Gregg's Security News Aggregator

Currently, this "blog" is nothing more than a news aggregator which

gets security information from over 30 sources. As you'll note,

a number of the sources are not specific to security. Advanced

filtering is definitely needed.






Subscribe to "Gregg's Security News Aggregator" in Radio UserLand.

Click to see the XML version of this web page.

Click here to send an email to the editor of this weblog.
 

 

Tuesday, May 18, 2004
 

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
1.  Oracle, Justice Dept. submit final witness lists. IBM's top software executive and Siebel Systems' executive vice president are among new additions to Oracle's final witness list Oracle in its effort to overturn the Department of Justice's antitrust ruling against acquiring PeopleSoft.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
2.  Report: Kids Pirate Music Freely (washingtonpost.com). washingtonpost.com - More than half of young Americans with Internet access continue to download free music even though they know that they are breaking the law, according to a poll released today.
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
3.  Helix Community released Helix Player 1.0 alpha and RealPlayer 10 alpha for Linux. And I'd like to congratulate them for getting over their silly clickthrough fetish.
4.  Red Hat finally released Fedora Core 2 after taunting us all weekend, and boy is it Slashdotted. Their site can't even manage to redirect me to a mirror.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
5.  PHP-Nuke Statistics Module year Variable XSS
6.  PHP-Nuke index.php modpath Variable Arbitrary Command Execution
7.  PHP-Nuke nukecops UnionTap XSS
8.  PHP-Nuke case.filemanager.php Arbitrary File Manipulation
9.  Port 5000 Traffic Continues; Fragmented tcp/16191 Update

11:31:24 PM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Samsung Sees DRAM Chip Shortage Prevailing in 2004 (Reuters). Reuters - Samsung Electronics Co Ltd, the world's top memory chip maker, said on Wednesday it expected a computer memory chip shortage to prevail in 2004 with market inventory at low levels and supply being constrained.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
2.  Successful PearPC/Mac OS X Install Documented
3.  L.L. Bean Suing Competitors For Spyware-Linked Ads
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
4.  WLAN security shootout
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
5.  PostgreSQL Multiple Function Invalid Integer Input DoS
6.  Executives Criticize the Tech Industry (AP)
7.  RE: Buffer Overflow in ActivePerl ?
8.  20040503-01-P.asc
9.  sa11632.txt
10.  outlooksilent.txt
11.  advisory_private_key..>
12.  lids-2.2.0pre4-2.6.6..>
13.  publimark-0.1.tgz
14.  echoart.tgz
15.  WLAN security shootout

10:31:06 PM    comment []

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
1.  Analyst: AT&T mobile plans could face hurdles. The phone company's planned cell phone service could have some interoperability problems, if it draws on other carriers to create a "mixed" network, an analyst says.
2.  Cooperative project reports new top prime number. A shared computing effort says it has found the largest known prime number. It has 6.3 million digits and is the 41st entry in the subcategory of Mersenne prime numbers.
3.  Mac OS X vulnerable to one-two combo attack. Two flaws, when used together, could let attackers who concoct a special Web site place a file on a Mac and then run the file through a simple browser command.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
4.  Hewlett Posts Gains in Profit and Revenue. Hewlett-Packard provided more evidence that the technology business continues to improve as it reported solid quarterly results. By Steve Lohr.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  Safari advisory upgraded to 'Extremely Critical'; Apple responds (MacCentral). MacCentral - The Safari vulnerability advisory issued yesterday by security firm, Secunia, was updated on Tuesday to "Extremely Critical" from its previous "highly critical" level. Even with the advisory upgrade, security analysts are not overly concerned about the threat posed to Macintosh users.
6.  Executives Criticize the Tech Industry (AP). AP - Chief executives from some of the largest U.S. companies are criticizing the technology industry in a lobbying campaign, accusing them of selling software vulnerable to hackers and too difficult for consumers to use safely.
7.  Cell Switch Rules Expand to Entire Nation (AP). AP - Starting next week, millions of people in small cities and rural areas will be able to take advantage of federal rules allowing cellular users to keep their phone numbers when switching to new wireless carriers.
8.  Sega, Sammy to Join Their Operations (AP). AP - Sega Corp., the video-game maker famous for Sonic the Hedgehog, and pinball-equipment maker Sammy Corp. said Tuesday they will integrate their operations under a new holding company that will become Japan's biggest video game software company.
9.  Wi-Fi Provider Cometa Shutting Down - Report (Reuters). Reuters - High-speed wireless Internet firm Cometa Networks, unable to raise the cash to expand nationwide, will soon begin shutting down, the Wi-Fi Networking News industry Web site reported on Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
10.  How To Play Your iTunes Music On Other Systems
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
11.  A new Chinese specialty: spam
12.  Yahoo sets up standard to combat spam
13.  Critical security hole found in Mac OS X
14.  TCP/IP skills required for security analysts
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
15.  A new Chinese specialty: spam
16.  Yahoo sets up standard to combat spam
17.  Critical security hole found in Mac OS X
18.  TCP/IP skills required for security analysts
19.  Update: more details surface on Cisco's stolen code

9:30:45 PM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  E-Mail Scammer Gets Four Years (washingtonpost.com). washingtonpost.com - An Internet scammer who used e-mail and a fraudulent Web site to steal hundreds of credit card numbers was sentenced to almost four years in jail Tuesday, one of the stiffest-ever penalties handed down for online fraud.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
2.  Samsung Announces Largest-Ever OLED Display
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
3.  Cometa falls from the sky. Cometa Networks Inc. plans to announce Wednesday that it will shut down, after its investors and board of directors decided to pull the plug on the fledgling Wi-Fi hotspot service provider, a spokeswoman for the company said Tuesday.
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
4.  Why Windows is a security nightmare
5.  Web services security draft released
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
6.  Spyware Solutions Not So Simple
7.  Kibuv Worm, Bobax Trojan Try Many Methods
8.  Why Windows is a security nightmare
9.  Web services security draft released
10.  Cisco Brings FBI Into Source Code Theft Investigation
11.  Extremely Critical Security Hole Found In Mac OS X
12.  Symantec Detects Heavy Kibuv.b Worm Attacks
13.  Security experts play down Cisco leak
14.  Financial firms spend less on information security
15.  Funds sought to aid virus writer
16.  Cell switch rules go nationwide May 24
17.  Cox: VoIP ready for prime time
18.  Novell's Linux Desktop Zeros In on Integration
19.  Half-Life code leak could be due to the Phatbot trojan
20.  Skills not money needed to fight cybercrime
21.  Linux in Defense: An Urgent Threat to National Security
22.  Red Hat releases Fedora Core 2
23.  Safari, IE flaw could allow malicious code execution
24.  FBI investigating Cisco source code leak
25.  MDKSA-2004:047 - Updated kdelibs packages fix URI handling vulnerabilities
26.  Re: Buffer Overflow in ActivePerl ?
27.  MacOS.MW2004.Trojan
28.  Safari, IE flaw could allow malicious code execution
29.  FBI investigating Cisco source code leak
30.  Phishing scam reports skyrocket in April
31.  phpMyFAQ Input Validation Holes Let Remote Users View and Execute Files on the Target System
32.  Details Surface About Cisco's Stolen Code (PC World)
33.  Re: Unknown IE bug with css-styles
34.  Re: Buffer Overflow in ActivePerl ?

8:30:26 PM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Report: Kids Pirate Music Freely (washingtonpost.com). washingtonpost.com - More than half of young Americans with Internet access continue to download free music even though they know that they are breaking the law, according to a poll released today.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
2.  Safe and Insecure?
3.  Successful PearPC/OS X Install Documented
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
4.  BugTraq: Re: Buffer Overflow in ActivePerl ?. Sender: Josh Tolley [josh at raintreeinc dot com]
5.  BugTraq: MDKSA-2004:047 - Updated kdelibs packages fix URI handling vulnerabilities. Sender: Mandrake Linux Security Team [security at linux-mandrake dot com]
6.  BugTraq: RE: Buffer Overflow in ActivePerl ?. Sender: Drew Copley [dcopley at eeye dot com]
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
7.  HP sets revenue record in Q2. More than just a printing face By Ashlee Vance .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
8.  W32.Bobax.C
9.  HALO 2 - New Screenshots
10.  Re: Buffer Overflow in ActivePerl ?
11.  [ GLSA 200405-08 ] Pound format string vulnerability
12.  Microsoft: Rewards Will Lead To Arrest of Blaster, MyDoom Writers
13.  The Sports Network: We've Caught ESPN Stealing
14.  'Extremely Critical' Security Hole Found In Mac OS X
15.  WORM_AGOBOT.LV
16.  La cryptographie quantique : un des moyens envisagés par les européens pour contrer Echelon.
17.  Green Hills Software: 'Linux in Defense: An Urgent Threat to National Security'
18.  What's Wrong With E-Mail Accreditation?
19.  Mantis Configuration File Cleartext Password Disclosure
20.  PostgreSQL Date Parser Overflow DoS
21.  Mac OS X Help URI Script Execution

7:30:06 PM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Bad writerly advice. Teresa Nielsen Hayden -- a swell writer and respected editor -- may not have invented the genre in which clueless advice to new writers is mercilessly dissected, but she certainly perfected it. Today. Teresa shreds a really stunningly gormless "cover-letter advice" page: X-NAS-Bayes: #0: 1.80138E-270; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 898 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

Tip Eight: Call. That's right, Call. Introduce yourself. Be confident. Let them know your work is coming. It's the surest way to get out of that slush pile and on to a desk. Too afraid to call? Write out what you want to say, call AFTER HOURS, leave a voice message. It's not as good talking to a real person, but hey, it's better than nothing.

The surest way? Say what? Calling in advance is an irritating waste of the editorial department's time, and will do nothing to get you out of a trade publishing slushpile. Leaving a message after hours is even more clueless. I can't imagine where he got this idea, unless he's been taking advice from someone who's secretly out to get him.

There is one significant effect this might have. Because you've phoned to say something about a submission, someone may write down your name and the title of your book, and pass the note on to the slush readers. They'll be puzzled--why did you say you were phoning again?--and will stick the note up on their bulletin board. When your manuscript crosses their desk, they may remember that there was something-or-other they were supposed to remember or do about it, and will set your manuscript on the "inscrutable problems" stack for later diagnosis. Some slow afternoon--of which there aren't many--they'll have a go at the "inscrutable problems" stack, and will look at your manuscript again. They won't be able to tell what the problem was. They'll set the manuscript aside for later. After several cycles, they'll either figure that any manuscript that's been around this long should be returned to its author on general principles, or they'll move on to another job and the new slush reader will run your manuscript through several more "inscrutable problems" cycles before returning it to you on general principles.

Link

2.  78s as CDs. 72s2CD.com is an online retailer that sells public-domain 78RPM albums (lots of Gilbert and Sullivan and Alma Gluck!) that have been converted to audio CDs.

Link

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
3.  Red Hat releases new hobbyist Linux. The company rolls out its newest Linux product, Fedora Core 2, a free version designed for enthusiasts and developers who want to try out newer features.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
4.  Hewlett-Packard Reports Profit Growth, Raises Forecast. For its fiscal second quarter, which ended April 30, the Palo Alto, Calif.-based computing giant had revenue of $20.1 million--a company record. By Stephen Shankland, Staff Writer, Cnet News.com.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  Yahoo Releases E-Mail Standard to Fight Spam (Reuters). Reuters - Internet portal Yahoo Inc. (YHOO.O) on Tuesday released an e-mail standard that prevents "spam" marketers from hiding unwanted messages behind legitimate e-mail addresses.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
6.  JBoss Caught in Anonymous Posting Scheme
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
7.  HP Q2 revenue up 12 percent. Spurred by strong sales in its personal systems and software groups, Hewlett-Packard Co. on Tuesday reported revenue of $20.1 billion and net earnings of $884 million for the second quarter of its fiscal 2004 year, which ended April 30.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
8.  What's Wrong With E-Mail Accreditation?
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
9.  moxftp Client FTP Banner Overflow
10.  Blue Coat Security Gateway Private Key Disclosure
11.  Microsoft Outlook Remote XML Loading
12.  Microsoft Outlook RTF Embedded Object Security Bypass
13.  Enterprise IT Networking Roundup - 05/18/04
14.  VoIP Done IBM and Cisco Style

6:29:45 PM    comment []

----------------------------------------------------------------------
Ars Technica
----------------------------------------------------------------------
1.  Faster Opterons, AMD CPU road map. AMD's Opteron 150, 250, and 850 CPUs have been released, sporting a 200MHz speed bump to 2.4GHz. In addition, a road map for future AMD 32-bit CPUs has been made available. By Eric Bangeman.
----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
2.  Schwarzenegger tosses dignity, sues dollie maker. Governor Schwarzenegger has made good on his threat to sue a bobble-head-doll maker for putting his pardoical likeness on a bobble-head doll. X-NAS-Bayes: #0: 2.41079E-260; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 897 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

Link

3.  Anarchist in the Library: deliberation should shape the future. I've just finished reading Siva Vaidhyanathan's excellent new book The Anarchist in the Library, a discourse on the real culture war: the fight between open systems for exchanging knowledge and closed systems that see knowledge as a marketable commodity. The best part of this book is that it repudiates technology as a tool for making policy, calling for deliberation instead: in other words, copyright strictures should be created by courts and lawmakers, not DRM.

