News aggregator

[3/5] Quick Poll "id" SQL Injection Vulnerability

Secunia Security Advisories - 1 hour 46 min ago
Hussin X has reported a vulnerability in Quick Poll, which can be exploited by malicious people to conduct SQL injection attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[3/5] OpenOffice "rtl_allocateMemory()" Truncation Vulnerability

Secunia Security Advisories - 1 hour 46 min ago
A vulnerability has been reported in OpenOffice, which potentially can be exploited by malicious people to compromise a user's system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[3/5] Red Hat update for openoffice.org

Secunia Security Advisories - 1 hour 46 min ago
Red Hat has issued an update for openoffice.org. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a user's system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

IE8 Beta Released To Public

Slashdot - 2 hours 43 min ago
Tim writes "English, German, Simplified Chinese, and Japanese versions of Internet Explorer 8 have been released for public beta. New features include accelerators, which provide instant context menu access for a number of common tasks; automatic crash recovery, which prevents a single page's failures from taking down your entire browser; and browser privacy, a feature that didn't make Firefox 3. I'm primarily a Firefox user, and I've been using IE8 at work (MS) for the past few weeks. It's a definite improvement over previous versions, and brings a lot to the table that Firefox requires extensions for. Give it a spin, submit feedback, and help keep all browser makers on their toes by facing each other's competition."

Read more of this story at Slashdot.

[3/5] CMME Multiple Vulnerabilities

Secunia Security Advisories - 3 hours 47 min ago
SirGod has discovered some vulnerabilities and a security issue in CMME (Content Management Made Easy), which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Wikileaks To Sell Hugo Chavez' Email

Slashdot - 5 hours 16 min ago
I Don't Believe in Imaginary Property writes "Wikileaks seems to be a bit hard-up for cash, so they're trying a little experiment. They plan to auction off an archive with three years worth of Hugo Chavez' email. The winner will get a period of embargoed access to break any stories they can find in the files, while Wikileaks will later publish the archive in full. Wikileaks plans to use the profits for their legal defense fund, but they may run into trouble because most reputable news outlets have policies against paying sources."

Read more of this story at Slashdot.

[3/5] Red Hat Directory Server Multiple Vulnerabilities

Secunia Security Advisories - 5 hours 46 min ago
Some vulnerabilities have been reported in Red Hat Directory Server, which can be exploited by malicious people to conduct cross-site scripting attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[2/5] Red Hat update for adminutil

Secunia Security Advisories - 5 hours 46 min ago
Red Hat has issued an update for adminutil. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[2/5] Mono Sys.Web HTTP Header Injection Vulnerability

Secunia Security Advisories - 5 hours 46 min ago
Juraj Skripsky has reported a vulnerability in Mono, which can be exploited by malicious people to conduct HTTP header injection attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[3/5] Red Hat update for tomcat

Secunia Security Advisories - 5 hours 46 min ago
Red Hat has issued an update for tomcat. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, or disclose sensitive information.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[2/5] Red Hat Directory Server Denial of Service Vulnerabilities

Secunia Security Advisories - 5 hours 46 min ago
Some vulnerabilities have been reported in Red Hat Directory Server, which can be exploited by malicious people to cause a DoS (Denial of Service).


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[4/5] Ubuntu update for yelp

Secunia Security Advisories - 5 hours 46 min ago
Ubuntu has issued an update for yelp. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

[5/5] JustSystems Ichitaro Products Unspecified Code Execution Vulnerability

Secunia Security Advisories - 5 hours 46 min ago
A vulnerability has been reported in JustSystems Ichitaro products, which can be exploited by malicious people to compromise a user's system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Quebec Gov Sued For Ignoring Free Software

Slashdot - 7 hours 49 min ago
Mathieu Lutfy writes "The CBC is reporting that "Quebec's open-source software association is suing the provincial government, saying it is giving preferential treatment to Microsoft Corp. by buying the company's products rather than using free alternatives. "...Government buyers are using an exception in provincial law that allows them to buy directly from a proprietary vendor when there are no options available, but Facil said that loophole is being abused and goes against other legal requirements to buy locally.". The group also has a press release in English."

Read more of this story at Slashdot.

