Gregg's Security News Aggregator

Sunday, November 02, 2003

11:10:08 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Technology Spending On The Rise
---------------------------------------------------------------------- Help Net Security ----------------------------------------------------------------------
2.	Customize this feed. Add more items, descriptions, time stamps, select your version of RSS, aggregate several feeds... Check out NewsIsFree's premium syndication services! (45)

10:09:49 PM

---------------------------------------------------------------------- CNET News.com - Front Door ----------------------------------------------------------------------
1.	Amazon enlists celebrities for holidays. The online retailer is hiring celebrities such as Bruce Springsteen, Michael J. Fox and R.E.M. to promote its entertainment products during the crucial holiday shopping season.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Hacking Samsung 4510-Based APs
---------------------------------------------------------------------- LinuxSecurity.com ----------------------------------------------------------------------
3.	Knowledge Center: Four ways to secure your company on a shoestring budget
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
4.	News: The Web is littered with yesteryear's castoffs _ Web sites long abandoned. The Associated Press By Anick Jesdanun
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
5.	WORM_JERMY.C
6.	WORM_MIMAIL.D
7.	WORM_JERMY.B
8.	WORM_JERMY.A

9:09:39 PM

---------------------------------------------------------------------- Stupid Security ----------------------------------------------------------------------
1.	More bad hostpital security policy

8:09:18 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Software Installation/Update via Internet Patented
---------------------------------------------------------------------- The Register ----------------------------------------------------------------------
2.	Complex tax credits harming technology firms. Defining moment
3.	SQL Server on a non MS platform? Never!. Too much opportunity cost
4.	IBM offers buy now pay later server deals. Cheapo interest too in Q4 stacker
---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
5.	China Locks Up Net Dissident. Chinese security agents have detained civil servant Du Daobin, whose essays are banned by Beijing on the Internet, for 'subverting state power.' It's all part of China's intensified crackdown on online dissent.
6.	Web Search for Everyone Else. Finding a website by typing keywords into the browser's address bar flopped in the United States, but it's proving popular in non-English-speaking countries and could one day spell trouble for traditional search engines.
7.	New Virus Dresses Up as E-Mail. Another seemingly innocuous e-mail is a virus in disguise. The virus threatens to turn any recipient's PC into a spam server ... or a frog. Bwahh haa haa haahhh!
8.	Miramax Chief: Gimme the Tapes. Miramax Films urges major Hollywood studios to relax a controversial new rule that restricts the practice of sending out tapes and DVDs of Oscar-nominated films to Academy Award voters.
9.	Time-Travel Spammer Strikes Back. Former fans of Robby Todino's bizarre mass e-mails say they're the victims of a malicious 'Joe-job' attack. Does the time-travel spammer have a mean streak? By Brian McWilliams.

7:08:59 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	India plans 2.7 billion-dollar technology project to bridge digital divide (AFP). AFP - India will spend 2.7 billion dollars in the next four years to bridge its growing technological divide, including the construction of an internet device accessible to illiterate villagers, a civil servant announced.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Google Rebuffs Microsoft Takeover Bid
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
3.	Vulnerabilities: Serious Sam Engine Remote Denial of Service Vulnerability. Serious Sam is a game engine developed by Croteam. Games based on Serious Sam include Serious Sam: the first encounter, Serious Sam: the second encounter, Deer Hunter 20...
4.	Vulnerabilities: Multiple Vendor SSH2 Implementation Buffer Overflow Vulnerabilities. Multiple vendor SSH2 implementations are reported to be prone to buffer overflows. These buffer overflows are alleged to be exploitable prior to authentication. These c...
---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
5.	U.K. Plans to Extradite Spammers. Calling the flood of junk e-mail a criminal threat rather than a mere irritant, British lawmakers hatch a plan to bring overseas bulk e-mailers to trial.
6.	Second Solar Storm Blasts Earth. The sun takes another shot at the blue planet, sending a second coronal mass ejection our way in as many days. The latest flare moved faster but was less intense than the first blast.
7.	New Stem Cell Lines Developed. A Harvard biology professor has created 17 new stem cell lines to share with other scientists. He hopes to encourage stem cell research in the face of U.S. legislation that restricted work on stem cells to a small number of cell lines.
8.	RIAA Sues 80 More Swappers. Another round of lawsuits, with warnings beforehand this time, is filed by the music industry against people it says have been sharing songs illegally on the Internet. By Katie Dean.
9.	DNA, Now in XXX-Large. Researchers wanted to be able to more easily see DNA in testing, so the folks at Stanford made it glow. By Kristen Philipkoski.
10.	Cloned Food OK by FDA. The FDA green-lights meat from cloned animals for human consumption. An official decision on whether companies can sell it is due in January.
11.	BBC Offers Power to the People. The Beeb launches iCan, a site for citizens to get government to fill in potholes and build sidewalks. Some call it real e-democracy. Others say it will not address real issues, like war and peace. By Kari L. Dean.
12.	The New Road to the White House. The blog may be the first innovation from the Internet to make a real difference in election politics. But to see just why requires a bit of careful attention. By Lawrence Lessig from Wired magazine.
13.	No More Ringing in Your Ears. If it's popular in Korea, you know it will wind up here. Your calls to a cell phone may never be the same, thanks to ring-back tones, which play music instead of bells when you connect. By Elizabeth Biddlecombe.
14.	Banking Lobby Feels the Heat. California's devastating wildfires give privacy advocates a reprieve by delaying debate over a bill that would almost certainly have derailed California's pending financial privacy bill. By Ryan Singel.
15.	Bye-Bye Data: Glitch in Panther. Apple's Panther has a serious bug that wipes out external FireWire drives during the upgrade procedure. Worse, many Mac users are backing up to external drives before upgrading. Some are losing everything. By Leander Kahney.