Both visions of the perfect library -- utopian [all knowledge available for free, organized by volunteers] and dystopian [child-porn, spoilers and amateurish information supplanting high-quality research] -- are overstated. We are not close to constructing the perfect library, but we can imagine how it might look and act. Many of our communal efforts since the early 1990s seem to be moving our information ecosystem toward that vision. Yet long before we ge there, many are sounding alarms about the ways people might abuse their freedoms to use and move information. Even though the perfect library is not imminent, many are acting as if it is. The strong reactions of those who would squelch these freedoms might render our information systems unable to perform the positive functions of the perfect library because of the unexamined -- often merely assumed -- threats to the status quo. The closer we get to the perfect library the more the oligarchs undermine it.

Link

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
4.  ICANN wins round in Internet suit. A federal judge hands VeriSign a preliminary setback in its dispute with the Net regulators over proposed new features in .com and .net addresses.
5.  Cometa Networks suspending operations. The Wi-Fi pioneer is set to announce Wednesday that it is suspending its service, as the company has been unable to raise additional capital to fund expansion nationwide.
6.  HP reports profit growth, raises sales forecast. The computing giant posts revenue of $20.1 million in its second quarter--a company record.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
7.  HP Posts Improved Profit (Reuters). Reuters - Computer and printer maker Hewlett-Packard Co. on Tuesday reported a rise in quarterly profits that tracked its previous forecasts on strong sales of servers, PCs and notebooks.
8.  AT and T to get back into wireless through Sprint (AFP). AFP - ATT Wireless will soon disappear as a result of a merger. But a new ATT Wireless will be created by the company that started it all.
9.  VeriSign Told to Bolster Antitrust Claims (AP). AP - The company that controls the directories for guiding Internet users worldwide failed to support its antitrust claims against a key oversight body, a federal judge ruled Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
10.  European Council Approves Software Patents
11.  Hollywood Courting the Gaming Industry
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
12.  Fed fingerprint database spreads across US. The wider use of fingerprint scanning technology in recent years has made it easier than ever for law enforcement officials to share information about criminals and quickly compare a suspect's fingerprint image with millions of similar imprints, according to a January report from the U.S. General Accounting Office. But it can still take small police departments that can't afford the electronic equipment more than five months to mail batches of fingerprint cards to state repositories, the report said.
13.  Web services security draft released. The Web Services Interoperability Organization (WS-I) on Tuesday announced availability of the WS-I Basic Security Profile Working Group Draft, an early version of what is intended to be a guide for use of standards in the development of interoperable Web services.
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
14.  BugTraq: [ GLSA 200405-08 ] Pound format string vulnerability. Sender: Thierry Carrez [koon at gentoo dot org]
15.  BugTraq: Zen Cart login.php SQL Injection Vulnerability. Sender: Oliver Minack [oliverm at helpmode dot de]
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
16.  Unknown IE bug with css-styles
17.  NetIQ Debuts Integrated Security Management Suite
18.  FBI investigating Cisco source code leak
19.  Phishing scam reports skyrocket in April
20.  Green Hills Software: 'Linux in Defense: An Urgent Threat to National Security'

5:29:25 PM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Photoshopped chimeras. X-NAS-Bayes: #0: 0; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 896 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

On today's Worth1000 photoshopping contest: create a chimera consiting of the combined body-parts of three or four animals.

Link


2.  PayPal disgraces itself, cuts off FreeNet. PayPal has frozen the account used to collection donation for FreeNet (a censorship-busting technology used by world dissidents to anonymously publish without risking government retribution). Shame on them.

Paypal has frozen the account we use to accept donations over the web, they refuse to give any reason other than "use of an anonymous proxy", which suggests that someone at Paypal took a dislike to the goals of our project, since I have never used an anonymous proxy to access Paypal (this being the activity I assume they sought to prevent). It is fortunate that Johann Gutenberg did not rely on Paypal to fund his work on the printing press, which also allowed anonymous publication of information, since his account would probably have been frozen too.

If you are concerned about whether your account might be at risk due to your political opinions you may wish to speak to their PR contact Hani Durzy at (408) 376 7458. If you are an investor and you would like to see what other political opinions Paypal doesn't like, you may want to speak to their Investor contact Tracey Ford at (408) 376 7205.

Link

(via /.)

3.  Open WiFi for plausible deniability. Micah Joel is running an open WiFi network in order to give himself plausible deniability for bad acts that can be traced to his IP address:

I've already composed my reply in case I receive one of these letters someday. "Dear Comcast, I am so sorry. I had no idea that copyrighted works were being downloaded via my IP address; I have a wireless router at home and it's possible that someone may have been using my connection at the time. I will do my best to secure this notoriously vulnerable technology, but I can make no guarantee that hackers will not exploit my network in the future."

If it ever comes down to a lawsuit, who can be certain that I was the offender? And can the victim of hacking be held responsible for the hacker's crimes? If that were the case, we'd all be liable for the Blaster worm's denial of service attacks against Microsoft last year.

Link

4.  First-person account of Mass. gay marriage. Here's a first-person account of Brian's marriage under Massachusetts's new gay-marriage law.

Suddenly a roar erupted all around us. Things began to move more slowly. I grabbed Aaron's hand tighter and started running forward up the steps. Everything was a blur. I lost his grip briefly as he stopped close to the entrance to accept a rose from someone in the crowd. I paused at the top of the steps, and turned to wait for him.

I've been in front of some large, happy, and cheering crowds before, but only on a stage -- never with a throng pressing in from all sides, with clapping hands outstretched, cameras flashing, and a deafening roar.

I stood there facing the crowd as Aaron walked towards me with a sparkle-encrusted yellow rose and a huge grin on his face. As he reached me, I put my hand around his waist and waved to the crowd. I tried to look at all the people, but my eyes couldn't focus.

We turned and walked into City Hall. My head spun. The lights seemed blinding after coming in from the street. A man in a tuxedo sat at a table and said something like "What are your intentions", through it was probably more like "Are you here to declare your intentions?" A reporter stood behind him pointing a microphone connected to a minidisc recorder at us. People and press thronged around.

I looked at Aaron. He shrugged.

"Um, we're here for a marriage license...?" I said.

Link

(Thanks, Brian!)

5.  Lego-like cosmetics packaging. Jouer is a new line of cosmetics that comes in Lego-like stacking containers:

The products -- lip glosses, blushes and concealers -- come in trim compacts ($18 each at Sephora stores) that can be attached to one another, Lego-style, in any configuration.

Link

6.  Duct-tape messenger bag.

This duct-tape messenger bag is totally rad.

Link

(via Gizmodo)

7.  Schwarzegger tosses dignity, sues dollie maker. Governor Schwarzenegger has made good on his threat to sue a bobble-head-doll maker for putting his pardoical likeness on a bobble-head doll.

Link

8.  LotR movies remixed as trenchant Russian political satire. Dmitri Puchkov is a Russian ex-cop who goes by the alias Goblin. "Goblin" is his nom-de-edit when he's remixing Lord of the Rings, dubbing in Russian dialogue to lampoon cops, oligarchs, and gangsters. He's working on a re-cut of Star Wars now. (This is old news, but I only just read about it)

Frodo Baggins is renamed Frodo Sumkin (a derivative from the Russian word sumka, or bag). The Ranger, Aragorn, is called Agronom (Russian for farm worker). Legolas is renamed Logovaz, after a Russian car company famed for its Ladas. Boromir becomes Baralgin, after a Russian type of paracetemol.

Gandalf spends much of the film trying to impress others with his in-depth knowledge of Karl Marx, and Frodo is cursed with the filthy tongue of a Russian criminal.

The films - which Puchkov says were originally made for his close friends but have now gone out on the internet - have found cult appeal in Russia's crowded pirate market, where a pirated, high-quality DVD in both Russian and English costs £5. That is all ordinary Russians, who earn only $300 a month in Moscow, can afford. The Russian pirate industry is worth $311 million, and has grown by 25 per cent since last year, pirates making more than 40 million disks a year.

Link

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
9.  RIM, PalmSource prepare to connect. The two handheld specialists release details of their alliance, which will make the BlackBerry wireless service available to licensees of PalmSource's operating system.
10.  Cox: VoIP ready for prime time. The cable provider still has a place for old-fashioned circuit switches, but it's rallying behind VoIP, which is improving in quality, it says.
11.  Chip off the block. Cypress Semiconductor's outspoken CEO, T.J. Rodgers, sounds off on everything from stock options to Larry Ellison.
12.  Fresh rivals take on Microsoft Office Goliath. China's Evermore and Oregon's GoBe have launched products that take novel approaches to the productivity software market, hoping to chip away at Microsoft's dominance.
13.  Apple to slow pace of Mac OS X tweaks. Apple Computer plans to continue rapidly bringing out new versions of the operating system, but it won't continue at quite the pace it's maintained in recent years.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
14.  AT&T Chooses Sprint for Wireless Market Return (Reuters). Reuters - AT&T Corp. (T.N), the largest U.S. long distance telephone company, said on Tuesday it would restart its mobile phone service later this year using Sprint Corp.'s (FON.N) network.
15.  Sega, Sammy to Join Their Operations (AP). AP - Sega Corp., the video-game maker famous for Sonic the Hedgehog, and pinball-equipment maker Sammy Corp. said Tuesday they will integrate their operations under a new holding company that will become Japan's biggest video game software company.
16.  FBI Probes Possible Cisco Software Theft (Reuters). Reuters - The FBI is investigating the possible theft of source code from networking equipment maker Cisco Systems Inc. (CSCO.O), the agency said on Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
17.  Out of Gas
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
18.  Sun chooses head for x86 division. One month after a major executive shake up at Sun Microsystems Inc., the dust appears to be settling a bit. The company has now appointed former Chief Technology Officer of Software John Fowler as executive vice president of the company's newly created Network Systems group, a Sun spokeswoman confirmed on Tuesday.
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
19.  Phishing scam reports skyrocket in April. Reports of a type of online crime known as "phishing" surged by almost 200 percent in April, according to figures from a computer security industry group.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
20.  Green Hills Software: 'Linux in Defense: An Urgent Threat to National Security'
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
21.  Vulns: LHA Multiple extract_one Buffer Overflow Vulnerabilities. LHA is a utility that can compress and decompress LHarc/LH7 format archives.

LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive t...

