - 10:00오후
"According to security researcher Troy Hunt, a series of web-connected, app-enabled toys called CloudPets have been hacked," reports Android Police. "The manufacturer's central database was reportedly compromised over several months after stunningly poor security, despite the attempts of many researchers and journalists to inform the manufacturer of the potential danger. Several ransom notes were left, demanding Bitcoin payments for the implied deletion of stolen data." From the report: CloudPets allow parents to record a message for their children on their phones, which then arrives on the Bluetooth connected stuffed toy and is played back. Kids can squeeze the stuffed animal's paw to record a message of their own, which is sent back to the phone app. The Android app has been downloaded over 100,000 times, though user reviews are poor, citing a difficult interface, frequent bugs, and annoying advertising. Hunt and the researchers he collaborated with found that the central database for CloudPets' voice messages and user info was stored on a public-facing MongoDB server, with only basic hashes protecting user addresses and passwords. The same database apparently connected to the stored voice messages that could be retrieved by the apps and toys. Easy access and poor password requirements may have resulted in unauthorized access to a large number of accounts. The database was finally removed from the publicly accessible server in January, but not before demands for ransom were left.

Read more of this story at Slashdot.

카테고리:

One Billion Hours of YouTube Are Watched Every Day

Slashdot - 화, 2017/02/28 - 7:00오후
YouTube announced in a blog post that people around the world are now watching a billion hours of YouTube videos every single day. According to YouTube, "If you were to sit and watch a billion hours of YouTube, it would take you over 100,000 years." Mashable reports: The milestone "represents the enjoyment of the fantastically diverse videos that creative people make every single day," Cristos Goodrow, VP of engineering at YouTube, wrote in a blog post Monday. "Around the world, people are spending a billion hours every day rewarding their curiosity, discovering great music, keeping up with the news, connecting with their favorite personalities, or catching up with the latest trend." The 1 billion figure is a 10-fold increase since 2012, YouTube said. The statistic is one that underscores YouTube's efforts to dominate the digital space. On YouTube -- which operates under the motto "Broadcast Yourself" -- users upload 400 hours of video each minute, or 65 years of video a day.

Read more of this story at Slashdot.

카테고리:

Man Gets 30 Days In Jail For Drone Crash That Knocked Woman Unconscious

Slashdot - 화, 2017/02/28 - 4:00오후
An anonymous reader quotes a report from Ars Technica: The operator of a drone that knocked a woman unconscious was sentenced Friday to 30 days in jail, Seattle prosecutors said. The woman was attending a local parade when the drone crashed and struck her. Paul Skinner, a 38-year-old man from Washington state, was charged with reckless endangerment in connection to the 2015 incident, in which an 18-inch-by-18-inch drone collided into a building before falling into a crowd. The authorities said the 2-pound drone struck the 25-year-old in the head and gave her a concussion. Her boyfriend caught her before she fell to the ground. Another man suffered a minor bruise. The accident took place during during the city's Pride Parade. Skinner, who had turned himself in, plans to appeal the sentence. His attorney, Jeffrey Kradel, said the punishment was "too severe." His client remains free pending the appeal's outcome. A misdemeanor reckless endangerment charge -- one that poses "substantial risk of death or serious bodily injury to another person" -- carries a penalty of up to a year in jail.

Read more of this story at Slashdot.

카테고리:

First Signs of Obesity In Some Arctic Groups Have Been Linked To Instant Noodles

Slashdot - 화, 2017/02/28 - 12:30오후
schwit1 quotes a report from ScienceAlert: Researchers have noted the first signs of obesity in the native ethnic groups of the Yamalo-Nenets region -- an autonomous district that sits on the coast of the Arctic Ocean in Northwest Siberia. According to local experts, obesity has not previously existed in these indigenous populations, but the first cases are now being reported, and a marked change in diet -- including instant noodles and pasta -- appears to be responsible. The Yamalo-Nenets Autonomous Okrug has a population of just over 522,000 people, whose ancestors have survived the permafrost for millennia. The nomadic Nenets and Khanty peoples have been herding reindeer up and down the Yamal tundra -- a 700-km-long peninsula that stretches deep into the Arctic Ocean -- for 1,000 years, with diets heavily based on venison and fish. But that appears to be changing fast, as researchers note the increasing uptake of chemically processed foods, such as instant noodles and pasta, and the addition of sugar, pastry, and bread to their diets. According to Titovsky, these changes -- which have only been occurring over the past few years -- have seen the intake of venison and river fish cut by half.

Read more of this story at Slashdot.

