Microsoft Reveals Pluton, a Custom Security Chip Built into Intel, AMD, Qualcom

An anonymous reader shares a report: For the past two years, some of the world's biggest chip makers have battled a series of hardware flaws, like Meltdown and Spectre, which made it possible -- though not easy -- to pluck passwords and other sensitive secrets directly from their … | Continue reading


@it.slashdot.org | 2 years ago

The case for a four-day work week

Recently a New York Times headlined asked "Is the four-day work week finally within our grasp?"Kickstarter, Shake Shack and Unilever's New Zealand unit are among those that have experimented with the four-day workweek, or have announced plans to. And after an experiment in Icelan … | Continue reading


@it.slashdot.org | 2 years ago

The 'Bugs Are 100x More Expensive to Fix in Production' Study Might Not Exist

"Software research is a train wreck," says Hillel Wayne, a Chicago-based software consultant who specialises in formal methods, instancing the received wisdom that bugs are way more expensive to fix once software is deployed. Wayne did some research, noting that "if you Google 'c … | Continue reading


@it.slashdot.org | 2 years ago

On older versions of Android, many Let's Encrypt-secured sites may break in 2021

This year Let's Encrypt announced that it's issued a billion certificates, and it's been estimated they've made certs for almost 30% of web domains. But Friday they posted that "The DST Root X3 root certificate that we relied on to get us off the ground is going to expire &mdash … | Continue reading


@it.slashdot.org | 3 years ago

Should Employers Cut Your Salary If You Change Cities?

CNN reports:Stripe is paying employees $20,000 if they relocate from expensive cities such as San Francisco, Seattle and New York, where the company has offices. But workers who make the move will have to take a 10% pay cut. "Twitter Inc. and ServiceNow Inc. have all considered … | Continue reading


@it.slashdot.org | 3 years ago

'Top Programming Skills' list shows employers want SQL

Former Slashdot contributor Nick Kolakowski is now a senior editor at Dice Insights, where he's just published a list of the top programming skills employers were looking for during the last 30 days.If you're a software developer on the hunt for a new gig (or you're merely curiou … | Continue reading


@it.slashdot.org | 4 years ago

Startups Are Using Insect Larvae to Produce Protein-Rich Ingredients for Animals

An anonymous reader quotes a report from The New York Times: AgriProtein is among a small number of start-ups that are using insect larvae to produce protein-rich ingredients for animal feed. This nascent industry could help feed a growing human population in a way that's less da … | Continue reading


@it.slashdot.org | 4 years ago

World's Most Destructive Botnet Returns with Stolen Passwords and Email in Tow

An anonymous reader quotes a report from Ars Technica: If you've noticed an uptick of spam that addresses you by name or quotes real emails you've sent or received in the past, you can probably blame Emotet. It's one of the world's most costly and destructive botnets -- and it ju … | Continue reading


@it.slashdot.org | 4 years ago

Senator Wyden Asks NIST to Develop Standards for Safely Sending Files

Federal workers and the public in general might be mistaken about the security of .zip files, Sen. Ron Wyden said on Wednesday [PDF], and he's asking the National Institute of Standards and Technology to issue guidance on the best way to send sensitive files over the internet. Wy … | Continue reading


@it.slashdot.org | 4 years ago

What to do when your certificate authority suddenly revokes your cert

Long-time Slashdot reader rastos1 works for a mid-size software company that for many decades has been developing CAD-CAM software for the textile industry. But last weekend their code-signing certificate was revoked -- and they're looking for advice.On Monday morning we woke up … | Continue reading


@it.slashdot.org | 4 years ago

Half of all tech workers surveyed their their workplace is 'unhealthy'

"Half of tech employees think their work culture is toxic," reports one Texas news site, citing a new survey by Blind:Blind, an anonymous work talk app, asked more than 12,000 tech staffers to respond to the statement: "I consider my current workplace a healthy working environmen … | Continue reading


@it.slashdot.org | 5 years ago

Linux.org's DNS got hijacked

Linux.org reports:Wednesday afternoon around 5pm EST someone was able to get into the registrar account for our domain and point DNS to another server -- as well as lock us out from changing it. They pointed the domain name to a pretty rude page for most of the evening until Clo … | Continue reading


@it.slashdot.org | 5 years ago

Node.js event-stream hack reveals open source developer infrastructure exploit

"[O]n Nov. 26 it was publicly revealed that a widely deployed open-source Node.js programming language module known as event-stream had been injected with malicious code that looked to steal cryptocurrency wallets," reports eWeek, adding "The event-stream library has over two mil … | Continue reading


@it.slashdot.org | 5 years ago

Latest Windows 10 Update Has yet Another File-Managing Issue

An anonymous reader quotes Gizmodo:When it was discovered earlier this month that the 1809 build of Windows 10 was deleting user files just because, Microsoft halted the update until the problem was fixed. Shame, then, that another not-as-bad-but-still-bad file overwriting bug ha … | Continue reading


@it.slashdot.org | 5 years ago

Apple Has Started Paying Hackers for iPhone Exploits

Lorenzo Franceschi-Bicchierai, reporting for Motherboard: In 2016, Apple's head of security surprised the attendees of one of the biggest security conference in the world by announcing a bug bounty program for Apple's mobile operating system iOS. At the beginning, Apple struggled … | Continue reading


@it.slashdot.org | 5 years ago

Researchers disclose new 'Inverse Spectre Attack'

A new Intel security flaw has been discovered that potentially allows passwords to be stolen. An anonymous reader quotes Digital Journal:As EE News reports, researchers said the new flaw enables an "inverse spectre attack". According to Giorgi Maisuradze and Professor Dr. Christi … | Continue reading


@it.slashdot.org | 5 years ago

Avast Pulls the Latest Version of CCleaner Following Privacy Controversy

Piriform, the maker of CCleaner, has pulled v5.45 of its suite from the website after users expressed concerns over the privacy changes in the application, the company, which was acquired by Avast last year, said. In v5.45, the company made it impossible to disable "active monito … | Continue reading


@it.slashdot.org | 5 years ago

Should developers abandon Agile?

An anonymous reader quotes InfoQ: Ron Jeffries, author, speaker, one of the creators of Extreme Programming (XP), and a signatory of the Agile Manifesto back in 2001, shared a post on his blog in which he advocates that developers should abandon "Agile". The post further elaborat … | Continue reading


@it.slashdot.org | 5 years ago

Drupal Sites Fall Victims to Cryptojacking Campaigns

An anonymous reader shares a report: After the publication of two severe security flaws in the Drupal CMS, cybercrime groups have turned their sights on this web technology in the hopes of finding new ground to plant malware on servers and make money through illegal cryptocurrenc … | Continue reading


@it.slashdot.org | 6 years ago