richi writes "If you use Safari, your browser may be leaking your private information to any website you visit. Jeremiah Grossman, the CTO of WhiteHat Security, has discovered some Very Bad News. I have some analysis and other reactions over at my Computerworld blog. The potential for spam and phishing is huge. A determined attacker might even be able to steal previously-entered customer data." In short, autofill for Web forms is enabled by default in Safari 4 / 5 (and remotely exploitable), and the data that this feature has access to includes the user's local address book — even if the information has never been entered into a Web form.

An anonymous reader writes "Since Wired's Jeff Howe coined the term in 2006, 'crowdsourcing' has been a buzzword in the tech industry, and a business model on the rise. 99designs.com is a site that hosts design contests for small businesses requiring relatively smaller design projects. Anyone can submit their near finished pieces of work to the contests, but only one winner gets paid. Forbes covers just why established graphic designers are so angry at this business model's catching on."

An anonymous reader writes "Matt Mullenweg (the creator of open source blog software WordPress), after review by various legal experts, is sticking to his guns that themes and plugins that 'extend' WordPress violate the GPL if they are not themselves distributed under the GPL. Matt has gone so far as to post this on Twitter. According to Matt, the premium template called Thesis should be under the GPL and the owner is not happy about it. WordPress is willing to sue the maker of Thesis theme for not following GPL licensing. The webmasters and Thesis owners are also confused with new development. Mark Jaquith wrote an excellent technical analysis of why WordPress themes inherit the GPL. This is why even if Thesis hadn't copy-and-pasted large swathes of code from WordPress (and GPL plugins) its PHP would still need to be under the GPL."

Trailrunner7 writes "Microsoft is changing the way in which it handles vulnerability disclosures, now moving to a model it calls coordinated vulnerability disclosure, in which the researcher and the vendor work together to verify a vulnerability and allow ample time for a patch. However, the new philosophy also recognizes that if there are attacks already happening, it may be necessary to release details of the flaw even before a patch is ready. The new CVD strategy relies on researchers to report vulnerabilities either directly to a vendor or to a trusted third party, such as a CERT-CC, who will then report it to the vendor. The finder and the vendor would then try to agree on a disclosure timeline and work from there." Here's Microsoft's announcement of the new strategy.

GisG writes "General aptitude tests and specific mental ability tests are important tools for vocational guidance. Researchers are now asking whether performance on such tests is based on differences in brain structure, and if so, can brain scans be helpful in choosing a career? In a first step, researchers writing in the open access journal BMC Research Notes have investigated how well eight tests used in vocational guidance correlate to gray matter in areas throughout the brain." The researcher's (provisional) paper is available as a PDF.

elrous0 writes "According to a recent article in Wired, consumers of many new Android devices (including Samsung's Vibrant and HTC's EVO) are complaining about the increasing presence of something that has plagued consumer PC's for years: Bloatware (or, to use the more kind euphemism, 'Pre-installed software' that the computer manufacturer gets paid to include on a new PC). Unfortunately the bloatware (aka 'crapware') that comes with these phones has a nasty quality not found on even the most bloated PC: it can't be removed. Many angry consumers have begun to complain openly about this disturbing trend."

angry tapir writes "The GSM technology used by the majority of the world's mobile phones will get some scrutiny at next week's Black Hat security conference. An open source effort to develop GSM-cracking software has released software that cracks the A5/1 encryption algorithm used by some GSM networks. Called Kraken, this software uses new, very efficient, encryption cracking tables that allow it to break A5/1 encryption much faster than before."

suraj.sun writes "Seven Republican senators have announced a plan to curb the Obama administration's push to impose controversial Net neutrality regulations on the Internet." "The FCC's rush to take over the Internet is just the latest example of the need for fundamental reform to protect consumers," says Sen. Jim DeMint, who I'm sure truly only has the consumer's needs at heart — since his campaign contributions list AT&T in his top five donating organizations.

An anonymous reader wrote in to tell us about a microplane that perches on power lines to recharge its batteries being developed as a surveillance device at MIT. As you can imagine, landing on a power line is hard to do ... and charging off transmission lines has its own problems.

mario_grgic writes "Apple insider brings a story about expansion and renewal of a current 'Advertisement in Operating System' patent that Apple's Steve Jobs and other contributors have. The patent describes in detail (with OS X screen shots) how the forced ads would work (they would disable some OS functionality until the ad is viewed), but apparently it also applies to any device with a UI, including phones, TVs, set top boxes, etc. With Apple's recent entry into the mobile ad business, and its ambition to own half of all the mobile ads served during the second half of this year, it certainly makes one wonder if Apple would dare and put something like this in its desktop OS. I wonder if this would push more people to open source alternatives?"

Barence writes "A real-world road test of several different satnav systems has found that the free Google Maps Navigation outperformed TomTom's premium GPS unit. PC Pro put the satnavs through four different real-world tests, covering country roads, inner-city traffic and motorway driving. The Google satnav finished the four tests more than half an hour ahead of the top of the range TomTom Go 950 Live. 'For those in rural areas or people who spend hours in their car every day, we believe the investment in a dedicated satnav device or software will still pay off,' PC Pro concludes. 'But for the recreational user, it's amazing what you can get for free.'"

theodp writes "So, how can Microsoft guarantee its Windows Phone 7 devices will enjoy broader adoption than the ill-fated Kin? By giving every Microsoft employee a free one, that's how. A Microsoft spokesman confirmed the move, explaining that the idea is to thank employees for all their work, and make sure that they have experience with Windows Phone 7 devices. Microsoft has nearly 90,000 employees worldwide."