Saturday, December 13, 2003

----------------------------------------------------------------------
Internet/Network Security
----------------------------------------------------------------------
1.  Introduction to Port Scanning. One of the primary tools used by malicious attackers to assess your network weaknesses is the port scan. By running a port scan an attacker can find out what "doors" into your network are open. Once they know that information...
2.  Educate- Don't Legislate. I have said in various rants and articles in the past that the problem with creating laws is that only the lawful care. Those who are breaking the law will most likely continue to do so whether a new law...
3.  Book Review: The Myth of Homeland Security. Marcus Ranum, well-known in the world of computer and network security, has turned his sights on the broader security of protecting our nation. In The Myth of Homeland Security Ranum takes a critical look at things such as the Homeland...

11:20:56 PM    

----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
1.  The Growing Market for Bigger Buttons. The packaging of many products ignore the physical limitations of an aging population. By Fred Brock.
2.  When a One-of-a-Kind Car Looks So Last Year. Chrysler had no idea that the PT Cruiser would be such a hit when it went on sale in the spring of 2000, or that its buzz would evaporate three years later. By Micheline Maynard.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
3.  Multimedia Sharing Just Isn't There Yet (washingtonpost.com). washingtonpost.com - Sending a song or a photo around the world can take just a few clicks and a few seconds, but if you merely want to send the same MP3 or JPEG file to the stereo or television in your living room, forget it.
4.  A Bug That Pulls the Wool Over Your Site (washingtonpost.com). washingtonpost.com - A newly discovered security bug can let Internet scammers make phony sites that look even more authentic than usual in Internet Explorer for Windows: Instead of betraying their origin by showing the wrong address under IE's toolbar, phony sites can appear to have the same address as the real thing.
5.  Camera Phone Bans Seen as Aiding Privacy (Reuters). Reuters - The camera cell phone, one of the hottest items on this year's Christmas gift list, is a growing privacy issue for both consumers and organizations.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
6.  A Return Of The King Review
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
7.  RED_9

10:20:36 PM    

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  Archos Recorder + Rockbox Plays Video
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
2.  WORM_AGOBOT.EU
3.  Cyberterrorist beware... Canada has a new Dept of Homeland Security

9:20:16 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Stunning snow-sculptures.

The winners of the 2003 International Snow Sculpture Championships in Breckenridge, Colorado have been declared -- the photos are stunning.

Link

(Thanks, Melissa!)


2.  London tube map, remixed.

Hilarious remix of the London Tube map.

184K JPEG Link

(Thanks, rackhelgand!)


3.  Mad Drew: new Toothpaste for Dinner book. Drew, the creator of the Toothpaste for Dinner comics and assorted humoribilia has a new book out, called "Mad Drew: Boyond Coffeedome." It recounts the life of a post-dot-crash temp with a near-autistic inability to understand his surroundings and a deadpan delivery that reminds me of Molesworth, by way of Office Space.

also i remembered how it is sometimes good to work when you can use things like the copy machine and stapler for free! i did not do a lot of copying when i was unemployed but now that i have a job i know that i can write things on a piece of paper and make a hundred copies of them and take them home and put them on telephone poles!! the power is amazing, if i want to tell all the poeple walking down the street to shut up then i can write SHUT UP in large letters on paper. using an office marker for free by the way!!! and then copy it and stable it to telephone poles USING AN OFFICE STAPLER, it is a dream come true!

Link

4.  Google tracks packages. Google will now search for UPS, FedEx and other numbers:

UPS tracking numbers example search: "1Z9999W999999999"
FedEx tracking numbers example search: "fedex 999999999999"
Patent numbers example search: "patent 5123123"
FAA airplane registration numbers example search: "n199ua"
FCC equipment IDs example search: "fcc B4Z-34009-PIR"
Link

(via Kottke)

5.  Teddy: mind-blowing 3D package. Teddy is a spookily cool 3D modelling package that automatically extrudes your 2D line-drawings into three-dimensional, rotatable objects. It runs in a Java applet and is mindbogglingly easy to use. The forms that it creates have a kind of organic roughness that is utterly unlike the 3D objects I've created with other 3D packages.

