Friday, January 30, 2004

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Secret, personal weblog of slain CNN employee Duraid Isa Mohammed. A BoingBoing reader who wishes to remain anonymous points us to what is understood to be the personal weblog of slain CNN employee Duraid Isa Mohammed. Duraid died earlier this week along with fellow CNN employee Yasser Khatab, when the vehicle they were traveling in came under fire from Iraqi insurgents. The weblog, "Memories of a war torn heart.", was apparently started just one week before Duraid was killed.

The following poem, "Risks" -- printed in English and signed "anonymous" -- was found in Duraid's personal car in Baghdad. The nature of the poem is similar to other material on his short-lived blog. It is presumed that Duraid did not author the poem, but that the handwriting was his (a quick Google search turns up the same poem on various "inspirational quotes" webpages throughout the 'Net).

To laugh is to risk appearing the fool.
To weep is to risk appearing sentimental.
To reach out for another is risk involvement.
To expose feelings is to risk exposing your true self.
To place your ideas, your dreams, before a crowd Is to risk their loss.
To love is to risk not being loved in return.
To live is to risk dying. To hope is to risk despair.
To try is to risk failure.
But risks must be taken, because the greatest hazard in life is To risk nothing.
The person who risks nothing dies nothing, Has nothing and is nothing.
They say they avoid suffering and sorrow, But they cannot learn, Feel, change, grow, love, feel.
Chained by their attitudes, they are slaves.
They have forfeited their freedom.
Only a person who risks is free.
-- Anonymous

Duraid's blog mentions that its author was in Iraq, "working as a journalist for a large corporation", permitted to travel with the military, and having been a DJ in Baghdad before the war. This link to a related CNN story mentions also that he was a DJ before the war. The BoingBoing reader provides further information (and asks that the information not be repeated here) which leads me to believe that the blog is in fact Duraid's.

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
2.  Oracle Says Share Sale Plan Adopted (Reuters). Reuters - Software provider Oracle Corp. (ORCL.O) on Friday said Chief Executive Larry Ellison and Chairman and Chief Financial Officer Jeff Henley have adopted prearranged plans to sell shares of their company stock for asset diversification and liquidity.
3.  Faltering Gateway To Buy EMachines (washingtonpost.com). washingtonpost.com - Struggling computer and consumer electronics maker Gateway Inc. announced yesterday that it is acquiring rival computer maker eMachines Inc. for $30 million and 50 million shares of stock in a deal that could make Gateway the No. 3 computer maker in the United States. As part of the deal, eMachines chief executive Wayne R. Inouye will replace Gateway founder Ted Waitt as Gateway's chief executive.
4.  Google, Booble in Legal Wrangle Over Trademarks (Reuters). Reuters - Google Inc., the No. 1 Web search provider, has accused an "adult search engine" by the name of Booble of infringing on its trademarks and wants it shut down, according to the upstart porn-search site launched this month.
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
5.  CALPIRG Education Fund: Rip-off 101: How The Current Practices Of The Textbook Industry Drive Up The Cost Of Collge Textbooks. "According to the Association of American Publishers and the National Association of College Stores, paper, printing and editorial costs account for an average of 32.3 cents of every dollar of the textbook cost—the largest share of the total." This is an interesting way of presenting the data so that it can't be analyzed. Online textbooks reduce the paper and printing cost, but we aren't told what that is. The report doesn't even consider non-profit textbook publishing.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
6.  TROJ_MILOL.A
7.  TROJ_SLOWFLODR.A
8.  Dutch Police Arrest 52 in E-Mail Scam
9.  Britain Poised to Approve Medicine Derived From Marijuana
----------------------------------------------------------------------
Internet/Network Security
----------------------------------------------------------------------
10.  Department of Homeland Security Rolls Out US-CERT. The United States Department of Homeland Security (DHS) National Cyber Security Division (NCSD) has teamed up with the private sector to create the United States Computer Emergency Readiness Team, or US-CERT. One of the primary functions of the US-CERT will...

11:33:37 PM    

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  Review of Dell's Digital Jukebox
----------------------------------------------------------------------
Meerkat: An Open Wire Service: O'Reilly Weblogs
----------------------------------------------------------------------
2.  Political Patterns on the WWW. Valdis Krebs shows how the books people read reflects clusters of preconception. There's a group of books read by the right, and a group read by the left, with surprisingly little crossover.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
3.  SCO, Microsoft Prepare for MyDoom Battle
4.  News: DARPA-funded Linux security hub withers
5.  Hackers breach university server
6.  DARPA-funded Linux security hub withers
7.  FTC launches 'Operation Secure Your Server'
8.  MS drop authentication technique to foil phishing
9.  SCO braces for MyDoom onslaught
10.  Network administrators told to secure servers
11.  How Movies Enter the Internet
12.  Review of Slackware 9.1
13.  Google Slaps Booble
14.  Mimail mutant maximises Mydoom misery
15.  New year, new security issues
16.  Remote workers could be your weakest link

10:33:15 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Orkut = Roach Motel?. Meaning, you can check in, but you can't check out.

After exploring Orkut for about a week, sniffing around, and learning more about the turn-ons and sexual habits of various remote professional acquaintances than I ever in a million years wanted to know, I decided I'd like to delete my account. But unllike other popular FOAFs like Friendster, the app UI does not allow you to delete your account. I noodled through the help contents for a bit, and learned that the only way to resign from the realm of orkut is to email a request to admin@orkut.com with your first and last name. I did so eight hours ago and haven't seen a reply; not holding my breath for one, given the fact that Orkut is likely a small, overwhelmed operation with zero admin resources.

I realize the site is still in a very early state. But come ON. I've worked on large-scale public web projects before, and no matter what label you use to excuse the incomplete nature of a service -- alpha, beta, whateva-- not allowing users to opt out of participation as easily as they initiated it in the first place just seems irresponsible. If it's not ready for the public, don't release it to the public. Orkut's Roach Motel syndrome, combined with the onerous TOS terms danah and others have pointed out, leave me feeling kind of icky where this particular FOAF is concerned.

2.  Justice for the murdered women of Juarez?. More than 250 women been murdered in Cuidad Juarez, Mexico, in the past decade, with hardly any official notice. The Mexican government has long ignored the problem, but has finally taken the small step of appointing a special prosecutor to get to the bottom of it.

Many of the women killed in Ciudad Juarez - across the border from the US city of El Paso in Texas - over the past 10 years were factory workers snatched while travelling to and from their jobs.

Most had been brutally sexually assaulted and tortured before their deaths.

There have been several arrests - but most cases were allegedly based on forced confessions and only one man has been convicted, for one of the killings.

Link

Update: The V-Day organization is planning a memorial march on Juarez for Valentine's Day -- just a short hop from San Diego if you're coming down for ETCON

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
3.  MyDoom virus spells double trouble. roundup Faced with a massive denial-of-service attack timed to go off this weekend, SCO is preparing its defenses. Also: Microsoft and SCO post rewards.
4.  PeopleSoft sets date for boardroom tug-of-war. The software maker names the day for director elections and so sets the stage for a tussle over boardroom control with Oracle, which hopes to go forward with its hostile bid.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  How to Kill the Worm (PC World). PC World - Mydoom readies its weekend attack, but you can make sure your PC doesn't participate.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
6.  Microsoft's Mac Business Unit
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
7.  News: DARPA-funded Linux security hub withers. System to reward auditors with karma points dies on the vine.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
8.  BKDR_IRCIRLIC.A
9.  VBS_SLOWFLODR.A
10.  Waiting For MyDoom's Sunday Punch
11.  Dealing With MyDoom

