Gregg's Security News Aggregator

Currently, this "blog" is nothing more than a news aggregator which

gets security information from over 30 sources. As you'll note,

a number of the sources are not specific to security. Advanced

filtering is definitely needed.






Subscribe to "Gregg's Security News Aggregator" in Radio UserLand.

Click to see the XML version of this web page.

Click here to send an email to the editor of this weblog.
 

 

Saturday, May 15, 2004
 

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  Novell Sued Microsoft Through Caldera?
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
2.  PulpFiction is a new aggregator for OS X. I like the UI, although there are some things I can't figure out about it.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
3.  Re: IE URL Issue Being Used In Phishing In the Wild [USBank]

5:26:11 PM    comment []

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  Updated Schedule for U.S. Biometric Passports
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
2.  BugTraq: Re: Linux Kernel sctp_setsockopt() Integer Overflow. Sender: Michael Tokarev [mjt at tls dot msk dot ru]
3.  BugTraq: Re: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices. Sender: Casper Dik [casper at holland dot sun dot com]
4.  BugTraq: CiSCO IOS 12.* source code stolen. Sender: Alexander Antipo [alexander at Antipov dot info]
5.  BugTraq: Re: Curious fileutils/coreutils behaviour.. Sender: Martin [broadcast at mail dot ptraced dot net]
6.  Vulns: NetBSD/FreeBSD Port Systrace Exit Routine Access Validation Privilege Escalation Vulnerability. A vulnerability has been reported that affects Systrace on NetBSD, as well as the FreeBSD port by Vladimir Kotal. X-NAS-Bayes: #0: 3.72298E-072; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 821 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

The source of the issue is that affected implementati...


4:25:52 PM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Sinner, you better get ready. Rolling Stone magazine called the Goodbye, Babylon box set, "the greatest anthology of antique Southern sacred song and oratory ever assembled. Packaged like a pioneer-family heirloom -- in a cedar case with a nineteenth-century etching of the Tower of Babel on the lid -- Goodbye, Babylon is six CDs of blues hymns, hillbilly hosannas, choral thunder and hellfire sermons from the 78-rpm era." Boing Boing reader Marc Garrett points us to a short interview he conducted with Lance Ledbetter, compiler of this holy treasure. Link
----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
2.  Need a job? How about a date?. Internet companies that bridge the separation between the friend of a friend you might marry or the colleague of a colleague who might hire you are hot at the moment.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
3.  XML Syndication Supporters Mulling W3C Move (Ziff Davis). Ziff Davis - The Web standards body renews debate over the best place for Atom backers to form an XML content syndication standard to rival RSS.
4.  Japan-U.S. Divide Splits Video Game Industry (Reuters). Reuters - When Konami Corp.'s U.S. sales staff was asked to bring the off-beat, Japanese video game "Dance Dance Revolution" to American homes, they balked at the prospect of a costly flop, out of touch with local tastes.
5.  PluggedIn: Apple IPod Mini Reflects Personality (Reuters). Reuters - Some pooh-poohed the assorted colors of Apple Computer Inc.'s iPod mini as frivolous, but the digital music players are a smash hit and have become fashion accessories in and of themselves.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
6.  Indie Game Jam 2004 Recounted
7.  Microsoft Blames Anti-trust Legal Fees for Price Increases
8.  Apple Files Patent for Translucent Windows
9.  New Wave Of File-Sharing Embraces Secrecy
10.  Metal Velcro
11.  George Gilder on Telecommunications Policy
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
12.  BugTraq: Re: Curious fileutils/coreutils behaviour.. Sender: Michael Shigorin [mike at osdn dot org dot ua]
13.  BugTraq: Re: Curious fileutils/coreutils behaviour.. Sender: Luciano Miguel Ferreira Rocha [strange at nsk dot no-ip dot org]
14.  BugTraq: lha buffer overflow(s) again. Sender: [lw at wszia dot edu dot pl]
15.  BugTraq: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices. Sender: [albatross at tim dot it]
16.  Vulns: KAME Racoon "Initial Contact" SA Deletion Vulnerability. KAME Racoon is an IPSec key management daemon developed for BSD Unix platforms that is used for negotiating and configuring security associations in authenticated or encr...
17.  Vulns: KAME Racoon "Authentication" SA Deletion Vulnerability. KAME Racoon is an IPSec key management daemon developed for BSD Unix platforms that is used for negotiating and configuring security associations in authenticated or encr...
18.  Vulns: KAME Racoon Malformed ISAKMP Packet Denial of Service Vulnerability. racoon is an IKE (Internet Key Exchange) daemon included in KAME's IPsec utilities and the Linux 2.6 Kernel port IPsec-Tools. X-NAS-Bayes: #0: 2.47686E-247; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 820 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

A vulnerability has been identified in the...

19.  Vulns: Linux Kernel STRNCPY Information Leak Vulnerability. This issue is reported to affect the vulnerable kernel only on platforms other than x86.

