Al writes "Two researchers have found a way to run unauthorized code on an iPhone remotely. This is different than 'jailbreaking,' which requires physical access to the device. Normally applications have to be signed cryptographically by Apple in order to run. But Charles Miller of Independent Security Evaluators and Vincenzo Iozzo from the University of Milan found more than one instance in which Apple failed to prevent unauthorized data from executing. This means that a program can be loaded into memory as a non-executable block of data, after which the attacker can essentially flip a programmatic switch and make the data executable. The trick is significant, say Miller and Iozzo, because it provides a way to do something on a device after making use of a remote exploit. Details will be presented next month at the Black Hat Conference in Las Vegas." The attack was developed on version 2.0 of the iPhone software, and the researchers don't know if it will work when 3.0 is released.

sopssa writes "Bing has set up a separate domain just for porn images and videos. '[The] general manager of Microsoft Bing said in a blog post that potentially explicit images and video content now will be coming from one separate domain — explicit.bing.net. 'This is invisible to the end customer, but allows for filtering of that content by domain which makes it much easier for customers at all levels to block this content regardless of what the SafeSearch settings might be.' When Bing was first launched, there was some online chatter about explicit images popping up when videos were 'previewed' in the search results. This means the thumbnails and videos are served from that domain, allowing easy filter of them in corporate and school networks. Users still normally use www.bing.com. Instead of heavily filtering the results, this is quite a good move."

Verizon announced today that they are working on a service to deliver games through their broadband service for a monthly fee. The service will begin this summer in New York, Massachusetts, and Rhode Island. Along similar lines, IndustryGamers reports that AT&T is "investing millions in gaming." In addition to revamping the games section of their website, they are also working on an IPTV service and trying to find a way to unify the gaming experience across mobile platforms, computers, and consoles. "[AT&T's Executive Director of Gaming, Glenn Broderick, said,] 'What we're doing is trying to incentivize [gaming companies] to take some risks by tethering mobile games to console or PC experiences.' ... He continued, 'We're putting a ton of money into back-end systems for both mobile and the broadband site... We're making serious investments in the games space because it's now seen as a huge strategic initiative for AT&T. And before it just wasn't; it wasn't on the executive agenda.' Broderick also is optimistic that cloud-based gaming services like OnLive that provide games on demand will take off in the next 5-10 years, and he sees AT&T and its network as a big player in that."

already-living-in-a-virtual-world writes "On his blog, mispeled writes about a new type of game he'd like to see for the iPhone. It's interesting stuff: '... the integration of a true gaming platform with the capabilities of a phone is unique, at least for the quality of the gaming experience offered. For all intents and purposes, the iPhone is a new system. And new systems demand that new gameplay mechanics be explored. For a long time I've been a fan of the MMORPG genre, and the iPhone offers several MMO-type games, especially those in the facebook, social-networking style. However, what I've yet to see is a game that takes advantage of the iPhone's location services, the GPS-like capability of the phone. Tons of applications use it, but no games, as far as I've seen. Why not? Motion sensing is all the rage on the consoles — the Wii popularized it, but now Microsoft and Sony are jumping on the bandwagon. But the iPhone, because it's portable, offers something more. And I want those offerings taken advantage of. I want to play an MMO that knows where I am and links my physical location to a virtual location. I want to create a game that gives the planet Earth a virtual overlay, interactable via a mobile (read: the iPhone) interface.'"

ectotherm writes "The nice people behind the recorded phone messages stating 'By now you should have received your written note regarding your vehicle warranty expiring...' — the ones who instantly hang up when you ask for the name of the company — have been busted. Fox News did a little background digging on the four people charged." Don't know about you, but I received three or four postcards in the mail from these scammers, as well as uncountable robocalls. The FTC says they cleared $10M since 2007.

An anonymous reader sends along a Cosmos Magazine piece on the discovery by NASA's Cassini probe of vertical structures in Saturn's rings, 150 times as high as the rings are thick. The structures were seen because a once-every-15-years orientation of the rings caused vertical features to cast visible shadows. "NASA's Cassini probe has uncovered for the first time towering vertical structures in Saturn's otherwise flat rings that are attributable to the gravitational effects of a small moon. 'We thought that this vertical structure was pretty neat when we first saw it in our simulations,' said John Weiss, the paper's lead author at the Cassini Imaging Central Laboratory for Operations in the US city of Boulder, Colorado. 'But it's a million times cooler to have your theory supported by such gorgeous images. It makes you suspect you might be doing something right,' he added." Update: 06/17 19:29 GMT by KD : The CICLOPS team sent a note correcting the attribution of the quote; the linked article also had it wrong, and has since been corrected.

macs4all writes "Apple has finally addressed the Java vulnerability that nearly everyone else patched months ago. Available now for OS X 10.4 and 10.5, and through Apple's Software Update service, this update patches a flaw in the Java Virtual Machine that could potentially allow a malicious Java applet to execute arbitrary code on the machine. Apple had previously advised users to turn off Java temporarily in their Web browsers."

Jay notes a Wall Street Journal report about ad networks unintentionally selling empty space to malware loaders (the link is to a syndicating site that doesn't require a subscription to view). The submitter comments: "The labeling of the fake ad sellers as hackers is pretty bogus; there's no hacking involved. Simply sign up for one of these networks, create your fake site, put up another company's creative, and you're good to go." The incidents being reported go back a few months, but the pattern of this criminal activity seems to be coming clear only recently."EWeek.com, a technology news site owned by Ziff Davis Enterprise, in February displayed an ad on its homepage masquerading as a promotion for LaCoste, the shirt maker. The retailer hadn't placed the ad — a hacker had, to direct users to a Web site where harmful programs would be downloaded to their computers, says Stephen Wellman, director of community and content for Ziff Davis."

hemantm writes "A routine security update for a Microsoft Windows component installed on tens of millions of computers has quietly installed an extra add-on for an untold number of users surfing the Web with Mozilla's Firefox Web browser."

FredMastro writes "Craigslist has now stepped past just asking for an apology. The Wall Street Journal and CNet report that Craigslist is fighting back. 'Craigslist said it has sued South Carolina Attorney General Henry McMaster, in the latest escalation of a battle over adult-oriented ads on the company's site. Jim Buckmaster, Craigslist's chief executive, said in a blog post that the company filed its suit in federal court in South Carolina. ...'" Unfortunately, the WSJ's piece requires a subscription, but reader Locke2005 adds a link to coverage in the San Jose Business Journal.