9:32:57 PM    

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
1.  Booble makes Google blush. Google may tolerate sex-tinged advertisements in its search results, but it won't stand for a copycat site peddling pornographic search.
2.  SCO braces for MyDoom onslaught. Faced with a massive denial-of-service attack timed to go off this weekend, the controversial claimant to Linux code is preparing its defenses.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
3.  PeopleSoft Speeds Up Timeline for Vote (AP). AP - Business software maker PeopleSoft Inc. threw a curveball at unwelcome suitor Oracle Corp. late Friday by accelerating a pivotal shareholder vote that will determine its board of directors.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
4.  Ripoff 101: Gouging Students for Textbooks
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
5.  Sun Spurns Reboots with Solaris Upgrade
6.  Q&A: Open-Source Guru Eric Raymond
7.  'Mydoom' Virus Will Spread Until Feb. 12
8.  Microsoft working to ward off virus attack
9.  Tech Job Outlook: Sizing up Security
10.  Being right stinks - Infoworld Staff
11.  Apple iLife hacked, DVD suit axed - Infoworld Staff
12.  Tech Job Outlook: Sizing up Security
13.  Winternals Recovery Manager saves us from certain Mydoom - Infoworld Staff
14.  Symantec's early warning system shines - Infoworld Staff
15.  Panda, Trend Micro seek anti-virus supremacy on workstations, file servers - Infoworld Staff
16.  Tech Job Outlook: Sizing up Security
17.  Mydoom Author: 'Sorry'
18.  Groklaw: SCO's 10K, MyDoom, and the Morgan Keegan Letters
19.  We Love IPv6, We Love IPv6 Not

8:32:41 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  More non-evil social network ideas. Here's some bloody good ideas about social networks from Quinn.

i've long wanted to be able to search my friend's brains, which is the kind of social networking that matters. there's no technical reason i can't, just no one has built me the app. i still haven't figured out the solution to the socially awkward "actually, you're not my friend, why are you saying you are?" problem, which is why i quit orkut. but maybe you can raise the value of the app so that people will put up with that, and maybe its ok to say "actually i share some pretty intimate stuff, so my circle is kind of tight." as a reply- i don't know. the point is, people will put up with problems in proportion to the value they derive from a system. right now orkut and friendster and the like are mostly fun for people that really enjoy filling out webforms and uploading pictures of themselves. and maybe as dating sites, but as i don't really date i don't know. for useful social networking being in my social network has to mean more than being out of it.

Link

2.  When spam-filters attack. What's worse than spam and virii? Overzealous spam- and virii-filters:

It's always a joy to watch prissy corporate mail filters twitch their lace curtains and bounce back NTK when they spot a phrase they don't like. This week they refused to deliver NTK because we used the word "dyke". As in Greg Dyke. (Admittedly, the completely justified use of "butt" and "wanker" elsewhere might not have helped our case.)

Not as bad as one UK firm's IT department, which is currently binning any incoming email with "hello" or "Hi" in the subject line. "These are common header descriptions of the e-mails containing the [MyDoom] virus", they say. I'll go out on a limb here and suggest they're also common header descriptions of the e-mails not containing it, too.

Link

3.  DDR for weight-loss. Dance Dance Revolution is a viable form of geek exercise.

I started playing Dance Dance Revolution (DDR) at the age of 17 with the very first version that was released to the United States, DDR Version 1.5. The first time I saw the game was at Gameworks arcade in Seattle, where tons of people were crowded around the DDR machine to watch different players dance. At this time, I was a senior in high school and weighed about 235 lbs. Four and a half years later, I now weigh close to 140 lbs and I would've never guessed how much that trip (OR a video game) would affect me with my health/weight, and in growing to be a better, more self-confident person.

Link

(via Kottke)

4.  Donate winning iTunes/Pepsi codes to benefit indie artists. TuneRecycler uses unwanted Pepsi/iTunes Store winning codes and spends them on indie bands available through the iTunes Music Store.

"When you buy major label music on iTunes," Wilson explained, "the musician usually gets nothing, because they're in perpetual debt to their label until they sell more than 500,000 CDs. And at best they only get 8-14 cents on a $1.00 song. We want to get some of Pepsi's money going to actual musicians, not just record label CEOs and RIAA lawyers."

Link

----------------------------------------------------------------------
Penny Arcade!
----------------------------------------------------------------------
5.  Them Bones.
----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
6.  Briefly: CNET profit grows, stock up on forecast. CNET Networks' results are better than expected; its stock is on the rise...Free-software guru meets Indian president...Dell, HP sign up for Blu-ray group.
7.  No longer 'Dot-Com Bowl,' but game still super for Net. The legions of ad-buying start-ups may be long gone, but mainstream companies will try to leverage the Internet's reach during their Super Bowl commercials, at $2.3 million a 30-second pop.
8.  Tech giants lock down wireless content. A group of technology heavyweights is expected to announce new technology for securing music and video on wireless devices.
9.  Sun's Opteron charge to begin in February. Sun Microsystems is placing AMD's Opteron chip at the center of its low-end server strategy, starting with a dual-processor system, to be announced next month, and four- and eight-processor systems coming later.
10.  Swisscom hot-spot deal takes Colubris higher. Colubris will supply the Swiss carrier's European network of Wi-Fi hot spots with gear in a multiyear, multimillion-dollar deal that puts it more in the running with big players like Cisco.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
11.  Microsoft Strikes Up Orchestration (PC World). PC World - Next Windows Server OS--due in 2006--will pack in Web services capabilities.
12.  Meet The Upstarts In Tech Banking (BusinessWeek Online). BusinessWeek Online - Back in 2001, Krish Panu had a problem with Wall Street. The CEO of At Road Inc. (NasdaqNM:ARDI - News). had launched his wireless-data software company in a September, 2000, initial public offering managed by Credit Suisse First Boston (NYSE:CSR - News). But as the tech bust set in, CSFB and other banks dropped research coverage of the company, and Panu struggled to get At Road's story out. In 2001 and 2002, smaller investment banks like Think- Equity Partners began following At Road and took Panu to visit large investors. ...
13.  Gateway to Buy PC Maker EMachines (AP). AP - In its latest attempt to find profits in the notoriously low-margin personal computer business, Gateway Inc. will buy privately held eMachines Inc. in a deal valued at $235 million.
14.  Microsoft Works to Ward Off Virus Attack (AP). AP - Microsoft Corp. said Friday it was working to ward off an Internet virus that was set to attack the software company's Web site on Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
15.  Chinese Internet Censorship Proves Difficult
16.  Robots for No Man's Land
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
17.  Gateway's revenue sinks on slow PC sales. Gateway Inc. saw its revenue take a dramatic slide in the fourth quarter as its PC business slowed while the company worked to transform itself into a consumer electronics provider.
18.  Intel will show off Opteron rival at IDF. Intel Corp. plans to demonstrate a processor with 64-bit extensions during the upcoming Intel Developer Forum (IDF), confirming speculation that the company would respond to the processors unveiled by rival Advanced Micro Devices Inc. (AMD) last year, according to sources familiar with Intel's plans.
19.  Oracle's Ellison talks up application integration - Infoworld Staff. SAN DIEGO -- Citing the Global Credit Database as the "most interesting application in the world," Oracle CEO Larry Ellison said his company used that database as the model to create its Customer Data Hub, introduced this week at the AppsWorld conference here.
20.  Trademark lawsuit filed against Google keywords. A distributor of window blinds and wallpaper has filed a lawsuit against Google Inc., saying the search engine's keyword-based advertising violates its trademarks.
21.  As victims clean up, Mydoom mail keeps coming. The Mydoom e-mail worm that first appeared Monday is spreading more slowly, but the flood of infected e-mail messages it is generating shows no sign of abating, according to antivirus and e-mail security companies.
22.  Update: Gateway to acquire eMachines. The deal will provide Gateway with the revenue generated by eMachines' strength among consumers in retail channels, the companies said. EMachines sells low-cost PCs that have made inroads with U.S. consumers, who purchased enough PCs from the company to lift it into fourth place ahead of Gateway in the fourth quarter, according to market research from IDC.