32MB AVI Link

(via KoKoRo)


6.  NPR clip: Paul Boutin on ICANN. Paul Boutin was on NPR the other day discussing the latest on ICANN and the Geneva WSIS summit. "As I say here," says Paul, "When Indymedia and Instapundit agree, how can we be wrong?" Link. Happy birthday, Paul!
7.  MSFT apparently devising new crapware disc format for Xbox. MSFT has a traditional business-model for the Xbox: sell people devices that are deliberately crippled, then charge them money to temporarily uncripple them. Unfortunately, MSFT's customers keep on treating their bought-and-paid for Xboxes as though they were their property, "hacking" the devices so that any software can be installed and run on them.

To combat this dreadful piracy, MSFT is apparently considering moving from traditional CD-sized silver discs for its Xbox built-in readers to some other, nonstandard format that it will have exclusive control over, via patents or trade secrets or both. This is a wonderfully terrible idea: spending extra engineering dollars to produce a device that does less, costs more, and can't be used to run all the media and code that's available on traditional optical discs. Nice one, MSFT.

According to the ad, Microsoft's Xbox team is seeking an engineer "to manage the design and development of the Xbox Game Disc for the next generation Xbox console", with the job description going on to mention anti-piracy as the first in a list of key factors for the new game disc specification.

Although it's possible that the role will simply involve devising a copy protection mechanism for games on existing DVD media, similar to that used by the current generation Xbox and the PlayStation 2, the description of the role hints strongly at the company developing a more proprietary format.

Link

8.  Xeni on NPR's "Day to Day": Holiday gizmo-shopping.

On today's edition of the NPR radio program "Day to Day," host Alex Chadwick and I talk tips about which of this holiday season's crop of electronic gadgets will make great gifts. This week: Words of advice when shopping for portable DVD players, mobile MP3 players, and universal remotes. In next week's show, more gadget fun. Link, audio stream will be available after 12PM Pacific.

9.  Group-blog on security and privacy screwups. Abuseable Tech Awareness Center is a new group blog in which prominent tech researchers will describe their ongoing projects to crack open technology and expose the security and privacy vulnerabilities in the system. The contrib list is amazing:

Steve Bellovin, AT&T Labs-Research
Matt Bishop, UC Davis
Matt Blaze, University of Pennsylvania
Dan Boneh, Stanford University
Simon Byers, AT&T Labs-Research
Bill Cheswick, Lumeta
Lorrie Cranor, AT&T Labs-Research
Ed Felten, Princeton University
Dan Geer, Independent Consultant
Tadayoshi Kohno, UC San Diego
Carl Landwehr, University of Maryland
Patrick McDaniel, AT&T Labs-Research
Gary McGraw, Cigital
Mike Reiter, Carnegie Mellon University
Avi Rubin, Johns Hopkins University
Bruce Schneier, Counterpane Internet Security
Richard M. Smith, Internet Consultant
Adam Stubblefield, Johns Hopkins University
Dan Wallach, Rice University

Link

10.  Great science fiction radio plays, open licensed and free for downloading. My pal hugh Spenser is a hell of a science fiction writer, and he's got a passion for the golden age of science fiction radio dramas. He wrote a six-part series of radio plays about the early days of science fiction fandom, which were produced by the wonderful Shoestring Theater and aired last summer on NPR. Hugh and Shoestring have released all six epiisodes as MP3s under a Creative Commons license that allows for the noncommercial redistribution -- give them a listen, they're way boss.

Amazing Struggles Episode 1, 28.8MB MP3 Link

Amazing Struggles Episode 2, 29MB MP3 Link

Amazing Struggles Episode 3, 29.4MB MP3 Link

Astonishing Failures Episode 1, 30.1MB MP3 Link

Astonishing Failures Episode 2, 31.2MB MP3 Link

Astonishing Failures Episode 3, 30MB MP3 Link

11.  Eyesore of the Month photos and commentary. Architectural critic James Howard Kunstler has a section on his website called "Eyesore of the Month," which includes a monthly photo of a hideous architectural blunder along with scathing commentary. Like me, he seems to think the 1920s represented a high water mark in esthetics.

Considering I took this shot at lunchtime (12:15) on the first nice spring day. . . and considering that the four towers are full of toiling state workers, the emptiness of the vast plaza is rather remarkable. Conclusion: it totally sucks.

Link (thanks, Steven!)

