jfleck writes with news that researchers at Sandia National Laboratories have released a paper on a technique they have developed for passively fingerprinting wireless device drivers (PDF). The researchers comment, "This technique is valuable to an attacker wishing to conduct reconnaissance against a potential target so that he may launch a driver-specific exploit." They sketch the loose language in the 802.11 standard describing the way client devices should probe for access points. Because probing is not spelled out in any detail, the authors say, "...implementing active scanning within wireless drivers [is] a poorly guided task. This has led to the development of many drivers that perform probing using slightly different techniques. By characterizing these implementation-dependent probing algorithms, we are able to passively identify the wireless driver employed by a device." This technique beats Wi-Fi Fingerprints by a country mile.

Andy Updegrove writes, "Microsoft has just posted the text of a new promise not to assert its patents with respect to 35 listed Web Services standards. The promise is similar to the covenant not to assert patents that it issued last year with respect to its Office 2003 XML Reference Schema, with two important improvements intended to make it more clearly compatible with open source licensing. Those changes are to add an explicit promise not to assert any relevant patents against anyone in the distribution chain of a product, from the original vendor through to the end user; and to clarify that the promise covers a partial as well as a full implementation of a standard. It's all part of a recent wave of such pledges made by companies such as IBM, Nokia, and Oracle, and a significant shift in how Microsoft is dealing with open standards."

uniquebydegrees writes, "InfoWorld reports that on Tuesday Microsoft quietly released the second update for MS06-042. This is the cumulative patch for IE that actually introduced a new security hole into systems that applied the update. Microsoft re-released the patch back in August, but it now turns out that the updated patch had yet another vulnerability similar to the first, once again discovered by folks at eEye Digital Security. As with the previous hole, it concerned the handling of long URLs from web sites using HTTP 1.1 with compression."

An anonymous reader writes to alert us to an article at Forever Geek on sites that trust users too much and the users who game them. From the article: "Trusting users is a good thing. But implicitly trusting users is no good. If Digg has moderators who approve a story before it goes live on the front page, shouldn't they have moderators checking spam reports? Social sites give so much power and emphasis on users yet a handful still have the power to wreck these sites. Until these issues are properly addressed, social sites will continue to be gamed."

Heartless Gamer writes to mention a GamersReport article clarifying things for the many Oblivion fans looking forward to more content. Despite reports to the contrary, there is no expansion coming for the game any time soon. From the article: "'There's no expansion in development called Knights of the White Stallion. That's the name of a quest in Oblivion. Right now we have no announced plans for any new content, add-ons, or expansions. If that changes, we'll let folks know.' So there you have it folks, it seems that the listing was an honest mistake. While we have no doubt there will eventually be an expansion, Bethesda is far from ready to announce it."

Acidus writes, "There is an excellent article in this month's First Monday about using reputation systems to limit the effects of vandalism on public wikis like Wikipedia. It discusses the benefits and weaknesses of various algorithms to judge how 'reliable' a given piece of text or an edit is. From the article: 'I propose that it would be better to provide Wikipedia users with a visual cue that enables them to see what assertions in an article have, in fact, survived the scrutiny of a large number of people, and what assertions are relatively fresh, and may not be as reliable. This would enable Wikipedia users to take more advantage of the power of the collaborative editing process taking place without forcing that process to change.'"

ColinPL writes, "MetaMachine Inc., the firm behind online file-sharing software eDonkey, has agreed to pay $30 million to avoid potential copyright infringement lawsuits from the recording industry. The company also agreed to take measures to prevent file sharing by people using previously downloaded versions of the eDonkey software. The eDonkey application now displays the message, 'The eDonkey2000 Network is no longer available. Please see eDonkey.com for more details.' After that message is displayed the uninstaller is launched automatically." If you visit edonkey.com, it logs your IP address. How much will the demise of eDonkey matter, given that most who access that P2P network do so using the open-source eMule?