----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
22.  Cisco Source Code Compromised
23.  Maximum Data Security
24.  Lawmakers cite CH2M Hill conflict of interest in Iraq contract
25.  Iraq cleric demands armed groups leave holy cities
26.  No end in sight for U.S. in Iraq
27.  PHP-Nuke $modpath Include File Flaw May Let Remote Users Execute Arbitrary Commands in Certain Cases
28.  Libuser Memory Error May Cause Denial of Service Conditions
29.  Microsoft Outlook 2003 Scripting Restrictions Can Be Bypassed By Remote Users
30.  FBI Opens Probe Into Possible Cisco Software Theft (Reuters)

4:29:05 PM    comment []

----------------------------------------------------------------------
Ars Technica
----------------------------------------------------------------------
1.  New Microsoft Office competitor ships. A Chinese software house, Evermore Software, has shipped EI Office 2004. The Java-based application claims "full compatibility" with Office 2003 documents and offers simplified Chinese, Japanese, and English language versions. By Eric Bangeman.
----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
2.  Databases a cure for porn biz HIV crisis?. Dan Gillmor blogs today:
You've probably read about the HIV scare in the porn business. The San Francisco Chronicle suggests that the adult-entertainment industry look to lessons learned in San Francisco during the 1980s. And an industry-news site (note: this site may not be work-safe) takes an even sterner approach, urging a massive database tracking just about everything an individual actor may have done.
Link
----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
3.  Apple's iTunes software heads to China. Apple Computer strikes a deal with China's second-largest computer maker under which the manufacturer will include the iTunes jukebox software on its PCs.
4.  AT&T to re-enter mobile market with Sprint. Spurred by uncertainty over its current wireless contract, the long-distance giant announces a five-year deal with Sprint and says it may launch new cellular services before the end of 2004.
5.  EU approves software patent changes. Officials vote for controversial changes to a draft directive, meaning that Europe is now likely to see widespread patenting of software programs.
6.  LimeWire upgrades P2P software. The file-sharing company assures users that version 4.0 of its software is completely free of spyware.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
7.  Oracle Pressures PeopleSoft with Lower Bid (NewsFactor). NewsFactor - Oracle (Nasdaq: ORCL) has sunk its teeth into its PeopleSoft (Nasdaq: PSFT) gambit and is tasting blood.
8.  New Book Slams Linux, Torvalds (NewsFactor). NewsFactor - A study challenging the origins of Linux states that the open-source software frequently is taken or adapted from material owned by other companies and individuals. It also directly questions Linus Torvalds' claim to be the inventor of Linux.
9.  Wi-Fi Takes Flight (NewsFactor). NewsFactor - Boeing (NYSE: BA), together with Germany's Lufthansa Airlines, took wireless broadband to new heights on Monday, launching a highly-anticipated Wi-Fi service during a flight from Munich to Los Angeles.
10.  Chinese PC maker Founder to install iTunes on all PCs (MacCentral). MacCentral - Apple Computer Inc. on Tuesday announced that Founder, a major supplier of personal computers to the Chinese market, will pre-install the Windows version of Apple's iTunes software on all of its PCs beginning next month. With iTunes installed, users of Founder PCs will be able to copy music from their own audio CDs, create playlists, share the music of Local Area Networks (LANs) using Rendezvous, and listen to that music on the iPod, Apple's popular digital music player.
11.  IBM, Cisco Put Muscle Behind VoIP Push (NewsFactor). NewsFactor - I.T. heavyweights IBM (NYSE: IBM) and Cisco (Nasdaq: CSCO) are putting their heads together to deliver Internet-based services for the enterprise, including voice over Internet protocol (VoIP) telephony and delivery of integrated video and data systems.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
12.  China Scrubs Moon Mission Plans
13.  Covert Channel: ASCII Art Over ICMP
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
14.  Vulns: NetChat Web Server Remote Buffer Overflow Vulnerability. NetChat is a freely available application that allows users on the same subnet to chat. It has been developed for the Microsoft Windows platform. X-NAS-Bayes: #0: 5.46977E-284; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 895 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

The NetChat web server...

----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
15.  Thus ADSL - the price cuts with a funny echo. Making broadband affordable. Later. By John Lettice .
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
16.  Johannesburg hacker found guilty
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
17.  Funds sought to aid virus writer
18.  Fedora: kdelibs Multiple vulnerabilities
19.  Slackware: kdelibs Multiple vulnerabilities
20.  Fedora: cvs Chroot escape vulnerability
21.  Red Hat: kdelibs Multiple vulnerabilities
22.  Mandrake: libuser Denial of service vulnerability
23.  Mandrake: passwd Multiple vulnerabilities
24.  Debian: heimdal Buffer overflow vulnerability
25.  Mandrake: apache Multiple vulnerabilities
26.  Fedora: mailman Cross-site scripting vulnerability
27.  Fedora: neon Format string vulnerabilities
28.  18 May W32/Sdbot-MV
29.  18 May W32/Cycle-A
30.  18 May W32/Bobax-A
31.  EFF Argues That Californians Can Have Secure Voting by November
32.  PHP-Nuke Input Validation Flaw in Union Tap Prevention Feature Permits Cross-Site Scripting Attacks
33.  Linux passwd May Truncate Passwords Supplied Via stdin
34.  SGI IRIX rpc.mountd Has Infinite Loop Denial of Service Flaw
35.  W32.Lovgate.W@mm
36.  Re: Buffer Overflow in ActivePerl ?
37.  Advisory 05/2004: phpMyFAQ local file inclusion vulnerability
38.  [slackware-security]kdelibs (SSA:2004-238-01)
39.  Zen Cart login.php SQL Injection Vulnerability
40.  [SECURITY] [DSA 504-1] New heimdal packages fix potential buffer overflow
41.  Re: Microsoft Internet Explorer ImageMap URL Spoof Vulnerability
42.  Re: Buffer Overflow in ActivePerl?
43.  IRIX 6.5.24 rpc.mountd infinte loop
44.  RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ?
45.  Overflow@OmniHTTPd
46.  Vapid Labs Security Advisory for PrimeBase Database 4.2 (update)
47.  Johannesburg hacker found guilty

3:28:46 PM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  New TiVo jargon. Boingboing pal sean bonner points us to some emerging words to describe PVR-related activities.
# Passkilling is when someone cancels a Tivo request to change channels and record a Season Pass show.
# A Passkiller is someone who cancels an in-progress Season Pass recording or cancels a channel change request.
link
2.  Dunny toy-art show in NYC gallery. "Dunny" is a 20-inch tall vinyl action figure designed to be customized by diverse artists working in different mediums. A show of "Dunny"-derivative art opens this week in NYC.
X-NAS-Bayes: #0: 0; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 893 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

Among the artists and designers who will personalize a Dunny for the exhibition are world-famous graffiti artists Doze Green,Tilt and Fafi, and Seen; renowned toy designers Jason Siu and Pete Fowler; illustrators including Disney's "Teacher's Pet" creator Gary Baseman; graphic artists including The Designers Republic; fashion designers Diane von Furstenberg,and Heatherette, and a number of fine artists, including Alexis Rockman and Jessica Stockholder. Design studio participants include artists from PDI/Dreamworks Animation Studios and Steuben Crystal. And many more."

Link (Thanks, CC)
3.  NextFest snapshot gallery. Here are some snapshots I took at Wired Magazine's NextFest this weekend. At left, a young man named Cameron Clapp who became a triple amputee at age 15 in a train accident. He now uses "smart" prosthetic limbs that have to be charged up at night like a cell phone. The computer-aided devices give him greater mobility and independence than conventional prosthetics -- he's a champion amputee athlete.

Other memorable moments -- Wired editor-in-chief Chris Anderson asks NASA Space Architect Gary Martin about the search for life "out there;" Martin says, "It would be even more frightening if we never find life out there -- it would mean that we are entirely alone, in a very big universe."

Pixar pulled aside the curtain and gave us a glimpse into the creative process behind Toy Story and other blockbuster CGI features. Wired entertainment editor Jennifer Hillner hosted exclusive previews of mindblowingly cool footage from the forthcoming Fox/Blue Sky Studios animated feature Robots (due out Spring 2005), and from the CGI/bluescreen project Sky Captain and the World of Tomorrow (opening this September). Sunday ended in an incredible roundtable discussion with space entrepreneurs including ID/Quake/Doom software wizard John Carmack; Space Adventures CEO Eric Anderson, Xcor CEO Jeff Greason, and Xprize founder Peter Diamandis. News there included never-before-seen footage of Burt Rutan's SpaceShipOne, and of a new R+D effort from Carmack.
Link to Xeni's gallery of NextFest snapshots.

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
4.  Briefly: Marist College joins Linux consortium. Plus: Blade pioneer RLX gets new funding...Microsoft gets delay in Eolas appeal...Good Technology receives funding.
5.  In-flight Internet access takes off. A Lufthansa flight from Munich to Los Angeles is the first commercial aircraft to offer travelers broadband access.
6.  Eminem's copyright suit against Apple proceeds. The rapper says he doesn't endorse commercial products and that an iPod advertisement illegally used his work.
7.  Dell packs Bluetooth, XScale into Axims. The computer maker tries to get a jump on rivals by releasing three handhelds with Intel's speedy XScale mobile processors. It's also debuting Bluetooth in the line.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
8.  Is Now the Time to Invest in CRM? (NewsFactor). NewsFactor - Now that there are signs of life in the technology industry, is the time ripe to purchase that long-delayed CRM software system?
9.  Blogging Technology Going Open Source (Ziff Davis). Ziff Davis - The core technology for Manila and Radio UserLand, called Frontier, is set for an open-source release within the next few months, says the founder of UserLand Software.
10.  Tips for Cell Phone Users Swapping Cos. (AP). AP - Some tips for consumers about switching carriers:
11.  Video Game Sales Fall 3 Percent - Analysts (Reuters). Reuters - Sales of video game software fell 3 percent in the United States in April, but sales of Microsoft Corp.'s (MSFT.O) Xbox game console more than doubled after a price cut, financial analysts said on Tuesday.
12.  Cisco Probes Possible Source-Code Theft (NewsFactor). NewsFactor - Cisco Systems (Nasdaq: CSCO) is investigating the alleged theft of its networking-gear source code, which initially was reported late last week on a Web site run by the Russian firm SecurityLab.
13.  Show Wrap-Up: E3 Serves Up Fun (Ziff Davis). Ziff Davis - PC Mag editors defy gravity, war games, redheads, and Playboy bunnies at this year's expo.
14.  Wal-Mart Says Radio Tracking Technology on Pace (Reuters). Reuters - Wal-Mart Stores Inc. (WMT.N) said on Tuesday it was on schedule to launch new radio-based inventory tracking technology next January and will meet with its 300 largest suppliers next month to hammer out details.
15.  Digital Camera Power Goes Beyond the Megapixels (Reuters). Reuters - Digital cameras with the power to develop a picture as big as beach towel may attract attention, but it's better to look for more-practical camera features that meet everyday needs.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
16.  Trained Rats for Mine Detection
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
17.  Tibco touts business activity monitoring. Extending its reach in BAM (business activity monitoring), Tibco Software on Tuesday began shipping OpsFactor 1.0, which provides insights into business operations being orchestrated by the company’s business integration software.
18.  Phishing scam reports skyrocket in April. Reports of a type of> ----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
19.  BugTraq: Re: Buffer Overflow in ActivePerl ?. Sender: Nick FitzGerald [nick at virus-l dot demon dot co dot uk]
20.  BugTraq: Unknown IE bug with css-styles. Sender: [henkie_is_leet at hotmail dot com]
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
21.  Inside Windows Server 2003
22.  Security experts play down Cisco leak
23.  Funds sought to aid virus writer
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
24.  FBI investigating Cisco source code leak
25.  AMD Readies New Opterons
26.  FBI Examines Cisco Code Leak (PC World)
27.  Elsewhere: Financial firms spend less on information security
28.  Elsewhere: Funds sought to aid virus writer
29.  News: Police probe Sasser informant
30.  Microsoft Internet Explorer ImageMap URL Spoof Vulnerability
31.  KDE URI Handler Vulnerabilities
32.  AIRE - 802.11 Network Discovery for Windows XP
33.  Security experts play down Cisco leak
34.  Security bypass lek in Microsoft Outlook 2003

2:28:28 PM    comment []