It has been reported that the Linux kernel is prone to a 'strncpy()' information...

20.  Vulns: Symantec Client Firewall Products SYMNDIS.SYS Driver Remote Denial Of Service Vulnerability. Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet processing r...
21.  Vulns: HP B6848AB GTK+ Library Insecure File Permissions Vulnerability. HP B6848AB GTK+ Support Library may provide for local privilege escalation. The issue is due to weak default permissions that are set on the installation directories and ...

3:25:35 PM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Oracle slashes its bid for PeopleSoft by 20% (SiliconValley.com). SiliconValley.com - Oracle sliced its bid for PeopleSoft on Friday by almost 20 percent to $7.7 billion, following drops in stock prices for both companies since the start of this year.
2.  Wildseed Readies Chameleon Cell Phones (PC World). PC World - Plastic skins with embedded chips change and customize the Identity phone's personality in seconds.

7:20:07 AM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Read this and understand the P2P wars. Timothy Wu is a law prof at the University of Virginia, and a very clever copyright reformer to boot. When Timothy and I last met, he was called Timmy, and we were both students at ALP, the hippie alternative school in Toronto that we both attended until grade eight. One of the weirdest coincidences in my life to date is that two alumni of a tiny school in Toronto would both end up moving to the US to pursue something as obscure as copyright reform.

Back to Tim(my)! His latest paper, "Copyright's Communications Policy," has me absolutely floored. Tim traces the history of copyright law, the way that we've spent a century undergoing a once-a-decade copyfight, in which representatives of inventors faced down representatives of artists and duked it out in the courts and Congress.

The parallels to today's fights are downright spooky. For example, the first music pirates (the recording industry, who ripped off sheet music) got this proper dressing-down from John Phillip Sousa, who told Congress: X-NAS-Bayes: #0: 4.19014E-184; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 803 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

These talking machines are going to ruin the artistic development of music in this country. When I was a boy...in front of every house in the summer evenings, you would find young people together singing the songs of the day or old songs. Today you hear these infernal machines going night and day. We will not have a vocal chord left. The vocal chord will be eliminated by a process of evolution, as was the tail of man when he came from the ape.

I mean, I though Jack Valenti's Boston Strangler testimony was over the top, but clearly, Jack took his cues from Sousa et al.

Thirty-odd years later, the another group of pirates -- radio broadcasters, who refused to pay royalties for the music they file-shared over the airwaves -- violated Godwin's Law decades before it was formulated, comparing the entrenched rights societies that served the recording industry (the pirates of their boyhoods) to Adolph Hitler.

Tim runs down the history of cable versus broadcasters, and other copyfights down through the ages. He does so clearly and engagingly, in ways that non-lawyers and non-historians can readily grasp. And when it's done, the most amazing thing is the certainty that copryight-disrupting technologies every bit as wooly as file-sharing have been invented over and over again, and that the P2P fight is not a new one -- that piracy is the norm, not the exception.

If you want to understand the P2P fight, read this -- it is the most concise, thorough and engaging text on the subject to date.

560k PDF Link

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
2.  Meru Demonstrates Interoperable VoIP over Wi-Fi (TechWeb). TechWeb - Thanks to Meru's virtual access points, Cisco's Wi-Fi phones can work without Aironet hardware.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
3.  Mirror.ac.uk to Scale Back Operations
----------------------------------------------------------------------
Wired News
----------------------------------------------------------------------
4.  EU Capitulates on Biotech Corn. The European Union caves to U.S. pressure to approve a type of genetically modified corn for human food. Such food will have to be clearly labeled, however, and European farmers are still prohibited from growing the insect-resistant corn.
5.  How to Promote a Game With Flare. The Army stages an assault on the L.A. Convention Center to promote its latest video game at E3. Also: Sony to release EverQuest II this fall.... Mangled patients in ER, the video game. Wired News reports from Los Angeles.
6.  Asimo Shakes His Robotic Rump. The dancing humanoid struts his stuff at Wired magazine's NextFest. See him dance. See him run. Find out if he's got a brain. A multimedia gallery.
7.  Peek Into the Future at NextFest. Wired magazine's NextFest, a mini world's fair of the latest and greatest technology, previews the future of gadgets, provided you can live through the commercials. By Leander Kahney.
8.  New Spin on the Music Business. A Harvard professor outlines a radical plan for compensating recording artists in the digital age. He wants to pay for music with taxes on Internet access and MP3 players. Katie Dean reports from Cambridge, Massachusetts.
9.  Space Tug Could Save Hubble. A soon-to-be-released space tug program might be able to pull the space telescope to safety. Also: Astronauts told to eat their veggies.... The $10 million X Prize competition heats up. By Amit Asaravala.

6:19:46 AM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Booth boyz of E3. X-NAS-Bayes: #0: 1.14319E-038; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 802 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

All over the net, we're getting treated to galleries of the booth-babes at E3, the big gaming conference in LA. Alice Taylor, the Quake player who posted the devastating report on a panel of four men saying unbelievably stupid things about why women don't play games, decided to prove her point by going around E3, shooting the Booth Boyz on offer. It's a pretty sad lot.