An anonymous reader writes, "Voting machines are wreaking havoc in Maryland elections today. From the article: 'Election Day in Montgomery County and parts of Prince George's opened in chaos and frustration this morning, as a series of problems and missteps left thousands of citizens unable to vote or forced to cast provisional ballots... Montgomery County's Board of Elections held an emergency meeting and agreed to petition the Circuit Court to extend voting times until 9 p.m.' It's simply shameful."

necro81 writes, "As anticipated, Apple announced several additions and upgrades to its iPod and iTunes lineup. The iPod now comes in an 80 GB model, with a $50 price drop for the 30 GB model. The 2nd generation iPod Nano harkens back to the iPod Mini with metallic, multi-colored shells (though as diminutive as ever) and comes in an 8 GB model. The Shuffle has been completely redesigned and shrunk down to the size of a matchbook. All of this comes with the release of iTunes 7, which includes support for downloading full-length movies from iTMS." All 75 movies initially available are from Disney-related studios. The new iTunes will download cover art for all the songs in your library, no matter where you got them from, as long as you have an iTunes account. (A confirmation dialog says: "Information about songs with missing artwork will be sent to Apple. Apple does not keep any information related to the contents of your music library.") There's a new album-cover browsing view of your library. And Steve Jobs gave a sneak preview of a project code-named iTV: a Mac Mini-like wireless set-top box. Engadget has a blow-by-blow of Steve Jobs's presentation.

Can't Get Enough Ajax writes "While Ajax continues to get most of the attention these days in the space of rich Internet apps, the future 'face' of Web applications may consist of a combination of Ajax and plug-in technologies based on the new Flash development platforms or other plug-in models. Why? The challenges of building and maintaining sophisticated software in Javascript and the lack of support for audio and video are just two reasons that any RIA strategy will involve a mixture of Ajax and one or more technologies like Flex, Laszlo, or others. But while there are significant advantages to the new RIA technologies, there are also important trade-offs including breaking the model of the Web, lack of HTML support, and more. ZDNet's Dion Hinchcliffe has a round-up of the latest generation of RIA technologies, pros and cons of each, and why there is likely a 'war' brewing among them."

1up is reporting on Sony's 'answer' to Microsoft's Xbox Live system: XFire. The PC-based game networking service is already extremely popular among FPS and MMOG players. Financial reports indicate the service will now be extended to the PlayStation 3 as well. From the article: "By incorporating an existing service into their own PlayStation Network Platform (PNP), Sony hopes to circumvent existing problems in the console space that Microsoft has had to sort out and in using Xfire -- a company with an established messaging, matchmaking and gaming client -- Sony hopes to narrow the four-year gap in online gaming services that Microsoft currently enjoys (Xfire has been around since 2002)."

It's time to check in with the table-top scene, with a slew of products from earlier this year. With one exception, everything I have to discuss today is from Wizards of the Coast (WotC). The well-known maker of Dungeons and Dragons is having a banner year, a year they've been referring to as the 'Year of Dragons'. Their draco-specific products will get a look here on the site in a month or two, and later this month I should have a full report on the 4th Edition of the Shadowrun RPG. Today, though, we've got demons, psionics, epic-level play, and a second Player's Handbook. Oh yeah, and a 670-page, $120 sourcebook called Ptolus. Read on for my impressions of these great excuses to throw a d20.

1up is reporting that Capcom has put the kibosh on a patch for Dead Rising, frustrating fans who have complained about the games's almost unreadable text on Standard Definition screens. From the article: "So, the question is, will there ever be a patch? Unfortunately, that's a no. 'Due to the amount of text and the size of the patch necessary to change the text, a patch isn't possible for this issue,' said the company. 'We had asked the team if it was even possible but ... due to the scope of what a patch would need to cover, it wasn't possible.' As it stands, no patch is coming for Dead Rising players -- but maybe they'll change their mind if you yell loud enough."

An anonymous reader wrote to mention coverage of further clashes between Microsoft and the EU, this time over security in Windows Vista. Microsoft is 'urging' the EU to allow all of the security elements of Vista to remain intact. The EU seems to be under the impression it's not asking for security to be lax; it just wants the software company to ensure a fair playing field for all businesses. From the Newsday article: "European Union officials warned Microsoft Corp. on Tuesday not to shut out rivals in the security software market as the company plans to launch its Windows Vista operating system with built-in protection from hackers and malicious programs. EU spokesman Jonathan Todd told reporters that the European Commission is "ready to give guidance to Microsoft" concerning Vista but added that it was up to the U.S. software maker 'to accept and implement its responsibilities as a near monopolist to ensure full compliance' with EU competition rules."

Via Kotaku, a story on the Destructoid site about upcoming game movies and their likelihood to suck. Mr. McVengeance runs down the upcoming pixels-to-big-screen adaptations, and amazingly it appears the situation isn't completely hopeless. Just mostly. From the article: "Prince of Persia: The Sands of Time, Probability of Suck: Moderately Low. This gives me mixed feelings on the fact that there are two writers. First is the guy who actually wrote the script for the game, which is a good thing. Second, we have the writer for 'The Day After Tomorrow'. