The real RFID holes

news
Mar 2, 20072 mins

Security: What with the RFID noise this week and all Ephraim Schwartz was wondering how insecure it truly is. “The real vulnerabilities in RFID are not in the cards, but in the middleware and in the RFID reader software,” he writes. “RFID reader software and middleware is built on the assumption that it is talking to a dumb tag and so the bad guys pretend to be the dumb tag and from buffer overflow it gets right into the executable space.” Voila. Reality check.

Best of the blogs: Green IT is growing. Venture capitalists are laying down roots now, Ted Samson reports in this Sustainable IT post. SustainLane, to that end, put out a list of the five most active incubator clusters for clean technology, and Austin sits atop that throne. Three are California cities, and there’s even one east coast surprise.

Open source: Labeling oneself an open source company does not necessarily make it so. Take EntepriseDB, for instance, which sells proprietary software on top of the open source PostgreSQL. “The only ‘open’ aspect of its business is the foundation upon which it builds. Without its proprietary software, it doesn’t have a business,” Matt Asay writes in More on what constitutes an open source company. “If we call EnterpriseDB an open source company, then the same must be said of just about every single company on the planet, because I can’t actually think of a single vendor that hasn’t actively built on open source (including key members of the Proprietary Bloc).”

Hardware: The laptop battery woes keep on comin’. This time: Lenovo recalls 208,000 batteries after users complain about overheating. But, hey, this latest is a different problem than the previous one plaguing Sony batteries.