6:08:49 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Are MS, W3C Barking Up Wrong Prior Art Tree?

5:08:28 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Googling for Dollars: Search Engines battle for big market (AFP). AFP - Software giant Microsoft's reported bid to take over Internet search king Google has highlighted the high-stakes battle mounting over the multibillion-dollar search engine business.
2.	PC Sales Drive Global Microchip Sales Higher-Report (Reuters). Reuters - Worldwide semiconductor sales in the third quarter rose 13.7 percent from the prior quarter and 17.5 percent from a year ago, driven by strong demand for PCs, an industry group said on Sunday.
3.	Clay Aiken Memorabilia Showing Up Online (AP). AP - Clay Aiken is passing into another realm of celebrity, thanks to those who knew � or just videotaped � him before he became a household name.
4.	Programs: Barbie Looks Good on Horseback (Reuters). Reuters - (Gene Emery is a columnist who covers science and technology. His Internet address is GEmery(at)Cox.net. Any opinions in the column are his alone.)
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
5.	Hackers On Atkins

4:08:09 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Symantec Says No To Pro-Gun Sites

3:07:49 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Online Exchange Upsets Betting World (AP). AP - The traditional British betting shop fancies itself a social institution, a convivial place where people can wager a few pounds on a horse race or soccer game. But that's not how Andrew Black sees it. The Internet entrepreneur considers bookmakers financial parasites who build a fat profit into all the odds they offer.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Linus Holds Forth On the Future of Linux
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
3.	Vulnerabilities: Macromedia Flash Player Flash Cookie Predictable File Location Weakness. Macromedia Flash Player is reported to store Flash cookies (.sol files) in a predictable location on client systems. Specifically, Flash cookies will be stored in the fo...
4.	Vulnerabilities: Ledscripts LedForums Multiple Fileds HTML Injection Vulnerability. LedForums is a forum software written in PHP and MySQL. A vulnerability has been reported in the software that may allow a remote attacker to execute HTML and script cod...
---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
5.	China Locks Up Net Dissident. Chinese security agents have detained civil servant Du Daobin, whose essays are banned by Beijing on the Internet, for 'subverting state power.' It's all part of China's intensified crackdown on online dissent.
6.	Web Search for Everyone Else. Finding a website by typing keywords into the browser's address bar flopped in the United States, but it's proving popular in non-English-speaking countries and could one day spell trouble for traditional search engines.
7.	New Virus Dresses Up as E-Mail. Another seemingly innocuous e-mail is a virus in disguise. The virus threatens to turn any recipient's PC into a spam server ... or a frog. Bwahh haa haa haahhh!
8.	Miramax Chief: Gimme the Tapes. Miramax Films urges major Hollywood studios to relax a controversial new rule that restricts the practice of sending out tapes and DVDs of Oscar-nominated films to Academy Award voters.
9.	Time-Travel Spammer Strikes Back. Former fans of Robby Todino's bizarre mass e-mails say they're the victims of a malicious 'Joe-job' attack. Does the time-travel spammer have a mean streak? By Brian McWilliams.

