md8mart writes to let us know about the imminent shutdown of the site that distributes Pine patches. From the RSS feed of Patches for Pine we read the following bad news for all Pine users: "The Department of Mathematics of the University of Washington will close the account that hosts my Patches for Pine site. I would like to thank the Department of Mathematics for having hosted this site for so many years. I do not have current plans to move this site, but this site will disappear on December 15, 2006. Thank you to everyone who supported me by positive feedback and encouragement to do this work through the years. I will update this information as it becomes available."

An anonymous reader writes, "Symlinks haven't really been added to Windows Vista. It seems that the calls to the Windows Vista symlink API only occur during the creation of such files or when accessing them from Windows Explorer. What this means is, you can't access symlinks from another OS. To be fair, you probably didn't expect to be able to dual-boot into XP and suddenly have access to the symlinks you created on the Vista partition earlier that day. But then again, you probably expected to be able to access these symlinks through a network share/UNC path or as files on a webserver. But you can't." From the article: "Clearly, Vista's symlink API isn't complete — hopefully this is something that can be patched via a hotfix and that we don't have to wait for Fiji to get something as simple as UNC support built in."

aluminumangel writes, "Taking a page out of a Michael Bay movie, NASA is considering a manned mission to land on an asteroid, 'poke one with a stick,' and see how feasible it would be to deflect it from its course. Obviously, the application would be valuable in a doomsday situation and hopefully could keep us from going wherever the dinosaurs went." The article makes oblique reference to another goal such a mission could serve: giving us something to do in space, something to engage the paying public, between the time we return to the Moon and the time we get to Mars.

eldavojohn writes, "In Holyoke and Northampton, Massachusetts, the police have a new member on the team. It's facial recognition software that will mine the 9.5 million state license images of Massachusetts residents. From the article: 'Police Chief Anthony R. Scott said yesterday he will take advantage of the state's offer to tap into a computer system that can identify suspects through the Registry of Motor Vehicle's Facial Recognition System.' The kicker is that this system been in use since May and has been successful." An article from Iowa a few weeks back mentions that software from the same company (Digimark) is in use to catch potential fraud in applying for driver's licenses in Alabama, Colorado, Kansas, Massachusetts, Oregon, and Texas. But offering the software and photo database as a resource to police departments raises the stakes considerably. I wonder what the false positive rate is.

Lauren Weinstein writes to raise an alarm about a new Google service, Click-to-Call. As he describes it, the service seems ripe for abuse of several kinds. One red flag is that Google falsifies the caller-ID of calls it originates for the service. From the article: "Up to now, the typical available avenue for manipulating caller-ID has been pay services that tended to limit the potential for large-scale abuse since users are charged for access. Google, by providing a free service that will place calls and manipulate caller-ID, vastly increases the scope of the problem. Scale matters."

doc6502 asks: "I work for a global IT consulting company. I have the task of investigating a formal role for using Open Source in our company. We use open source applications and tools internally and at client sites, but the implementations are viewed as one-offs by our local offices. As we are beginning to experience an increasing demand for Open Source solutions, we are looking at trying design Open Source solutions for areas like government, business, and education. What we are looking to do is: formalize and consolidate our global Open Source knowledge to accommodate new and existing client requirements; define a review process that will enable us to quickly review Open Source tools, applications, and so forth; and finally, provide a contribution scheme so we can donate code to the Open Source Community. Has anyone gone through this process? If so, what obstacles did you meet and overcome? What was the review and evaluation process you implemented when reviewing OS tools? Did donating code raise internal legal issues?"

prostoalex writes, "Yahoo!'s Senior VP Brad Garlinghouse sent out a company-wide memo calling for layoffs of 15-20% of Yahoo! staff and reversal of priorities to concentrate on major issues facing the company. (The Wall Street Journal posted a copy of the memo.) MarketWatch quotes Garlinghouse: 'I've heard our strategy described as spreading peanut butter across the myriad opportunities that continue to evolve in the online world. The result: a thin layer of investment spread across everything we do and thus we focus on nothing in particular. I hate peanut butter. We all should.'"

romiz writes, "Branch Prediction Analysis is a recent attack vector against RSA public-key cryptography on personal computers that relies on timing measurements to get information on the bits in the private key. However, the method is not very practical because it requires many attempts to obtain meaningful information, and the current OpenSSL implementation now includes protections against those attacks. However, German cryptographer Jean-Pierre Seifert has announced a new method called Simple Branch Prediction Analysis that is at the same time much more efficient that the previous ones, only needs a single attempt, successfully bypasses the OpenSSL protections, and should prove harder to avoid without a very large execution penalty." From the article: "The successful extraction of almost all secret key bits by our SBPA attack against an openSSL RSA implementation proves that the often recommended blinding or so called randomization techniques to protect RSA against side-channel attacks are, in the context of SBPA attacks, totally useless." Le Monde interviewed Seifert (in French, but Babelfish works well) and claims that the details of the SBPA attack are being withheld; however, a PDF of the paper is linked from the ePrint abstract.

Rick Hamell writes "On October 25th, Blizzard/Vivendi payed a personal visit to Michael Donnelly, creator of WoW Glider and accused him of violating the DMCA. Their demands were unclear, but come in the wake of recent player bannings for using bots in the popular MMORPG. It looks like he's going to fight it, but I think it'll be an interesting case if it ever reaches the courts." From the post: "The visitors from Vivendi / Blizzard made demands of Michael and stated that if the demands were not met that they would file a complaint in court if he did not meet them. I asked Michael what the demands were. He was unable to comment at the time to the exact details. But I do know they handed him a copy to very briefly 'Look at'. He was not given a copy. I think I could make a good guess and say that they asked for Glider to be shut down and if they feel that they have been harmed they may have asked for a financial settlement."

