Trivial Remote Exploit on Sun Solaris 10
Submitted
by
Jeremy Kister
Jeremy Kister writes "Errata Security reports about a bug found in the telnet daemon of Solaris 10. From the article:
"Basically if you pass a "-fusername" as an argument to the -l option you get full access to the OS as the user specified. In my example I do it as bin but it worked for regular users, just not for root. This combined with a reliable local privilege escalation exploit would be devastating. Expect mass scanning and possibly the widespread exploitation of this vulnerability.
Four new risk genes for type 2 diabetes found
Submitted
by
Johan Rung
Johan Rung writes "A new genome-wide association study led by scientists from Montreal, with collaborators in England and France, has found four new genetic loci linked to increased risk for type 2 diabetes. The results are being published in Nature (subscription required for full-text articles), and also confirm a previously known risk gene. Of the four new genes, two are involved in the development or function of insulin secreting cells and one plays a role in the transport of zinc, an important mineral required for the production of insulin. Type 2 diabetes is the most common form of diabetes in adults and is becoming increasingly common in children. It has been known for some time that type 2 diabetes is caused by a combination of genetic and lifestyle factors, and the group's new findings help identify the population at the highest risk of developing this disease. The study, the first whole-genome scan for a complex disease, is a major breakthrough and provide new insights in the mechanisms behind the disease, and may eventually lead to new treatments and diagnostic methods."
"Hacking" a Fake Snow Day
Submitted
by
Class Act Dynamo
Class Act Dynamo writes "Two students in Trenton, Ohio face expulsion from their school and possibly some time in juvie for posting a fake snow-related announcement on the school district website. According to the article, there was no hacking involved. The girls somehow must have gotten the password. It will be interesting to find out how that happened. We'll probably find out next week that it was on a post-it note on the principle's desk."
Spotlight Improvements In Leopard 356
Posted
by
kdawson
from the following-spot dept.
from the following-spot dept.
Mac OS X 10.5 Leopard is set to feature several new enhancements to Spotlight, Apple's desktop search, and ComputerWorld outlines them. The improvements include searching across multiple networked Macs, parental search snooping, server Spotlight indexing, boolean search, better application launching (sorely needed), and quick-look previews.