An anonymous reader notes that this weekend, ReadWriteWeb discovered a security hole on several McAfee sites, which lets any attacker piggyback on the company's reputation and brand in order to distribute malware, Trojans, or anything else. The submitter adds an ironic coda to McAfee's epic fail: "In the 'how to HTML Injection' section, the author provided the four steps needed to execute a simple, no-brainer injection, but unfortunately, exposed a hole in NY Times website when they republished the article. While the author changed the offending text to an image, the Times is still using the original story which redirects directly to ReadWriteWeb [via XSS]." From the RWW post: "During tests this weekend, we discovered the company who claims to 'keep you safe from identity theft, credit card fraud...' has several cross-site scripting vulnerabilities and provides the bad guys with a brilliant — albeit ironic — launching pad from which to unleash their attacks."

Jon.Laslow writes "I'm getting a lot of pressure from managers to switch to soy-based toner cartridges for our laser printers because they are 'greener.' The problem is, the only information I can find on them is from sales pitches; and the reviews all seem to be user testimonials. Do you have any experience soy-based printing products? Did you have any issues with them, and how was the print quality?"

theodp writes "Barack Obama has squared up for a major battle with big business, announcing a crackdown on offshore tax avoidance and evasion by US multinationals that's designed to raise $210B and make it easier for companies to create 'good jobs here at home'. Obama cited a building in the Cayman Islands where more than 18,000 US companies are housed: 'Either this is the biggest building in the world or it is the biggest tax scam in the world,' he said. 'I think the American people know which it is.' The administration says that more than a third of US foreign profits in 2003 came from Bermuda, the Netherlands and Ireland, and noted US companies paid an effective tax rate of just 2.3% on the $700bn they earned in foreign profits in 2004. Among tech companies affected by the crackdown, Microsoft joined 200 companies who signed a letter complaining that the proposed tax changes would put them at a disadvantage with their rivals, Cisco moaned that the measures 'would adversely impact our ability to invest and grow our business in the US,' and Google declined to comment for the time being."

Hugh Pickens writes "Industry experts claim the market for vintage whiskey has been flooded with fakes that purport to be several hundred years old but instead contain worthless spirit made just a few years ago. Now researchers at the Oxford Radiocarbon Accelerator Unit have developed a method that can pinpoint the date a whiskey was made by detecting traces of radioactive particles created by nuclear bomb tests in the 1950s. '"It is easy to tell if whiskey is fake as if it has been produced since the middle of the twentieth century, it has a very distinctive signature," says Dr. Tom Higham, deputy director of the facility. Nuclear bomb testing in the 1950s saw levels of carbon-14 in the atmosphere rise around the world so the amount of isotope absorbed by living organisms since this time has been artificially elevated. Whiskey extracted from antique bottles is sent to the laboratory where scientists burn the liquid and bombard the resulting gas with electrically charged particles so they can measure the carbon-14 in the sample. In one recent case, a bottle of 1856 Macallan Rare Reserve was withdrawn from auction at Christies, where it was expected to sell for up to £20,000, after the scientists found it had actually been produced in 1950. "So far there have probably been more fakes among the samples we've tested than real examples of old whiskey," says Higham.'"

Kelson writes "Google's Mountain View headquarters has fields that need to be kept clear of fire hazards. This year instead of mowing them, they took a low-carbon approach: they hired a herd of goats to eat the grass for a week. 'It costs us about the same as mowing, and goats are a lot cuter to watch than lawn mowers,' wrote Dan Hoffman."

Hugh Pickens writes "MSNBC reports that in 1969, Walter T. Davey, an aeronautical engineer at North American Rockwell, discovered he was being overpaid by roughly 2 cents an hour, or one-third of 1 percent of his pay. Davey submitted the discovery to his superiors and suggested a simple fix. 'It was so simple to correct,' said Davey, a 79-year-old retired Air Force colonel, 'just change a few digits in the coding software.' The Project on Government Oversight, which reviewed Davey's findings last year, estimated the change could save taxpayers $270 million a year. Multiply by 40 years — the length of time since Davey made his discovery — and the figure grows to an astounding $10.8 billion. Legislators ignored Davey's letters, federal auditors deferred to Congress, and lobbyists 'descended on it and tore it into a piece of Swiss cheese' but legislators aren't eager to challenge the powerful defense lobby about a figure that's a relative pittance in the overall defense budget — even if it exceeds $100 million annually. 'A lot of people have taken advantage of the system to reap as much in taxpayer dollars as possible,' says Scott Amey, general counsel for the Project on Government Oversight. 'But when you're going up against the contractor lobby — whether you're an individual across the country or a public interest group or a government employee — it's a tough road.'"