Sunday, May 02, 2004

---------------------------------------------------------------------- Help Net Security ---------------------------------------------------------------------- 1.  U.S. charges 4 under new law against 'spam' e-mails 2.  New worm's got sass, but not much else 3.  Firms spend more on printers than security 4.  Why your personal firewall could be obsolete 5.  Customize this feed. Add more items, descriptions, time stamps, select your version of RSS, aggregate several feeds... Check out NewsIsFree's premium syndication services! (19) ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 6.  Moodle Cross Site Scripting Vulnerability 7.  SquirrelMail Multiple Cross Scripting Vulnerabilities 8.  Props 0.6.1 Multiple Vulnerabilities 9.  3com NBX VOIP NetSet Denial of Service Vulnerability 10.  Microsoft Internet Explorer Certificate Stealing Vulnerability 11.  Citrix MetaFrame Administrator Excessive Privilege Vulnerability 12.  FLIM Unsafe Temporary Files May Let Local Users Gain Elevated Privileges 13.  U.S. charges 4 under new law against 'spam' e-mails 14.  New worm's got sass, but not much else 15.  Firms spend more on printers than security 16.  Why your personal firewall could be obsolete ---------------------------------------------------------------------- About Internet/Network Security ---------------------------------------------------------------------- 17.  5 Steps To Protect Yourself From Spyware. Spyware and adware is becoming increasingly pervasive and increasingly malicious. While primarily benign- simply tracking your web surfing habits to provide companies with data for their marketing efforts- spyware can perform any number of potentially malicious functions. There are some... 11:23:39 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Click a link, fight breast cancer. BoingBoing pal and former guestblogger Susannah says: It takes less than a minute to go to the Breast Cancer site and click on 'fund free mammograms' (pink window in the middle). This doesn't cost you a thing. Their corporate sponsors/advertisers use the number of daily visits to donate mammograms in exchange for advertising. Link (via Attu) ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 2.  ChoicePoint Chief's Interview Highlights (AP). AP - ChoicePoint Inc. chairman Derek Smith hopes to prompt debate about the balance of security and liberty in America. Here are highlights of an interview he gave to The Associated Press. 3.  Database Expert Sees Info As Protection (AP). AP - Derek V. Smith sees bad people lurking everywhere: terrorists, sexual predators, quack doctors, identity thieves. And yet Smith colors himself an optimist, insisting that society can protect itself from such dicey characters, using information as a shield. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 4.  Gmail Addresses For Sale ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 5.  Linux Kernel mremap() Missing Return Value Checking Privilege Escalation 6.  Netscape document.referrer Information Disclosure 7.  2 May W32/Sasser-B 10:23:18 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Click a link, fight breast cancer. BoingBoing pal and former guestblogger Susannah says: The Breast Cancer site is having trouble getting enough people to click on it daily to meet their quota of donating at least one free mammogram a day to an underprivileged woman. It takes less than a minute to go to their site and click on 'fund free mammograms' (pink window in the middle). This doesn't cost you a thing. Their corporate sponsors/advertisers use the number of daily visits to donate a mammogram in exchange for advertising. Link (via Attu) ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 2.  IRS Warns Taxpayers of Fraudulent E-Mail (AP). AP - The Internal Revenue Service on Friday warned consumers about an identity theft operation that tries to elicit personal information from taxpayers by sending e-mails alleging they're the subject of a tax investigation. ---------------------------------------------------------------------- SecurityFocus Vulns ---------------------------------------------------------------------- 3.  Vulns: Linux Kernel Samba Share Local Privilege Elevation Vulnerability. A local privilege escalation vulnerability has been reported to affect the 2.6 Linux kernel. X-NAS-Bayes: #0: 5.30008E-139; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 296 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} The issue appears to exist due to a lack of sufficient sanity checks perform... 4.  Vulns: ETerm Window Title Reporting Escape Sequence Command Execution Vulnerability. eterm is X-based terminal emulation application. It is available for platforms that support the Common Desktop Environment, such as Unix. eterm's window title reporting... 5.  Vulns: Sysklogd Crunch_List Buffer Overrun Vulnerability. Sysklogd has been reported to prone to a buffer overrun vulnerability. The specific issue exists in the syslogd.c source file and is related to memory management invol... 6.  Vulns: 3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability. A vulnerability has been discovered in 3Com SuperStack 3 NBX IP telephones. Reportedly the httpd server(NBX Netset application) included in the Embedded Real Time Operati... 