Variety just launched its very own porn blog. Huh? Anyway: The Porning Report: Coverage of the Porn Industry's Move to Mainstream -- the scribe is Frank Meyer, who's also the Online Associate Editor of AVN. (thanks, Invisible Cowgirl)

SGI has announced the existence of an unspecified denial of service vulnerability in rpc.mountd....

SGI has announced the existence of a vulnerability in rpc.mountd that could lead to the unauthor...

An issue has been discovered in Apple Safari 1.1 which may allow an a...

A fine stocking stuffer idea for literate, wired pervs. On sale for under $20. Warning: do not confuse tart cards with tarot cards. Any attempt to read your future with tart cards may bring about truly hazardous results.

"This amusing, enlightening, and beautifully designed book explains the history and graphic/technical development of tart cards with over 400 examples in color. Tart cards are the means by which providers of sexual services advertise in London, and they have become as ubiquitous a symbol of that city as the red telephone boxes where they are found. The book also contains an eye-opening, comprehensive glossary of the suggestive and coded language they use. 128 pages, trade paperback."

Link (Thanks, Bruce Sterling!). update: Fleshbot picks up on our hot tartcard-on-tartcard action, and provides more links to images.

A problem in the kernel network code could make a remote denial of service possi...

A problem in the kernel routing code could make a remote denial of service poss...

A vulnerability has been reported in the TTY layer that may result in a kernel panic....

A race condition vulnerability has been discovered in the Linux execve() system call, aff...

When a blocked site is visit...

/proc/tty/driver/seria...

The Bad News: The BlogShares database was corrupted and it's taking a few days to get things back together.

The Good News: A solid agreement has been reached between BlogShares founder Seyed Razavi and technologist Jay Campbell -- the site is coming back! Premium memberships will be extended one month to make up for this downtime. If you had 8 months left, now you have 9. The reconstituted BlogShares team is doing cartwheels over the possibilities that 2004 brings. Check back for more notices, and soon a working site.

Coca-Cola will become the first high-profile consumer brand to get involved directly in the music business, launching what it claims will be the largest collection of tracks yet available. (...) The site, MyCokeMusic.com, will launch in January next year offering a catalogue of over 250,000 new and recent hits from more than 8,500 artists with all four major record labels represented.

It also promises back catalogue hits from established artists, although some major acts such as The Beatles have yet to allow their songs to be sold digitally. Given the ongoing controversy over the apparent conflict between its claim it would not market its drinks to under-12s and its sponsorship of the chart, Coca-Cola today made it clear only those over 18 would be able to buy music through the site. It plans to back the launch with a year-long campaign to promote legal music downloads, including promotions on its cans and bottles to win free tracks.

Link

A fine stocking stuffer idea for literate, wired pervs. On sale for under $20. Warning: do not confuse tart cards with tarot cards. Any attempt to read your future with tart cards may bring about truly hazardous results.

"This amusing, enlightening, and beautifully designed book explains the history and graphic/technical development of tart cards with over 400 examples in color. Tart cards are the means by which providers of sexual services advertise in London, and they have become as ubiquitous a symbol of that city as the red telephone boxes where they are found. The book also contains an eye-opening, comprehensive glossary of the suggestive and coded language they use. 128 pages, trade paperback."

Link (Thanks, Bruce Sterling!). update: Fleshbot picks up on our hot tartcard-on-tartcard action, and provides more links to images.

BBC war correspondent Stuart Hughes' courageous, first-person blog testimonial on surviving a land mine accident in Iraq brought home the personal reality of war to readers worldwide. At left, a snapshot of Stuart taken in the hospital, as he recovered from the loss of his leg earlier this year.

Stuart is now traveling to Cambodia and reporting -- through the BBC and through his blog -- on the human impact of mines, during conflicts and long after the conflicts end. He writes to BoingBoing:

"Greetings from London. Me and my artificial leg have just returned from northwestern Cambodia, where I carried out my first experiments in videoblogging. You can view my efforts on my blog here. See what you think!"

Link

The getgrouplist function in glibc does not perform adequate bounds checking on d...

A vulnerability has been reported to exist in the software that may allow a remote user to laun...

Following this LinuxInsider.com story, "Japan's Robot Developers Go Linux," Linux Devices decided to publish its own "Linux-powered Robots Quick Reference Guide." And Paul Baron spent some time shooting pictures during the 2003 International Robot Exposition in Tokyo about two weeks ago. So here is a photo gallery gathered from these two different sources. You'll meet for example TMSUK04 from Meiji University, able to communicate via e-mail, or Isamu, which climbs stairs like Asimo.

It is the eve of Eid or the end of the Ramadan and the end of the month long dawn to dusk fasting for many Muslims. It is a time of celebration on par with Christmas for Christians. But the night has begun with a bang. Literally. An IED (improvised explosive device) has exploded just outside the north gate of the 4th Infantry Division's headquarters. I hop in the back of Bressette's Humvee as the patrol heads out to investigate. Bressette gets on his two-way and in the guise of a flight attendant giving the pre-flight briefing, tells the squad the plan. (...)

I videotape Bressette as he walks back to his Humvee with the 1-22's commanding officer Lt. Col. Steve Russell. They at the curb to discuss what's next, when Bressette looks down. He sees something strange; wires sticking out of a concrete block. Suddenly this inert object is filled with potential energy.

"Sir, we better back up," Bressette says, already doing the moonwalk away from the block. "We're standing next to an IED!" The Humvee shoots forward away from the bomb, while the rest of back away. The concrete block has been hollowed out and is packed with enough plastic explosives to kill us. Bressette just shakes his head, still in disbelief that all of us, the Colonel, Bressette and his squad, myself and reporter named Betsy Heil from the Pittsburgh Tribune, were all standing next to a device that could've taken our lives within a fraction of a second.

