Yahoo fixes! bug! that! gave! free! reign! to! user! accounts!
17504
All hail the power of the XSS error! Yahoo! appears to have plugged a site-wide coding error that made it possible for miscreants to gain complete access to a user's account simply by clicking on a booby-trapped link.â¦
300862
Reposted in the queue as it's impossible or at least very complicated to move it as I asked (although the post where aphrael said such thing disappeared so perhaps this is not the case after all - another minor K5 mystery).  The original discussion can be found here (read it as there are some clarifications by rusty). All right, here is the (adapted) diary. Rusty posted a comment in the diary entitled "Would you pay 10USD for K5 Life Membership?" saying that K5 will become a pay site once new user registrations will be reactivated: "I was thinking $5.00 (none / 0) (#18) by rusty on Thu Sep 06, 2007 at 04:42:15 PM CET But it would actually be charged. That plus a hash of the identifying CC info so you only get one account ever, and I think we'd either shrivel up to nothing and die, or solve the spamming and crapflooding issues. Funny that someone else is thinking about this right now. It'll probably happen before I turn new signups back on." This of course begs the question: HIBT? If so I'll bite (see some considerations under the fold).
344614
Amero's defense requests judge throw out verdict &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
414264
YPOPs! is an application which emulates a POP3/SMTP mail server and provides free POP3 and SMTP access to Yahoo! Mail. It does not depend on Yahoo's POP3/SMTP mail server. You can use a mail client of your choice!   YPOPs!/Windows 0.9.4 has been released.  This fixes a series of issues that we faced recently with upgrades done by Yahoo! Mail.  Downloading emails should be working just fine now. We have also made some changes to the SMTP code which should enable you to send emails as well (but we need feedback on the SMTP feature to ensure that it works fine for all our users).  Download it from the usual location:  http://dl.sourceforge.net/sourceforge/yahoopops/ypops-win-0.9.4.exe
83975
Three different ActiveX vulnerabilities affect Yahoo Instant Messenger version 3.5,  and Yahoo Messenger versions 4.0, 5.0, and 5.5
664003
Please quote me on this Stob There's another of those lists of supposedly amusing/sage/cute adagesÂ going around, bouncing from blog to email, accumulating fresh contributions and occasional edits and doing all the meme-ish things that memes do. This one differs from all the others that you have deleted irritably from your email inbox in that it includes a contribution taken from this very column.â¦
714863
What do you think of the new design?  For those of you reading via RSS just click on the permalink.   Fixed layout.  Blue background.  Nice clean sidebar.  No more obsolete links. Updated content.  All to give the appearance that I'm a professional!  This is part of my new effort to blog more now that I have Rojo  launched.  Anyway.  If anything looks strange please let me know!  I'll also be making some additional layout tweaks in the next couple of days.  In the meantime this will do...
733305
Bug brokers offering higher bounties &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
118388
Microsoft offers Apple security advice &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
764594
RedState is apparently failing because all Scoop developers are liberals so they couldn't get any support for Scoop which crashes all the time so they abandoned Scoop and their website sucks and I think that's funny and rusty should maybe consider fixing Scoop but it's not really his problem because Bush is the devil and we know how saintly rusty is and he wouldn't work for the devil.
341717
Upgrade averts code catastrophe Yahoo! users are urged to upgrade their instant messaging software following the discovery of a brace of security vulnerabilities - the second set of serious security flaws involving Yahoo! Messenger in as many weeks.â¦
530900
YPOPs! is an application which emulates a POP3/SMTP mail server and provides free POP3 and SMTP access to Yahoo! Mail. It does not depend on Yahoo's POP3/SMTP mail server. You can use a mail client of your choice!   Version 0.9.5.1 (4 September 2007) - Fixed messages not being marked read. - Fixed binary content (like subject in multi-byte language) with new (previously known as beta) yahoo mail. - Remove cookies & cookie file just before Yahoo logon. - Fixed BT Yahoo accounts.  Download it from:  http://dl.sourceforge.net/sourceforge/yahoopops/ypops-win-0.9.5.1.exe
247413
OS security fix is being rolled out to users who have enabled Automatic Updates.
664765
Yahoo! has more questions than exclamation marks.
241440
Blog: Patches include the Firefox portion of the IE-Firefox flaw identified last week.
590278
Here's the new Reddit for Scripting News... http://reddit.com/r/scripting/  Please, if you're a regular reader of this site, bookmark it, and when you want to contribute a link to the community, add it there. Do the normal thing you do with Reddit or Digg, move articles up or down, according to your opinion of how relevant they are to the community defined by this weblog.  Warning: I will moderate, heavily if necessary, to keep it from being abusive or overly immature. Sorry for having to post the caveat, but you know how it goes.
708009
Stefan Esser has officially kicked off his "Month of PHP Bugs" for the month of March (get more details here).   You might have realised it already. March 2007 has begun and so has the long awaited Month of PHP Bugs. The initiative is hosted on dedicated servers, because serendipity cannot handle the traffic. You can reach it at http://www.php-security.org.   As of the time of this post, there are currently three bugs posted - two dealing with stack overflows (one in the variable destructor and one in the executor) and a overflow issue in the ZVAL reference counter. Detailed descriptions of the issues are just a click away and, where is it needed, an explain example is provided.