Gregg's Security News Aggregator

Saturday, February 21, 2004

---------------------------------------------------------------------- Hack the Planet ----------------------------------------------------------------------
1.	Knuth crashed the Google party last night in his Stanford robes.

11:13:23 PM

---------------------------------------------------------------------- New York Times: Technology ----------------------------------------------------------------------
1.	The Search Engine That Isn't a Verb, Yet. Under Terry S. Semel, Yahoo has become a big hit on Madison Avenue. But now Mr. Semel must win over a tougher audience: Silicon Valley. By Saul Hansell.
2.	Tourism Offices Get Web Savvy. Many national tourism organizations have built comprehensive Web sites in recent years. By Bob Tedeschi.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
3.	Gov't Vulnerability-Disclosure Program Draws Heat
---------------------------------------------------------------------- LinuxSecurity.com ----------------------------------------------------------------------
4.	Small firms beef up computer security
5.	Linux Kernel Flaws Uncovered

10:13:02 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	NASA Open Source License Still Up For Discussion
2.	An Introduction To Wireless USB (WUSB)
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
3.	Faille critique sur différentes versions de ZoneAlarm (4.x)

9:12:44 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	More Online Publishers Inching Toward Paid Content
---------------------------------------------------------------------- SecurityFocus Vulnerabilities ----------------------------------------------------------------------
2.	Vulnerabilities: Microsoft Windows NtSystemDebugControl() Kernel API Function Privilege Escalation Vulnerability. It has been reported that security exposures exist in kernel API functions for Microsoft Windows operating systems that may permit local privilege escalation attacks. Th...
3.	Vulnerabilities: Linux Kernel execve() Malformed ELF File Unspecified Local Denial Of Service Vulnerability. It has been reported that the Linux Kernel is prone to a local denial of service vulnerability due to an inability of the exceve() system function to handle exceptional c...

7:36:52 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Small-Town Utilities Fill Technology Gap (AP). AP - Paula Crosby's dial-up Internet connection was so slow she played computer solitaire while waiting for sluggish pages to appear. And when her teenage daughter surfed the Web, it tied up the family's phone line for hours.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	FCC Supports Neighborhood Radio
---------------------------------------------------------------------- SecurityFocus Vulnerabilities ----------------------------------------------------------------------
3.	Vulnerabilities: Linux Kernel Vicam USB Driver Userspace/Kernel Memory Copying Weakness. It has been reported that the Vicam USB driver does not access userspace memory in a safe manner. The source of the problem is that the copy_from_user function is not us...
4.	Vulnerabilities: Linux Kernel R128 Device Driver Unspecified Privilege Escalation Vulnerability. The Linux Kernel supports numerous driver modules; one such is the R128 ATI Rage 128 bit video card driver module. It has been reported that the Linux Kernel is prone to...

6:36:33 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Earthlink Invests In Broadband Over Power Lines
---------------------------------------------------------------------- Hack the Planet ----------------------------------------------------------------------
2.	The CodeCon audio stream is available.

5:36:13 PM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Start-Up Offers Fingerprint Cellphone Touchpad (Reuters). Reuters - Atrua Technologies, a start-up backed by some of the top names in technology and telecommunications, on Saturday unveiled its first product, a cellphone touchpad with built-in fingerprint recognition as a security feature.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	One Man's Check From The RIAA

4:35:53 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Keyless Entries Fail In Las Vegas On Friday

3:35:32 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	The World's Safest Operating System
---------------------------------------------------------------------- SecurityFocus Vulnerabilities ----------------------------------------------------------------------
2.	Vulnerabilities: Ecommerce Corporation Online Store Kit Multiple SQL Injection Vulnerabilities. Online Store Kit is a commercially available web based shopping cart application. Implemented in PHP, it can be deployed on Unix and Unix like platforms as well as Windo...
3.	Vulnerabilities: Linksys WAP55AG SNMP Community String Insecure Configuration Vulnerability. Linksys WAP55AG is a wireless routing appliance. SNMP (Simple Network Management Protocol) is used to allow remote configuration of hardware. Configuration is accomplishe...
4.	Vulnerabilities: EarlyImpact ProductCart Multiple Vulnerabilities. EarlyImpact ProductCart is e-commerce software that is implemented in ASP and available for Microsoft Windows systems. EarlyImpact ProductCart is reportedly prone to mul...
5.	Vulnerabilities: Owl's Workshop Multiple Remote File Disclosure Vulnerabilities. Owl's Workshop is a freely available web based educational tool facilitating creation of exercises, readings and online presentations. Implemented in PHP, it can be depl...

1:34:52 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Heise Online Reveals Trojan / Spam Connection
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	"Grey Tuesday" Civil Disobedience: Creativity vs. the Copyright Cartel

12:34:32 PM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Stargate Atlantis Coming This Summer
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	No Law Broken in JetBlue Scandal

11:34:12 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Videophones Revisited
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	Óÿçâèìîñòü â Internet Explorer 5
3.	Linux ïî-ïðåæíåìó ÷àùå àòàêóþò