Rockgod writes to point us to an ongoing series of articles, "Leopard vs. Vista," by Daniel Eran. The latest is part 4, Naked Sales, and it's a meditation on hardware without Windows, Apple's strategy of hardware-software integration, and the dissatisfactions that arise from the creative tension between Microsoft and hardware manufacturers. (The earlier articles in the series are linked form this one.) From the article: "The vast majority of PCs come with Windows pre-installed, and actually can't be sold without it. Leading PC hardware makers can't freely advertise PCs sold without Windows, or with an alternative OS such as Linux, without having to pay Microsoft significantly more for every other OEM license they ship. That's why all name brand PCs prominently repeat their own version of the cult-like phrase 'Dell recommends Windows XP Professional,' as if there were a choice in the matter and they thought it would be helpful to provide some guidance... Apple's current Get a Mac advertising campaign doesn't compare Mac OS X to Windows, it compares the complete experience of a Mac with that of a PC. After all, Windows is only half of what's wrong with the PC as a product."

Ant writes "An article at Ten Ton Hammer answers personal computer/PC gamers' question on what's coming their way with Microsoft's newest operating system/OS, Windows Vista. With the PC primed to be the primary distribution platform for certain gaming categories (MMOGs in particular) for many years to come, it's important to know exactly what we're getting into when Vista rolls out worldwide on January 30, 2007. Jeff 'Ethec' Woleslagle offers a quick, non-technical rebuttal to several of the more ambitious PC gaming rumors cropping up around the internet." From the article: "Games which seek to take advantage of DirectX 10 high-end features like Shader Model 4.0 (which the graphically revamped version of EVE Online will aspire to use) will require a computer fully compatible with DirectX 10. This in turn requires a GPU fully optimized to work with DX 10 (such as the first-to-market NVidia 8800). The Microsoft requirements for a DX10 'optimized' GNU and system are fairly strict, so jaded gamers take note: this phrase is more than a marketing maneuver. For those among you that can't afford a major hardware upgrade anytime soon, don't fret (yet). Microsoft's XNA framework enables developers to easily develop parallel versions of a game for DX 9 and DX 10. Here's hoping that developers and publishers will be equally accommodating in releasing XP / Vista compatible games in the same box."

Via GameSetWatch, an interview with South Park Producer Frank Agnone, Tech Supervisor J. J. Franzen, and Director of Animation Eric Stough. The discussion, on the Machinima.com site, goes into a lot of detail on how the South Park WoW episode was made, their rationale for doing it, and the amount of assistance they received from Blizzard. From the article: "Q: How long did it take to capture, puppeteer, and edit all the WOW footage? JJ: Uhm... A really really long time. We decided early on to treat the in-game capture sessions as regular film shoots. Our 'set' ended up being the lobby of the studio we produce South Park in. We rented 12 PCs, set up a bunch of folding tables, and were basically good to go. I decided that it would be best to capture on a Mac, since we would be able to capture directly to a quicktime file, which would make getting the captured footage onto the editing system a lot quicker. So, I hauled my shiny new MacPro out into the lobby and spent the next two weeks in a much bigger, if less private, new office. We had 5 'shoot' days, the first on the 20th of Sept. which lasted about 3-5 hours. The next was on the 26th of Sept. which also lasted about 4-5 hours., and then we shot almost every other day up to the last few days of production Monday and Tuesday were full days, with the last day going from 10am Tuesday morning to around 3am Wednesday morning the 3rd of Oct,, the day the episode aired."

F.M. Petain writes, "It looks like Microsoft's first move in the 'Linux owes us' game is to move a Pawn. A few days ago, a Novell programmer, Noel Power, submitted patches to add VBA compatibility to Open Office's spreadsheet module. This is great for people trying to convert the business desktop from closed source to open source, but is this gift really a ticking time bomb? What happens when Microsoft declares that the VBA code was stolen?" The patches may have been submitted only a few days ago, but the code must be considerably older; the article claims that nine distros in adition to SUSE already support the VBA extensions in their versions of Open Office. (Linux.com and Slashdot are both part of OSTG.)

An anonymous reader writes, "Yesterday Symbian announced that 100 million Symbian smart phones have shipped to over 250 network operators worldwide since the company's formation. According to a CNet article, however, Nokia phones running on the OS are actually worse than their non-Symbian predecessors. From the article: 'The fact is, Nokia's phones are in danger of turning from the iPods of the phone world into the Gizmondos — from devices dedicated to doing one thing well to jacks-of-all-trades that do too many things poorly. The S60 3rd Edition interface has received tons of criticism from veteran Nokia users for being far too complicated to use. It's great that there's new stuff to play with, but not so great that the old stuff, as in making calls and sending texts, has been made more complicated.'"

An anonymous reader writes "As 'Black Friday' approaches and consumers line up for the Playstation 3 it looks like Zune has become an afterthought. Despite months of hype, opening Zune sales are only so-so. While Zune did reach the top 10 on Amazon's Top 25 list for electronic product sales on its first day, it quickly fell below the top 15 and continues to drop. Six separate iPod models now outsell it as well as SanDisk's e250 player. In-store sales are not much better."