This afternoon I’ll try to start catching up on some of the tech news I’ve neglected this week. Frankly it seems fairly insignificant contrasted with the disaster along the Gulf Coast. There have been some news items though. I don’t know at this point how I’ll deal with catching up, I may summarize and lump a few things into the same posting.
Author: Avery
-
News on New Orleans
Really, the news over the last few days has been overwhelming. We’ve had some effects here in North Carolina with stations running out of gas rumours of all the stations closing at 6PM and prices climbing by the hour. (Mostly yesterday, but there are still lines at some gas stations.) We will likely return to normal within a matter of days or a week, those that were directly affected will not see normal lives for months, perhaps years. There are a number of ways to help. Hearts With Hands is a Western North Carolina organization that does very good work. They accept donations of money (which most organizations are preferring here) as well as physical needs (blankets, baby wipes, non-perishable food, etc.) Of course, there is also the Red Cross.
-
New Orleans Datacenter STILL up and running
Of course the thoughts and prayers of the nation and indeed the world are with those in the Gulf Coast area of the U.S. and particularly the situation in New Orleans. I ran across an amazing story of a webhost that is based in New Orleans and their datacenter is still running. They are keeping a blog of the goings on there.
-
Lots of news…
It looks as though there are quite a few things that I have skimmed over the last two days and haven’t posted on. I’ve been preoccupied with a couple of projects and frankly following news regarding the hurricane along the Gulf Coast. I thought I’d pass along two links that I’ve been following today specifically with regards to the situation in New Orleans. This is as much for my reference as anyone elses, but… The Times-Picayune’s Breaking News page, some detailed reports from a paper in the New Orleans area, they had to evacuate earlier today due to rising flood waters and are now keeping things updated from a temporary office. Also, WWltv.com has a blog page up with brief updates as they get them. These two sites have been sources that seem to lead the networks in updates. (The news networks seem to get bogged down recycling earlier stories.)
-
A virus writer talks….
Along the lines of “Wishlist of Spyware Slime” that I referred to last week, it appears there’s a chat transcript out from before the arrest of the suspected writer of the mytob and zotob worms. The security fix has the details.
-
OpenSuse 10 beta 3 review and screenshots
Yesterday (or day before) Mandriva had a beta 3 come out, today I see OpenSuse has released the third beta in the release cycle for version 10. It sounds like most of the changes have not been user-visible, but more “under the hood”. There is a bit of a review at tuxmachines.org with some nice screenshots.
-
Serious PHP flaw
PHP which is a widely used scripting language for webpages has been found to have a serious vulnerability. The Inquirer is reporting on the announcement at hardened-php.net that the vulnerabilities are in the XML-RPC for PHP and PEAR XML-RPC libraries. This is apparently an eval() vulnerability similar to one earlier in the year.
-
Update on Long registry entries bug
Incidents.org has an update on yesterdays story of very long registry entries not being visible in most registry tools (regedit among others.) They have an updated list of what does and does not read these long keys. They’ve alluded to nasties in the wild that are already taking advantage of this and have confirmed that the length is greater than 254 characters. On handler has written a program to scan the registry for these stealth entries
-
The end of antivirus definition updates?
Well, frankly, there has been talk of the end of definition based antivirus scanning for years. You see the achilles heel of any AV scanner is that it has to have signatures of what known viruses look like, so there will always be a reflex window, where there’s a new unknown virus that people are getting infected with before there’s a reaction from the antivirus vendors. The supposed cure for this dillema was hueristic scanning which was supposed to detect things that “looked” like they might be viruses. A noble goal, but along the path it’s proven innefective mostly, either too aggressive and tagging EVERYTHING as potentially viral, or really unnoticable.