ADVERTISEMENT:

Get strong 128-bit SSL security for your online business - To secure your servers with 128-bit SSL encryption, download a copy of the free VeriSign Guide, "Securing Your Web site for Business." You'll learn everything you need to know about encrypting e-commerce transactions, securing corporate intranets, and authenticating your Web site.

23.  Sun offers advice to Eclipse. NEW YORK - Days before a planned meeting of the organization overseeing the Eclipse Java tools platform, Java creator Sun Microsystems Inc. weighed in with its thoughts on Eclipse's direction, reiterating its refusal to join Eclipse but expressing a desire for a friendly working relationship with the group.
24.  Lotus pursues collaboration vision - Infoworld Staff. IBM Lotus Software's once distant vision of standards-based collaboration is coming into view as the company rolls out products that preserve existing investments while moving toward the future.
25.  Oracle unveils Data Hub for integration - Infoworld Staff. Responding to customer complaints about its lackluster support for data integration with competing products, Oracle is introducing an integration initiative to its customers and developers. The company unveiled the program, dubbed the Customer Data Hub at its AppsWorld Conference in San Diego last week.
26.  Market woes hit two networking startups. SAN FRANCISCO - An apparent recovery in the market for metropolitan-area network gear came too late to save Coriolis Networks Inc., a startup maker of MSPPs (multi-service provisioning platforms) that closed shop on Jan. 20.
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
27.  Being right stinks - Infoworld Staff. Last Monday afternoon, I got an instant message from a former colleague. “Is there a new worm out there?” she asked. I scanned my e-mail for threat reports and noticed that something was starting up, but what I noticed more were dozens of e-mails with little content beyond a file attachment.

ADVERTISEMENT:

Get strong 128-bit SSL security for your online business - To secure your servers with 128-bit SSL encryption, download a copy of the free VeriSign Guide, "Securing Your Web site for Business." You'll learn everything you need to know about encrypting e-commerce transactions, securing corporate intranets, and authenticating your Web site.

28.  Apple iLife hacked, DVD suit axed - Infoworld Staff. My item about IT salaries rising $234 last year inspired several Cringesters to reveal how they would spend the extra coin. Michael Y. plans to take Hindi-Urdu classes at the local college to improve his chances of employment. Dale K. will make a donation to Billy Gates, so he’ll have something left when Linux eats Microsoft’s lunch. (Don’t mail that check just yet, Dale.) Others say they’ll start buying albums again to help the RIAA’s efforts to exploit musicians. It’s nice to know people are thinking about the little guys.
29.  Winternals Recovery Manager saves us from certain Mydoom - Infoworld Staff. It’s barely the end of January, but the bloom is definitely off the New Year’s rose. First, the accounting crows are already gathering for the annual tax feast. People say I’m wasteful because I drive a 4x4, but just how many tons of paper get used up every year in the endless struggle between deductions and the insatiable maw of the IRS? And just as I’m wrapping my head around that nightmare, the Queen decides to make Bill Gates a knight, and some sad little basement-living wretch releases the Mydoom worm.
30.  Symantec's early warning system shines - Infoworld Staff. It has always been hard for a single business to gather the intelligence necessary to prepare for the depredations of hackers, virus creators, and worm writers. Suddenly, you’re faced with having to update your systems with too little time to plan, no time to test, and the knowledge that you may have already been invaded through vulnerabilities you couldn’t fix in time.
31.  Panda, Trend Micro seek anti-virus supremacy on workstations, file servers - Infoworld Staff. Gone are the days when a simple anti-virus program installed on workstations on the corporate network was good enough to keep your business safe from virus and worm attacks.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
32.  Q&A: Open-Source Guru Eric Raymond
33.  Groklaw: SCO's 10K, MyDoom, and the Morgan Keegan Letters
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
34.  Sun's JXTA becomes big business play. Consumers left behind
35.  Howard Dean's Net architect blasts 'emergent' punditocracy. Campaign 2004 Thanks for nothing
36.  iSCSI is fully baked. Works in all the right places

7:32:16 PM    

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  KISS
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
2.  Grad students! The IBM Austin Research Lab is hiring interns for summer 2004. We have projects in low power, simulation, microarchitecture, and DSM. Resumes are due to me tomorrow.
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
3.  Vulnerabilities: IBM Informix Multiple Local Privilege Escalation Vulnerabilities. Informix is an enterprise database distributed and maintained by IBM. The Informix Dynamic Server module is an online transaction processing database designed as an ente...
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
4.  Md. computer testers cast a vote: Election boxes easy to mess with
5.  FreeBSD: mksnap_ffs Improper option clearing
6.  AntiOnline Spotlight: MyDoom Testing Your Patience?
7.  Electronic Frontier Foundation Defends Freedom to Innovate in Grokster Appeal
8.  Microsoft: Change to IE will block some Web URLs
9.  Microsoft offers $250,000 reward over MyDoom.B attacks
10.  As victims clean up, Mydoom mail keeps coming

6:31:59 PM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Apple Launches iBook Repair Program (NewsFactor). NewsFactor - Apple (Nasdaq: AAPL) Computer has started a program to repair or replace certain defective iBook notebook computers. The company has been threatened with class-action lawsuits pertaining to the faulty machines.
2.  Tech Job Outlook: Sizing up Security (NewsFactor). NewsFactor - There are no universal truths in the I.T. world, but one statement that comes as close as any is that the demand for I.T. professionals with bona fide enterprise-security experience is strong and growing. At no other time in the industry's history have so many high-tech executives been obsessed with protecting their company's data, preventing hacker attacks, and warding off viruses and worms.
3.  MS Postpones Changes Related to Eolas Suit (NewsFactor). NewsFactor - Microsoft (Nasdaq: MSFT) has reversed course and announced that it will postpone proposed modifications to its Windows operating system or Internet Explorer browser stemming from the Eolas patent lawsuit.
4.  FTC Mounts Spam Offensive (NewsFactor). NewsFactor - Does your proxy allow connections from untrusted networks like the Internet? Is there an open relay on your system? Are you using proper access controls for your server? Answer these questions incorrectly and the U.S. Federal Trade Commission would like to have a friendly word with you.
5.  Microsoft Confirms 'Halo 2' Release in Fall (Reuters). Reuters - "Halo 2," the sequel to the best-selling Xbox game ever and one of the most-anticipated titles of 2004, will ship this fall, Microsoft Corp. (MSFT.O) said on Friday, dashing hopes that the game would be out sooner.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
6.  The 101 Dumbest Moments in Business
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
7.  Microsoft offers $250,000 reward over MyDoom.B attacks. Microsoft Corp. will pay a $250,000 reward for information leading to the arrest and conviction of the person or persons responsible for releasing the MyDoom-B worm, the company said in a statement Thursday.
8.  As victims clean up, Mydoom mail keeps coming. The Mydoom e-mail worm that first appeared Monday is spreading more slowly, but the flood of infected e-mail messages it is generating shows no sign of abating, according to antivirus and e-mail security companies.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
9.  Md. computer testers cast a vote: Election boxes easy to mess with
10.  FreeBSD: mksnap_ffs Improper option clearing
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
11.  NIST Publishes eAuthentication Draft
12.  E-Voting System Has Security Risks

4:22:43 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  The value of endangered languages. A great interview with linguist Alexandra Aikhenvald, in New Scientist:
"If these so-called "exotic" languages die, we'll be left with just one world view. This won't be very interesting, and we'll have lost a vast amount of information about human nature and how people perceive the world. (...) [W]ithout their language and its structure, people are rootless. In recording it you are also getting down the stories and folklore. If those are lost a huge part of a people's history goes. These stories often have a common root that speaks of a real event, not just a myth. For example, every Amazonian society ever studied has a legend about a great flood.