카테고리:

WHO Issues a List of 12 Most Worrying Drug-Resistant Bacteria

Slashdot - 화, 2017/02/28 - 10:25오전
Artem Tashkinov quotes a report from Medical Xpress: The World Health Organization has issued a list of the top dozen bacteria most dangerous to humans, warning that doctors are fast running out of treatment options. WHO said the most-needed drugs are for germs that threaten hospitals, nursing homes and among patients who need ventilators or catheters. The agency said the dozen listed resistant bacteria are increasingly untreatable and can cause fatal infections; most typically strike people with weakened immune systems. At the top of WHO's list is Acinetobacter baumannii, a group of bacteria that cause a range of diseases from pneumonia to blood or wound infections. In recent years, health officials have detected a few patients resistant to colistin, the antibiotic of last resort. So far, doctors have been able to treat them with other drugs. But experts worry that the colistin-resistant bacteria will spread their properties to other bacteria already resistant to more commonly used antibiotics, creating germs that can't be killed by any known drugs.

Read more of this story at Slashdot.

카테고리:

FCC Chairman Says His Agency Won't Review AT&T's Time Warner Purchase

Slashdot - 화, 2017/02/28 - 9:45오전
Today, FCC commissioner Ajit Pai confirmed that his agency would not review AT&T's Time Warner purchase, clearing the way for the Justice Department to likely approve the deal. Engadget reports: Last month, AT&T revealed how it might structure its deal to acquire Time Warner without having to go through FCC review. The communications giant noted that it "anticipated that Time Warner will not need to transfer any of its FCC licenses ... after the closing of the transaction." That means that the FCC wouldn't need to review the transaction. "That is the regulatory hook for FCC review," Pai said in an interview with The Wall Street Journal. "My understanding is that the deal won't be presented to the commission." The WSJ notes that this would leave the Justice Department as the only governmental agency reviewing the potential deal. Time Warner has said that it has "dozens" of FCC licenses, but the company believes those won't need to be transferred to AT&T as part of the merger, thus keeping the FCC out of the deal. The report notes that the deal still might not go through even if the FCC won't review the transaction. There's a lot of opposition to it from consumer advocacy groups, and President Donald Trump has said he opposes the deal.

Read more of this story at Slashdot.

카테고리:

Boston Dynamics Reveals Handle, A Robot That Is 6 Feet Tall, Lifts 100 Pounds, and Jumps Up To 4 Feet

Slashdot - 화, 2017/02/28 - 9:05오전
An anonymous reader quotes a report from Popular Mechanics: Back at the beginning of February, a leaked video showed the newest creation from Boston Dynamics -- a wheeled humanoid robot called "Handle." Now the secretive maker of amazing robots has released the full introduction video, revealing some of Handle's brand new tricks. The wheeled bot can travel up to 9 mph, and as you can see in the video, it has no trouble rolling over some light off-road terrain such as patches of grass and flights of stairs. The bot stands 6.5 feet tall when fully extended, though it often crouches to turn or balance. Batteries power the robot's electric and hydraulic actuators, allowing it to crouch down, make sharp turns, and lift objects that weigh at least 100 pounds. Handle has enough battery juice to travel about 15 miles on one charge. Oh and one more thing, this rolling bot can leap four feet into the air.

Read more of this story at Slashdot.

카테고리:

LG Unveils G6 Android Nougat Smartphone With a Compact 5.7-Inch QHD+ 18:9 Display

Slashdot - 화, 2017/02/28 - 8:20오전
MojoKid writes: LG recently unveiled the new G6 smartphone, going completely back to the drawing board versus its predecessor -- the not so well-received G5. In its place is a very compact aluminum unibody design and a large 5.7-inch QHD+ display with a 2880x1440 resolution. That display is the main focal point of the G6, and it has a rather unorthodox 18:9 screen ratio, which LG says allows that smartphone to better fit in your hand. LG also notes that the aspect ratio is being adopted as a universal format from the likes of film studios and content providers like Netflix. Its thin bezel also gives the LG G6 an 80 percent screen-to-body ratio. The handset is powered by a Qualcomm Snapdragon 821 processor along with 4GB of RAM, 32GB of internal storage and a microSD slot, which can accommodate up to an additional 2TB of storage. LG also outfitted the G6 with dual 13-megapixel rear cameras: a wide angle (F2.4 / 125 degree) shooter and a standard camera (F1.8 / 71 degree) with optical image stabilization. The LG G6 launches next month and will be available in Ice Platinum, Mystic White, Astro Black color options. Pricing is TBD. Some other specs include a non-removable 3,300 mAh battery, USB-C connectivity, 802.11ac Wi-Fi, Bluetooth 4.2, fingerprint sensor and an IP68 water and dust resistance rating. It's also the first non-Google smartphone to come pre-loaded with the Google Assistant. How do you think the LG G6 compares to what we currently know about the soon-to-be-launched Samsung Galaxy S8?

Read more of this story at Slashdot.

카테고리:

CVE-2015-8900

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

CVE-2015-8901

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.

CVE-2015-8902

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.

CVE-2015-8903

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.

CVE-2016-10028

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.

CVE-2016-10029

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.

CVE-2016-5240

Latest 7 days CVE Lists - 화, 2017/02/28 - 7:59오전
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file.

페이지

KLDP 수집기 구독하기