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
1.  Cisco, IBM announce Net-phone services. update Big Blue and Cisco Systems say their Internet-phone products and services will appeal to a range of customers, from small businesses to large corporations.
2.  Marist College joins Linux consortium. The college is the first member of an affiliate program that lets universities join OSDL.
3.  Apple seeks patent for see-through windows. Transparent windows that fade with disuse are a hallmark of Apple's operating system, but are also slated to show up in the next version of Microsoft's Windows.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
4.  London shares close higher on earnings, US rally lends support (AFP). AFP - Leading shares closed higher, propped up by strong earnings from blue chip groups Enterprise Inns, Yell Group and Schroders, while a rally on Wall Street lent additional support, dealers said.
5.  Sega, Sammy to Integrate Operations (AP). AP - Sega Corp., the video-game maker famous for Sonic the Hedgehog, and pinball-equipment maker Sammy Corp. said Tuesday they will integrate their operations under a new holding company that will become Japan's biggest video game software company.
6.  IBM Offers Free Software Tools For Power Architecture Hardware (TechWeb). TechWeb - Included are online technical training aids, a collaborative portal, and downloads for developers on Linux servers.
7.  DVD-Day for Disney's WWII films (USATODAY.com). USATODAY.com - Hollywood is still abuzz over the Walt Disney Co.'s refusal to let its Miramax division distribute director Michael Moore's new documentary Fahrenheit 9/11, which is critical of President Bush.
8.  Spammer using fake websites in fraud gets 46 months in prison (AFP). AFP - A 20-year-old man who pleaded guilty in an Internet fraud scheme to lure people to fake websites to obtain bank or credit card information was sentenced to 46 months in prison, officials said.
9.  Redesigns Add Variety To Games (washingtonpost.com). washingtonpost.com - LOS ANGELES -- "If something looks blown up, make sure it's fully blown up before you approach it," cautioned a Microsoft programmer before letting players try the upcoming alien-fighting video game Halo 2 at the Electronic Entertainment Expo show this week. "Fusion cores will explode if shot."
10.  Verizon Pushes Fiber Network While Rivals Wait (Reuters). Reuters - Verizon Communications Inc. on Wednesday will provide more details about its $1 billion plan to build fiber optic networks in nine states, a risky strategy some analysts say may be the only salvation for beleaguered local telephone companies.
11.  Lycos Europe Beats Google to Market with 1GB Email (Reuters). Reuters - Web portal Lycos Europe (LCYE.DE) beat its larger rival Google to market with an e-mail service featuring one gigabyte of storage space, the company announced on Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
12.  Fedora Core 2 Officially Available
13.  UPN Renews 'Star Trek: Enterprise'
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
14.  BugTraq: Advisory 05/2004: phpMyFAQ local file inclusion vulnerability. Sender: Stefan Esser [s dot esser at e-matters dot de]
15.  BugTraq: Re: Buffer Overflow in ActivePerl?. Sender: Axel Beckert [beckert at ecos dot de]
16.  BugTraq: [SECURITY] [DSA 504-1] New heimdal packages fix potential buffer overflow. Sender: [joey at infodrom dot org (Martin Schulze)]
17.  BugTraq: RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ?. Sender: Bill Royds [full-disclosure at royds dot net]
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
18.  UK police lack e-crime savvy officers. No-one to slap on the e-cuffs By John Leyden .
19.  Symbian hands out certificates. Symbian Signed rewards good little applications By Lucy Sherriff .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
20.  Failles sur Mac OS/X
21.  Déni de Service dans les réseaux Wireless 802.11
22.  PHP-Nuke Multiple Vulnerabilities
23.  Regulation Compliance Tops Companies' Security Concerns
24.  Security bypass lek in Microsoft Outlook 2003
25.  Cisco investigating code leak
26.  Wired: Camera Phones Link World to Web "a free system that lets camera phones convert bar codes ...
27.  Computer Weekly: Windows XP SP2 poses firewall management test "Business users could face comple...
----------------------------------------------------------------------
About Internet/Network Security
----------------------------------------------------------------------
28.  Maximum Data Security. The protection of critical or proprietary files and folders on a corporate network is an imperative of network administration and security. With legislative mandates such as Sarbanes-Oxley, Gramm-Leach-Bliley and the HIPAA it becomes even more crucial for many companies. The...

1:28:06 PM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  How's the air up there?. According to this Reuters report, the travel industry is beginning to ease the trials of traveling when you're tall. For instance, the Hotel Monaco Group offers "tall guestrooms" with higher ceilings, longer beds, and raised showerheads. The "NBA Suites" in the Palms Casino in Las Vegas were also designed with verticality in mind. At 6'2", I don't bang my head on doorframes, but I am cramped as hell in most airlines' coach cabins. Of course, I'm certainly not the only one, or the tallest one for that matter. Apparently, there are now 8.8 million men over 6'2" and 5.5 million over 5'9" in the US. Now, those rising numbers have their own magazine: TALL, "a lifestyle magazine for a heightened culture." Link
2.  Lift off!. rocketCongratulations to the Civilian Space eXploratiion Team, whose amateur rocket was the first of its kind to make it into space! The seven meter tall rocket, GoFast, reached an altitude of 100 kilometers yesterday, the "official edge of space," according to New Scientist magazine. GoFast transmitted its position and altitude data from high above the Nevada desert back to Earth via ham radio.
"The Civilian Space eXploration Team (CSXT) is an all-civilian team comprised of about 30 amateur rocketeers from all walks of life -- from a retired Hollywood stunt man, to teachers, scientists, inventors, television engineers, ham radio enthusiasts, students, and -- yes -- even honest-to-goodness rocket scientists. Their common bonds: a love of rocketry and an unyielding desire to succeed even against the toughest odds and the greatest skeptics."
Link
X-NAS-Bayes: #0: 3.41072E-305; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 887 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
3.  AT&T to re-enter mobile market with Sprint. Spurred by uncertainty over its current wireless contract, the long-distance giant announces a five-year deal with Sprint and says it may launch new cellular services before the end of 2004.
4.  Group of tech execs rallies 'round Bush. A star-studded list of tech executives will endorse President Bush for another term, saying they believe his positions are a better choice for the high-tech industry.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
5.  Cisco Networking Code May Have Been Stolen (washingtonpost.com). washingtonpost.com - Cisco Systems Inc. said yesterday that it is investigating the possible theft of some of the core software code that runs its networking gear, which makes up much of the backbone of the Internet.
6.  Faster upgradeable graphics coming to notebooks (MacCentral). MacCentral - What's the future direction for graphics in Apple's PowerBooks and iBooks? Apple doesn't discuss unannounced products, but industry momentum is headed towards Intel's new PCI Express bus. With it -- and a recent announcement from graphics chip maker Nvidia Corp. -- comes the promise of faster upgradeable graphics, two key factors for business users and consumers looking to get the most from their portable computers.
7.  Cisco and IBM Make 'Net Ring Tones (washingtonpost.com). washingtonpost.com - Internet telephony is getting another vote of confidence today with the announcement by two of technology's biggest names -- IBM and Cisco Systems -- that they will join up to offer Internet phone service to businesses.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
8.  WiFi Signals In Between Television Frequencies
9.  Tubby: When Custom Cases Meet Frosty Cold Beer
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
10.  FBI investigating Cisco source code leak. The U.S. Federal Bureau of Investigation (FBI) said it is working with Cisco Systems Inc. to investigate the theft of computer source code from the networking company, said Paul Bresson, an FBI spokesman.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
11.  Regulation Compliance Tops Companies' Security Concerns
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
12.  Elsewhere: Financial firms spend less on information security. Canada's financial sector spends about 50 per cent less on information security services than their U.S. counterparts, a new study by Deloitte and Touche LLP found.

In a...

13.  Elsewhere: Funds sought to aid virus writer. The Sasser web worm caused trouble for thousands of net users but its author does at least have some fans. A group called the Sasser Support Team has begun gathering cas...
14.  News: Police probe Sasser informant. The informant who led police to the self-confessed author of the infamous Sasser worm is himself under investigation.
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
15.  BugTraq: IRIX 6.5.24 rpc.mountd infinte loop. Sender: SGI Security Coordinator [agent99 at sgi dot com]
16.  BugTraq: Vapid Labs Security Advisory for PrimeBase Database 4.2 (update). Sender: Larry W dot Cashdollar [lwc at vapid dot ath dot cx]
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
17.  US rocket pioneers hit 100km. First space flight for privately-built GoFast By Lester Haines .
18.  UK.biz must address broadband. IT depts left to decide company strategy By Tim Richardson .
19.  IBM and Cisco team up for VoIP. Backing 'the next big thing' By John Oates .
20.  Microsoft UK plans 'open and honest' Linux debates. Says here, anyway... By John Lettice .
21.  Ministers thwart MEPs, OK EU-US airline data deal. CAPPS II, here we come... By John Lettice .
22.  London sees red as Orange service goes crash. Software update blamed By Tim Richardson .
23.  US, Belgian biometric passports give lie to UK ID scheme. There goes the tech leadership... By John Lettice .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
24.  Police probe Sasser informant
25.  MS Office virus could infect...
26.  Microsoft Windows "desktop.ini" Arbitrary File Execution Vulnerability
27.  Paypal Deals Blow To Freenet
28.  Transmeta To Add 'NX' Antivirus Feature To Chips
29.  Transmeta to add antivirus feature to chips
30.  EU To Counter Echelon With Quantum Cryptography?
31.  E.U. seeks quantum cryptography response to Echelon
32.  Anti-Spammers Infiltrate Private Online Spam Clubs
33.  Spam fighters infiltrate spam clubs
34.  GGF and Grid Security
35.  The Windows Security Nightmare
36.  Why Windows is a Security Nightmare
37.  Armor CDs
38.  Getting Naked for Big Brother
39.  Data Scant for Watchlist Usage
40.  UK Scientist Fears Genetic Bias
41.  Libraries Juggle Privacy Issues
42.  EC backs 'privacy violation' deal with US
43.  Privacy and DNC Regulations Boost Call for Marketing Automation
44.  EPIC Urges Opt-In Privacy for Wireless Devices
45.  oscommerce 2.2 file_manager.php File Browsing Vulnerability
46.  WebCT Cross Site Scripting Vulnerability
47.  TTT-C Multiple Cross Site Scripting Vulnerabilities
48.  NetChat HTTP Server Stack Overflow Vulnerability
49.  Wget Race Condition Vulnerability
50.  PhpNuke Remote File Inclusion Vulnerability
51.  Microsoft Internet Explorer ImageMap URL Spoof Vulnerability
52.  PhpNuke 6.x - 7.3 Multiple Vulnerabilities
53.  Safari Remote Arbitrary Code Execution Vulnerability
54.  Microsoft Refreshes Commerce Server
55.  Bluetooth at the Gates
56.  EU seeks quantum cryptography response to Echelon
57.  Wireless security: The enemy is us
58.  'Indefensible' Wi-Fi flaw discovered in 802.11b network protocol
59.  Wireless Hacking Techniques
60.  Cisco looking into source-code leak

12:27:47 PM    comment []

----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
1.  Browser to Deliver New Blog Entries (AP). AP - A new Web browser from Opera Software ASA this week is the first major browser to incorporate an emerging technology that automatically delivers new blog entries and news articles.
2.  Microsoft Turning Attention to Research (AP). AP - When it comes to the latest technology craze, Microsoft Corp. isn't known for being first or best: It's known for being biggest. The software behemoth has used its strength, money and reach to go from underdog to top dog on everything from Internet browsers to digital content players.
3.  Internet Groceries Continue to Expand (AP). AP - After the spectacular crashes of big-name Internet grocers in the late 1990s, the dream of a grand new wave of online food stores appeared to fizzle. But with intentionally meager fanfare, grocers have made Internet shopping available to tens of millions of consumers nationwide, and upcoming expansions will expand it to millions more.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
4.  Follow Up to "Linux's Achilles Heel"
5.  SCO Prides Itself on Inspiring FUD
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
6.  Funds sought to aid virus writer. Donations are being sought to help the man who wrote the Sasser web worm.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
7.  FBI investigating Cisco source code leak. The U.S. Federal Bureau of Investigation (FBI) said it is working with Cisco Systems Inc. to investigate the theft of computer source code from the networking company, said Paul Bresson, an FBI spokesman.
8.  SAP's Kagermann: Making life easier for users. Hennig Kagermann, chairman and chief executive officer of German business software vendor SAP AG, used the company's Sapphire international customer conference last week in New Orleans to announce a key software development partnership with Microsoft Corp. and plenty more.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
9.  Fedora: mailman Cross-site scripting vulnerability
10.  Fedora: neon Format string vulnerabilities
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
11.  UK forensic scientists to strike over pay. Q-tips in pockets on 2 June By Lucy Sherriff .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
12.  TCP/IP Skills Required for Security Analysts
13.  Microsoft turns to growing field of search
14.  Windows XP SP2 poses firewall management test
15.  No WLAN? You still need wireless security
16.  Mac OS X hit with another serious security issue
17.  Interview: Andrea Arcangeli
18.  Student uncovers US military secrets
19.  Wi-Fi jamming is easier than expected
20.  Feds announce 65 arrests, 1,000 cases in Internet child porn file-sharing probe
21.  Drinking soda linked to gullet cancer rise
22.  Removing control of IT security from the CIO/IT Director
23.  Vonage cuts Net phoning prices
24.  Johannesburg hacker found guilty
25.  Red Hat adds legal firepower
26.  Hi-flying Wi-Fi debuts on transatlantic flight
27.  osCommerce Directory Traversal Flaw in 'admin/file_manager.php' Discloses Files to Remote Authenticated Administrators
28.  18 May W32/Sdbot-MV
29.  18 May W32/Cycle-A
30.  Microsoft Windows "desktop.ini" Arbitrary File Execution Vulnerability
31.  Inside Windows Server 2003
32.  Security experts play down Cisco leak
33.  Secunia Warns of Browser Vulnerabilities
34.  SCO beefs up user identity management