"...In English I can tell my son: "Today I talked to Adrian", and he won't ask: "How do you know you talked to Adrian?" But in some languages, including Tariana, you always have to put a little suffix onto your verb saying how you know something - we call it "evidentiality". I would have to say: "I talked to Adrian, non-visual," if we had talked on the phone. And if my son told someone else, he would say: "She talked to Adrian, visual, reported." In that language, if you don't say how you know things, they think you are a liar. This is a very nice and useful tool. Imagine if, in the argument about weapons of mass destruction, people had had to say how they knew about whatever they said. That would have saved us quite a lot of breath..."

Link (via diepunyhumans)
----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
2.  Week in review: Virus king. All eyes were on security as a fast-moving e-mail virus claimed the crown as the worst ever, and along the way it managed to make enemies of two software heavyweights.
3.  Dutch judge blocks Lindows over trademark issue. Microsoft wins a preliminary injunction that bars Lindows, maker of a Linux OS that mimics Windows, from selling products under the Lindows name in the Netherlands and other Benelux countries.
4.  Free-software guru meets Indian president
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
5.  Maryland Electronic Voting Systems Found Vulnerable
6.  Spirit 'Will Be Perfect Again'
7.  AppleScript - the Definitive Guide
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
8.  Vulnerabilities: Microsoft Internet Explorer CLSID File Extension Misrepresentation Vulnerability. A vulnerability has been reported in Microsoft Internet Explorer that may allow files to be misrepresented to client users.

The following proof-of-concept example wa...

9.  Vulnerabilities: Linksys WRT54G Router Blank HTTP GET Request Denial Of Service Vulnerability. The Linksys WRT54G, is a wireless router appliance, developed to meet upcoming 54Mbps wireless networking standards. The router provides a web server that is normally use...
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
10.  New DHS cyber alert system under fire
11.  FTC Mounts Spam Offensive
12.  FTC Mounts Spam Offensive
13.  FTC Mounts Spam Offensive

3:22:20 PM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  HP to Begin Offering Opteron-Based Servers (Reuters). Reuters - Hewlett-Packard Co. (HPQ.N) will begin using Advanced Micro Devices Inc.'s (AMD.N) Opteron chip in server computers, according to people familiar with the matter, adding momentum to AMD's challenge to industry leader Intel Corp. (INTC.O) in supplying the lucrative market for corporate computers.
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
2.  New developer for ChampMan. Catch up with the latest news from the world of video gaming.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
3.  New DHS cyber alert system under fire
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
4.  Vulnerabilities: vBulletin Register.PHP HTML Injection Vulnerability. vBulletin is a message board system implemented in PHP.

vBulletin may be prone to an HTML injection vulnerability. This issue is exposed through inadequate sanitization ...

5.  Vulnerabilities: Novell Groupwise Webacc Cross Site Scripting Vulnerability. GroupWise is the commercial groupware package distributed and maintained by Novell.

A vulnerability has been reported to exist in Novell Groupwise that may allow a remot...

----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
6.  Top 10 Most Critical Web Application Security Flaws
7.  IBM's HPC Systems Get 'Power' Boost
8.  E-Vote Still Flawed, Experts Say
9.  See You on the Darknet - Why we don't really want Internet security.
10.  destinationCRM.com: Companies and Consumers Clash on Privacy Issues
11.  Matters of privacy
12.  Barriers to the Constitutional Right to Privacy Patriot Act -- Forgoing liberty for safety?
----------------------------------------------------------------------
Internet/Network Security
----------------------------------------------------------------------
13.  MyDoom.A and MyDoom.B Continue To Plague The Internet. Messagelabs states that they blocked over 1.2 million copies of the MyDoom virus in the first 24 hours and that it accounted for 1 in every 12 emails they received. MyDoom quickly surpassed Sobig as the number one threat on...

2:22:00 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Programmable screwdrivers. It's about time someone invented a smart programmable screwdriver.

Matsushita Electric Works has launched what they call the world's first intelligent screwdriver. Looking like something that would crop up in Ultraman or Power Rangers, it allows you to record macros--slow start, fast midsection, slow again at the end, for example--and replay them with a single button-push. Record an expert's macro and even the novice screwer will see a dramatic improvement, so they claim. It also has a learning function that allows it to gravitate to the speed range you're using most often.

Link

(via Gizmodo)

2.  Periodic table of condiments.

A periodic table of condiments that sometimes go bad.

Link

(via Pirotcar)


3.  Modding the box. Wired News covers the release of a new book called Hardware Hacking: Have Fun While Voiding Your Warranty -- whcih is pretty much just what it sounds like, step-by-step instructions for modding your toys to turn them into better and weirder toys.

Some of the hacks are just for entertainment, like turning a standard Apple mouse into a glowing UFO mouse or modifying a PlayStation 2 so that you can use it to program your own games.

Others are practical, like the chapter on designing and building your own Windows- or Linux-based home theater PC or the ultimate external hard drive to store all those digital images, videos and MP3 files, complete with custom case -- all from stuff you may already have lying around the house. Equally useful are the step-by-step instructions on how to replace a dead iPod battery without having to send the MP3 player back to Apple.

Link

4.  Google to Booble: take a cold shower. As expected, Google sends "Google parody adult search engine" Booble.com a cease-and-desist. From Adult Video News:

Sent earlier this week, Google's letter demanded Booble disable their Website and stop using the domain name, "take steps to transfer" the domain to Google, "(i)dentify and agree to transfer to Google any other domain names registered by you that contain the GOOGLE or are confusingly similar to the GOOGLE marks," and "permanently refrain" from using Google's name or any variation on it "that is likely to cause confusion or dilution."

An adult Web portal, YouHo!, uses a parody of one of the earlier Yahoo! homepage styles and layouts, a parody the site continues to use despite Yahoo! undergoing several alterations to its basic homepage look in the past several years.

"We note that you have given interviews to the press in which you state that you intend booble.com to be a parody," said a passage from the Google Trademark Enforcement Team, cited on Booble's Website. "We dispute your assertion that your Website is a parody. For a work to constitute a parody, it must use some elements of a prior author's composition to create a new one that, at least in part, comments on the original author's works."

Link (Thanks, Susannah!)

5.  Mars OS: no life on the red planet, but many bugs. In today's edition of Wired News, I interview Mars Rover mission chief software architect Glenn Reeves about the challenges of maintaining a functioning operating system on another planet -- and what it's like to live life on Martian Standard Time.

WN: What are your biggest challenges right now in sorting out what went wrong with Spirit, and how you're going to fix its tech problems?

Reeves: We have to plan ahead very carefully what we're going to do during each window of opportunity. There are only about three "windows" in each day, and we need to be able to see Earth from Mars. During one window, we're running a script on the vehicle to tell us which piece of software in the system is causing that reset problem. We've tried that for two days, but so far haven't been successful. In another, we're trying to dump parts of the 224-MB flash file system back down to Earth, so we can reconstruct the system here. But think about it -- on a good day, we can only transmit less than 5 MB, so moving the whole file means a lot of days with no additional science. We'd prefer to avoid that path, but it's a contingency plan. In that third window, we try to communicate with the orbiter.

Since we can bring up the system in "cripple mode," we're doing integrity checks manually. But this takes a lot of time, because we like to do them one by one, in order. We can't waste any effort, or time. You could say our dialup service is really, really, really slow.


Link
6.  Totalitarian trusted computing. From Greg Costikan, a humourful, totalitarian vision of hardware as it might be.

Troubleshooter: How much is two plus two?
PDC: What is your security clearance, Citizen user?
Troubleshooter: Red, friend PDC!
PDC: Two plus two equals a number between three and six.
Troubleshooter: What?
PDC: You are not cleared for greater precision at this time...