12.  Two rants on Geneva's crappy WiFi, one fictional, one non-. Lessig's just got back form the World Summit on the Information Society in Geneva, where he ran into the Swiss version of WiFi, a craptacular extravaganza of telecom stupidity compounded by the irony of hosting a summit on the "Information Society" where it's easier to get a gift bag of conference schwag than an Internet connection. Lessig's rant on the subject is entertaining, and it put me in mind of a section I wrote for my novel-in-progress, "Someone Comes to Town, Someone Leaves Town," which is about community wireless hackers (among other things) and this chunk was inspired by my trip to Geneva a couple months ago to attend the WIPO Standing Committee on Copyright and Related Rights. I've uploaded the relevant section.

"No problem -- outside every hotel and most of the cafes, I can find a signal for a network called 'SwissCom.' I log on to the network and I fire up a browser and I get a screen asking me for my password. Well, I don't have one, but after poking around, I find out that I can buy a card with a temporary password on it. So I wait until some of the little smoke-shops open and start asking them if they sell SwissCom Internet Cards, in my terrible, miserable French, and after chuckling at my accent, they look at me and say, 'I have no clue what you're talking about,' shrug, and go back to work.

"Then I get the idea to go and ask at the hotels. The first one, the guy tells me that they only sell cards to guests, since they're in short supply. The cards are in short supply! Three hotels later, they allow as how they'll sell me a 30-minute card. Oh, that's fine. 30 whole minutes of connectivity. Whoopee. And how much will that be? Only about a zillion Swiss pesos. Don't they sell cards of larger denominations? Oh sure, two hours, 24 hours, seven days -- and each one costs about double the last, so if you want, you can get a seven day card for about as much as you'd spend on a day's worth of connectivity in 30-minute increments -- about $300 Canadian for a week, just FYI.

"Well, paying 300 bucks for a week's Internet is ghastly, but very Swiss, where they charge you if you have more than two bits of cheese at breakfast, and hell, I could afford it. But Three hundred bucks for a day's worth of 30-minute cards? Fuck that. I was going to have to find a seven-day card or bust. So I ask at a couple more hotels and finally find someone who'll explain to me that SwissCom is the Swiss telco, and that they have a retail storefront a couple blocks away where they'd sell me all the cards I wanted, in whatever denominations I require.

Link

13.  What Dean needs from the Dems. An interesting view of the Dean campaign: a borging of the Democratic party in order to rescue the brand for an Internet-centric political party:

Other candidates -- Joseph Lieberman , John Kerry, John Edwards -- are competing to take control of the party's fundraising, organizational and media assets. But Dean is not interested in taking control of those depreciating assets. He is creating his own party, his own lists, his own money, his own organization. What he wants is the Democratic brand name and legacy, its last remaining asset of value, as part of his marketing strategy.

Link

(via Many 2 Many)

14.  Holographic lollies. Screw lollipops screened with detailed edible artwork: these guys are selling giant lollipops with edible holograms embedded in them.

Link

(via Making Light)

15.  Bringing pinball to MAME, one table at a time. MAME is a project to allow for the emulation of every video-game ever minted, but what if you're more the pinball type? No fear: a group of MAME hackers are building virtual pinball machines that lovingly emulate every jot and tittle of every pinball table under the sun.

Link

(via Smartpatrol)

