Via Wired: Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency. The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let...
Google announced today that it is seeking to develop grass roots support for its "white spaces" campaign at the FCC, its lobbying effort to convert some radio airwaves in order to provide wireless broadband access. The "Free the Airwaves" campaign invites consumers to sign a petition,...
Via Slashdot From ComputerWorld: "For a technology that has been in stable release since May 22, 2000, PHP 4 has finally reached the end of its official life. With the release of PHP 4.4.9, official support has ended and the final security patch for the platform...
Linux.com has a detailed step by step installation procedure for installing Apache, MySQL and PHP on FreeBSD using the ports collection. Some extra steps are taken to secure the installation and you end up with a nice multifunctional FreeBSD+AMP setup with very little effort....
A new driver by Atheros has been released for use in Linux. It is licensed under the ISC license, so BSD users should be able to make use of the drivers as well. The new driver doesn't use a proprietary hardware abstraction layer and no firmware...
Separate problems are plaguing the July 10, 2008 MS08-037 DNS patch released by Microsoft to correct the recently disclosed multivendor DNS Cache Poisoning vulnerability. Interruptions are being experienced in the Exchange Server services components on several of the software giants operating systems. SBS services...
An experimental build of CrossOver Games is now available for the BSD platform. This edition is unsupported by CrossOver, but it is a great opportunity to test out playing Windows games on BSD. pcbsd.org notes that Jeremy White from CodeWeavers has issued a challenge to the...
In light of the CERT VU#800113 announcement, DNS-OARC has created a special DNS name and server that you can query to determine if your resolver is at risk. Usage: dig @4.2.2.3 +short porttest.dns-oarc.net TXT Replace 4.2.2.3 with your resolvers address. The result will either return FAIR, GOOD or...
Vulnerability Note VU#800113 From: https://www.kb.cert.org/CERT_WEB%5Cservices%5Cvul-notes.nsf/id/800113 Quote: An attacker with the ability to conduct a successful cache poisoning attack can cause a nameserver's clients to contact the incorrect, and possibly malicious, hosts for particular services. Consequently, web traffic, email, and other important network data can be redirected to systems...
An article on Gamers With Jobs expresses concerns about not getting the most out of games. From the article: "I play games to escape. To go somewhere else. But our industry has so ingrained this concept of 'earning' our fun that the best is somehow always saved...