User Desmond-O-NTY-3 is not available. This call has been forwarded to an automated voice system. Please listen carefully, as our menu options have changed. To confess to treason, please press 1. To accuse the citizen you are calling of treason, please press 2. To accuse a different citizen of treason, please press 3. To leave voice mail, please press 4. To send a numeric page, please press 5. For more options, please press 6.

Link

7.  Robolympics call for entries. Robotics Society of America president David Calkins says:
Only one month left to register for ROBOlympics! You've still got two months left to get ready for the event, but only one month to register to compete. This is the first robot event where all major types of robot competitions will be held at the same time. And of course, you can compete in several events - you're not just limited to one. Also: Tickets go on sale Friday (today)!
Link
8.  First corporate sponsorship for an MMORPG guild. The Syndicate is the largest guild in MMORPG-space, and it has just acquired a corporate sponsor.

To celebrate this sponsorship, The Syndicate and Thunderbox are offering a number of special deals for gamers. As gamers, we make sure we have a machine that will let us play the games we want, but we dont always buy the 'cool' addons preferring instead to add more RAM or buy another game. Now you can get alot of those extreme-addons (from PC Skins, to Custom Lighting to a complete Extreme kit) for your PC for free as part of celebrating this groundbreaking event in gaming history. Online Gaming is loaded with guilds many of whom claim to be the best but who are solely focused on themselves. The Syndicate has consistently led the pack in all areas it participates in, paid its dues as a guild, and earned its place as a lead guild in the gaming world. However, during its 8 years of existance, it has maintained its focus on having fun and in making the online community a better place. We hope this sponsorship will be another way we can add value to the gaming community and we look forward to many more years of online gaming with all of you.

Link

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
9.  IBM Internet guru takes a role at Opera. John Patrick, who is credited with bringing the Internet to Big Blue, joins Web browser company Opera Software's board of directors.
10.  Lindows offers software for free over P2P. The Linux software seller plans to distribute its LindowsLive operating system, which retails for $29.95, for free via peer-to-peer networks.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
11.  Dutch Police Arrest 52 in E-Mail Scam (AP). AP - Dutch police have arrested 52 people suspected of defrauding gullible Internet users in one of the largest busts of the infamous "Nigerian e-mail" scam.
12.  'Mydoom' Virus Will Spread Until Feb. 12 (AP). AP - The Internet computer virus known as "Mydoom" will continue to hit e-mails on computers worldwide until Feb. 12, when it is programmed to stop, a leading computer security company said Friday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
13.  XFree86 Alters License
14.  Disney's Disposable DVDs Deemed Duds
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
15.  Gateway buys rival computer maker. The US computer maker, in the throes of a radical strategic rethink to stem three years of losses, pays $235m for rival eMachines.
16.  Song-swappers launch download ad. Teenagers sued for downloading music illegally from the internet appear in a US TV advert.
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
17.  BugTraq: FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs. Sender: FreeBSD Security Advisories [security-advisories at freebsd dot org]
18.  BugTraq: Serv-U exploit. Sender: Berend-Jan Wever [SkyLined at edup dot tudelft dot nl]
19.  Vulnerabilities: GNU Screen Escape Sequence Integer Overflow Array Indexing Vulnerability. GNU Screen is prone to an integer overflow vulnerability that may be triggered by including 2-gigabytes or more of semi-colons (;) or colons (:) in an escape sequence.

..

20.  Vulnerabilities: Apache mod_python Module Malformed Query Denial of Service Vulnerability. Apache's mod_python is a module which allows the web server to interpret Python scripts. mod_python supports Apache 1.3.x and 2.x, and is available for Windows, Linux and...
21.  Vulnerabilities: Apple Mac OS X TruBlueEnvironment Local Buffer Overflow Vulnerability. TruBlueEnvironment is a component of the Mac OS Classic emulator that is shipped and installed by default as a part of Mac OS X.

TruBlueEnvironment has been reported pro...

22.  Vulnerabilities: Apple Security Update 2004-01-26 Released To Fix Multiple Vulnerabilities. Apple has released Security Update 2004-01-26 to address multiple previously known and newly discovered security vulnerabilities in Mac OS X (Client and Server) 10.1.x th...
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
23.  Elsewhere: New year, new security issues
24.  Elsewhere: Working together to win the online arms race
25.  30 Jan W32/MyDoom-B
26.  HTML_STARTPAGE.B
27.  Mydoom auf Platz eins der Viren-Charts
28.  The Number apologises for BT comment
29.  MS drop authentication technique to foil phishing

1:21:40 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Run your iPod for 40 hours. This external iPod battery provides 40 hours of playtime and includes a USB port for plugging in USB-charged devices like PDAs and cellphones. It's $100, and no indication of what it weighs.

Link

(via iPodHacks)

2.  Impending totalitarianism. Bruce Schneier's latest op-ed on the impending police-state is chilling as hell.

Last week the Supreme Court let stand the Justice Department's right to secretly arrest noncitizen residents.

Combined with the government's power to designate foreign prisoners of war as "enemy combatants" in order to ignore international treaties regulating their incarceration, and their power to indefinitely detain U.S. citizens without charge or access to an attorney, the United States is looking more and more like a police state.

Since the Sept. 11 attacks, the Justice Department has asked for, and largely received, additional powers that allow it to perform an unprecedented amount of surveillance of American citizens and visitors. The USA Patriot Act, passed in haste after Sept. 11, started the ball rolling.

Link

3.  danah on Orkut. danah boyd (she's saving up for some capital letters) weighs in on Orkut and in particular on the craptacular ToS, which can be characterized as a collection of the most evil practices from the industry's unforgivably bad ToSes, including things like the right to change terms without notice, a blanket ban on "unauthorized" use, a ban on non-browser-based user-agents, and so on.

1) What the hell is up with the elitist approach to invitation? That's just outright insulting and an attempt to pre-configure the masses through what the technorati are doing. Social networks are not just a product of technologists. Everyone has a social network and what they do with it is quite diverse. To demand that they behave by the norms of technologists is horrifying.

2) Are trustworthy, cool, and sexy the only ways that i might classify my friends? (Even Orkut lists a lot more in his definition of self.) And since when can i rate the people that i know based on this kind of metric?

And goddamnit CONTEXT CONTEXT CONTEXT. Cool as a techy? Cool as a party kid? Trustworthy along what fucking axes?

Link

4.  Girls, cars stuck in mud, and the men who love them. Apparently girls whose cars are stuck in mud is an emerging sexual fetish. For 50 Euro or so, you can own such erotic DVD masterpieces as "Michelle got stuck in snow and mud" and "Party-Stuck-Video 002." (Carstuckgirls.com is seemingly safe for work, at least from what I saw.) Link (Thanks, Dr. Maz!)
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  Lessons from the Internet Campaign Trail (washingtonpost.com). washingtonpost.com - Howard Dean, once a little-known governor from a small New England state, used the power of the World Wide Web to become -- at least for a short while in 2003 -- the frontrunner for the 2004 Democratic presidential nomination.
6.  Robots for No Man's Land (washingtonpost.com). washingtonpost.com - The education of Stryker, an 18-ton military monster truck, begins in the warehouse lab of General Dynamics in Westminster, Md.
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
7.  Nasa to rethink Hubble decision. The head of the US space agency reconsiders the decision to abandon the Hubble telescope.
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
8.  Elsewhere: Working together to win the online arms race. New technology always seems to introduce new challenges for trust, security and privacy. Everyone is expected to do more with less, and security is often perceived as hin...
9.  Elsewhere: ID fraud preys on technology's immaturity. Some people get socks for Christmas. Others get handkerchiefs. But not Jay Heiser. His wife gave him a replica of a Mesopotamian clay tablet this year. Why? Because the M...
10.  News: MS posts $250,000 MyDoom worm bounty. The Register By John Leyden [john dot leyden at theregister dot co dot uk]
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
11.  Vulnerabilities: Apache Web Server Multiple Module Local Buffer Overflow Vulnerability. A vulnerability has been reported to exist in Apache that may allow a local attacker to gain unauthorized access by executing arbitrary code on a vulnerable system. The c...
12.  Vulnerabilities: Apache Web Server mod_cgid Module CGI Data Redirection Vulnerability. Apache has reported a potential vulnerability in the mod_cgid module when the threaded MPM (Multi-Processing Module) is used. The problem is said to be due to mishandling...
13.  Vulnerabilities: H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability. AntiVir is an anti-virus software package distributed by H+BEDV. It is available for Linux and Windows platforms.