7.  Vulns: Sesame Unauthorized Repository Access Vulnerability. Sesame is a web based Resource Description Framework (RDF) repository application that facilitates storage and retrieval of RDF information. It supports a multi-user, mu... 8.  Vulns: JForum Unauthorized Forum Access Vulnerability. JForum is a web based forum application implemented in Java. It will run under all systems that implement a Java runtime environment including Unix, Unix variants and Mi... ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 9.  Namazu Error Message XSS ---------------------------------------------------------------------- About Internet/Network Security ---------------------------------------------------------------------- 10.  New Look and Updated Glossary. Unless this last week was the first time you ever visited About.com you most likely noticed a significant overhaul in the look and feel of the site. About.com felt it was time for a change and devoted extensive time and... 9:22:59 PM    comment [] ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Artists Against 419 Takes On Scammers ---------------------------------------------------------------------- SecurityFocus Vulns ---------------------------------------------------------------------- 2.  Vulns: McAfee Security Installer Control System ActiveX Information Disclosure Vulnerability. McAfee Security Installer Control System is an ActiveX component that is reportedly installed with McAfee VirusScan. Other McAfee products may also install this componen... 3.  Vulns: Linux Kernel Panic Function Call Undisclosed Buffer Overflow Vulnerability. The panic() function call of the Linux kernel has been reported prone to a buffer overflow vulnerability. The exact details of the overflow are currently unspecified, how... 4.  Vulns: Linux kernel do_fork() Memory Leakage Vulnerability. The Linux kernel has been reported prone to an unspecified memory leakage vulnerability that may allow an attacker to disclose sensitive kernel memory. X-NAS-Bayes: #0: 5.77041E-099; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 295 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} It has been repor... 5.  Vulns: Linux Kernel Setsockopt MCAST_MSFILTER Integer Overflow Vulnerability. An integer overflow vulnerability has been reported in the setsockopt() system call. This issue is related to the code for handling the MCAST_MSFILTER socket option, whi... 6.  Vulns: Admin Access With Levels Plug-in For osCommerce Access Control Bypass Vulnerability. Admin Access With Levels Plug-in is an augmentation for the osCommerce online application; it provides functionality to define access controls for every administrator dep... ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 7.  Sasser C will kill your network 8.  the first ms04-011 worms are there 9.  LSASS exploit analysis 8:22:38 PM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Amazon Could Take Shine Off Jeweler Zale-Barron's (Reuters). Reuters - Zale Corp. (ZLC.N) is likely to face competition from online retailer Amazon.com Inc (AMZN.O) and the top U.S. jeweler's share price could suffer, Barron's financial weekly said in its latest edition. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Super MP3 Will Feature User Tracking 7:22:19 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  More anti-porn online propaganda videos. X-NAS-Bayes: #0: 9.94658E-054; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 278 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} Following up on this post about the Newsweek "Porn Puppet/XXXChurch" article BoingBoing reader Jake points to another odd bit of Christian anti-porn propaganda. This short movie from "Project God" is "very 'Office Space' meets the prude," says Jake, and ends with the biblical quote, " If your right eye causes you to sin, gouge it out and throw it away." One of the great things about America is that here, you're perfectly free to gouge your right eye out if the spirit moves you (IANAL, but I'm thinking there's probably some kind of religious freedom protection for faith-based body modification). And until what's left of our constitution is gouged out, everyone else is free to watch, read, or listen to all the smut they like in the privacy of their own laptops. Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Websites For The Frugal? 6:21:59 PM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Wall Street Adopts New Technology (Ziff Davis). Ziff Davis - The financial industry flocks to Linux and service-oriented architecture. 2.  Google sets its own terms in IPO with "Dutch auction" (AFP). AFP - As part of its effort to be different, Internet giant Google will use a so-called Dutch auction for its initial public offering set for Wall Street in the coming months. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 3.  Making The Justice Dept. A Copyright Busybody ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  Millions of computers worldwide hit by Internet worm, experts say (AFP) 5.  