Yahoo's Wii Portal Gets Pwned
103301
Leveraging Flickr photos leaves the web giant open to abuse. In Monkey Bites.
179659
From the DevChix website, there's this new post that helps introduce developers (both in PHP and Rails environments) to hos to use the Yahoo! UI connection manager in their applications.   This post is geared towards folks who haven't done the "A" part of "AJAX" before (And I mean the first "A", as in "Asychronous"); are new to Yahoo's implementation of the XMLHttpRequest object (The Yahoo! Connection Manager) and would like added information on how that works; or both.   Sarah starts off slow with an example of making a connection to a backend PHP script as called by a HTML form. The simple example is fleshed out with a database backend (via PEAR::DB) and the Javascript to handle the response and the errors that might arise. Finally, a request can be made and the result eval-ed to give the client a nice, simple Javascript object to work with.
17914
Jeux sans frontier Security researchers have hacked into a Nintendo Wii game console to run their own code in a move that makes it far easier to develop homebrew games for the popular gaming device.â¦
161887
SAN JOSE, Calif.) - Phreaks, spoofers and spammers want to invade your home computer, and the tricks of their trade include airsnarfs, wabbits and fork bombs.
254559
Symantec says a recently identified Adobe Flash vulnerability could affect the Nintendo Wii through the console&#39;s Opera internet browser.
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
22372
Blog: Yahoo IM fixed after temporary problems
265312
Yahoo this week began launching sites under its "Brand Universe" concept, aimed at creating online destinations for fans of specific entertainment properties, the first of which would be the Nintendo Wii console.
476187
Security firm eEye says it has notified Yahoo of multiple security vulnerabilities within its instant messaging application, which could lead to "remote execution of arbitrary code with minimal user interaction." The flaws were given a severity rating of "high."
95492
Did you notice when Slashdot's  search was down for the past few days? (It's back up now.)  Turns out that in a stunning case of irony, it had been hammered into  submission by thousands of people attempting to use it.        However, unlike CmdrTaco's regimented DDoS attacks, this one is carried out  with malicious intent as opposed to mere sociopathic inconsiderateness.  It also highlights a potential threat from one of the biggest weblogging  services out there.
204150
First, Yahoo was notified that its Messenger IM client was vulnerable to attack. Then, a researcher fingered two ActiveX controls as flawed and posted exploit code.
767747
Jikes is a great compiler but they could really benefit from better project management.  This bug  has been open for greater than 3 years now with no resolution.  One of the developers sent me a *private* email (without commenting or closing the bug) this this could be fixed by avoiding the use of symlinks but wasn't sure. Of course this email was sent more than 2 years ago so I have no decent way of finding it.  Adding insult to injury is the fact that IBM won't let me comment on the bug without an account.  The only problem is that my account won't activate.  In a nutshell if you want to use incremental compile with jikes you need to specify relative paths not full paths.  For example if y ...
283346
Luke Welling reminds WordPress users that they need to update their installations to help keep them safe from a recent security issue that has come up.   If you have a WordPress blog it would be worth your time to install this update to 2.3.3, or at least replace xmlrpc.php. This is being actively exploited.   You can find out more about the exploit here on the WordPress website (including another issue with the WP_Forum plugin as well).
61065
ActiveX strikes again Just one day after nasty security flaws were disclosed in Yahoo's Music Jukebox, miscreants have begun to actively exploit them.â¦
63702
TechWeb - Officials think the site's server was hacked sometime between Jan. 26 and Jan. 28.
339707
Site dedicated to Nintendo's new console is reportedly the first in a series of brand-oriented moves for the web giant. In Monkey Bites.
625230
'You will use Baidu' It looks like China is hijacking web traffic from Google, Microsoft, and Yahoo!.â¦