----------------------------------------------------------------------
Calvin and Hobbes
----------------------------------------------------------------------
16.  Calvin and Hobbes for 11 Dec 1992.
17.  Calvin and Hobbes for 12 Dec 1992.
18.  Calvin and Hobbes for 13 Dec 1992.
----------------------------------------------------------------------
Dilbert
----------------------------------------------------------------------
19.  Dilbert for 12 Dec 2003.
20.  Dilbert for 13 Dec 2003.
----------------------------------------------------------------------
Non Sequitur
----------------------------------------------------------------------
21.  Non Sequitur for 12 Dec 2003.
22.  Non Sequitur for 13 Dec 2003.
----------------------------------------------------------------------
Penny Arcade!
----------------------------------------------------------------------
23.  As Foretold In Revelations.
----------------------------------------------------------------------
User Friendly
----------------------------------------------------------------------
24.  User Friendly for 12 Dec 2003.
25.  User Friendly for 13 Dec 2003.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
26.  Barney Cam Is 'Reloaded' for a Christmas Sequel from the White House. The presidential terrier, Barney, returned on Friday for his second annual dog's-eye view of the White House Christmas decorations in "Barney Cam II: Barney Reloaded." By Elisabeth Bumiller.
27.  Canadian Ruling on Web Music. Downloading copyrighted music from peer-to-peer networks is legal in Canada, although uploading files is not, Canadian copyright regulators said on Friday. By Cnet News.com.
28.  Boeing Set to Approve New Aircraft. Boeing is expected to approve the marketing of the new 7E7 commercial jet on Monday. The 7E7 would be the company's first significant jet program since 1990. By Reuters.
29.  An Online Search for Fun, Without a Look for Love. A growing number of online services are bringing together New Yorkers who are just looking for friendship. By S. Lee Jamison.
30.  NASA Plans Wing Sensors for Shuttle to Detect Hits by Debris. NASA intends to line the wings of its space shuttles with sensors to detect hits by debris or other objects during flights, an agency advisory committee said on Thursday. By Warren E. Leary.
31.  Comparing Genomes Shows Split Between Chimps and People. By comparing the human genome with that of chimpanzees, people's closest living relative, scientists have identified a partial list of the genes that make people human. By Nicholas Wade.
32.  Technology Makes Comeback in Realigning of Nasdaq Index. The Nasdaq 100, on its way to a very good year, is bringing in technology stocks again. By Floyd Norris.
33.  Virginia Indicts 2 Under Antispam Law. Two people have been charged with four felony counts, each of which carries a maximum penalty of five years in prison, a $2,500 fine or both. By Saul Hansell.
34.  Magnetic Field Is Fading, but No Dire Effects Are Foreseen. Geophysicists increasingly wonder whether the magnetic field has begun one of its occasional reversals that, over time, might lead to compasses pointing south instead of north. By Kenneth Chang.
35.  John W. Sidgmore, Ex-Chief of WorldCom, Dies at 52. John W. Sidgmore was a leading Internet entrepreneur who became chairman and chief executive of the scandal-ridden WorldCom. By Barnaby J. Feder.
----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
36.  Canada deems P2P downloading legal. Downloading copyrighted music from peer-to-peer networks is legal but uploading files isn't, say Canadian copyright regulators, who also impose a $25 fee on some MP3 players.
37.  Disney heir launches anti-Eisner site. Roy Disney, who resigned last month, creates a Web site to drum up support in his campaign to oust Michael Eisner, CEO of Walt Disney Co.
38.  Users cling to old Microsoft operating systems. The software giant can stop selling older operating systems, and it can even stop supporting them, but that doesn't mean that customers won't still use them.
39.  Google delivers parcel search. A new feature on the search site lets people type in their package tracking numbers to turn up shipping information directly from FedEx or UPS Web pages.
40.  Attack on SCO sites at an end. The controversial company's Web site and file servers are back online after being hit by a denial-of-service attack that cut off access for almost two days.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
41.  Sun Adds Faster Processors To Fire V1280 Server (TechWeb). TechWeb - The midrange Sun Fire V1280 server can be configured with anywhere from four to 12 UltraSparc III processors, boosting the server's speed by as much as 30 percent over earlier 900MHz UltraSparc III processors.
