The sans institute (incidents.org) is warning of a Mambo exploit making the rounds. Full disclosure and security focus have more details. No word on this point of workarounds… Mambo, of course, is an open-source CMS (content management system.)
Category: Computers
-
Some links to purchase linux boxed set installs
OK, truth be told linux is usually thought of as a download for free and install operating system and there are LOT’s of ways to do that. But it is also available for purchase at various places, from the different distributions web sites.
Also, these are links to the product pages at Amazon. They have a new link style that I was curious to test out and see what it looked like.
-
Sony’s OTHER DRM software uninstaller will be pulled
According to zdnet.com, Sony and SunnComm are pulling the OTHER DRM uninstaller from the web and it will be replaced with a safer version of the uninstaller. Researchers blogging at freedom-to-tinker.com had detailed serious vulnerabilities in the uninstaller for the DRM software made by SunnComm (called MediaMax). The companies say an effort will be made to contact the 223 users who had downloaded the uninstaller for the MediaMax software.
-
Apache2 ( apache webserver ) not restarting
This is an error I’ve run into a few times. It’s rare enough that the second time I saw it, I had a vague memory that it had happened before. The third time though (was within the last week) I remembered and even remembered where the file was located to solve it. Here’s the problem….
As far as I know this is an apache2 problem, not prior.
Apache is not running. You try to start apache and receive the message…Cannot allocate shared memory: (17)File exists apache
-
Running Windows Applications in Linux another look at Wine
Recently I did a post on the release of version 5 of Crossover Office which is a commercially supported variation of the wine project. In fact, it’s very similar, the only exceptions I know of are the neater installer for software and paid support. Anyway, I’ve got a project I’ve been working on that I’ve used cxoffice quite a bit in to run a particular application that isn’t directly available on linux (there are alternatives but none that work exactly the same way… more on that in a future post…) Anyway, it got me thinking and I visited the wine site and found that 0.9.1 has now been released. I checked the wine version on my desktop and decided to upgrade to the newest plain vanilla wine release and see how well it does….
-
BIOS Beep Codes
One of the nice things about working on computers is that when it comes to the raw hardware of a system, the engineers have designed a way to communicate what’s wrong (even if it’s just a general idea) even when the hardware has a pretty serious problem. When a computer boots it goes through a POST *(Power On Self Test). This POST process basically is the BIOS (Software embedded in the hardware of the system that exists whether or not an Operating System like Windows is installed) “waking up and testing the hardware.”
-
Apple iTunes vulnerability on Windows
eEye has discovered a remotely expoitable security vulnerability in Apple’s iTunes software. It affects iTunes 6 and prior and the current security updates (released yesterday) do not address the issue. News.com has coverage as well. Earlier they reported that it affected “all operating systems”, however now they are saying that it’s only been found on Windows systems using iTunes.
-
GMail security problem fixed
Google’s not had a great week it would appear (Sony’s had worse… but that’s another story). The Analytics launch was somewhat rocky from most accounts and there is a GMail security bug that’s been announced and fixed. Details on the bug are here, and a writeup is also here.
Apparently a flaw in the authentication method that Google used could allow a user to log in under another account and read messages as well as pose as a legit user.
-
Keyloggers a growing problem
It’s interesting some years ago when viruses on Windows machines were SOOOO plentiful it seemed like that’s all I spent my time cleaning up, I thought… “you know, most viruses are prankster-ish programs. They rearrange icons, maybe cause Windows to crash, or send random files out to others, but they could be MUCH worse.” Since then, we’ve seen viruses used as delivery tools for mail relays (so that spammers can have more “safe havens”, we’ve seen viruses bring in spyware, both of the last two for “fun and profit”. I don’t know that we’ve really seen the WORST that a virus could be designed to do. However, I’m afraid we’re getting there.
-
Firefox 1.5 RC3
News is coming out that Mozilla Firefox 1.5 RC3 is now available. There’s coverage at mozillazine.org. From the comments there may be a few bugs to work out still, although I’ve just skimmed. I’m not sure if those comments are from people that have tried RC3, or are asking if a bug has been fixed since RC2.