2:37:40 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Internet Littered With Dead Web Sites (AP). AP - Despite the Internet's ability to deliver information quickly and frequently, the World Wide Web is littered with deadwood � sites abandoned and woefully out of date.
2.	Radio Tags Face Technical Hurdles, Deadlines (Reuters). Reuters - The latest technology craze can be found hanging from a Prada shirt in downtown New York or tacked onto cases of Boston-based Gillette razors.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
3.	800 Megs of Data Per Person Last Year?
---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
4.	BSkyB prepares to name new chief. Senior BSkyB executives will meet to select a new boss on Monday, amid fresh speculation that the job will go to Rupert Murdoch's son.
5.	Indian drive to bridge IT chasm. India is to spend more than $2.5bn to bridge a growing technological gap between its urban and rural areas.
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
6.	Vulnerabilities: Booby Error Message Cross-Site Scripting Vulnerability. Booby is a web-based desktop application used to manage notes, contacts, bookmarks etc. A vulnerability has been reported to present in the software that may allow a rem...
---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
7.	U.K. Plans to Extradite Spammers. Calling the flood of junk e-mail a criminal threat rather than a mere irritant, British lawmakers hatch a plan to bring overseas bulk e-mailers to trial.
8.	Second Solar Storm Blasts Earth. The sun takes another shot at the blue planet, sending a second coronal mass ejection our way in as many days. The latest flare moved faster but was less intense than the first blast.
9.	New Stem Cell Lines Developed. A Harvard biology professor has created 17 new stem cell lines to share with other scientists. He hopes to encourage stem cell research in the face of U.S. legislation that restricted work on stem cells to a small number of cell lines.
10.	RIAA Sues 80 More Swappers. Another round of lawsuits, with warnings beforehand this time, is filed by the music industry against people it says have been sharing songs illegally on the Internet. By Katie Dean.
11.	DNA, Now in XXX-Large. Researchers wanted to be able to more easily see DNA in testing, so the folks at Stanford made it glow. By Kristen Philipkoski.
12.	Cloned Food OK by FDA. The FDA green-lights meat from cloned animals for human consumption. An official decision on whether companies can sell it is due in January.
13.	BBC Offers Power to the People. The Beeb launches iCan, a site for citizens to get government to fill in potholes and build sidewalks. Some call it real e-democracy. Others say it will not address real issues, like war and peace. By Kari L. Dean.
14.	The New Road to the White House. The blog may be the first innovation from the Internet to make a real difference in election politics. But to see just why requires a bit of careful attention. By Lawrence Lessig from Wired magazine.
15.	No More Ringing in Your Ears. If it's popular in Korea, you know it will wind up here. Your calls to a cell phone may never be the same, thanks to ring-back tones, which play music instead of bells when you connect. By Elizabeth Biddlecombe.
16.	Banking Lobby Feels the Heat. California's devastating wildfires give privacy advocates a reprieve by delaying debate over a bill that would almost certainly have derailed California's pending financial privacy bill. By Ryan Singel.
17.	Bye-Bye Data: Glitch in Panther. Apple's Panther has a serious bug that wipes out external FireWire drives during the upgrade procedure. Worse, many Mac users are backing up to external drives before upgrading. Some are losing everything. By Leander Kahney.

1:37:20 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Trouble Getting to SpamCop?
2.	Microsoft Office Faces British Invasion
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
3.	Vulnerabilities: PostgreSQL To_Ascii() Buffer Overflow Vulnerability. PostgreSQL is a freely distributed Object-Relational DBMS. It is available for a number of platforms including Unix and Linux variants and Microsoft Windows operating sys...
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
4.	W32.Mimail.E@mm

12:36:59 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Digital Singles Close to Eclipsing Hard Copies (Reuters). Reuters - Digital tracks are outselling physical singles by a growing margin, a sign that consumers increasingly are embracing the brave new world of Internet downloading.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	CNN Reports on Diebold
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
3.	Vulnerabilities: Unix Shell Redirection Race Condition Vulnerability. bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability exists in these shells that...
4.	Vulnerabilities: Microsoft Windows 2000 TroubleShooter ActiveX Control Buffer Overflow Vulnerability. A vulnerability has been discovered in the Microsoft TroubleShooter ActiveX control. Because of this, it may be possible for a remote attacker to execute arbitrary with ...
5.	Vulnerabilities: Microsoft Messenger Service Buffer Overrun Vulnerability. Microsoft Messenger Service is a Windows service that is responsible for sending and receiving "net send" messages. The service also handles any messages that are sent v...
6.	Vulnerabilities: Microsoft ListBox/ComboBox Control User32.dll Function Buffer Overrun Vulnerability. A ComboBox control is a class used to display a drop-down list of predefined values, as well as a field that takes user-supplied input. A ListBox control is a similar cla...

11:36:49 AM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Intel CEO: Optimistic on Longer Outlook (Reuters). Reuters - The world's largest semiconductor maker Intel Corp. is optimistic about the future but many uncertainties make a near-term forecast difficult, its top executive said in remarks published on Sunday.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Turn Your Head Into Speakers
---------------------------------------------------------------------- SecurityFocus ----------------------------------------------------------------------
3.	Vulnerabilities: MySQL Multiple Vulnerabilities. MySQL is an open source relational database project. It is available for the Microsoft Windows, Linux, and Unix operating systems. Multiple vulnerabilities have been rep...