Paypal phishing scam using the Internet Explorer %01 bug 5:21:37 PM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Interview: JBoss CEO Marc Fleury (TechWeb). TechWeb - JBoss CEO and founder Marc Fleury recently spoke with CRN Senior Editor Elizabeth Montalbano about why he's committed to open source as a lucrative business model and how things have changed between his company and Java steward Sun Microsystems since JBoss Inc. became an official J2EE licensee. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Flexiglow Illuminated Keyboard ---------------------------------------------------------------------- Hack the Planet ---------------------------------------------------------------------- 3.  Mac OS X Hints: Record and playback high definition TV signals from cable. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  Sasser worm spreading quickly, problem seen peaking Monday (AFP) 4:21:18 PM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Delta Investigating Computer Glitch (AP). AP - A computer glitch that grounded Delta Air Lines flights to and from Atlanta for about 6 1/2 hours and caused delays over the weekend has been solved, and the airline was trying to determine the cause of the malfunction. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  CableCARDs and HDTV 3.  Cinematic Game Graphics ---------------------------------------------------------------------- BBC News | Technology | UK Edition ---------------------------------------------------------------------- 4.  Sasser worm 'spreading rapidly'. A new internet worm may already have infected millions of computers but causes no lasting damage, experts say. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 5.  Internet worm Sasser causes disruptions, may spread Monday (AFP) 6.  Ve Don't Haf Vays of Making You Talk 7.  Retina Sasser Worm Scanner from eEye Digital Security 8.  W32.Sasser.B.Worm 3:21:01 PM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Internet worm Sasser causes disruptions, may spread Monday (AFP). AFP - A new Internet computer worm caused disruptions over the weekend but experts warned it may spread rapidly when businesses resume work on Monday morning. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  How Many Google Machines, Really? ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  L'Agence France Presse parmis les victimes du virus Sasser 4.  WORM_RBOT.RC 2:20:40 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  How to think about US atrocities in Iraq. Over on the ever-excellent Fafblog, the Medium Lobster sums up the current Bushie spin on the war-atrocities committed by the US occupying forces in Iraq: X-NAS-Bayes: #0: 1.61138E-052; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 273 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} - The activities that occurred at Abu Ghuraib prison are not to be compared to those of Saddam Hussein's rape rooms and torture chambers. After all, those were rape rooms and torture chambers. These were merely rooms in which rape occurred, and chambers in which individuals were tortured. - In war, atrocities will happen, as dew on the grass in the morning, or flower blossoms in the spring. The dew gathers. The buds open. The atrocities bloom. It is all according to the mysterious, ever-unfolding cycle of life - a cycle too vast and complex for mere mortals to comprehend. - These were isolated incidents, and the behavior of these prison guards should in no way reflect upon the military superiors who endorsed and promoted such behavior. This is because atrocities are supervenient on subordinates, but not on command structures. Those with greater learning will understand. Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  VoteHere Whistleblower Suit ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  Sasser-Wurm: System-Neustarts ala Blaster-Attacke 1:20:18 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Buddhist Hell Theme Park in Vietnam. X-NAS-Bayes: #0: 1.25401E-088; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 272 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} Following up on this earlier post, BoingBoing reader Hostile17 says, "Another example of an Asian site featuring the torments of hell. It's not in a museum though, it's in a theme park in [Vietnam]. I mean, three words: Buddhist Theme Park! I was a little baffled by the concept myself but it was a lot of fun. Rides and stuff, plus this animatronic display of the [twelve] torments of hell for people who'd committed particular crimes. It was a little like Pirates of the Carribean, only incredibly lame, tech-wise. There was one specific punishment for gamblers, one for adulterers, another for drug-takers. It was kind of amusing how different members of the family I was with laughed nervously at different exhibits. If you're ever in Saigon, you have to visit, it's truly strange." The park has a website where you can watch short MPEG movies of attractions, including the Hell exhibit. The whole park is surreal -- check out the wicked cool photos these gigantic swimming pools with faux-stone monuments of gods watching over. This one -- an old man with a waterfall beard -- is my favorite. Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Unofficial Windows98SE Patch ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  Le virus exploitant la faille LSASS récente se diffuse 12:19:57 PM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  More postcards from Buddhist Hell -- this time, Vietnam. Following up on this earlier post, BoingBoing reader Hostile17 says: Another example of an Asian site featuring the torments of hell. It's not in a museum though, it's in a theme park in [Vietnam]. I mean, three words: "Buddhist Theme Park"! I was a little baffled by the concept myself but it was a lot of fun. Rides and stuff, plus this animatronic display of the [twelve] torments of hell for people who'd committed particular crimes. It was a little like Pirates of the Carribean, only incredibly lame, tech-wise. There was one specific punishment for gamblers, one for adulterers, another for drug-takers. It was kind of amusing how different members of the family I was with laughed nervously at different exhibits. If you're ever in Saigon, you have to visit, it's truly strange. Link 2.  Froogle Zen. BoingBoing reader Bobby points out that Froogle displays a list of recently-found things people have used the online service to successfully seek and buy. The resulting list is total funky Dada webzen that makes you want to refresh for hours. It's a little like those Target ads that smush together unlikely combinations of things one can buy at Target. So, just now -- pure poetry: X-NAS-Bayes: #0: 2.54932E-100; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 271 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} Fleece ferret hammock, golf balls, Kung-fu hamster. Cheesecake, gas blower, belly button rings. Barebone PC, donut maker, mouth guard. Matrix sunglasses, cookie jar, stuffed monkey. Zen alarm clock, hair bows. Red dress, beef jerky, snake light. Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 3.  Simpsons Pay Dispute Settled 4.  New & Revolutionary Debugging Techniques? ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 5.  Sasser worm verspreidt zich snel 11:19:39 AM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Makeovers Make the Move to Web (Reuters). Reuters - The Internet can't make you beautiful, but it does cater to a host of vanities, from the search for the perfect eye shadow to the ultimate makeover, plastic surgery. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  BAT_SASSER.A 10:19:17 AM    comment [] ---------------------------------------------------------------------- CNET News.com ---------------------------------------------------------------------- 1.  Week ahead: Hardware's where it's at. Hardware engineers will hear the latest about the Windows platform at WinHEC, while Cisco Systems will hold a power session on its networking technology. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  New Debian Installer Coming Soon ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  WORM_AGOBOT.IM 9:18:58 AM    comment [] ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  To Derive Bid, Use Dow + Pi Your Age (washingtonpost.com). washingtonpost.com - So Google dropped both shoes at once last week. Not only did the search-engine company announce its much-anticipated initial public offering of stock, but it laid out an unusual method of pricing and selling those shares -- a modified Dutch auction. 8:18:38 AM    comment [] ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 1.  Global IT security spend hits $42bn 2.  The Hackademy starts an international hacker magazine 3.  Beyond the IPO, Google may have big plans 4.  Takedown: Mitnick busts bomb hoaxer 5.  Public enemy number one – the public. 6.  How VCs earn their keep 7.  Apple offers potential fix for iPod Updater problems 8.  New worm's got sass, but not much else 9.  U.S. charges four under new law against 'spam' e-mails 10.  Latest Red Hat clears security hurdle 11.  Firms spend more on printers than security 12.  Biometric IDs OK With U.K. 13.  Survey: Spam will beat Bill Gates 14.  UK firms must face the reality of security problems, says study 15.  Experts warn of Bluetooth security hole 7:18:18 AM    comment [] ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Swedish Pirate Demo 6:17:57 AM    comment [] ---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Futurismic publishes its first story. Futurismic, the science-fiction writers' group-blog, announced a while back that it was going to start publishing fiction, and put out a call for submissions. Today, they published their first work, a story called "The Factwhore Proposition" by Campbell-, Hugo-, Nebula- and Sidewise-Nominee Charles Coleman Finlay. I quite liked the story: it's a distopian work about the commoditization of knowledge work -- Google Answers meets McDonalds -- with a nice bit of characterization in the protagonist, who is clearly the spiritual descendant of today's web-geeks. X-NAS-Bayes: #0: 9.89382E-179; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 265 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67} Even after all these years, he couldn’t believe the stupid questions people asked. With so much information available online, it was difficult, sometimes impossible, to phrase a search string properly to narrow the hits down to find what you wanted, especially when much of the best info was hidden by exclusionary marketing agreements or sequestered behind gates. People would rather pay someone else to do it. And with the big bio-boom, some people had the money to spare. Dylan was not some people. The gap between the haves and have-nots had been blown Grand Canyon wide by the new technology, with those who could afford the enhancements on a narrow ledge that kept moving farther away from everyone else. But if Dylan roped himself to enough of the haves, maybe he could pull his way over to the other side. Link 2.  