An error in the handling of temporary file creation ma...

----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
14.  Gateway to buy eMachines. Embracing retail channel to return to profitability
15.  The Number apologises for BT comment. 'Sorry'
16.  BT call centre worker suspended over eBay ad. Protest at jobs to India
17.  MS drop authentication technique to foil phishing. Significant overhaul
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
18.  Ask the Expert
19.  Le Ministere de la Defense securise et dematerialise ses procedures avec CertiNomis
20.  MyDoom Prepares for Bigger Attack on Sunday
21.  VeriSign narrows quarterly loss
22.  Computer Associates Gives Away Its Antivirus And Firewall Product
23.  New reward offered for MyDoom authors
24.  Mimail mutant maximises Mydoom misery
25.  REG_ALADINZ.I
26.  MyDoom Not So Looming in Asia

12:21:24 PM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Jason Schultz on American Blind versus Google. A company called American Blind (which makes window-coverings) is suing Google because other organizations, like the American Council for the Blind, its competitors have bought the Google AdWord "blind" and so American Blind claims that its trademark is being infringed-upon, and that Google is secondarily liable for the infringement. My cow-orker Jason Schultz dissects and destroys this claim in very short order.

"We spend millions of dollars annually to build brand awareness and cannot stand idle while Google allows our competitors to ride our coattails," said a statement from Steve Katzman, CEO of American Blind.

So it's really not about consumer protection after all; it's about money. Money that AB&WF spent on silly meatspace advertising while its competitors blew past it by disintermediating physical adspace.

Link

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
2.  Sun urges Eclipse to unify Java world. The company issues an open letter to Eclipse, warning that the influential open source project could act as a fragmenting, rather than unifying, force in the Java industry.
3.  Open-source group gets Chinese member. A Chinese software firm joins Linux industry group Open Source Development Lab, signaling growth in Linux activity in the land of the Dragon.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
4.  Gateway to Buy EMachines for $235 Million. Gateway, hoping to reverse its sagging fortunes in the personal computer business, said Friday it would buy privately held eMachines in a deal valued at $235 million. By The Associated Press.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  Iliad IPO Success Rekindles Demand for Tech Shares (Reuters). Reuters - French Internet firm Iliad took the Paris stock market by storm on Friday with a 30 percent gain on its first day of trading that showed rekindled investor appetite for technology shares.
6.  'CtrlAltDelete' Inventor Restarts Career (AP). AP - David Bradley spent five minutes writing the computer code that has bailed out the world's PC users for decades.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
7.  IETF Approves XMPP Core as Proposed Standard
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
8.  Google unhappy with rude copycat. The net's biggest search engine issues a legal warning to a pornography site called Booble.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
9.  Digital Signatures and European Laws
----------------------------------------------------------------------
[O.S.S.R]
----------------------------------------------------------------------
10.  Microsoft offers $250,000 reward for arrest of author MyDoom.B virus
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
11.  Elsewhere: Ashcroft says surveillance powers should stand. The Bush administration is warning Congress not to tinker with the Internet surveillance powers that the USA Patriot Act awarded to federal police. In a four-page letter...
12.  Elsewhere: Viruses mimic 'worse-case disease'. The computer industry takes risks that would be considered unacceptable in other fields of human endeavour, according to a notorious security expert

A worst-case disea...

----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
13.  Vulnerabilities: Tcpdump L2TP Parser Remote Denial of Service Vulnerability. tcpdump is a freely available, open source network monitoring tool.

It has been reported that tcpdump is vulnerable to a denial of service when some packet types are rec...

----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
14.  New DHS cyber alert system under fire
15.  MyDoom worm -- the countdown begins
16.  Intel shifts 64-bit emphasis
17.  Next Direct X to be called 9.0c
18.  Microsoft Advises to Type in URLs Rather than Click
19.  E-Vote Still Flawed, Experts Say
20.  Spirit sends first image since computer crash
21.  Mydoom now worth $500,000
22.  A How-To Guide for Hackers
23.  inlook Insecure Default Permissions
24.  BAT_ALADINZ.I
25.  Digital Signatures and European Laws

11:21:01 AM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Microsoft Offers Mydoom Bounty (PC World). PC World - Software giant will pay $250,000 for information about the virus author.
2.  New Linux Desktop Environment (Ziff Davis). Ziff Davis - Xandros Desktop OS 2 Deluxe offers would-be Linux users easy installation, and more.
3.  Gateway to Buy EMachines for $235 Million (AP). AP - Gateway Inc., hoping to reverse its sagging fortunes in the personal computer business, said Friday it would buy privately held eMachines Inc. in a deal valued at $235 million.
4.  Net Crime Hits Gambling Sites on Super Bowl Eve (Reuters). Reuters - Organized crime gangs are shaking down Internet betting sites on the eve of American football's Super Bowl, threatening to unleash a crippling data attack unless they pay a "protection" fee, police and site operators said.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
5.  Microsoft Holds Off on Eolas Patent Changes
6.  NASA to Reconsider Hubble Decision
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
7.  U.S. Takes Anti-Virus Role
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
8.  Vulnerabilities: Microsoft Windows XP Explorer Self-Executing Folder Vulnerability. A vulnerability has been reported in Microsoft Windows XP that may result in execution of malicious code in the context of the currently logged in user. The flaw exists ...
9.  Vulnerabilities: Midnight Commander Virtual File System Symlink Buffer Overflow Vulnerability. Midnight Commander is a popular file management tool for Unix systems. Among other features, Midnight Commander is provided with a code layer to access the file system; t...
10.  Vulnerabilities: Finjan SurfinGate FHTTP Restart Command Execution Vulnerability. SurfinGate is a commercially available content filtering and application firewall package. It is distributed by Finjan, and available for the Sun Solaris and Microsoft Wi...
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
11.  London Mayor mulls broadband subsidy. 'Second to none'. Shouldn't we move to none, then?
12.  MS posts $250,000 MyDoom worm bounty. A snitch in time...
13.  Revealed: chilling numerical proof of life on Mars. 1+9 = advanced robot civilisation
14.  Gateway to buy eMachines for $30m plus stock. Embracing retail channel to return to profitability
15.  IT Marathon girl goes head-to-head with perjuring peer. Athlete battles Lord Archer to raise £2m for charity
16.  PalmOne retains world PDA crown. But 2004 will be challenging year - analyst
17.  Socitm slams one size fits nobody e-gov plans. National prescription
18.  ATI files to sell up to $500m of stock. How much, when and what it can't yet say
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
19.  10 W32/Klez-H
20.  9 W32/Mimail-I
21.  8 W32/Mimail-C
22.  7 W32/Mimail-K
23.  6 W32/Mimail-A
24.  4 W32/Dumaru-A
25.  5 W32/Mimail-J
26.  3 W32/Sober-C
27.  2 W32/Bagle-A
28.  1 W32/MyDoom-A
29.  SGI IRIX Multiple Vulnerabilities
30.  IRC_ALADINZ.I
31.  U.S. Awards Contract for Face-Recognition Technology
32.  MyDoom Not So Dooming for Asia
33.  Neuer Virus!
34.  New reward offered for MyDoom authors
35.  Mimail mutant maximises Mydoom misery
36.  U.S. Takes Anti-Virus Role