11:27:26 AM    comment []

----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
1.  AMD boosts Opteron performance. The chipmaker announces three new versions of its flagship chip but has yet to release details about specific improvements.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
2.  Scientist who testified in IBM trial withdraws article (SiliconValley.com). SiliconValley.com - A scientist who testified at the IBM toxics trial has withdrawn a scholarly article about cancer rates at the computer company after it warned that publication would violate a court order.
3.  Blogging Technology Going Open Source (Ziff Davis). Ziff Davis - The core technology for Manila and Radio UserLand, called Frontier, is set for an open-source release within the next few months, says the founder of UserLand Software.
4.  AT&T Makes Wireless Deal With Sprint (AP). AP - AT&T Corp. has reached an agreement with Sprint Corp. to offer cell phone service over Sprint's wireless network, the companies announced Tuesday.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
5.  Google to be Sued Over Name?
6.  Opera Settles $12.75m Lawsuit, But with Whom?
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
7.  New demand boosts Dell profits. Personal computer maker, Dell, reports higher first-quarter profits following more demand by companies for new technology.
8.  BT forges Vodafone mobile tie-up. Britain's telecoms ginat teams up with mobile phone rival Vodafone to offer a seamless joint-calls service.
9.  Police 'need more e-crime skills'. Police in Britain are seriously under-skilled when it comes to fighting e-crime, a study has found.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
10.  Lucent settles with SEC, is hit with $25M fine. Federal regulators charged Lucent Technologies Inc. on Monday with conducting an accounting fraud of over $1.1 billion, amid allegations that employees falsified documents, cut secret deals with customers and then hid the transgressions.
11.  IBM, Cisco partner on IP services, products. IBM Corp. and Cisco Systems Inc. have agreed to jointly develop and sell IP (Internet Protocol) telephony systems, the companies announced Tuesday.
12.  IBM opens four SOA design centers. Hoping to give its strategies surrounding Systems Oriented Architectures (SOAs) a boost among corporate users, IBM on Tuesday announced it has opened four SOA Design Centers to help corporate users sculpt enterprise-level solutions, at its CIO Summit on SOAs in Toronto.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
13.  DefCon 12 WarDriving Contest Registration Now Open
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
14.  Vulns: Microsoft Internet Explorer http-equiv Meta Tag Denial of Service Vulnerability. A vulnerability has been identified in Internet Explorer that may allow an attacker to cause the application to crash. The issue presents itself when the browser attempt...
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
15.  Work induces catatonia: official. Wake up and read this... By John Oates .
16.  UK terminally unready for Chip and PIN. Not ringing the changes By John Leyden .
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
17.  Slackware update for kdelibs
18.  A Tip of The Brim With New Fedora Core
19.  IBM announces ID management partnerships
20.  IronPort blinde les transferts de messages
21.  Debian update for heimdal
22.  Debian update for heimdal

10:27:06 AM    comment []

----------------------------------------------------------------------
Ars Technica
----------------------------------------------------------------------
1.  Cisco source code stolen. A Russian security site is reporting that the source code for Cisco IOS 12.x Operating System was stolen. If true, exploits based on the potential flaws in the code could seriously disrupt Internet traffic. By Eric Bangeman.
2.  Et Cetera: post-weekend wallop. This round up not only has secret sauce, but it's also packed with the whines of Caesar, who sucks at FarCry. By Ken "Caesar" Fisher.
3.  My wacky Sunday (or "Why the early Dell Dimension 8100 was made at the wrong time"). Dell usually makes pretty good computers, unfortunately the Dimension 8100 was just made at the wrong time. By Matt Woodward.
4.  Federal P2P child pornography crackdown nets arrests. The US government's Operation Peer Pressure looked to peer-to-peer (P2P) networks for its latest move against child pornography. Culminating since August, the multi-agency move has resulted in some 65 arrests. By Ken "Caesar" Fisher.
5.  NVIDIA unwraps universal GPU socket design. Meet NVIDIA's MXM, a PCI-Express X16 video card interface aimed at giving notebooks a fighting chance at upgradeability. This Mobile PCI-Express Module specification (hence, MXM) is an open, non-proprietary interface that any manufacturer may employ. By Ken "Caesar" Fisher.
6.  Apple opens up iTunes interface on Windows. Apple has released a SDK for Windows. Exposing some iTunes functionality through the COM interface, this SDK could allow for tighter integration between iTunes and Windows Media Center Edition. By Eric Bangeman.
7.  Linus' Tux asked to wonder, "who is my real daddy?". AdTI's latest accusation: Linus Torvalds is not the father of Linux. Instead, he's a thief who stole IP from Unix. This is what open source folks do, you see. By Ken "Caesar" Fisher.
8.  OpenForum database maintenance tonight (Tues, 1AM EST). This is a note that tonight we're going to be running a big fat alter table command on the OpenForum's messages table, and we have to take the forum down in order to do it. By Ken "Caesar" Fisher.
----------------------------------------------------------------------
Dilbert
----------------------------------------------------------------------
9.  Dilbert for 16 May 2004.
10.  Dilbert for 17 May 2004.
11.  Dilbert for 18 May 2004.
----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
12.  Lycos: We're first with 1GB e-mail. The European Web portal company says it has beaten Google and Yahoo to the punch with a free e-mail service that offers massive amounts of storage, but unlike other services, Lycos' is not free.
13.  Siemens to pour cash into China. The cell phone maker plans to invest $1.2 billion in China over the next few years as part of a plan to double revenue in that country.
----------------------------------------------------------------------
New York Times: Technology
----------------------------------------------------------------------
14.  I.B.M. and Cisco Planning Joint Internet Phone Venture. I.B.M. and Cisco Systems plan to announce a joint development project to expand their reach into the Internet telephone market. By Laurie J. Flynn.
15.  U.N. Unit Sees Great Promise in Biotech Research on Crops. Genetically engineered crops hold great promise for feeding the 800 million people in the world who are chronically hungry, the United Nations food agency said. By Andrew Pollack.
16.  Lucent Fined $25 Million by S.E.C. in Fraud Case. The S.E.C. has charged nine former and current employees at Lucent with improperly recording nearly $1.2 billion in revenue. By Ken Belson.
17.  Man Pleads Guilty in Google Stock Swindle. A Dutch man pleaded guilty to promising wealthy New Yorkers an inside track to stock in Google and blazing through $350,000 of their money. By The Associated Press.
18.  Intel's Big Shift After Hitting Technical Wall. Intel, the world's largest chip maker, has changed course and embraced a "dual core" processor structure. The company says it can still meet its goals, but some are skeptical. By John Markoff.
19.  An Industry That Dares Not Meet in the Country of Its Best Customers. Operators of overseas online casinos - an industry with millions of American customers - are under threat of prosecution because much of what they do is illegal in the United States. By Matt Richtel.
20.  Case Expands Type of Lies Prosecutors Will Pursue. Defense lawyers and civil libertarians are expressing alarm at the government's aggressive use of obstruction of justice laws in its investigation of accounting improprieties. By Alex Berenson.
21.  Panel Urges New Protection on Federal 'Data Mining'. A federal advisory committee says Congress should pass laws to protect the civil liberties of Americans when the government sifts through computer records. By Robert Pear.
22.  Fraud in Online Job Listings. Some job seekers who turn to the Internet for help-wanted listings are learning about fraud the hard way. By Bob Tedeschi.
23.  Card Seem at Risk? Try a Stunt Double. What if there was a way to make purchases online without any danger of card numbers falling into the wrong hands? Think of it as the stunt-double approach to online shopping. By Jennifer Bayot.
----------------------------------------------------------------------
Yahoo! News - Technology
----------------------------------------------------------------------
24.  Sony Plans Video Version of Vaio Pocket Device (Reuters). Reuters - Sony Corp's new portable audio player competing with Apple's iPod will be accompanied this year by another device which can play video and beam it to a TV, the Japanese company said on Friday.
25.  Cisco Investigating Stolen Software Code (AP). AP - Cisco Systems Inc. is investigating how the code for some of its software that runs much of the networking equipment on the Internet was published on a Web site.
26.  Japanese pachinko maker Sammy, game giant Sega merge (AFP). AFP - Sammy Co., a top Japanese maker of pinball pachinko slot machines, and Sega Corp., a leading game software developer, are to merge to compete better in the global entertainment market.
27.  IBM Offers Free Software Tools For Power Architecture Hardware (TechWeb). TechWeb - Included are online technical training aids, a collaborative portal, and downloads for developers on Linux servers.
28.  AT&T to Re-Enter the Wireless Market (Reuters). Reuters - AT&T Corp. (T.N) said on Tuesday it reached an agreement with Sprint Corp. (FON.N) that will allow AT&T to sell mobile phone services under its own brand later this year.
29.  Video Game Business Garnering Star Power (AP). AP - The video game industry was once an afterthought in Hollywood, at most an ancillary source of revenue like action figures. The people passionately developing the computer-based form of entertainment were seen as dorks compared with the celebrities. Not anymore.
30.  Cisco Networking Code May Have Been Stolen (washingtonpost.com). washingtonpost.com - Cisco Systems Inc. said yesterday that it is investigating the possible theft of some of the core software code that runs its networking gear, which makes up much of the backbone of the Internet.
31.  Internet Groceries Continue to Expand (AP). AP - After the spectacular crashes of big-name Internet grocers in the late 1990s, the dream of a grand new wave of online food stores appeared to fizzle. But with intentionally meager fanfare, grocers have made Internet shopping available to tens of millions of consumers nationwide, and upcoming expansions will expand it to millions more.
32.  Lexar to Sell Memory Cards Under Kodak Brand (Reuters). Reuters - Lexar Media Inc. (LEXR.O) will sell its memory cards, the digital equivalent of film, under the Eastman Kodak Co. (EK.N) brand name, expanding the distribution of Lexar's products, the companies said on Monday.
33.  3-Day Nirvana for Game Lovers Unveils New Software (Reuters). Reuters - I used to think a three-ring circus offered the ultimate in sensory overload -- until I went to Los Angeles for an Electronic Entertainment Expo, better known as E3.
34.  Hitachi Thai Expansion to Boost iPod Disk Drives (Reuters). Reuters - Japan's Hitachi Ltd (6501.T), facing pent-up demand for the popular iPod digital music player from Apple Computer Inc. (AAPL.O), said it would spend about $200 million to double disk drive output at its Thailand plant.
35.  Cisco Probing Possible Theft of Source Code (Reuters). Reuters - Some of the software code that Cisco Systems Inc. (CSCO.O) uses to run its gear that directs Internet traffic may have been stolen, the company said on Monday, adding it was investigating.
----------------------------------------------------------------------
Slashdot
----------------------------------------------------------------------
36.  EU To Counter Echelon With Quantum Cryptography?
37.  Fathers of Linux Revealed: Tooth Fairy & Santa Claus
38.  Transmeta To Add 'NX' Antivirus Feature To Chips
39.  Linux To Gain Another Chip Family
40.  Paypal Deals Blow To Freenet
41.  Amateur Rocket Reaches Space
42.  Upgrade Your DVD Writer to Double Layer -- Maybe
43.  Simulate "The Day After Tomorrow" On Your PC
44.  Can Cell Phones Ignite Gasoline Vapors?
45.  Economics of Online Gaming
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
46.  New expression for virtual city. A virtual reality exhibition in London is letting visitors take in the sights and sounds of the capital's darker side.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
47.  Compuware driving CARS for software quality management. Compuware on Tuesday is releasing Compware Application Reliability Solution (CARS) 4.1, a software quality management tool featuring an “Executive Dashboard” for management-level understanding of quality issues.
----------------------------------------------------------------------
[O.S.S.R]
----------------------------------------------------------------------
48.  Cisco IOS source code leaked?
49.  Teenage 'hackers' shame IT industry again
50.  Mozilla 1.7 RC 2 now available
----------------------------------------------------------------------
SecurityFocus News
----------------------------------------------------------------------
51.  Elsewhere: Symantec takes bite off virus-ID spam. Symantec has shown the way for other antivirus firms to finally end the proliferation of false virus notifications, which wrongly identify the source of an e-mail-borne v...
52.  Elsewhere: Mac OS X hit with another serious security issue. When it rains, it pours. Yet another "highly critical" hole has been found in Apple's Mac OS X operating system, which will allow remote system access by getting someo...
53.  Columnists: Busted. The arrest of Sasser's author proves bounties work to catch cyber vandals. Now, if the security industry would just stop egging them on
54.  Infocus: TCP/IP Skills Required for Security Analysts. This article guides users new to the security field through some of the key skills required to work as a security analyst. The focus is on core TCP/IP competency and related technologies such as intrusion detection systems, firewalls and routers.
55.  News: Transmeta pledges 'no execute' security support. Transmeta today claimed that its Efficeon chip will be the first "energy-efficient" processor to support the oft-touted 'no execute' NX instruction required by Windows XP Service Pack 2's anti-virus sub-system.
56.  News: Cisco probes source code theft. Cisco has launched an investigation following reports that portions of its core networking operating system source code have been stolen and distributed online.
----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
57.  MS Office virus could infect.... It was five years ago today... 18 May 1999 By Team Register .
58.  Dolphin skin key to subaquatic speed. Flipper fights 'form drag' By Lucy Sherriff .
----------------------------------------------------------------------
Wired News
----------------------------------------------------------------------
59.  Don't Flush Brains Down the Drain. The U.S. Department of Agriculture has a plan for cattle brains and other remains that may carry deadly mad cow disease. It wants to turn them into a bio-based source of energy.
60.  Online Grocery Shopping, Take Two. Miss the good old days when you could shop for groceries from the comfort of your ergonomically correct computer chair? Those days may be returning, as several grocers cautiously dip their toes into online ordering.
61.  Wanted: Heroes to Rescue City. Admit it, you like the thought of prancing around in a unitard. Here's your chance. In City of Heroes, an online role-playing game with several nice touches, you create a superhero alter ego and kick alien butt. By Scott Steinberg.
62.  Big Flap Over Future Flight. In the hunt for a more versatile aircraft, researchers are mimicking the beasts that have been flying for years -- birds. By Lakshmi Sandhana.
63.  Teen Techies Engineer the Future. Prize money -- $3 million of it -- can help breed big ideas. Just check out the tunneling microscopes, high-tech software and geology research completed by high-school students. By John Gartner.
64.  Camera Phones Link World to Web. Semacode, a free system released this month, lets users scan bar codes on everyday objects with their camera phones and instantly pull up all sorts of information about them. It's an information bridge between the world and the Web. By Chris Ulbrich.
65.  High Tech Has Dentists Smiling. Dentists in Silicon Valley are turning to technology to lure more patients. Lasers and digital imaging are key to maintaining a smile -- and erasing pain. By Kristen Philipkoski.
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
66.  Slackware update for kdelibs
67.  Mac OS X URI Handler Arbitrary Code Execution
68.  Blue Coat Security Gateway OS Private Key Disclosure
69.  Microsoft Outlook RTF Embedded OLE Object Security Bypass
70.  Sidewinder G2 Firewall Multiple Denial of Service Vulnerabilities
71.  Slackware update for kdelibs
----------------------------------------------------------------------
About Internet/Network Security
----------------------------------------------------------------------
72.  Book Review: Windows Server Hacks. The O'Reilly 'Hacks' series is an excellent collection of books designed to give you the tips and tricks you need to get the most out of a given application or platform. Mitch Tulloch's contribution, Windows Server Hacks, is no exception....
73.  Solving The Spam Epidemic. An April 2004 report from MessageLabs declares that spam accounts for an average of 67% of the email in the world. According to MessageLabs that number is over 80% in the United States. The United States passed the CAN-SPAM Act...
74.  Cisco Source Code Compromised. Cisco has not yet confirmed it, but according to articles on both CNet and eWeek, hackers may have managed to break into the Cisco network and steal all of the source code for IOS 12.3, approximately 800Mb worth of data....