Lessons learnt from OED's science fiction effort. The editors of the Oxford English Dictionary have begun to post lessons learnt from their first-of-its-kind call for entries of 2001, when it asked science fiction fans to submit sfnal words that were missing from the Dictionary. Soon we were being deluged with dozens of e-mails a day, containing suggestions, citations, and questions about our work. Mail came from all over the world, and correspondents included several noted SF writers. It took months to fully catch up with the backlog (and the pace has reached more manageable levels). But the results have been spectacular. Some of the entries we have published from the project include Martian, meteor storm, mind-meld (from ‘Star Trek’), moon base, and multiverse, and out-of-sequence entries bot (a robot), filk (a type of song performed by SF fans), and Sturgeon's Law (‘90% of everything is crap’, formulated by writer Theodore Sturgeon)... Science fiction has several advantages as a subject for this kind of investigation. The vocabulary is largely self-contained; SF terms tend to occur in SF and nowhere else, while, say, political language can be found anywhere and everywhere. The fans are particularly committed, often have linguistic interests, and are computer literate. They may also be more likely to be able to volunteer time than specialists in more academically oriented fields. Link (Thanks, Diane!) ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  Updated: MS04-011 LSASRV Exploit; Sasser Worm Update: Sasser.b 4.  [VIRUS] W32/Sasser.worm (Yüksek Risk) 5:17:38 AM    comment [] ---------------------------------------------------------------------- Dilbert ---------------------------------------------------------------------- 1.  Dilbert for 02 May 2004. ---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 2.  Two Roads Diverge for Three New Handhelds (washingtonpost.com). washingtonpost.com - If you need a handheld gadget only to remember addresses, birthdays, grocery lists and the other easily forgotten minutiae of daily life, the computer industry solved your problem about five years ago. ---------------------------------------------------------------------- BBC News | Technology | UK Edition ---------------------------------------------------------------------- 3.  Beige PC box gets a makeover. Some computer enthusiasts have taken it on themselves to soup up the boring beige look of a PC. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  IIS Relative Path System Privilege Escalation 5.  IIS URL Redirection Malformed Length DoS 4:17:18 AM    comment [] ---------------------------------------------------------------------- Ars Technica ---------------------------------------------------------------------- 1.  Hurry home to relive the concert experience. New service will allow concertgoers to purchase an mp3 copy of the night's live performance that is downloaded onto a keychain USB drive. By Fred "zAmboni" Locklear. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  PacManhattan Relocates Classic Game To New York Streets 3.  Apple and Independent Developers ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  PostNuke modules.php Downloads Module Multiple Variable XSS 5.  Microsoft IIS Invalid WebDAV Request DoS 6.  SMC Routers Enable Remote WAN-Side Administration With No Password By Default 7.  SmartPeer Has Password Command Flaw With Unspecified Impact 8.  PROPS Input Validation Flaws Disclose Files to Remote Users and Permit Cross-Site Scripting Attacks 3:16:59 AM    comment [] ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 1.  Global IT security spend hits $42bn 2.  The Hackademy starts an international hacker magazine 3.  Beyond the IPO, Google may have big plans 4.  Takedown: Mitnick busts bomb hoaxer 5.  Public enemy number one – the public. 6.  How VCs earn their keep 7.  Apple offers potential fix for iPod Updater problems 8.  New worm's got sass, but not much else 9.  U.S. charges four under new law against 'spam' e-mails 10.  Latest Red Hat clears security hurdle 11.  Firms spend more on printers than security 12.  Biometric IDs OK With U.K. 13.  Survey: Spam will beat Bill Gates 14.  UK firms must face the reality of security problems, says study 15.  Experts warn of Bluetooth security hole 2:16:38 AM    comment [] ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Wi-Fi in the Sky ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  NetCache Can Be Crashed By Remote Users 3.  Xine Buffer Overflow in Playing Real Streams Lets Remote Servers Execute Arbitrary Code 4.  MPlayer Buffer Overflow in Playing Real Streams Lets Remote Servers Execute Arbitrary Code 12:24:47 AM    comment []

© Copyright 2004 Gregg Doherty. Last update: 6/1/2004; 12:28:59 AM. This theme is based on the SoundWaves (blue) Manila theme.