A vulnerability has been reported in the software that may allow a remote attacker to execute HTML and scri...

6.3MB WMV Link

As the testimony of former Clinton administration Energy official and George Washington University epidemiologist David Michaels shows, the guidelines are very troubling. Michaels' complaint is that under the guise of "peer review," industry sponsored or funded attempts to undermine good science are going to get a big boost. That's for a number of reasons, one of them being the key question of who will be doing the peer reviewing.

The current guidelines say that as far as peer review goes, scientists who have worked for government have a conflict of interest and can't participate, but scientists who have worked for industry have carte blanche. As Michaels puts it, the suggestion "that academic scientists are more beholden to public funding agencies than corporate funders is on face ludicrous." And there's more. The peer review guidelines play into clever industry strategies for using the system of science to advance their economic interests.

Link

(Thanks, Henry!)

The AppleShare IP FTP server has been reported prone to a denial of servi...

A vulnerability has been reported to exist in the software that may allow an attacker to execute malici...

Leach took the renewal form the commission had sent him from his visor, which contained the access code he needed to renew. While Zier issued the summons and ordered the tow, Leach called a friend who took his credit card number and other information and renewed the registration for him, Conry said.

When Zier came back with the ticket, Leach told him the car was now registered. The computer inside Zier's patrol car confirmed it.

Link

(via Gizmodo)

Country     GDP/cap  PCs ('000s)  Piracy   WinXP Cost [3]
                                        Effective $ GDP months
Albania     1300     24           n.a.     15196    5.17
Algeria     1773     220          n.a.     11140    3.79
Angola      701      17           n.a.     28184    9.59
Argentina   7166     3415         62%      2757     0.94
Armenia     686      24           n.a.     28806    9.80
Australia   19019    10000        27%      1039     0.35
Austria     23186    2727         33%      852      0.29
Azerbaijan  688      n.a.         n.a.     28708    9.77

Link

We were the Eight-Bar Band: there was me and my bugle; and Timson, whose piano had no top and got rained on from time to time; and Steve, the front-man and singer. And then there was blissed-out, autistic Hambone, our "percussionist" who whacked things together, more-or-less on the beat. Sometimes, it seemed like he was playing another song, but then he'd come back to the rhythm and bam, you'd realise that he'd been subtly keeping time all along, in the mess of clangs and crashes he'd been generating.

I think he may be a genius.

Why the Eight-Bar Band? Thank the military. Against all odds, they managed to build automated bombers that still fly, roaring overhead every minute or so, bomb-bay doors open, dry firing on our little band of survivors. The War had been over for ten years, but still, they flew.

So. The Eight-Bar Band. Everything had a rest every eight bars, punctuated by the white-noise roar of the most expensive rhythm section ever imagined by the military-industrial complex.

We were playing through "Basin Street Blues," arranged for bugle, half-piano, tin cans, vocals, and bombers. Steve, the front-man, was always after me to sing backup on this, crooning a call-and-response. I blew a bugle because I didn't like singing. Bugle's almost like singing, anyway, and I did the backup vocals through it, so when Steve sang, "Come along wi-ith me," I blew, "Wah wah wah wah-wah wah," which sounded dynamite. Steve hated it. Like most front-men, he had an ego that could swallow the battered planet, and didn't want any lip from the troops. That was us. The troops. Wah-wah.

Link

Link

(Thanks, Caines!)

A buffer overflow vulnerability exists in mod_ssl and Apache-SSL that...

A side-channel attack against implementations of SSL exists that, through analysis of the timing of certain...

A side-channel attack in the OpenSSL implementation has been published in a recent paper that may ultimatel...

Country     GDP/cap  PCs ('000s)  Piracy      WinXP Cost [3]
                                        Effective $     GDP months
Albania     1300     24           n.a.     15196        5.17
Algeria     1773     220          n.a.     11140        3.79
Angola      701      17           n.a.     28184        9.59
Argentina   7166     3415         62%      2757         0.94
Armenia     686      24           n.a.     28806        9.80
Australia   19019    10000        27%      1039         0.35
Austria     23186    2727         33%      852          0.29
Azerbaijan  688      n.a.         n.a.     28708        9.77

Link

Link

Link

This Japanese company is selling glowing rubber duckie USB keychain drives. Capacity caps out at 16MB -- someone should make a 1GB version of this. That plays MIDI jingles. And has a fingerprint-reader-based encryption scheme. You would be the coolest kid in the Internet cafe when you plugged in your fingerprint-reading lightup singing duckie and used it to transfer your ssh keypair-halves to gain acess to your cage. Seriously.

Link

(via Gizmodo)

LayerOne is now officially accepting papers and presentations for our first session, tentatively scheduled for June 12th and 13th, 2004. We are looking for people to speak on a broad range of topics, however we encourage all submissions. Since the target audience will consist of mainly technophiles we've gathered a list of some of the topics we'd love to see covered below...

    :: Peer To Peer Networks
          :: Securing
          :: New models
    :: Network Security
          :: Flaws with current protocols
          :: Techniques for hardening
    :: Community based tools 
          :: Social software models
          :: Weblogs
    :: Encryption
          :: Securing your files
          :: Implementation
    :: Telephony 
          :: VoIP
    :: Copyright Issues
          :: Releasing works into the public domain
          :: Creative Commons

Link

(Thanks, Boogah!)

It has been reported that a buffer overflow condition is present in the authentication...