42.  Microsoft Ending Support for Windows 98 (AP). AP - Microsoft Corp. will stop offering support services next month for computer users whose machines are still running Windows 98, though the company said it might still release security patches if threats appear serious enough.
43.  Doubts Linger About SCO's Cyber-Attack Claims (TechWeb). TechWeb - Linux advocates retract accusations that SCO was lying about being attacked, but the advocates say damage could have been mitigated by competent network administrators.
44.  Cerritos Goes Wi-Fi (TechWeb). TechWeb - The California city, which couldn't get DSL or cable service, has approved a proposal by Airnet Wireless to install a citywide Wi-Fi network.
45.  Canada to Charge Music Royalties on MP3s (AP). AP - The cost of an MP3 player will increase in Canada after the government's copyright agency decided Friday to charge a tax of up to $19 per unit to reimburse singers and songwriters.
46.  Sony, Bertelsmann Sign Music Merger Deal (Reuters). Reuters - Germany's Bertelsmann AG (BERT.UL) and Sony (6758.T) of Japan on Friday finalized terms of an agreement to merge their music businesses, as the industry confronts competition from DVDs and video games and the threat of Internet file-swapping.
47.  Man pleads not guilty in spam rage (SiliconValley.com). SiliconValley.com - The Sunnyvale man arrested last month for raging against the spam machine pleaded not guilty Thursday to federal charges that he threatened to kill or injure employees of a Canadian company he believed had been bombarding him with unsolicited e-mails.
48.  Analysis: Hard Disks Add Muscle to DVD Recorder Growth (Reuters). Reuters - The digital shift is here and it's about to claim your video cassette recorder (VCR).
49.  Internet Summit Makes Call to 'Wire Up' the World (Reuters). Reuters - More than 170 countries approved an ambitious call to extend the Internet and the benefits of information technology to the poorest corners of the world Friday, but dodged some of the difficulties of doing so.
50.  Programs: Saga of Probing Photog Has Plenty of Heart (Reuters). Reuters - (Gene Emery is a columnist who covers science and technology. His Internet address is GEmeryCox.net. Any opinions in the column are his alone.)
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
51.  Retired Microsoft Operating Systems Still Popular
52.  Solaris 9 x86 Review
53.  King of Fighters Censored for Stateside Release
54.  The Year In Ideas
55.  Pigeons Faster than Internet
56.  Building Rackmount Cabinet for Home Use?
57.  Groklaw Outlines More SCO Linux Contributions
58.  San Francisco's Got Free Wi-Fi
59.  High-Tech Firms Worry About Taiwan-China Tensions
60.  Radio Credit Cards Move Closer
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
61.  The Register: Nextel expands '4G' trials. It's hard to see this taking off until 802.20 is finalized.
62.  The Register: Flextronics demos open source chips.
63.  Meanwhile the Neuston Virtuoso MC-500 is the first of these media player set tops to have DVI output and it claims to support OS X. It looks like there are still some bugs to be worked out.
64.  Tom's Hardware Guide: Pinnacle ShowCenter: Symbiosis Between PC And Hi-Fi Device. I love the guts; now that's an efficient design. On AVS Forum they've discovered that "their server app is really a web server running on port 8000 on your pc. The showcenter client box appears to be mostly a web browser. The server app appears to be mostly written in PHP."
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
65.  Bertelsmann faces $1bn pay-out. The German music giant loses a breach of contract case over its lucrative sale of AOL Europe.
66.  Google expands into India. The popular internet search engine tells the Wall Street Journal it will open a research centre in India.
67.  Internet shopping hits new high. This year's pre-Christmas surge of internet shopping has increased by 44% over the past year, a new report suggests.
68.  Concern over India's e-waste. Mountains of electronic waste are quietly creating a growing problem for India's environment.
69.  Hi-tech medi-truck heads to Africa. A monster all-terrain truck has been kitted out by a Russian group to deliver medical services to people in Africa.
70.  Iran defends web control. Iranian authorities have defended the country's web censorship rules at the UN's digital divide summit.
71.  Mobile boost for conservationists. Mobile users can now play the ape while helping conservation efforts with a new mobile download service.
72.  Games show nasty side of life. Games are tapping into the disturbing side of real-life culture, says Daniel Etherington of BBCi Collective in his weekly column.
73.  UN summit pledges net for all. Delegates at UN's digital divide summit agree on principles of web equality, but fail to commit on who pays for them.
74.  Local activists seek web voice. Development groups are adapting technology to help with local concerns that are relevant to them.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
