Java

PHP, Python and Google Go Fail To Detect Revoked TLS Certificates (softpedia.com) 64

An anonymous reader writes: Four years after the release of a groundbreaking study on the state of SSL/TLS certificates in non-browser applications (APIs [to be exact]), some programming languages fail to provide developers with the appropriate tools to validate certificates. Using three simple test scripts connected to a list of known vulnerable HTTPS servers, researchers logged their results to see which programming languages detected any problems. According to the results, all tested programming languages (PHP, Python, Go), in various configurations, failed to detect HTTPS connections that used revoked SSL/TLS certificates. This is a problem for HTTPS-protected APIs since users aren't visually warned, like in browsers, that they're on an insecure connection. "PHP, Python, and Google Go perform no revocation checks by default, neither does the cURL library. If the certificate was compromised and revoked by the owner, you will never know about it," noted Sucuri's Peter Kankowski.
Bitcoin

Bitcoin Could Consume As Much Electricity As Denmark By 2020 (boingboing.net) 170

JustAnotherOldGuy writes: The numbers are very back-of-the-envelope and assume a worst case: widespread adoption of Bitcoin and not much improvement in Bitcoin mining activity, along with long replacement cycles for older, less efficient mining rigs. But even the best case [scenario] has Bitcoin consuming a shocking amount of electricity. [As mentioned in a report from Motherboard,] "The results show that in an optimistic scenario, the increase in electricity consumption of the Bitcoin network compared to now is not shocking, from around 350 MW to around 417 MW, but still on the order of one small power station. If things play out a little less favorably, however, the Bitcoin network may draw over 14 Gigawatts of electricity by 2020, equivalent to the total power generation capacity of a small country, like Denmark for example.
Software

Apple Releases iOS 9.3.1 With Fix For Unresponsive Links 36

An anonymous reader writes: Apple, on Thursday, rolled out a minor update to iPhone, iPad, and iPod devices. The update, dubbed iOS 9.3.1, brings with it a fix for a software glitch that caused many apps -- including Safari, and Chrome -- to freeze and crash when trying to open a link. The issue was related to Universal Link, a feature Apple first introduced with iOS 9. Many reported that some apps including Booking.com were abusing this capability, causing the Universal Link database to overload.
Microsoft

Microsoft Makes Xamarin Free In Visual Studio, Will Open Source Core Xamarin Tech (venturebeat.com) 143

An anonymous reader cites a report on VentureBeat: Microsoft today announced that Xamarin is now available for free for every Visual Studio user. This includes all editions of Visual Studio, including the free Visual Studio Community Edition, Visual Studio Professional, and Visual Studio Enterprise. Furthermore, Xamarin Studio for OS X is being made available for free as a community edition and Visual Studio Enterprise subscribers will get access to Xamarin's enterprise capabilities at no additional cost. The company also promised to open source Xamarin's SDK, including its runtime, libraries, and command line tools, as part of the .NET Foundation 'in the coming months.' Plenty of developers will find this announcement exciting. Xamarin being free is a big deal.
Advertising

Using Adblock Plus to Block Ads is Legal, Rules German Court -- For the Fifth Time (arstechnica.co.uk) 237

An anonymous reader quotes a report from Ars Technica: Using Adblock Plus to block ads on websites is legal, a German regional court has ruled. The suit, brought by the company behind the leading German newspaper Suddeutsche Zeitung, is the fifth such case to be decided in favor of the makers of the software, who are based in Germany. The court in Munich also ruled that the "Acceptable Ads initiative," a scheme that requires larger companies to pay for their ads to be whitelisted by Adblock Plus, is acceptable under German law. "To the contrary, said the court, users have the right to block those or any ads, because no such contract exists," Adblock Plus's Ben Williams writes. "Additionally, the judge ruled that by offering publishers a way to serve ads that ad-blocking users will accept, the Acceptable Ad initiative provides them an avenue to monetize their content, and therefore is favorable, not disadvantageous, to them." Previously, Adblock Plus's parent company Eyeo has won court cases against the German publishing giant Axel Springer, Germany television companies Pro 7/Sat 1 and RTL Interactive, and against the companies operating the Zeit Online and Handelsblatt websites.

Slashdot Top Deals