10:36:29 AM

---------------------------------------------------------------------- CNET News.com - Front Door ----------------------------------------------------------------------
1.	How Intuit bested Microsoft. A new book chronicles the story of how Intuit found fame and fortune and beat out Microsoft along the way.
2.	Week ahead: All systems go for Cisco. Eyes turn to the networking company, which is expected to turn in a profit during its earnings report. Plus, top Euro execs line up for ITxpo in France.

9:36:09 AM

8:35:50 AM

---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
1.	French gamers get a helping hand. France's small games developers are getting financial help to turn ideas into reality, but publishers are still playing safe.

7:35:29 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Time-travel Spammer Strikes Back
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	BadBlue 2.43 released

6:35:09 AM

---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
1.	frox FTP Proxy Can Be Crashed By Remote Users Conducting Port Scans
2.	TROJ_ENOCIDER.A

5:34:50 AM

---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
1.	China Locks Up Net Dissident. Chinese security agents have detained civil servant Du Daobin, whose essays are banned by Beijing on the Internet, for 'subverting state power.' It's all part of China's intensified crackdown on online dissent.
2.	Web Search for Everyone Else. Finding a website by typing keywords into the browser's address bar flopped in the United States, but it's proving popular in non-English-speaking countries and could one day spell trouble for traditional search engines.
3.	New Virus Dresses Up as E-Mail. Another seemingly innocuous e-mail is a virus in disguise. The virus threatens to turn any recipient's PC into a spam server ... or a frog. Bwahh haa haa haahhh!
4.	Miramax Chief: Gimme the Tapes. Miramax Films urges major Hollywood studios to relax a controversial new rule that restricts the practice of sending out tapes and DVDs of Oscar-nominated films to Academy Award voters.
5.	Time-Travel Spammer Strikes Back. Former fans of Robby Todino's bizarre mass e-mails say they're the victims of a malicious 'Joe-job' attack. Does the time-travel spammer have a mean streak? By Brian McWilliams.

4:34:30 AM

3:34:10 AM

---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
1.	U.K. Plans to Extradite Spammers. Calling the flood of junk e-mail a criminal threat rather than a mere irritant, British lawmakers hatch a plan to bring overseas bulk e-mailers to trial.
2.	Second Solar Storm Blasts Earth. The sun takes another shot at the blue planet, sending a second coronal mass ejection our way in as many days. The latest flare moved faster but was less intense than the first blast.
3.	New Stem Cell Lines Developed. A Harvard biology professor has created 17 new stem cell lines to share with other scientists. He hopes to encourage stem cell research in the face of U.S. legislation that restricted work on stem cells to a small number of cell lines.
4.	RIAA Sues 80 More Swappers. Another round of lawsuits, with warnings beforehand this time, is filed by the music industry against people it says have been sharing songs illegally on the Internet. By Katie Dean.
5.	DNA, Now in XXX-Large. Researchers wanted to be able to more easily see DNA in testing, so the folks at Stanford made it glow. By Kristen Philipkoski.
6.	Cloned Food OK by FDA. The FDA green-lights meat from cloned animals for human consumption. An official decision on whether companies can sell it is due in January.
7.	BBC Offers Power to the People. The Beeb launches iCan, a site for citizens to get government to fill in potholes and build sidewalks. Some call it real e-democracy. Others say it will not address real issues, like war and peace. By Kari L. Dean.
8.	The New Road to the White House. The blog may be the first innovation from the Internet to make a real difference in election politics. But to see just why requires a bit of careful attention. By Lawrence Lessig from Wired magazine.
9.	No More Ringing in Your Ears. If it's popular in Korea, you know it will wind up here. Your calls to a cell phone may never be the same, thanks to ring-back tones, which play music instead of bells when you connect. By Elizabeth Biddlecombe.
10.	Banking Lobby Feels the Heat. California's devastating wildfires give privacy advocates a reprieve by delaying debate over a bill that would almost certainly have derailed California's pending financial privacy bill. By Ryan Singel.
11.	Bye-Bye Data: Glitch in Panther. Apple's Panther has a serious bug that wipes out external FireWire drives during the upgrade procedure. Worse, many Mac users are backing up to external drives before upgrading. Some are losing everything. By Leander Kahney.

2:33:51 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Evaporation Prevention Using Molecular Blankets
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	Gentoo: net-www/apache Buffer overflow vulnerability

1:33:30 AM

---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
1.	SPYW_COOLWEB.A
2.	DIAL_SYS.A
3.	Immunix: apache Multiple stack overflow vulnerabilities
4.	Conectiva: libnids Remote buffer overflow vulnerability
5.	Immunix: fileutils Memory exhaustion vulnerability
6.	SuSE: thttpd Remote privilege escalation vulnerability

12:33:19 AM