resist. unlearn. defy.
There’s a not-so-old saying that a person’s true nature can be told by how well they photograph. And when it comes to Condoleezza Rice, I have yet to find a single photo in which it doesn’t look like she’s about to snap the neck of whatever dignitary she is appearing with.
Even in photos where she has made an attempt to smile, it appears as though she is in great pain trying to get those creaky old smiling muscles to work. Can someone truly be this evil?
If you have a recent Pentium 4 or Xeon-based server running in a multi-user environment, watch out: there is current talk that Hyper-Threading, a technology inherent in Intel Pentium 4 systems that allows multiple parallel threads to execute on a processor to speed up operations, suffers from a serious security flaw:
Hyper-Threading, as currently implemented on Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processors, suffers from a serious security flaw. This flaw permits local information disclosure, including allowing an unprivileged user to steal an RSA private key being used on the same machine. Administrators of multi-user systems are strongly advised to take action to disable Hyper-Threading immediately; single-user systems (i.e., desktop computers) are not affected.
Generally, the average user with a single desktop at home won’t have much to worry about, but workplaces with multi-user environments will want to take heed.
More information on the announcement from FreeBSD guru Colin Percival can be found here.
Apple users: before you snicker about the Intel Hyper-Threading vulnerability, take note: the Dashboard in Tiger apparently has its own glaring security hole.
A growing number of Mac experts are sounding the alarm over the dangers of widgets — which can carry Unix commands that could be run invisibly from within a widget.
“It’s really just wrong and stupid of (Apple) to not give a regular user a way to take widgets out of Dashboard,” said Stephan Meyers, an unemployed artist and developer who was one of the first to publicize the hole. “It just flat-out says you cannot remove a widget from Dashboard. That’s just dumb.”
So today, on Friday the 13th no less, we all have issues to worry about, regardless of operating system we use. Joy.
So, earlier there was an annoucnement that Comedy Central was halting production of the third season of Chappelle’s Show, and no reason was given.
Now, rumours are circulating like wildfire that Chappelle may have gone nuts?
Comedy Central star Dave Chappelle has checked himself into a mental health facility in South Africa, the magazine Entertainment Weekly reported on Wednesday.Comedy Central star Dave Chappelle has checked himself into a mental health facility in South Africa, the magazine Entertainment Weekly reported on Wednesday.
The comedian’s whereabouts and condition have been unknown since Comedy Central abruptly announced last week that the planned May 31 launch of the third season of “Chappelle’s Show” had been postponed and production halted.
Chappelle flew from Newark, N.J., to South Africa on April 28 for treatment, said the magazine, quoting a source close to the show it would not identify. Entertainment Weekly said it had corroborating sources for its story.
UPDATE: These vulerabilities have been fixed with version 1.0.4.
Now that Firefox is gaining in popularity, it is becoming the target of hackers interested in finding and exploiting flaws in its security.
The Mozilla foundation, developers of web browser Firefox and e-mail client Thunderbird, has recently announced some newly discovered vulnerabilities in Firefox that could affect the safety of personal data:
The exploitation of two separate flaws in Firefox means that outside hackers can return to surfers’ previously visited pages. These could contain credit card details or other personal information.
The rush to patch the problems, which also affect Mozilla Suite, the all-in-one internet application, marked the fourth major security scare at Mozilla in three months.
Firefox users have been urged to disable the browser’s javascript option to provide a temporary fix to the problem.
A full writeup from the Mozilla foundation on the bug can be found here.