75.  WorldCom's former CEO Sidgmore dies at 52. John Sidgmore, the Internet pioneer and former WorldCom Inc. executive who steered the company as it emerged from a multibillion dollar accounting scandal, died Thursday at the age of 52.
76.  Verdict in 'DVD Jon' appeal expected Dec. 22. The Oslo Court of Appeals (Borgarting lagmannsrett) heard closing arguments Wednesday and Thursday in the trial of Jon Lech Johansen, also known as "DVD Jon." A verdict is expected on Dec. 22.
77.  StorageTek defines ILM strategy - Infoworld Staff. Storagetek next year plans to flesh out its ILM (information lifecycle management) strategy with a raft of products designed to help customers manage data from creation to obliteration.
78.  Infosecurity conference focuses on mobility. "Management" and "mobility" were words on the tips of many attendees' tongues at this year's InfoSecurity 2003 Conference and Exhibition here in New York, as leading security technology vendors displayed products for managing security devices, combating spam and securing mobile devices.
79.  Intel to ring in 2004 with delayed Prescott launch. Any expectations that Intel Corp.'s next-generation Prescott processor will make an appearance in 2003 are fading fast as the year winds to a close. The chip had been expected to make its debut in the fourth quarter, but only a select number of PC manufacturers will get their hands on Intel's first 90-nanometer processor before 2004.
80.  Open source said on cusp of broad acceptance - Infoworld Staff. Burlingame, Calif. -- Open source software, in which developers get access to source code, still is not being used by the masses but is on the cusp of a much broader acceptance, said Brian Behlendorf, founder of Apache, during a speech at a Software Development Forum conference here on Thursday.
81.  WSIS - Head of US delegation talks shop. Many eyes have been fixated on the U.S. delegation during the three-day World Summit on the Information Society (WSIS) here in Geneva and, in particular, during the numerous rounds of difficult preparatory talks.
82.  TI prepares 90 nanometer cell phone chip. Texas Instruments Inc. (TI) plans to release samples of its latest OMAP chip, which will also be the company's first 90 nanometer chip, in the first quarter of 2004, it said Thursday.
83.  Oracle adds grid and BPM functions to app server. Oracle is releasing a substantial upgrade to its application server software, as part of a planned refresh of the company’s entire product line to support the grid computing model.
84.  Microsoft to cease host of older products - Infoworld Staff. Microsoft will stop distributing several older products this week as a result of a legal settlement with Sun Microsystems in a dispute over Java, Microsoft said.
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
85.  Verdict in 'DVD Jon' appeal expected Dec. 22. The Oslo Court of Appeals (Borgarting lagmannsrett) heard closing arguments Wednesday and Thursday in the trial of Jon Lech Johansen, also known as "DVD Jon." A verdict is expected on Dec. 22.
86.  Infosecurity conference focuses on mobility. "Management" and "mobility" were words on the tips of many attendees' tongues at this year's InfoSecurity 2003 Conference and Exhibition here in New York, as leading security technology vendors displayed products for managing security devices, combating spam and securing mobile devices.
87.  Intrusion detection or protection? - Infoworld Staff. Uncle Sam likes his networks buttoned down, which means firewalls just won't cut it. True, the newer firewalls include limited IDS (intrusion detection system) or IDP (intrusion detection and prevention) functionality up to layer 4, and significant protection can be gained by moving up the stack to layer 7. But for a more iron-clad approach, a dedicated IDS or IDP solution generally fares better.
88.  MailMarshal puts spam in a headlock - Infoworld Staff. NetIQ’s MailMarshal fulfills the same need as the products in my recent spam-product roundup, but this anti-spam gateway will best satisfy Windows-centric organizations.
89.  Government enterprise: Peering into your network - Infoworld Staff. A network without adequate security is a liability. From the ever-present threat of worms and viruses that can compromise network hosts to the potential for data leaks, the risk is far greater than the savings in resources and workhours saved by not protecting the network.
90.  Basic security is the best foundation - Infoworld Staff. I walked down the grassy slope, pausing to knock the soil off my shoes. I looked back at the gravesite in the gathering darkness. The granite cover gleamed a little in the light from the nearly full moon, and it was a peaceful sight hastened only by the bone-chilling wind that seemed to cross the Kansas prairie with no pause between there and the North Pole.

