Once immutable and now vulnerable
129034
Like the cherry blossoms in the spring and loyalty to the Redskins, the power and influence of Fannie Mae are among those aspects of Washington that never seem to change - until now.
93571
A zero-day flaw in Firefox and third-party Windows patches turn up the heat for Net users. Plus: Buyout boom in security.
367071
Restrictive hardware and convoluted rights management crimp consumer choices.
298773
Researcher finds two flaws that under unusual circumstances could let a malicious program read private data or render a phone unusable.
283367
A good architecture should be able to adapt to accommodate evolutionary technological enhancements, but when the fundamental characteristics of a key component change significantly, the system equilibrium can be disrupted and must be re-architected to re-establish balance. But with the ever-growing adoption of server virtualization, the equilibrium between processor and I/O resources is now being disrupted.
357182
In a new post to his blog, Chris Hartjes, spurred on by an article in the latest edition of php|architect magazine (covering protecting your code), has shared a few opinions starting with a certain paragraph near the end.   To start, I will focus on the paragraph above. What I get out of that is that if only your source was closed and hidden from prying eyes, it would not have bugs in it. Which is, of course, total nonsense. Code has bugs because it's open and they feel safer? There are two kinds of bugs: application bugs (which is the code I would write) and system bugs (in this case, bugs that that appear from PHP itself). I'm sorry, but there is nothing I can do if there is a bug in PHP that causes my application to crash except to point this bug out to the people who have the ability to fix it.   He goes on to talk more about how protection like this (the article talks about using the IonCube Encoder) will not stop someone if they're really determine to get at the code underneath the encryption. His only suggestion is to make an application good enough that people wouldn't want to try to steal it as much and would rather pay for their version.   Encode your stuff if you want, but be aware that the minute you choose to do that you are telling your customers "I don't trust you" and I have a hard time understanding a business model that assumes people are going to want to steal the stuff you sell.
327017
Plus: A new vulnerability in Windows XP, and Excel has trouble with math.
763652
A security update will fix a problem that could allow an attacker to overwrite the contents of your computer's memory.
64601
A censored selection will be deigned suitable for consumption
218854
Company first released update last fall, but is issuing it again to stress to users that they could be at risk if they don't follow through.
614738
Matt Wade has posted a quick item to APress' Inside Open Source blog today mentioning an update to an item he'd previously mentioned - issues with the Zend_Cache module.   One of my complaints was the Zend_Cache did not accept lifetimes on a per object basis, but rather the lifetime was at an application level. I just received notice in my inbox that the issue has been fixed! The change is currently in svn, and should be in the 0.80 preview release. Thanks go to Fabien for the fix.   You can download this latest version of the Framework (0.7.0) from the Zend Framework website.
314789
Recent updates to IE contain a serious regression that leaves systems once more vulnerable to a flaw fixed more than two years ago, according to security researchers.
588001
Among the security concerns that have been raised is the possibility of someone being able to cast multiple ballots. Other concerns are about a sudden power outage and whether data would be lost in such a scenario.
447903
This Quicktime buffer overflow vulnerability appears to be different from a similar vulnerability  patched by Apple in December 2007.
708616
Efforts by the hacker community to get to the heart of the iPhone continue. A push last week to modify the gadget's bootloader was stymied by effective use of an RSA private key, and attention has now turned to a promising assembler-utility strategy.
571915
In a quick note from Steven's blog is a pointer to tricky problem with the clone keyword in PHP 5- "There is a nasty change in PHP5: objects are now always passed by reference. Variables hold a handle to the object rather than the object itself. This brings PHP more in line with other OO languages (like Java) and removes some of the ugly from PHP OO code, but it also means that objects are treated differently from all the other types. Old code that depends on having objects copied when not passed by reference will break." For the fix, go here.
448507
An independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect.