Alexander Burke writes "Apple has just released Security Update 2008-005, which patches BIND against the Kaminsky DNS poisoning issue. 'This update addresses the issue by implementing source port randomization to improve resilience against cache poisoning attacks. For Mac OS X v10.4.11 systems, BIND is updated to version 9.3.5-P1. For Mac OS X v10.5.4 systems, BIND is updated to version 9.4.2-P1.' It also closes the script-based local privilege escalation vulnerabilities, the most common examples of which were ARDAgent and SecurityAgent, and addresses other less-publicized security issues as well." A few days back we noted Apple's tardiness in fixing their corner of this Net-wide issue.

andy1307 writes with a Washington Post story giving details of Department of Homeland Security policies for border searches of laptops and other electronic devices (as well as papers). (We have been discussing border searches for a while now.) DHS says such procedures have long been in place but were "disclosed last month because of public interest in the matter," according to the article. Here is a link to the policy (PDF, 5 pages). "Federal agents may take a traveler's laptop or other electronic device to an off-site location for an unspecified period of time without any suspicion of wrongdoing, as part of border search policies the Department of Homeland Security recently disclosed. Also, officials may share copies of the laptop's contents with other agencies and private entities for language translation, data decryption, or other reasons, according to the policies, dated July 16 and issued by two DHS agencies, US Customs and Border Protection and US Immigration and Customs Enforcement... DHS officials said that the newly disclosed policies — which apply to anyone entering the country, including US citizens — are reasonable and necessary to prevent terrorism... The policies cover 'any device capable of storing information in digital or analog form,' including hard drives, flash drives, cell phones, iPods, pagers, beepers, and video and audio tapes. They also cover 'all papers and other written documentation,' including books, pamphlets and 'written materials commonly referred to as "pocket trash..."'"

TechDirt has an insightful article on the recent push for ISPs to turn off Usenet access under the guise of fighting child pornography. Unfortunately, the "stand against child porn" isn't actually a stand at all, it seems — more like ignoring the issue while trying to snag some headlines and good will. "Taking a stand against child porn wouldn't be overly aggressively blocking access to internet destinations that may or may not have porn (and there's no review over the list to make sure that they're actually objectionable). Taking a stand against child porn would be hunting down those responsible for the child porn and making sure that they're dealt with appropriately... Also, this sets an awful precedent in that the ISPs can point out that it's ok for them to block "objectionable" content where they get to define what's objectionable without any review."