ADVERTISEMENT:

Get strong 128-bit SSL security for your online business - To secure your servers with 128-bit SSL encryption, download a copy of the free VeriSign Guide, "Securing Your Web site for Business." You'll learn everything you need to know about encrypting e-commerce transactions, securing corporate intranets, and authenticating your Web site.

91.  2000 - 2003: The Age of (In)Security - Infoworld Staff. A San Jose Mercury News TV ad in the spring of 2001 summed up the era neatly: “A month ago, you were a 28-year-old millionaire. Now you’re just 28.”
92.  Protecting the desktop - Infoworld Staff. A desktop computer is the point of entry into the IT system for most users. In too many cases, a desktop computer is also the point of entry for an attacker. Desktop security should never be taken for granted. In particular, vulnerabilities and their remediation should be examined in several key areas.
93.  System security's hit parade - Infoworld Staff. Malicious hacking attempts get most of the press coverage, but they are only one of the dangers for security administrators to be aware of. If you’re looking for an excuse to have a sleepless night, consider the following range of popular threats.
94.  Get security right the first time - Infoworld Staff. The first thing to understand about IT security is that technology alone can’t save you. It’s tempting to think that a fabulous new product, whether hardware or software, will come to the rescue, solving security problems while leaving users happy and productive.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
95.  Linux Advisory Watch - December 12th 2003
96.  Linux Security Week - December 8th 2003
97.  Guardian Digital Customers Protected From Linux Kernel Vulnerability
98.  Spam Rules
99.  How To Use Encryption On Database Contents
100.  Linux in the Security Crosshairs
101.  Microsoft Probes Flaw That Could Help Fraudsters Create Fake Web Sites
102.  Virginia indicts two on spam felony charges
103.  Slackware: lftp Code parsing vunlerability
104.  Mandrake: net-snmp Improper access vulnerability
----------------------------------------------------------------------
Meerkat: An Open Wire Service: O'Reilly Weblogs
----------------------------------------------------------------------
105.  Building the Internet Political Party. Britt Blaser's reflections on a Christopher Lydon interview with Clinton spinmeister Dick Morris. Morris argues that the internet is truly disruptive in politics, but that the Republicans still have a massive edge in online organizing. Far from the traditional wisdom. But read what Britt makes of the challenge and the opportunity...
----------------------------------------------------------------------
[O.S.S.R]
----------------------------------------------------------------------
106.  IP Spoofing: An Introduction
107.  InfoSec 2003: 'Zero-day' attacks seen as growing threat
----------------------------------------------------------------------
SecurityNewsPortal.com
----------------------------------------------------------------------
108.  New Homeland Security news and global terrorism web site launched
109.  Hackers spying on major bank defeated by beta version of CyberShield Intrusion Prevention and Deception Security Network Suite
110.  Terrorist and hackers beware... Canada has new Dept of Homeland Security to handle security threats and disasters
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
111.  Elsewhere: Sun agony aunt in virus scorcha scoop. Dear Deidre, the UK problem page featured in The Sun newspaper, has junked its old antivirus systems after suffering application conflicts and a "disastrous" virus infect...
112.  Elsewhere: On-line spending jumps 35% despite security concerns. The amount of money spent on-line by Canadians rose sharply last year, even though the vast majority of shoppers continue to have ''reservations'' about sending their ban...
113.  News: Appeal of DVD hacker's acquittal concludes in Norway. The Associated Press
114.  News: DVD Jon appeal ends: verdict before Xmas. The Register By Andrew Orlowski [andrew dot orlowski at theregister dot co dot uk]
115.  News: Will VoIP be wiretap-ready?. Widespread consumer Internet telephony could come with an easy-to-use government surveillance capability.
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
116.  BugTraq: Re: SSH vs. IKE trust models (was Re: Insecure IKE Implementations Clarification). Sender: Florian Weimer [fw at deneb dot enyo dot de]
117.  BugTraq: Several Things about IE bugs. Sender: Liu Die Yu [liudieyuinchina at yahoo dot com dot cn]
118.  BugTraq: Advisory: Dark Age of Camelot - Weak encryption of network traffic exposed personal information.. Sender: Todd Chapman [tchapman at leoninedev dot com]
119.  BugTraq: Re: Insecure IKE Implementations Clarification. Sender: [itojun at itojun dot org (Jun-ichiro itojun Hagino)]
120.  Vulnerabilities: Mambo Server user.php Script Unauthorized Access Vulnerability. Mambo Open Source Server is a web based content management system.

A vulnerability has been reported to exist in the software that may allow a remote attacker change use...

121.  Vulnerabilities: Mambo Open Source 4.0.14 Server SQL Injection Vulnerability. Mambo Open Source is a web based content management system.

It has bee reported that Mambo Open Source 4.0.14 Server is prone to SQL injection attacks.

The problem is s...

122.  Vulnerabilities: Mambo Open Source PollBooth.PHP Multiple SQL Injection Vulnerabilities. Mambo Open Source is an open source web content management system.

Mambo Open Source is prone to SQL injection attacks. This is due to an input validation error in 'poll...

123.  Vulnerabilities: Land Down Under Auth.PHP SQL Injection Vulnerability. Land Down Under is a website engine that is implemented in PHP and back-ended by MySQL.

Land Down Under is prone to SQL injection attacks. This is due to an input vali...

124.  Vulnerabilities: FreeRADIUS Tag Field Heap Corruption Vulnerability. FreeRADIUS is a freely available, open source implementation of the RADIUS protocol. It is available for the Unix and Linux platforms.

A problem has been identified in ...