9:26:46 AM    comment []

----------------------------------------------------------------------
Boing Boing
----------------------------------------------------------------------
1.  Mayor dispatches cops to bust blogger-critic. Loic sez, X-NAS-Bayes: #0: 0; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 882 X-NAS-Validation: {E681C936-E9F0-4DDC-9901-74301AF33E67}

Christophe does not like the way the city mayor manages the city, spends the public money and says it on his blog, every day. He has been very successful doing that, with hundreds of inhabitants of Puteaux reading and commenting his blog everyday and many national newspapers that talked about his blog.

Christophe criticizes the city management so much that they have tried to stop him for months, the city mayor has even sent him threats over the phone that he recorded and blogged, of course.

Today, he has been stopped in the street by the Police Municipale (the local French Police) who tried to arrest him for his blogging. Fortunately for Christophe, the National Police arrived immediately as they found what was happening weird, and let him go.

Link

(Thanks, Loic!)

2.  Tornado sucks up entire house. This is a stormchaser video that shows a Kansas tornado sucking up an entire house, smashing it to flinders as it goes.

26.6MB MPG Link

(Thanks, Retank!)

3.  PATRIOT in bite-sized chunks. I'm giving a talk in Barcelona on Wednesday about the USA PATRIOT Act, and so I've been boning up on EFF's analysis of this sweeping, unconstitutional law. Of particular help has been the clause-by-clause analyses that our staff attorney Kevin Bankston's been writing for EFFector, EFF's weekly newsletter. If you ever wondered what the big deal was about PATRIOT, Kevin's blurbs will explain it all -- in bite-sized, layperson-friendly chunks.

Apologists justified the broad, civil-liberties corroding powers granted to the government under the USA PATRIOT Act by arguing that they would be used to put terrorists behind bars. Yet several provisions can be used against Americans in a wide range of investigations that have nothing to do with terrorism. Others are too vague, jeopardizing legitimate activities protected under the First Amendment. Worse, the Department of Justice has worked to expand and/or make permanent a number of these provisions -- despite the fact that they were sold to the public as "temporary" measures and are scheduled to expire, or "sunset," in December of 2005.

Link

4.  Klingon language workshop at Cannes. "Earthlings: Ugly Bags of Mostly Water," is a documentary on Klingon-speakers debuting in Cannes. In conjunction with the release, the Klingon Language Institute is holding a workshop/confernece at Cannes for interested parties.

KLI members featured in the film include Dr d'Armond Speers, a linguist who spoke only in Klingon to his son until age three and a half, and Rich Yampbell, composer of Klingon national anthem taHaj wo.

Link

(via Ambiguous)

5.  Social engineering a shop out of $4K worth of computers. Excellent first-person account of a security consultant who entered a store (at management's request) and conned the staff into helping him boost nearly $4,000 worth of computers and walk out the front door with it all.

I was trying to find some paperwork that I could carry into the warehouse to use as 'official company documents'. I hit the jackpot when I opened the breakroom door when I noticed that the store had a seperate room for smokers as well, so I decided that I had worked hard enough so far and I deserved a break. After a refreshing dose of a nicotine inhaler I was back on the job. A quick survey of the non-smoking break room turned up a printout of employees who were scheduled to work that day.

Link

(via /.)

6.  Squiggy is now a Mariners scout.

David Lander, who played Squiggy on Laverne and Shirley, is now a talent-scout for the Seattle Mariners.

Link


7.  Eye-contact-sensing goggles.

Connor Dickie, a student at Queen's University's Human Media Lab, has developed these video-shooting glasses with an eye-contact sensor, and a companion app called eyeBlog that allows the wearer to videoblog her/his PoV.

Link

(Thanks, Connor!)


8.  Advice to newlyweds. John Scalzi, a very talented humour writer and novelist (I like to think of him as the "edgy Dave Barry"), has written a bunch of notes for the newly married gays and lesbians of Massachusetts:

It's your best man's (or the equivalent's) job to remind people that at a wedding reception, as at the Academy Awards, speeches are best very short. You didn't spend an obscene amount on the catering just to have it grow cold as Uncle Jim blathers on.

Remind the DJ or band that they work for you, and they'll damn well play anything you want. For some reason I think this may be less of a problem at gay weddings. Thank God.

There will be drama of some sort at the reception. If the wedding party lets any of it reach the newlyweds, they haven't done their job.

Don't fill up on bread. You'll have to dance later.

Link

(via Electrolite)

9.  Celebrity faces as used-gum targets. Gum-posters featuring celebrity faces are appearing in London, and locals are encouraged to dispose of their wads by sticking them up, rather than dropping them underfoot.

Londoners are being urged to stick their chewing gum on celebrity posters rather than dropping it on the streets.

Ealing Council hopes posters featuring Shane Richie, Jordan and Peter Andre among others will prove a more tempting target in Acton, west London.

Posters have removable sheets which will be changed six days a week to stop the gum building up...

It is estimated that UK local authorities spend £150m a year tackling the problem.

Link

(via Ben Hammersley)

10.  Powell forces press aide to let him answer Meet the Press question. Colin Powell appeared on Meet the Press this weekend, and his appearance was marred by his press secretary moving the camera and attempting to end the interview early when Russert, the interviewer, started to ask a hardball question about the fictional Nigerien yellow-cake uranium that Powell used as an excuse to go to war in Iraq.

Most noteworthy about this event was that Powell, rebuked the press-secretary on air, demanded that the camera be trained on him again, and then answered the question, describing the intelligence he'd received as "deliberately misleading."

Lisa Rein's got the video up -- highly recommended.

EMILY MILLER, STATE DEPARTMENT PRESS AIDE: You're off.

SECRETARY POWELL: I am not off.

EMILY MILLER, PRESS AIDE: No. They can't use it, they're editing it.

SECRETARY POWELL: He's still asking the questions.

EMILY MILLER, PRESS AIDE: He was not ...

SECRETARY POWELL: Tim, I am sorry I lost you.

MR. RUSSERT: I am right here Mr. Secretary. I would hope they would put you back on camera. I don't know who did that.

EMILY MILLER, PRESS AIDE: He was going to go for another five minutes.

SECRETARY POWELL: We've really scre...

MR. RUSSERT: I think that was one of your staff Mr. Secretary. I don't think that's appropriate.

SECRETARY POWELL: Emily, get out of the way. Bring the camera back please. (Camera returns to the interview subject) I think we're back on Tim, go ahead with your last question.

Link

Mirrors here

11.  Absolutely Pre-Fabulous. prefabMy friend Guy is considering the purchase of a stylish prefab home. He pointed me to FabPreFab, a mind-blowing clearinghouse of prefab dwelling design.
"Predominant mass-market housing programs such as project homes or tract housing largely fail to meet the desires of people who appreciate a modernist design aesthetic. Custom-designed modernist architecture is beyond the financial reach of many people and so prefab is viewed as a design and production ideology that has the potential to deliver affordable modernism."
Some of these abodes can be ordered online and delivered on several trucks. Others are airlifted onto rooftops. Don't miss the transformed shipping containers either! Link
12.  Decapitation video discrepancies. I don't know what to make of this. It's a very well-researched, non-hysterical collection of 50 seeming contradictions in the Berg decapitation video. The author states that a number of these will likely be explained away, but taken as a whole, this very convincingly implies that Berg was not killed by the terrorists that the CIA fingered, and may, in fact, have been killed by westerners.

34) "Terrorists" were fat
Several of the men in the film were fat by Iraqi standards. If they were Feyadeen or Mujahadeen, they probably have been living underground since the first days of the occupation. Tens of thousands of Iraqis have been shown on news stories as they have marched and demonstrated. One would be hard pressed to point out a single fat man among these thousands.

35) White hands of "terrorists"
Some of the "Arab terrorists" have pasty-white hands and (other exposed) skin. One would be hard pressed to find Arab men with pasty-white hands. (See: Nick Berg Conspiracy Theories Abound.)

36) Wrong accent
Al-Zarqawi is/was Jordinian. Arab linguists have said the man posing as Al-Zarqawi did not speak with a Jordanian dialect. Others have suggested the man reading the written statement may not have been a native speaker of Arabic....

