Green Dam, the mandatory censorware that will be installed on all Chinese PCs as of July 1, is remarkably insecure. J Alex Halderman from Freedom to Tinker and his colleagues Scott Wolchok and Randy Yao have released a paper, based on a mere 12 hours testing, detailing attacks that can be used to "steal private data, send spam, or enlist the computer in a botnet" and " install malicious code during the update process." They've released sample code demonstrating their findings.
The Chinese government has mandated that all PCs sold in the country must soon include a censorship program called Green Dam. This software monitors web sites visited and other activity on the computer and blocks adult content as well as politically sensitive material. We examined the Green Dam software and found that it contains serious security vulnerabilities due to programming errors. Once Green Dam is installed, any web site the user visits can exploit these problems to take control of the computer. This could allow malicious sites to steal private data, send spam, or enlist the computer in a botnet. In addition, we found vulnerabilities in the way Green Dam processes blacklist updates that could allow the software makers or others to install malicious code during the update process. We found these problems with less than 12 hours of testing, and we believe they may be only the tip of the iceberg. Green Dam makes frequent use of unsafe and outdated programming practices that likely introduce numerous other vulnerabilities. Correcting these problems will require extensive changes to the software and careful retesting. In the meantime, we recommend that users protect themselves by uninstalling Green Dam immediately.
This brainfart from the Republican speaker of the house dates to 2013, not the aftermath of his failure to pass 2017’s universally-loathed Obamacare replacement plan. Snopes: WHAT’S TRUE House Speaker Ryan said he would not give up on destroying the United States’ health care system. WHAT’S FALSE The statement was a gaffe that was taken […]
Trumpcare went down in flames yesterday, and the flames smelled faintly of burning Trumphair. But the president’s personal humiliation was shared with adviser Steve Bannon, according to reports, whose behavior around conservative Republicans made a joke of Trump’s ultimatum. Mike Allen quotes him thus: “Guys, look. This is not a discussion. This is not a […]
Republicans withdrew Trump’s favored legislative plan to replace Obamacare on Friday, understanding that they lacked the votes to pass it in the House of Representatives. This despite the president’s threat to leave Obamacare as law of the land if they did not give the American Health Care Act an up-or-down hearing today. The GOP bill—a […]
When you can’t wait for the world’s longest meeting to end, the mindless leg bouncing makes your boredom obvious and just annoys everybody else. Everyone knows the TPS reports need the damn cover sheet, but some sadistic colleague keeps forgetting, probably on purpose just to eat into your lunch hour. Enough is enough!While serving a […]
What could be more fun than a slingshot that shoots tiny airplanes? A slingshot that shoots tiny glowing airplanes of course! These toy planes are outfitted with ultra-bright LEDs, so you can fly all night without losing them in the trees.Whether you are a regular-sized child, or an overgrown adult one, these light-up flyers offer […]
You know the drill. You go to the dentist and they ask you how often you floss. You lie through your teeth and say, “every day!” (Bonus points if you have some cilantro or chives stuck in your gums from lunch). You don’t want to keep up the charade any longer, but rubbing that tiny strand […]