Virtual_Raider writes "Wired is running a story about a new twist in the never-ending quest to prove P. T. Barnum's adage. Old: Scammers are creating fake news sites that look almost like the real thing. New: They are advertising on real news sites, making it difficult for unwary readers to catch on they are being duped with fake coverage of get-rich-quick scams. Among those running the scam 'news' ads are the Huffington Post and Salon. From the article: 'The story has art, it has a sidebar, there's weather, supposed reader comments — even ads. Steadman is described as "a mother from San Francisco" — at least, when I read the article. Thanks to cutting-edge reporting techniques perfected by News 5, she will automatically move to the geolocation of your internet IP address when you read it. Look, she lives right in your neighborhood!'" Forbes also wrote about the scam news sites a couple of weeks back.
hcmtnbiker writes with news of a logic flaw shared by IE 7 and Firefox 2.0. IE 5.01, IE 6, and Firefox 126.96.36.199 are also affected. The flaw was discovered by Michal Zalewski, and is easily demonstrated on IE7 and Firefox. The vulnerability is not platform-specific, but these demonstrations are — they work only on Windows systems. (Microsoft says that IE7 on Vista is not vulnerable.) From the vulnerability description: "In all modern browsers, form fields (used to upload user-specified files to a remote server) enjoy some added protection meant to prevent scripts from arbitrarily choosing local files to be sent, and automatically submitting the form without user knowledge. For example, '.value' parameter cannot be set or changed, and any changes to .type reset the contents of the field... [in this attack] the keyboard input in unrelated locations can be selectively geared toward input fields by the attacker."
An anonymous reader writes "Understanding how Apple's FairPlay DRM works helps to answer a lot of questions: why it hasn't been replaced with an open, interoperable DRM that anyone can use, why Apple isn't broadly licensing FairPlay, and why the company hasn't jumped to add DRM-free content from indie artists to iTunes."
cshamis writes "T-Mobile has recently changed their policies and now tell their customers with appropriate data plans and with Java-Micro-App-capable T-Mobile phones: no third-party network applications. You can, of course, still use their incredibly clunky and crippled built-in WAP browsers, but GoogleMaps and OperaMini are left high and dry. Would anyone care to speculate if this move is likely to retain or repel customers?"