10:33:53 AM

---------------------------------------------------------------------- CNET News.com - Front Door ----------------------------------------------------------------------
1.	Behind the Asian outsourcing phenomenon. U.S. computer giants, along with leading U.S. companies in financial services and other industries, are using offshore partnerships to do more than just cut costs.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Storing Light In Chips
---------------------------------------------------------------------- SecurityFocus Vulnerabilities ----------------------------------------------------------------------
3.	Vulnerabilities: ClamAV Daemon Malformed UUEncoded Message Denial Of Service Vulnerability. ClamAV is a freely available, open source virus scanning utility. It is available for the Unix and Linux platforms. A problem in the handling of specially crafted UUEnc...
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
4.	Ircas Alarm 2
5.	Vendors want faster clearance

9:33:33 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Developers Go Mobile: Opie Releases Free SDK

8:33:12 AM

7:32:52 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	Kodak Lagging in Digital World
---------------------------------------------------------------------- Wired News ----------------------------------------------------------------------
2.	Aussie Copyright Case Grinds On. Solicitors for Kazaa, which is being sued by the Australian music industry, hope to invalidate evidence of copyright infringement seized by special order. The court's ruling will have an impact on the lawsuit. Patrick Gray reports from Sydney.
3.	E-Voting Activists: Vote Absentee. Citing concerns that electronic voting machines may not count votes correctly, activists are asking voters to use a paper absentee ballot instead. By Kim Zetter.
4.	Locking Out Drunks Ignites Debate. Critics call a proposed law to put anti-drunk locks on all New Mexico cars unrealistic. The bill's author sees it as a way for tech to help ease society's ills. Jason Silverman reports from Santa Fe, New Mexico.
5.	Hollywood Wins DVD-Copying Case. A federal judge handed a huge win to the movie studios on Friday, ruling that 321 Studios must stop selling software that lets customers copy their DVDs for backup and personal use. By Katie Dean.
6.	No Law Broken in JetBlue Scandal. The privacy officer of the Homeland Security Department says officials at her department didn't break any laws by pushing JetBlue to hand over passenger data. But they shouldn't have done it. By Ryan Singel.
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
7.	Linux Kernel do_mremap VMA Limit Local Privilege Escalation Vulnerability

6:32:32 AM

---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
1.	MyDoom: The Trend of Worms to Come?
2.	W32.Mydoom.F@mm
3.	Ideaal spamfilter kent spammers en vrienden

5:32:13 AM

---------------------------------------------------------------------- Dilbert ----------------------------------------------------------------------
1.	Dilbert for 21 Feb 2004.
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	eEye: Zone Labs SMTP Processing Buffer Overflow
3.	Ipswitch iMail 8.05 LDAP Service Remote Exploit

4:31:53 AM

---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
1.	New EU IP Law Deemed Harmful
---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
2.	Sonic's latest is headache for oldies. Leave repetition and speed to the children, says Daniel Etherington of BBCi Collective in his weekly column.
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
3.	Germany Begins Iris Scans at Frankfurt Airport
4.	Look Me in the Eye
5.	Iris scanning to begin at German airport
6.	Frankfurt airport introduces iris scan for border control
7.	Frankfurt airport introduces iris scan for border control
8.	Hollywood Wins DVD-Copying Case
9.	Outsourcing: Danger to Privacy
10.	E-Voting Activists: Vote Absentee
11.	FDA backs RFID tags to track prescription drugs
12.	Can They Hear You Now? - How the FBI eavesdro...
13.	Can They Hear You Now? - How the FBI eavesdrops on Internet phone calls (and why it sometimes can't).
14.	Blackwell wants $128M for voting machines

3:31:32 AM

---------------------------------------------------------------------- Boing Boing Blog ----------------------------------------------------------------------
1.	Mediachest -- like eBay, except you borrow instead of buy. Michael sez: "Mediachest is a social software site that allows users to inventory their collection of physical media items and search the collections of their friends and friends-of-friends for items such as DVDs or books that they would like to borrow. The site facilitates the borrowing and loaning of these items in a similar way to how Ebay facilitates online auctions -- there are user profiles, feedback pages, and rankings. In addition to searching the collections of friends you are able to see the items of people that are geographically close to you, or that are members of groups that you associate with (such as a student organization, gym, or work place group)." Link
---------------------------------------------------------------------- New York Times: Technology ----------------------------------------------------------------------
2.	Judge Rules Software for Copying DVD's Is Illegal. A federal judge said 321 Studios' software breaks copyright laws and that the company must stop selling the products. By John Borland, Staff Writer, Cnet News.com.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
3.	The 1 Percent Recovery? (washingtonpost.com). washingtonpost.com - Hewlett-Packard Co. unveiled strong quarterly financial results yesterday, demonstrating once again that the PC giant's 2002 merger with Compaq Computer is paying off.

2:31:12 AM

---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
1.	Security flaw in Linux kernel gets vendor patches

1:30:53 AM

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Intel Exec Sees 64-Bit Irrelevant for Home PCs Now (Reuters). Reuters - A top Intel executive said 64-bit technology, which gives computers greater memory capacity and more powerful data crunching abilities, would not become relevant to home PC users until sometime in 2006, later than anticipated by Intel's rival, AMD.
---------------------------------------------------------------------- Slashdot ----------------------------------------------------------------------
2.	Jet-powered Nausicaa Glider Project
---------------------------------------------------------------------- InfoWorld: Top News ----------------------------------------------------------------------
3.	Judge blocks sales of DVD copying software. Siding with several of Hollywood's largest movie studios, a U.S. federal judge on Friday barred 321 Studios LLC from manufacturing, distributing or otherwise trafficking in software that allows users to copy DVDs.
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
4.	Linux serves up triple threat

12:30:12 AM