Changing Customers Password Without Consent

Slashdot - 10 hours 38 min ago
risinganger writes "BBC News is reporting that a customer had his password changed without his knowledge. After some less than satisfactory service the customer in question changed his password to 'Llyods is pants'. At some point after that a member of staff changed the password to 'no it's not'. Requests to change it back to 'Llyods is pants', 'Barclays is better' or censorship were met with refusal. Personally I found the original change funny, like the customer did. After all, god forbid a sense of humour rears it's ugly head in business. What isn't acceptable is the refusal to change it per the customers requests after that."

Read more of this story at Slashdot.

New Map From Fermi Gamma-Ray Space Telescope

Slashdot - 12 hours 45 min ago
I Don't Believe in Imaginary Property writes "NASA has received interesting results from the Fermi Gamma-ray Space Telescope, originally known as GLAST, which has allowed them to create new map of the gamma-ray sky. The secret to its ability to resolve gamma-rays is that they use layers of tungsten interleaved with silicon detectors. When a gamma-ray strikes tungsten, it produces an electron/positron pair due to the photoelectric effect, which cascades as it goes through further layers of tungsten. Meanwhile, they record which silicon detectors had electrons or positrons pass through them to determine the direction of the source and they also record the total energy of the electron/positron pairs to calculate the wavelength of the gamma-ray using Planck's Law. The data gathered in just its first few hours of operation is reportedly comparable to the data from the Energetic Gamma-Ray Experiment Telescope, which gathered data for nine years back in the 1990's and there are hopes that it could detect dark matter in the form of weakly interacting massive particles (WIMPs)."

Read more of this story at Slashdot.

45th Known Mersenne Prime Found?

Slashdot - 14 hours 29 min ago
An anonymous reader writes "The Great Internet Mersenne Prime Search (GIMPS) has apparently discovered a new world-record prime number. A GIMPS client computer reported the number on August 23rd, and verification is currently under way. The verification could take up to two weeks to complete. The last Mersenne prime discovered was over 9.8 million digits long, strongly suggesting that the new value may break the 10 million digit barrier — qualifying for the EFF's $100000 prize!"

Read more of this story at Slashdot.

The Power Grid Can't Handle Wind Farms

Slashdot - 15 hours 38 min ago
DesScorp writes "The Times reports on the problems of adding wind farms to the power grid. Because of the grid's old design, it can't handle the various spikes that wind farms sometimes have, and there's no efficient way to currently move massive amounts of that power from one section of the country to the other. Further complicating things is the fact that under current laws, power grid regulation is a state matter, and the Federal government has comparatively little authority over it right now. Critics are calling for federal authority over the grid, and massive new construction of "superhighways" to share the wind power wealth nationally. Quoting the article, 'The dirty secret of clean energy is that while generating it is getting easier, moving it to market is not.'"

Read more of this story at Slashdot.

Digital Storage To Survive a 25-Year Dirt Nap?

Slashdot - 16 hours 35 min ago
AlHunt writes "I've been tasked with finding a way to bury digitally stored photographs in a small underground time capsule to be opened in 25 years. It looks like we'll be using a steel vessel, welded closed. I've thought of CDs, DVDs, a hard drive, or a thumb drive — but they all have drawbacks, not the least of which is outdated technology 25 years from now. Maybe I'll put a CD and a CD-ROM drive in the capsule and hope that the IDE interface is still around in 25 years? Ideas and feedback will be appreciated."

Read more of this story at Slashdot.

Andy Hertzfeld Shares His Thoughts on 25 Years of the Mac

Slashdot - 17 hours 31 min ago
blackbearnh writes "It may make you feel very, very old, but the Macintosh will be turning 25 in January. As we approach this momentous anniversary, O'Reilly News had a talk with Andy Hertzfeld, one of the original Macintosh designers, about the long and storied history of the Mac. Hertzfeld, who tells the story of the Mac in his book A Revolution in the Valley, shares his thoughts about how the Mac has aged over time, how life might have been different if Steve Jobs had stayed on at Apple, and the differences between working for Apple, and for Google (his current employer.)" Read on below for a bit of what Hertzfeld had to say.

Read more of this story at Slashdot.

Syndicate content

Who's online

There are currently 0 users and 2 guests online.

Syndicate

Syndicate content

User login