39) Al-Zarqawi's missing leg
Al-Zarqawi was missing one leg. Al-Zarqawi allegedly wears a prosthetic device, according to previous CIA reports. (See: IHT Protrait of Al-Zarqawi.) There is no evidence that the killer wore a prosthetic device. Further, Al-Zarqawi had been outfitted with an artificial leg that did not fit or function properly. He was unable to walk or stand normally. No man in the group showed evidence of such infirmity.

40) Missing tattoos?
Large green tattooed "dots" are known to be on the back of Abu Musab Zarqawi's left hand. These tattoos cannot be seen in the close up video of the execution, though the back of his hand is fairly visible. (See: IHT Protrait of Al-Zarqawi.)

Link

(via Nelson)

13.  Sleeping through bad smells. Humans have an incredibly acute sense of smell, but a new study shows that our perception of odors is dramatically reduced when we're snoozing. Researchers at Brown University published a paper in the journal Sleep showing that individuals slept right through the introduction of intense scents indicative of fires. A moderately loud sound woke people right away though.

“As the saying goes,” said the paper’s co-author Mary A. Carskadon, “we ‘wake up and smell the coffee,’ not the other way around.”

Still, I wonder if this is because we're trained from a young age to respond to buzzing, radio-blaring alarms. It would be fun to have an alarm clock that at a pre-set hour spewed a refreshing blast of peppermint! Link

14.  Design evolution of the vice-card. Vice-cards are the glossy cards advertising prostitutes' services that are placed in phone booths all over London. The tradition goes back decades, and a Graphic Communications conference recently heard this paper on the design evolution of the vice-card.

As more girls advertised their services the cards became larger - A7 or less frequently one third of A5 - and more distinctive. Girls developed their own recognisable style. Specialised services were offered and a visual and written vocabulary began to evolve to reflect each specialism. Cards offering schoolgirl services or Le Vice Anglais had a Victorian feel and accordingly used nineteenth-century typefaces; domination cards used stern words set in Gothic letters; cards proffering massage needed a luxurious and whimsical script.

These mid-period cards were predominantly typographic and were supported by roughly drawn, but often delightful, line illustrations. They managed to maintain both a sense of mystery and a sense of humour. Eventually the ISO standards made themselves felt even in the vice industry, and by January 1994 nearly all the cards had been enlarged to A6 postcard size. Four-colour started to be seen on the cards during the summer of 1997, and by the summer of 1998, four-colour, and ‘proper' typesetting was the norm.

Today's cards depend upon full-page, sometimes explicit, glossy, photographic images to put across their sales pitch. The images are downloaded from the Internet and are never of the person offering the services, although they are often advertised as ‘genuine'! The charm and allure apparent in the early cards has gone from the modern cards, individuality and originality has been lost...

The cards are placed in the boxes on behalf of the girls by people known as ‘carders' who are frequently students or unemployed. It is a highly lucrative trade and the carders can earn an average of £30 for 100 or £200 per day for between 600 and 700 cards placed. The girls pay for the carders out of their own wages, and with thirteen million of them placed annually, the wages of sin are in the region of £4 million.

Link

(via Foe Romeo)

15.  Hourly shots of coffee beat a cup. Tossing back two shots of coffee each hour may provide more sustainable stimulation than gulping down a large cup in the morning, scientists from Rush University Medical Center report in the journal Sleep. In the study, sixteen men stayed in windowless rooms for nearly a month while the researchers screwed with their circadian rhythms. From a Scientific American article about the findings:

"In the new study, the scientists... tested the effects of administering an hourly, low dose of caffeine equivalent to about two ounces of coffee to one group, while the second group received a placebo. The caffeinated men performed better on cognitive tests than the control individuals did, and dozed off less often. And though they received the same cumulative dose as subjects in previous, single-dose studies, taking many small doses minimized some of the negative side effects that caffeine can have, such as tremors." Link
16.  WIRED NextFest -- EFF's Jason Schultz photoblog coverage.

Jason Schultz of the EFF attended NextFest this weekend, and photoblogged these observations.
Link

17.  Web Zen: Snack Zen.

ice cream | bento | biscuit of the week | biscuithenge | mango biscuits | donuts | marshmallows | bad candy | name that candy bar | rude food | pork faggots | cooking with crisps | cheese doodles | and the classic: twinkies project

web zen home, web zen store, (Thanks, Frank).

18.  Lenny, Squiggy of "Laverne and Shirley" face off as penguins in Nickelodeon cartoon "Oswald". BoingBoing pal Mike Outmesguine (who you may have spotted on CNN this weekend talking about why it would be A Bad Thing for the federal government to have the power to jam your cellphone in the name of counter-terrorism) says:

David Landers plays the voice of Henry the penguin on the kid show "Oswald" (Oswald the octopus is voiced by Fred Savage) playing on Nickelodeon. I sometimes watch it with my 3 year-old. One episode had Henry's cousin come in from out of town. His cousin was voiced by Michael McKean (who played Lenny.) I can't tell you how funny it was to hear Lenny and Squiggy pestering eachother in a children's show - while appearing as penguins!
Link
19.  Wired NextFest: decompression.

So, I spent a fair amount of my waking hours in recent months programming the Main Stage portion of NextFest, the Wired Magazine event sponsored by GE that took place at San Francisco's Fort Mason Center this weekend. I took lots of snapshots, and I'm eager to share them -- along with some of what I observed at the event. But right now, I'm still peeling my brain off the floor. I'm exhausted. More soon, but for now this quick snapshot that kind of sums it all up for me. Seeing so many families and children experiencing technology first-hand with this look of sheer amazement and delight on their faces made all the work feel worthwhile.
Link to some news clips on NextFest.

20.  Retired Congresscritter on home-taping. Retired Congressman Al Smith testified on the DMCRA, Rep Boucher's bill to reform copyright. Smith's been home-taping for 54 years, and he knows what's what:

When I buy a CD or a DVD, that content should be wholly mine to do with as I please as long as I am in no way selling its contents or profiting from it. ... Present law is predicated on the assumption that consumers will rip-off copyright holders. The vast majority are innocent of that assumption, but all are treated as guilty.

Link

21.  Build your own X-Prize Rocket!. BoingBoing reader Stefan Jones says,

Model rocket supplier Estes Industries got hammered by the failure of a line of licensed "The Phantom Menace" models. They're starting to appeal to those of us who geek out on real-life rockets again, with eight models based on entries in the X-Prize suborbital rocket competition. The variety of approaches is astonishing. The second page has a mystery model that's obviously Rutan's Spaceship One. I guess some people charge more for licensing than others . . . And -- whoo! -- they're selling a video camera rocket to replace the 8mm Cineroc movie camera that was last offered thirty years ago.
Link
22.  How to Promote a Game With Flare. I filed this story/photos for Wired News about an unusual publicity stunt staged by the US Army at last week's E3 gaming convention in Los Angeles.

On a sweltering afternoon, the line between video games and reality was temporarily erased at the Los Angeles Convention Center. For about 45 minutes, one downtown street was transformed into a scene from a military first-person shooter game -- complete with helicopters, machine guns and face-painted soldiers leaping off tall buildings, while the jaws of shocked onlookers dropped.

To promote America's Army: Overmatch, a free game created by the Army as a recruitment tool, a group of Army Special Forces personnel staged an urban tactical assault exercise outside the L.A. convention center where the E3 gaming expo was taking place. It may have been a staged promotional event, but judging from the panicked expressions on pedestrian faces, some may have thought it was the real thing.

In Hollywood terms, the effect was Black Hawk Down, directed by Fellini. Unsuspecting local workers clutched lunches and scurried off for cover. Bullhorns blared the voice of an America's Army spokesman who delivered a play-by-play, encouraging attendees to download the free online game for more hot combat excitement. A charging soldier affixed a mobile camera to his helmet to record home videos of the stunt for his family. One trade show attendee who appeared to be of Arab descent walked toward the convention center doors, halted at the spectacle, and said to no one in particular, "It's all brainwashing."

Link to story, and links to more E3 snapshots from Xeni: one, two
23.  I, T-shirt: wearable movie trailers at NextFest. In The Hollywood Reporter today, an item about t-shirts that display movie trailers -- as seen at both E3 and NextFest last week.

Coming soon to a T-shirt near you: trailers for "I, Robot," starring Will Smith. In the never-ending search to capture the attention of consumers bombarded by commercials, billboards and a massive array of other advertisements, 20th Century Fox debuted an innovative new guerilla marketing tactic at E3 last week -- T-shirts embedded with video screens that played "I, Robot" trailers.

The two women who wore the video T-shirts as they walked around E3 drew crowds and TV news crews on hand to cover the gaming conference at the Los Angeles Convention Center. 20th Century Fox is the first studio -- or business of any kind -- to use the video T-shirt marketing tactic developed by San Francisco-based Brand Marketers.

Link (Thanks, Jeff; photo by Kurt Rogers of the SF Chronicle, Link to SF Chron story)
----------------------------------------------------------------------
Penny Arcade!
----------------------------------------------------------------------
24.  Les Disapointments.
----------------------------------------------------------------------
CNET News.com
----------------------------------------------------------------------
25.  Point, click and swap--digital photos go P2P. A company launches a service that lets people share photos the way file-sharing programs distribute music and video files.
26.  ScanSoft updates voice software. The voice recognition software specialist prepares to upgrade its application for corporate phone systems, adding 40 languages and even the ability to adapt to accents.
27.  Red Hat adds legal firepower. The Linux seller taps a former associate general counsel of IBM to be its top lawyer as its legal attack against SCO heats up.
28.  Does election fallout bode ill for India tech?. According to some, the stock market plunge was a short-term reaction to the uncertainty created by the change in government, not an indication of the viability of India as a site for offshore outsourcing.
29.  The jobless recovery and offshore outsourcing. Michael Corbett says the fastest way to end this debate is to reinvest savings from offshore outsourcing in ways that encourage job creation at home.
----------------------------------------------------------------------
Hack the Planet
----------------------------------------------------------------------
30.  I'm going to kill the next person who says "plog". Got it?
31.  Think Secret: Virginia Tech cluster awaits G5 Xserves. And we're behind them in line. :-(
32.  Dave is releasing the Frontier VM as open source. "Products that Manila and Radio compete with don't have their own kernels, they build off development environments created by others. For example, Movable Type is written in Perl. WordPress is PHP. Blogger is Java. UserLand's products are different because they build on a private platform. For a long time we saw this as an advantage, the UserLand runtime is very rich and powerful, and offered performance benefits. ... But experience in the market said that, to succeed, UserLand didn't need to own its kernel. In fact, that it was the only developer using this kernel may well have been a liability for UserLand." My philosophy is that you want to be on a platform that has a big ecosystem around it. The ecosystems can come from a community (Python, Perl, PHP) or BigCos (Java, .NET). If you're a BigCo you can even build your own ecosystem, but if you're small you can't afford it. These days Frontier is way behind the other VMs in performance, libraries, portability, etc. The ODB is great, but it has its problems, like how putting code in the ODB kills integration with external version control systems.
----------------------------------------------------------------------
BBC News | Technology | UK Edition
----------------------------------------------------------------------
33.  Euro football fever grips charts. Catch up with the latest news from the world of video gaming.
34.  Marconi sees annual losses narrow. The UK telecoms equipment maker - which is struggling to rebuild itself after near collapse in 2000 - cuts its losses and forecasts a slim rise in sales.
35.  Phantom console goes on show. The long-awaited Phantom game system and service has gone on display at the E3 games show.
36.  Oracle reduces People bid 20%. Software firm Oracle lowers its hostile takeover bid for competitor Peoplesoft to $7.7bn.
37.  Film chiefs meet to tackle piracy. Film executives in Cannes say directors must back their anti-piracy message - before it is too late.
38.  Flat screen boost at LG Philips. The world's second largest LCD screen maker is stepping up investment in the production of flat displays.
39.  Rivals challenge iPod's dominance. Less well-known digital music players offer better value than Apple's iPod, says a study.
40.  Work porn risk for businesses. Bosses that do not do enough to stop abuse of work computers could face jail, warn legal experts.
41.  Microwaves used in heart therapy. A microwave procedure that cooks the heart could soon become a routine therapy for heart rhythm disorders.
42.  UK cinemas to get digital screens. British cinemas are to get 250 digital screens thanks to a £13m lottery grant from the UK Film Council.
43.  MMO2 sees first full-year profit. A 14% rise in customer numbers helps the mobile phone group to report its maiden pre-tax profit.
44.  New expression for virtual city. A virtual reality exhibition in London is letting visitors take in the sights and sounds the capital's darker side.
----------------------------------------------------------------------
InfoWorld: Top News
----------------------------------------------------------------------
45.  Microsoft, BearingPoint team to target governments. Microsoft Corp. is teaming with systems integration and consulting firm BearingPoint Inc. to deliver a set of software and services packages aimed at governments.
46.  Mac OS X hit with another serious security issue. When it rains, it pours. Yet another "highly critical" hole has been found in Apple Computer Inc.'s Mac OS X operating system, which will allow remote system access by getting someone to visit a malicious Web site.
47.  Offshoring increases at faster pace, Forrester says. As U.S. businesses continue to stretch their capital-expenditure budgets, the pace at which they use offshore service providers is picking up, according to a report released Monday by market research company Forrester Research Inc.
48.  AMD to launch dual-core chips in 2005. Advanced Micro Devices Inc. will release dual-core Opteron processors for servers and workstations in 2005, the same time frame that Intel Corp. plans for its first dual-core products, an AMD executive said Monday.
49.  Transmeta targets Pentium M users with NX security bit. BOSTON - Upcoming versions of Transmeta Corp.'s Efficeon chips will support the NX (No Execute) feature enabled by Microsoft Corp.'s upcoming Windows XP Service Pack 2 release, but Intel Corp.'s Pentium M processor won't be ready for NX technology until 2005, representatives from both companies confirmed Monday.
50.  Notebooks ramping up for PCI Express. Nvidia, a leading designer of graphics chips, announced Monday that it has widespread support from the major manufacturers of notebooks for its proposed MXM graphics standard for add-on modules that will be using Intel's new PCI Express bus.