125.  Vulnerabilities: Multiple Ethereal Protocol Dissector Vulnerabilities. Multiple Ethereal protocol dissectors are prone to remotely exploitable vulnerabilities. These issues have been addressed with the release of Ethereal 0.9.16.

The follo...

----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
126.  HP email abuse dismissals unfair, says tribunal. Inconsistent
127.  Microsoft wants non-standard media for Xbox 2?. Job ad gives another hint about Xenon
128.  Sun adds a little more juice to v1280. Some say 30 percent faster
129.  Windows Longhaul? Longhorn could be 2008, says Gartner. Why this could be a big problem for Microsoft
130.  IBM cuddles up to Red Hat. High-end file system boost too
131.  Living Tomorrow Today. Home of the Future in Amsterdam
132.  World Summit is wholesale triumph. If you listen to the organisers...
133.  Canada OKs P2P music downloads. iPod royalty tax
134.  Nextel expands '4G' trials. But Flarion's lips are sealed
135.  Iran president rejects net censorship slur. Blocking websites? Us?
----------------------------------------------------------------------
Wired News
----------------------------------------------------------------------
136.  Virginia Nabs Two Big Spammers. Two prolific spammers from North Carolina are facing four felony charges for sending thousands of unsolicited e-mail pitches. Each count under Virginia's tough antispam law carries up to five years in prison and fines of up to $2,500.
137.  Microsoft Loses the Swastika. After a Microsoft customer discovers two Swastikas included in Office's 'Bookshelf Symbol 7' font, the software company says a utility will be immediately available on its website to remove the offending characters.
138.  U.N. Summit Calls for Wired World. The first World Summit on the Information Society wraps up with a plan for extending the Internet and other modern wonders to the planet's poorest countries. No word yet on who will pay.
139.  A Whodunit for the Digital Age. Suppressing a desire to read other people's e-mail? Play private eye, or voyeur, with a new e-book format that bases its plot on a string of e-mail missives, website visits and instant messages. By Kari L. Dean.
140.  Professor, Biotech Butt Heads. A teacher denied tenure at the University of California at Berkeley says he was turned down because the biotech industry didn't like his research into genetically modified corn. The school disagrees. By Kristen Philipkoski.
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
141.  Virginia nabs two big spammers
142.  InfoSec 2003: 'Zero-day' attacks seen as growing threat
143.  The CIO as a security strategist
144.  Los Alamos National Lab suffers security lapse
145.  Commentary: DOS attack--paying for others' problems
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
146.  Opera Browser Arbitrary File Deletion Vulnerability
147.  Evans on security: At least it's improving
148.  Johnson gets official nod as DHS security chief
149.  Phoenix School to Install Face Scanners
150.  School face scanner to search for sex offenders
151.  Re: SSH vs. IKE trust models (was Re: Insecure IKE Implementations Clarification)
152.  Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco,
153.  Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco,
154.  Advisory: Dark Age of Camelot - Weak encryption of network traffic exposed personal information.
155.  Several Things about IE bugs
156.  News: Will VoIP be wiretap-ready?
157.  Norton AntiVirus Virus Definitions December 12, 2003
158.  Re: Insecure IKE Implementations Clarification
159.  Re: A .NET classbug that can hang a machine instantly
160.  Re[2]: A new TCP/IP blind data injection technique?

8:18:21 PM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Adobe Profit Doubles, Stock Jumps (Reuters). Reuters - Adobe Systems Inc. (ADBE.O) on Thursday posted a quarterly profit that doubled from a year earlier, beating company and Wall Street targets, on strong sales of its Acrobat software for sharing documents over the Internet.
2.  CenturyTel Wants to Add Wireless, Video Services (Reuters). Reuters - CenturyTel Inc. (CTL.N) said on Thursday it is in talks for partnerships with wireless telephone companies and satellite broadcasters, and it remains on the hunt for acquisitions in the rural telephone market.
3.  PC Market to Reach Record Shipment Levels (AP). AP - Driven by consumer demand and enticing bargains, the personal computer market is expected to reach "record" shipment levels in 2003 and 2004, according to a report Thursday by a market research firm.
4.  Roy Disney Launches Web Site in Anti-Eisner Drive (Reuters). Reuters - Walt Disney Co.(DIS.N) former board member Roy Disney has taken his case for ousting Chief Executive and Chairman Michael Eisner to the Internet with the launch of a Web site, www.savedisney.com.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
5.  Canadians May Pay Levy on MP3 Players

7:53:28 PM