Link


2.  Hello Kitty accessories for PS2.

For sale: Hello Kitty memory cards for the PlayStation 2.

Link

(via Gizmodo)

3.  TV show mashup photoshopping contest.

Today on Worth1000's photoshopping contest: mash up two or more TV shows.

Link

----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
4.  Phantom console shows its substance. The long-awaited Phantom game system and service has gone on display at the E3 games show.

5:19:26 AM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  UK cinema copyright warnings: a call to action. X-NAS-Bayes: #0: 1.32759E-125; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 801 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

I went and saw Troy, Brad Pitt's new men-in-skirts movie last night, at the big Odeon in Leicester Square, paying £10.50 for the privilege. Not that I begrudge it: apparently, acquiring the rights to the Aeneid was very expensive, and they have to charge a small fortune to viewers if they hope to recoup.

I don't even begrudge them the 30 minutes' worth of commercials they subjected their captive audience to. Well, I did. But I didn't let it get to me.

What did get to me was this warning, shown before nearly every film in the UK:

"You are not permitted to use any camera or recording equipment in this cinema. This will be treated as an attempt to breach copyright. Any person doing so can be ejected and such articles may be confiscated by the police. We ask the audience to be vigilant against any such activity and report any matters arousing suspicion to cinema staff. Thank you."

Every time I see this, my blood boils. I just paid a fortune to see this movie, I've been subjected to 500 percent concession stand markup and half an hour of commercials and now you're going to give me a little lecture about how badly I'll get beaten up if I turn out to be a pirate, and ask me to snitch on my fellow moviegoers?

It's adding insult to injury, if you ask me. It's unforgivably rude.

So here's what I've started doing: whenever this warning is screened, I take a very obvious flash photo of it. I've done it twice now, and both times, I got a round of applause. You can do it too. If we all do it, if we all laugh and boo when this warning comes on, maybe the movie companies will get the picture.

----------------------------------------------------------------------
Dilbert
----------------------------------------------------------------------
2.  Dilbert for 15 May 2004.

4:19:07 AM    comment []

----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
1.  NASA's Finances in Disarray

3:18:46 AM    comment []

----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
1.  What India's Upset Vote Reveals: The High Tech Is Skin Deep. India's governing party waged the country's first modern electoral campaign, but it was ousted in what has been called "a huge popular rebellion." By Amy Waldman.
2.  Services at the First Church of Cyberspace. People separated by vast distances routinely play in imaginary 3-D worlds and sometimes work in them. A new experiment aims to explore whether they can also regularly worship in them. By Barnaby J. Feder.
3.  Bring Us Your Small, Unloved Start-Ups. A pair of Silicon Valley-based venture capitalists have opened an unusual $250 million fund intended to buy and rehabilitate former start-ups. By Gary Rivlin.
4.  Oracle Is Lowering Its Offer for PeopleSoft by $1.7 Billion. Oracle announced that it was reducing its cash offer to acquire PeopleSoft to $7.7 billion, from $9.4 billion. By Laurie J. Flynn.
5.  Grand Jury Subpoenas Documents From Nortel. A federal grand jury in Texas has subpoenaed financial documents from Nortel Networks as part of a criminal investigation. By Ken Belson.
6.  Dissolving the Border Between CD and Live. At the Bowery Ballroom on Thursday, the DJ and producer overlapped live and recorded performances. By Kelefa Sanneh.
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
7.  Flying Car more economical than SUV. NextFest All the fun from the Future Fair By Andrew Orlowski .
8.  Are you ready for Bendable Computing?. NextFest Gummi, we salute you By Andrew Orlowski .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
9.  libtASN1 DER Parsing Flaw Has Unspecified Impact
10.  PWSteal.Banpaes.D
11.  Solaris Management Console Server Discloses File and Directory Existence to Remote Users
12.  New worm targets Sasser code flaw
13.  Intrusion response dips down to end-user level

2:18:27 AM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Some Upcoming Video Games Focus on 'Love' (AP). AP - The hot new creation at the world's top video game convention may be procreation. Amid the thousands of new products at the Electronic Entertainment Expo featuring shooting, racing, punching, slashing and pummeling, a handful of upcoming titles like "The Sims 2" and "Playboy: The Mansion" have focused on "love" — or at least the physical act of it — as the player's main goal.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
2.  Life Imitates Art at Intel
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
3.  Flying Car more economical than SUV. NextFest All the fun from the fair By Andrew Orlowski .

12:26:06 AM    comment []


Click here to visit the Radio UserLand website. © Copyright 2004 Gregg Doherty.
Last update: 6/1/2004; 12:29:17 AM.
This theme is based on the SoundWaves (blue) Manila theme.
May 2004
Sun Mon Tue Wed Thu Fri Sat
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          
Apr   Jun