10:20:46 AM    

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
1.  Slouching toward Big Brother. Counterpane CTO Bruce Schneier warns that the mix of advanced database data collection and new federal surveillance powers is fast corroding privacy.
2.  Don't mention the 'O' word!. CNET News.com's Charles Cooper says that IBM is going to great lengths to avoid using the "offshoring" word.
3.  Gateway makes bid for rival eMachines. The struggling company sees in retail success story eMachines an opportunity to expand its PC market share and add new distribution channels for consumer electronics gear.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
4.  IBM merges chip, server groups (MacCentral). MacCentral - IBM Corp.'s server and semiconductor groups are joining forces in hopes that by working closer together the two will help each other improve their product lines, an IBM spokesman said Thursday. IBM's semiconductor group is responsible for manufacturing the PowerPC 970 processors used in Apple's Power Mac G5 and Xserve G5 systems.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
5.  Lindows Takes a Hit in the Netherlands
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
6.  Yellow card for 'phone drivers'. Northern Ireland motorists caught using a mobile phone while driving will be shown a "yellow card" by police.
7.  Plans to fight net abuse discussed. Police officers and teachers are discussing ways of working together to fight child abuse on the internet.
8.  Mydoom creator hunt intensifies. The hunt for those behind the record-breaking Mydoom virus has intensified with Microsoft's reward offer.
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
9.  Gateway to buy eMachines for $30m plus stock. Embracing retail channel to return to profitability
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
10.  A how-to guide for hackers
11.  HP staff told not to open Fiorina-A virus
12.  Opportunities for Wi-Fi hackers on increase
13.  Securing Linux systems with host-based firewalls implemented with Linux iptables
14.  Anti-virus companies: tenacious spammers
15.  Wi-Fi Week: Mobility at the cost of security
16.  CipherTrust Releases IronMail 4.0
17.  Java vs. .NET Security at O'Reilly's DevCenter

9:20:21 AM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Hip-hop dance misses a step in multiracial 'You Got Served' (USATODAY.com). USATODAY.com - Let's get one thing straight: You Got Served is not about the stressful world of process servers.
2.  Where to catch Oscar films on the big and little screen (USATODAY.com). USATODAY.com - The 76th annual Academy Award nominations recognized movies that everyone knows -The Lord of the Rings: The Return of the King- and films that are tougher to find in theaters. But that probably means they are coming to DVD soon.
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
3.  Disney loses top cartoon deal. Hollywood animator Pixar, responsible for the hit Finding Nemo, is ending its distribution deal with Walt Disney.
4.  Mydoom's author hunt intensifies. The hunt for those responsible for the record-breaking Mydoom e-mail worm has intensified with Microsoft's reward offer.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
5.  Linux Advisory Watch - January 30th 2004
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
6.  419ers enlist Saddam's daughter. Dad caged, cash awaiting liberation...
7.  Shush! OSS outfit forms secret society to combat MS hit teams. B*stards keep buying our lunch...
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
8.  HP staff told not to open Fiorina-A virus
9.  Opportunities for Wi-Fi hackers on increase
10.  Securing Linux systems with host-based firewalls implemented with Linux iptables
11.  Anti-virus companies: tenacious spammers
12.  Wi-Fi Week: Mobility at the cost of security
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
13.  WWW::Form Potential Cross-Site Scripting Vulnerability
14.  PhpGedView Arbitrary File Inclusion Vulnerabilities
15.  Kietu Arbitrary File Inclusion Vulnerability
16.  Virus Mydoom/Novarg, antidotes et solutions disponibles
17.  Waarom worden we elke keer het slachtoffer van virussen?
18.  Securing Linux Systems With Host-Based Firewalls Implemented With Linux iptables
19.  Linux Advisory Watch - January 30th 2004

8:20:01 AM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  The Ad Lineup (SiliconValley.com). SiliconValley.com - It has been 20 years since Apple Computer turned the Super Bowl of football into the Super Bowl of advertising.
2.  Bipartisan Request Seeks Halt to Internet Voting (washingtonpost.com). washingtonpost.com - In a highly unusual pairing, the Republican and Democratic party organizations for citizens living abroad have banded together against the Pentagon's Internet voting program for the presidential election.
3.  MyDoom Worm Spreads as Hunt for Author Intensifies (Reuters). Reuters - A cyber dragnet aiming to flush out the author of the MyDoom computer worm intensified Friday as the outbreak crippled still more e-mail networks.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
4.  Linux Advisory Watch - January 30th 2004
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
5.  KnowledgePool UK goes titsup. Former employees miss out
6.  Sony PSX's 90nm CPU is 'not 90nm'. It's a 130nm part, alleges chip researcher
7.  Vignette buys into traditional ECM with Tower Technology. Transformation through acquisition
8.  SAP ties up with Teradata. Detailed drill down in BI
9.  Nokia poised for enterprise acquisitions. And possible Palm tie-up
10.  Intel preps 64-bit x86 tech - report. Competitor's Technology?
11.  Vodafone weighs up US options. Marking AT&T Wireless' cards
12.  ATI Q4 market share beats Nvidia - just. Intel still bigger than both of them
13.  Intel to encourage channel to source notebooks direct. Driving commoditisation
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
14.  20.000 studenten mogelijk getroffen door hackers
15.  Cyber Alert Systeem groot succes
16.  E-mail coaching voor marketeers en spammers
17.  Systeembeheerders: "Beveilig uw servers"
18.  Ernstig security lek in Check Point FireWall-1
19.  London Wi-Fi security better (but still not great)

7:19:41 AM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Reward Offered to Capture Virus Designer (AP). AP - A quarter of a million dollar bounty is waiting for anyone who helps law enforcers nab the designer of another new computer virus.
2.  Culturecom Takes on Wintel with V-Dragon (Reuters). Reuters - Watch out, Wintel -- a new "Draglin" is coming to China.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
3.  Microsoft Advises to Type in URLs Rather than Click
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
4.  AMD sets defence against possible Intergraph legal action. Clipper patents rear heads again
5.  Report claims Sony PSX's 90nm CPU is not 90nm. It's a 130nm part, alleges chip researcher
----------------------------------------------------------------------
Wired News
----------------------------------------------------------------------
6.  Russia Scoffs at U.S. Mars Plans. The head of Russia's space program describes the sudden shift in U.S. space exploration planning as unrealistic and dismisses it as election-year posturing by President Bush.
7.  Needed: An RIAA for Porn. The music business isn't the only industry plagued by Internet piracy: A pornographer sues a number of financial institutions, accusing them of supplying transaction support for other pornographers ripping off his content.
8.  Warner Bros. Gets Tough on Piracy. The Time Warner unit of Warner Bros. claims in a lawsuit that several people, including a Hollywood actor, made illegal digital copies of films and attempted to distribute them on the Internet.
9.  Pixar Says 'So Long' to Disney. Pixar Animation Studios ends talks with Disney aimed at striking a new deal. The Finding Nemo co-producer wants ownership over future movies, while Disney execs say the new agreement wouldn't make financial sense.
10.  Bounty Set for MyDoom Creator. Microsoft offers a $250,000 reward for information that helps authorities nab the creator of the wily virus.
11.  Three Blind Phreaks, See Them Run. The phone-phreaking Badir brothers ran rings around Israel's telcos for six scam-filled years. Here's how. By Michael Kaplan from Wired magazine.
12.  I Want My LCD. Sales of liquid crystal display TV sets surge in advance of Super Bowl Sunday. But analysts say heated competition between the top big-screen technologies -- plasma and LCD -- will lower prices all around. By Michael Myser.
13.  A How-To Guide for Hackers. Aspiring tinkerers can improve their skills in a snap with a new book containing practical tips on how to re-engineer almost every inanimate object in the home. By Michelle Delio.
14.  No Life on Mars, But Many Bugs. Mars rover software architect Glen Reeves reveals the many challenges of maintaining a functioning operating system on another planet. A Wired News Q & #038;A by Xeni Jardin.
15.  E-Vote Still Flawed, Experts Say. Researchers hired to hack Diebold's electronic-voting equipment give the machines a failing grade for security, despite recent fixes. But they say repairs can be put in place before March primaries. By Kim Zetter.
16.  Maligned 'Phantom' Gets a Boost. Gamers long have suspected that the Phantom console from Infinium Labs was a scam or, at the very least, vaporware. But the company's new CEO, a former Xbox honcho, says it's the real deal. By Leander Kahney.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
17.  Bodington Uploaded File Exposure Vulnerability
18.  Mute, une future référence pour le peer to peer anonyme ?
19.  WORM_AGOBOT.O
20.  PJreview_Neo.cgi Input Validation Hole Discloses Files to Remote Users