ADVERTISEMENT

mySAP Customer Relationship Management
Learn how businesses just like yours achieved success in customer relationship management. Click here for free ROI report

51.  EMC wins storage patent dispute with HP. SAN FRANCISCO - EMC Corp. is seeking a court injunction to prevent Hewlett-Packard Co. from shipping its CASA storage appliance with the remote and local mirroring software it presently includes, following a jury verdict Monday in a software patent dispute between the two companies.
52.  IBM announces ID management partnerships. IBM Corp. said it is partnering with four companies that make XML (Extensible Markup Language) security products so that their products will work easily with IBM's Tivoli Access Manager management software.
53.  AMD to launch faster Opterons. Advanced Micro Devices Inc. (AMD) will release faster versions of its Opteron processors on Tuesday, a company executive said.
54.  Dell adds Bluetooth, new XScale chips to Axim PDAs. Dell Inc. plans to unveil three new Axim personal digital assistants (PDAs) Tuesday, adding the Bluetooth short-range wireless networking technology to its PDAs for the first time.
----------------------------------------------------------------------
InfoWorld: Security
----------------------------------------------------------------------
55.  Update: Cisco looking into source code leak. Cisco Systems Inc. is investigating the possible theft of proprietary source code that drives its networking hardware, a company representative confirmed Monday.

ADVERTISEMENT

IPSec or SSL? Free VPN Decision Guide
Which is right for you? Download the “VPN Decision Guide” to learn how, often, the answer is “both”. Download now at: http://i.nl03.net/ltr0/?_m&.1034.u.mfm.4&k=sslnk404

56.  Microsoft, BearingPoint team to target governments. Microsoft Corp. is teaming with systems integration and consulting firm BearingPoint Inc. to deliver a set of software and services packages aimed at governments.
57.  Mac OS X hit with another serious security issue. When it rains, it pours. Yet another "highly critical" hole has been found in Apple Computer Inc.'s Mac OS X operating system, which will allow remote system access by getting someone to visit a malicious Web site.
58.  Transmeta targets Pentium M users with NX security bit. BOSTON - Upcoming versions of Transmeta Corp.'s Efficeon chips will support the NX (No Execute) feature enabled by Microsoft Corp.'s upcoming Windows XP Service Pack 2 release, but Intel Corp.'s Pentium M processor won't be ready for NX technology until 2005, representatives from both companies confirmed Monday.
59.  IBM announces ID management partnerships. IBM Corp. said it is partnering with four companies that make XML (Extensible Markup Language) security products so that their products will work easily with IBM's Tivoli Access Manager management software.
----------------------------------------------------------------------
LinuxSecurity.com
----------------------------------------------------------------------
60.  Linux Security Week - May 17th 2004
61.  No WLAN? You still need wireless security
62.  Hardened-PHP
63.  Centralizing the Management of Network Security
64.  Student uncovers US military secrets
65.  A Tip of The Brim With New Fedora Core
66.  Fedora: libpng 1.0.13 Information leak
67.  Slackware: mc Multiple vulnerabilities
----------------------------------------------------------------------
SecurityFocus Vulns
----------------------------------------------------------------------
68.  BugTraq: ROCKET SCIENCE: Outllook 2003. Sender: http-equiv at excite dot com [1 at malware dot com]
69.  BugTraq: MDKSA-2004:044 - Updated libuser packages fix vulnerability. Sender: Mandrake Linux Security Team [security at linux-mandrake dot com]
70.  BugTraq: MDKSA-2004:045 - Updated passwd packages fix vulnerabilities. Sender: Mandrake Linux Security Team [security at linux-mandrake dot com]
71.  BugTraq: MDKSA-2004:046 - Updated apache packages fix a number of vulnerabilities. Sender: Mandrake Linux Security Team [security at linux-mandrake dot com]
72.  Vulns: Symantec Client Firewall Remote DNS Response Denial Of Service Vulnerability. Various Symantec Client Firewall products are prone to a remote denial of service vulnerability. Affected products include Norton Internet Security, Norton Personal Fire...
73.  Vulns: Microsoft Internet Explorer Double Backslash CHM File Execution Weakness. A vulnerability has been reported in Microsoft Internet Explorer that may permit unauthorized execution of locally stored compiled help files (.CHM).

This issue report...

74.  Vulns: Microsoft Internet Explorer Codebase Double Backslash Local Zone File Execution Weakness. A vulnerability has been reported that may potentially permit HTML documents to gain unauthorized access to local resources by using specific syntax when referencing said...
75.  Vulns: Linux Kernel e1000 Ethernet Card Driver Buffer Overflow Vulnerability. The Linux kernel contains modules that act as drivers for various hardware devices; one such device is the e1000 Ethernet card.

Reportedly the Linux kernel e1000 Etherne...

76.  Vulns: LibPNG Broken PNG Out Of Bounds Access Denial Of Service Vulnerability. The libpng graphics library is reported to be prone to a denial of service vulnerability when handling certain types of broken images. Specifically, the issue presents it...
77.  Vulns: Exim Header Syntax Checking Remote Stack Buffer Overrun Vulnerability. Exim is reportedly prone to a remotely exploitable stack-based buffer overrun vulnerability.

This issue is exposed if header syntax checking has been enabled in the ag...

----------------------------------------------------------------------
The Register
----------------------------------------------------------------------
78.  AMD restates dual-core CPU scheme. Double-die Opterons, Athlons in 2005 By Tony Smith .
79.  Yahoo! and Google escalate portal wars. Fierce competition for eyeballs By Datamonitor .
80.  Lycos cuts ribbon on 1GB email service. Snook cocked at Yahoo! and Google By Tim Richardson .
81.  ARM unveils multi-core chip design. License now, punch out silicon in Q2 2005 By Tony Smith .
82.  O2 rings up first profit. Jolly good... By John Oates .
83.  AMD launches x50 Opterons. Last 130nm server chips? By Tony Smith .
84.  Congress hears DMCA testimony. Compromise amendments likely By Faultline .
85.  Music biz waves axe at goose that laid golden egg. iTunes price hike a big, big mistake By Faultline .
86.  US gov helps CSC to profit. Two thirds of sales go to Uncle Sam By John Oates .
87.  University gets £1m complex systems grant. Boost for UK research By Lucy Sherriff .
88.  Opera settles legal claims. 'Too much information' not a danger here By John Oates .
89.  AMD hints at 90nm ship slip. Starts using Intel-esque 'revenue shipment' timescales By Tony Smith .
90.  BT, Voda confirm mobile link-up. Fixed-mobile convergence now 'reality' By Tim Richardson .
91.  Police probe Sasser informant. Reward booty under threat By John Leyden .
92.  Dell readies 624MHz Wi-Fi PocketPC. Axim x30 due today By Tony Smith .
----------------------------------------------------------------------
Help Net Security
----------------------------------------------------------------------
93.  Stop skirting network security
94.  Phishing expeditions are multiplying
95.  Symantec takes bite off virus-ID spam
96.  Criminal gangs exploit Internet employment sites
97.  European researchers craft new encryption
98.  Customize this feed. Add more items, descriptions, time stamps, select your version of RSS, aggregate several feeds... Check out NewsIsFree's premium syndication services!
----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
99.  NetChat Buffer Overflow in HTTP Service Lets Remote Users Execute Arbitrary Code
100.  Zen Cart Password Input Validation Flaw Lets Remote Users Inject SQL Commands
101.  KDE URL Processing Flaw Lets Remote Users Create or Overwrite Files or Execute Commands
102.  Turbo Traffic Trader C Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks
103.  Microsoft Visual Basic Buffer Overflow May Let Local Users Gain Elevated Privileges
104.  Mac OS X URI Handler Arbitrary Code Execution
105.  Blue Coat Security Gateway OS Private Key Disclosure
106.  Microsoft Outlook RTF Embedded OLE Object Security Bypass
107.  Sidewinder G2 Firewall Multiple Denial of Service Vulnerabilities
108.  American Released Passenger Data
109.  Data Disclosure Contradicts Feds
110.  Feds Seek Privacy Experts
111.  Senators Question TSA Denials
112.  Bringing Worm Writers to Justice Is No Easy Task
113.  Still Worried About Wireless
114.  Bluetooth at the Gates
115.  'Indefensible' Wi-Fi flaw discovered in 802.11b network protocol
116.  Security Focus: Busted "The arrest of Sasser's author proves bounties work to catch cyber vandal...
117.  Info World: Mac OS X hit with another serious security issue "'Highly critical hole' allows remo...
118.  Linux Insider: Cisco Probes Potential Source Code Leak "Unlike a Windows code leak that occurred...
119.  Security Focus: Microsoft Internet Explorer Codebase "Double Backslash Local Zone File Execution...
120.  Security Focus: Ethereal Multiple Protocol Dissector Vulnerabilities
121.  Bugtraq: Wget race condition vulnerability "symlink attack"
122.  Security Tracker: Microsoft Outlook Express Mail Troubleshooting Function "May Disclose SMTP Pas...
123.  Vacaturesite verwijderd door crackers
124.  Mozilla Suite 1.7 RC2 beschikbaar
125.  Verwijder spyware met Spybot - Search & Destroy 1.3
126.  Zeer veel verkeer op port 5000 door Kibuv.b worm
127.  Waarom Windows een security nachtmerrie is
128.  Ouderwetse virus aanpak is nog steeds de beste
129.  Transmeta voorziet chips van anti-virus feature
130.  Uitgelekte Cisco broncode vormt geen bedreiging
131.  Vacaturesites gebruikt voor witwassen geld
132.  Spam en virusdreiging voor instant messaging
133.  OpenSSH SSHv2 Public Key Authentication Bypass
134.  OpenSSH SSHv1 PAM Challenge-Response Authentication
135.  OpenSSH PAM Conversation Function Stack Modification

8:37:39 AM    comment []

----------------------------------------------------------------------
NewsIsFree: Security
----------------------------------------------------------------------
1.  Re: Curious fileutils/coreutils behaviour.
2.  CiSCO IOS 12.* source code stolen
3.  Re: Linux Kernel sctp_setsockopt() Integer Overflow
4.  Re: Denial of Service Vulnerability in IEEE 802.11 Wireless Devices
5.  Newest Pattern: 891

8:37:35 AM    comment []


Click here to visit the Radio UserLand website. © Copyright 2004 Gregg Doherty.
Last update: 6/1/2004; 12:29:18 AM.
This theme is based on the SoundWaves (blue) Manila theme.
May 2004
Sun Mon Tue Wed Thu Fri Sat
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          
Apr   Jun