thisispurefud writes "A flaw has been found in a major Linux Wi-Fi driver that can allow an attacker to run malicious code and take control of a laptop, even when it is not on a Wi-Fi network."

NewYorkCountryLawyer writes "In SONY BMG v. Merchant, in California, the defendant's lawyer wrote the RIAA a rather stern letter recounting how weak the RIAA's evidence is, referring to the deposition of the RIAA's expert witness (see Slashdot commentary), and threatening a malicious prosecution lawsuit. The very same day the RIAA put its tail between its legs and dropped the case, filing a Notice of Voluntary Dismissal. About an hour earlier NYCL had termed the letter a 'model letter'; maybe he was right."

An anonymous reader writes to mention that Adobe released the first public version of their new cross-operating system runtime today nicknamed 'Apollo'. "The software relies on HTML, JavaScript, Flash, and Adobe Flex. The alpha version, which presently works on Windows and Macintosh, can be downloaded for free at http://www.adobe.com/go/apollo. Once the Apollo apps are created, users can launch them from their desktops, without using their browser or connecting online. An Apollo application can connect automatically to online data or services when an Internet connection is detected, with new components automatically downloaded and integrated. The user needs the Apollo runtime to run the apps, just as a Flash player is needed to run Flash animations."

Jeremy writes to tell us that using some simple deduction, a security consultant discovered how to clone a passport as it's being mailed to its recipient, without ever opening the package. "But the key in this first generation of biometric passport is relatively easy to identify/crack. It is not random, but consists of passport number, the passport holder's date of birth and the passport expiry date. The Mail found it relatively easy to identify the holder's date of birth, while the expiry date is 10 years from the issue date, which for a newly-delivered passport would clearly fall within a few days. The passport number consists of a number of predictable elements, including an identifier for the issuing office, so effectively a significant part of the key can be reconstructed from the envelope and its address label."

An anonymous reader wonders: "My University has begun a migration of student email services to Windows Live Mail. All students will be forced onto the system by the end of the semester, but it doesn't support POP or IMAP. Because of that limitation, the only freely available mail client it supports is Windows Live Desktop, which is only available on Windows and I'm worried its ads might be vulnerable to malware just like the ones in Live Messenger. I depend on my mail client and I am concerned about this, because we're not allowed to forward our mail but are responsible for information received there from the University and classes, I'm not on a Windows machine, and I don't have the time to regularly check for web-mail, during the day." What are the pros and cons of such a move for a mid-sized or large college? If you were in charge of the communications of a such a university, would you outsource [please note the vendor neutrality, here] your e-mail?

David Shiga writes "If we ever make black holes on Earth, they might be much stranger objects than the star-swallowing monsters known to exist in space. According to a new theory, any black hole that pops out of the Large Hadron Collider under construction in Switzerland might be surrounded by a black ring — forming a microscopic 'black Saturn'. This could happen if extra dimensions exist, as string theory suggests, and if they are large enough." An evocative excerpt from the article: "...there is an outside chance that in a few years in a tunnel near Geneva, physicists will make a black hole far smaller than a proton and circled by a squashed four-dimensional black doughnut."

Cuts and bruises writes "Hacker Joanna Rutkowska has flagged a "very severe hole" in the design of Windows Vista's User Account Controls (UAC) feature. The issue is that Vista automatically assumes that all setup programs (application installers) should be run with administrator privileges — and gives the user no option to let them run without elevated privileges. This means that a freeware Tetris installer would be allowed to load kernel drivers. Microsoft's Mark Russinovich acknowledges the risk factor but says it was a 'design choice' to balance security with ease of use."

munchola writes "MySQL CEO, Marten Mickos, has revealed to CBRonline that Oracle has threatened to provide support for MySQL and is already distributing the open source database. "They have hinted to us that they will," said Mickos, indicating that the database giant is planning to repeat its October 2006 Unbreakable Linux plan, which saw it undercut Red Hat with enterprise Linux support. Despite the competitive threat, Mickos is unmoved. "I hope they do that," he said, noting that it would be seen as an endorsement of the open source database.""

kasparn writes "The Guardian today has a story about the Danish astrophysicist Rasmus Bjoerk, who recently conducted simulations on how long it will take to colonize the Milky Way. The basic idea is to send out probes in different directions (including various heights above the galactic plane). He estimates that it will take some 10 billion years to explore 4 % of the Milky Way. Since the age of the Universe is of the same order, his conclusion is that aliens can't have had time required to find us yet."

BarneyRabble writes to tell us that a Wisconsin State Trooper is fighting to maintain control of the source code for a program he wrote that helps officers write traffic tickets electronically. Praised by the state just 18 months ago, Trooper David Meredith is now suing the head of patrol claiming that the state is trying to illegally seize the source that he had developed on his own time. From the article: "Meredith, of Oconto Falls, defied an order from his bosses to relinquish the source code - the heart of the program - in October and instead deposited it with Dane County Circuit Judge David T. Flanagan, pending a ruling on who should control it. The case centers on how the software was developed. Department of Transportation attorney Mike Kernats said the State Patrol - a division of DOT - provided Meredith with a computer to write the software and gave him time off patrol duties so he could do the work. But Meredith said in court filings that he spent hundreds of hours off duty working on it, developing it almost entirely on his own time. He noted that he never signed a software licensing agreement."

tundra_man writes "CBC has an article about RFID type devices in Canadian coins found on US Contractors. From the article: 'Canadian coins containing tiny transmitters have mysteriously turned up in the pockets of at least three American contractors who visited Canada, says a branch of the U.S. Department of Defense.' The report did not indicate what kinds of coins were involved."

PhysicsWeb is running an article by one of the researchers who has developed the theory that the universe may be finite, rather small, and soccer-ball shaped. The question is still open; it's one theory that fits cosmic microwave data from the Wilkinson Microwave Anisotropy Probe (WMAP). Apparently testing the theory by looking in the indicated way through the WMAP data would so far be computationally prohibitive. From the article: "The Poincaré dodecahedral space can be described as the interior of a 'sphere' made from 12 slightly curved pentagons. However, there is one big difference between this shape and a football [soccer ball] because when one goes out from a pentagonal face, one immediately comes back inside the ball from the opposite face after a 36 degree rotation. Such a multiply connected space can therefore generate multiple images of the same object, such as a planet or a photon. Other such well-proportioned, spherical spaces that fit the WMAP data are the tetrahedron and the octahedron."

lisah writes, "As part of a series of special reports this week, Linux.com is reviewing several ways to manage your money using Linux apps. First up is a review of GnuCash 2.0, a personal and small business accounting package. Though it has a bit of a learning curve, the reviewer says the application is 'stable and robust' and an upgrade from previous versions is well worth it for the program's new features and improved online banking support." Linux.com and Slashdot are both part of OSTG.

Mindpicnic writes "The recent switch of two lifelong Mac nerds to Ubuntu hasn't escaped Tim O'Reilly's radar. He cites Jason Kottke: 'If I were Apple, I'd be worried about this. Two lifelong Mac fans are switching away from Macs to PCs running Ubuntu Linux: first it was Mark Pilgrim and now Cory Doctorow. Nerds are a small demographic, but they can also be the canary in the coal mine with stuff like this.'"