6:19:20 AM    

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  OS X Without Tears (PC World). PC World - No one likes migrating to a new operating system, even if it is OS X.
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
2.  Record payout for Japan inventor. An ex-Hitachi employee wins Japan's biggest ever compensation payout in a patent case.
3.  'Save the Hubble' campaign soars. A website to gather signatures for a petition to save the Hubble Space Telescope is attracting growing support.
4.  Studios 'sue over movie piracy'. Warner Bros and Columbia film studios reportedly sue an actor and a man arrested over alleged film piracy.
5.  Disney loses top cartoon deal. Hollywood animator Pixar is ending its distribution deal with Walt Disney.
6.  E-mail virus takes on new guise. A new strain of Mydoom could spread more widely than its predecessor, experts warn.
7.  Spooks turn to hi-tech geography. US intelligence agencies are using software that combines text and location searches in the fight against terror.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
8.  Securing Linux Systems With Host-Based Firewalls Implemented With Linux iptables
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
9.  T-Mobile and Virgin settle long-running dispute. Friends again
10.  Whatever happened to broadband by blimp?. Earthbound
11.  London Wi-Fi security better (but still not great). Leakage risks
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
12.  Microsoft: new one-stop security shop?
13.  The hacker ethic
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
14.  Une variante de MyDoom prend Microsoft pour cible
15.  BKDR_ALADINZ.I
16.  W32.Randex.FC
17.  Microsoft: new one-stop security shop?
18.  The hacker ethic

5:19:00 AM    

----------------------------------------------------------------------
Dilbert
----------------------------------------------------------------------
1.  Dilbert for 30 Jan 2004.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
2.  Comcast Targets Internet "Abusers"
3.  Comcast targets Internet `abusers' but won't reveal limits
4.  Mainframe's midlife crisis: Security
5.  Mydoom worm spreads as attack countdown begins
6.  Microsoft: Change to IE will block some Web URLs
7.  FTC launches 'Operation Secure Your Server'
8.  New DHS cyber alert system under fire

4:18:40 AM    

----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
1.  E-mail virus takes on new guise. A new strain of the Mydoom worm could spread more widely than its predecessor, experts warn.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
2.  WORM_ANIG.A

3:18:20 AM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Robot Chick assemblage scuplture.

These "Robot Chick" assemblage sculptures are a little on the NSFW/pr0ny side for my taste, but one or two are quite striking. Wish I have half a grand or so to blow on one!

Link

(via JWZ)

2.  Jason Schultz on American Blind versus Google. A company called American Blind (which makes window-coverings) is suing Google because other organizations, like the American Council for the Blind, have bought the Google AdWord "blind" and so American Blind claims that its trademark is being infringed-upon, and that Google is secondarily liable for the infringement. My cow-orker Jason Schultz dissects and destroys this claim in very short order.

"We spend millions of dollars annually to build brand awareness and cannot stand idle while Google allows our competitors to ride our coattails," said a statement from Steve Katzman, CEO of American Blind.

So it's really not about consumer protection after all; it's about money. Money that AB&WF spent on silly meatspace advertising while its competitors blew past it by disintermediating physical adspace.

Link

----------------------------------------------------------------------
CNET News.com - Front Door
----------------------------------------------------------------------
3.  PeopleSoft tops revenue expectations. The company posts fourth-quarter revenue that beat analyst estimates and raised its 2004 earnings guidance, continuing a streak of strong quarters that may make Oracle's quest to buy the company more difficult.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
4.  N.Y.S.E. Chief Said to Seek Electronic Shift. John Thain, the new chief of the New York Stock Exchange, plans to encourage far more trading on its electronic system. By Landon Thomas Jr..
5.  As India's Economy Rises, So Do Expectations. Although India's economy is showing amazing growth, huge pockets of poverty remain. And experts warn of a subtler economic soft spot. By Saritha Rai.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
6.  Microsoft Mulls Mydoom Bounty

2:17:59 AM    

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  Switching from Another Industry to Engineering/CS?
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
2.  Disney loses top cartoon deal. Hollywood animator Pixar, the company behind box office hits Finding Nemo and Monsters Inc, is ending its distribution deal with Walt Disney.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
3.  FBI Agent Talks Crime, Macs
4.  Columnists: A Visit from the FBI
5.  Acceptable Use Policy
6.  BAT_RANDON.AC

1:17:40 AM    

----------------------------------------------------------------------
Boing Boing Blog
----------------------------------------------------------------------
1.  Hidden beauty in a missile's nosecone. This wall-hanging made from the circuit-boards from the nose-cone of a Minuteman Missile is awfully, lethally pretty.

Because the missile was perpetually armed, Williams explained, the circuitry was immersed in liquid Freon to keep it from critically overheating. In the event the missile was launched, the coolant would be abruptly disconnected and the circuitry would have approximately 10 minutes before it burned itself up - just enough time for the missile to reach its target. Freon, it turns out, was an excellent preservative for the colorful (but now ancient) transistors, resistors and capacitors displayed here.

Link

(Thanks, Hugh!)

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
2.  Carolina Edges New England in Key Video Game Bowl (Reuters). Reuters - Fans always want to root for the underdog in major sporting events - and a video game contest with a perfect track record of picking the eventual Super Bowl champion likes the Carolina Panthers in an upset this Sunday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
3.  Intel Shifting 64-bit Plans
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
4.  I tried Orbitz and I'm pretty pleased. I like the fact that it shows a lot of choices up front so I didn't have to fiddle with the settings to find the flight I wanted.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
5.  Microsoft mulling bounty for Mydoom author. Microsoft is considering whether to offer a bounty for information that leads to the arrest of the Mydoom virus author, a company spokesman said Thursday.
6.  Nortel revenue, earnings jump in Q4. In what the company called a turning point, Nortel Networks on Thursday reported net income for 2003's fourth quarter of $499 million, or $0.11 per share, soundly surpassing analyst estimates of $0.02 per share.
7.  PeopleSoft meets Q4 targets. PeopleSoft wrapped up its 2003 fiscal year with a financial report that met analyst expectations but provided little insight into how its business fared in the past year.
8.  Update: Microsoft delays IE changes - Infoworld Staff. Microsoft on Thursday said it would not, "for now, implement modifications" to Windows and Internet Explorer as demanded by the patent suit it lost to Eolas Technologies last August, because of many requests made by its corporate users and business partners.
----------------------------------------------------------------------
SecurityFocus Vulnerabilities
----------------------------------------------------------------------
9.  Vulnerabilities: WebLogic Server and Express HTTP TRACE Credential Theft Vulnerability. WebLogic Server and WebLogic Express are enterprise application server products distributed by BEA Systems.

A vulnerability has been reported to exist in the software t...

----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
10.  W32.HLLW.Anig
11.  Microsoft Offers $250K Reward for Virus

12:17:21 AM