Long-time Slashdot reader NewYorkCountryLawyer writes: In the federal court for the Eastern District of New York, where all Malibu Media cases have been stayed for the past year, the Court has lifted the stay and denied the motion to quash in the lead case, thus permitting all 84 cases to move forward. In his 28-page decision (PDF), Magistrate Judge Steven I. Locke accepted the representations of Malibu’s expert, one Michael Patzer from a company called Excipio, that in detecting BitTorrent infringement he relies on “direct detection” rather than “indirect detection”, and that it is “not possible” for there to be misidentification.

Read more of this story at Slashdot.

Source: Slashdot – BitTorrent Cases Filed By Malibu Media Will Proceed, Rules Judge

Researchers “have devised a new way to decrypt secret cookies which could leave your passwords vulnerable to theft,” reports Digital Trends. Slashdot reader msm1267 writes: New attacks revealed today against 64-bit block ciphers push cryptographic ciphers such as Triple-DES (3DES) and Blowfish closer to extinction. The attacks, known as SWEET32, allow for the recovery of authentication cookies from HTTPS traffic protected by 3DES, and BasicAUTH credentials from OpenVPN traffic protected by default by Blowfish. In response, OpenSSL is expected to remove 3DES from its default bulid in 1.1.0, and lower its designation from High to Medium 1.0.2 and 1.0.1. OpenVPN, meanwhile, is expected to release a new version as well with a warning about Blowfish and new configuration advice protecting against the SWEET32 attacks. The researchers behind SWEET32 said this is a practical attack because collisions begin after a relatively short amount of data is introduced. By luring a victim to a malicious site, the attacker can inject JavaScript into the browser that forces the victim to connect over and over to a site they’re authenticated to. The attacker can then collect enough of that traffic — from a connection that is kept alive for a long period of time — to recover the session cookie.

Read more of this story at Slashdot.

Source: Slashdot – New SWEET32 Crypto Attacks Speed Up Deprecation of 3DES, Blowfish

Continuing its rapid release cycle, ReactOS has unveiled version 0.4.2 of its free “open-source binary-compatible Windows re-implementation.” Slashdot reader jeditobe reports that this new version can now read and write various Linux/Unix file systems like Btrfs and ext (and can read ReiserFS and UFS), and also runs applications like Thunderbird and 7-Zip.
ReactOS 0.4.2 also features Cygwin support, .NET 2.0 and 4.0 application support, among other updated packages and revised external dependencies such as Wine and UniATA. The team also worked to improve overall user experience…

ReactOS is free. You can boot your desktop or laptop from it. It looks like Windows (a 10-year-old version, anyway), so you already know how to use it. And it’ll run some Windows and DOS applications, maybe including DOS games that regular 64-bit Windows can no longer touch.
These videos even show ReactOS running Elder Scrolls: Skyrim and Doom 3.

Read more of this story at Slashdot.

Source: Slashdot – ReactOS 0.4.2 Released: Supports Linux Filesystems,<nobr> <wbr></nobr>.NET Applications, and Doom 3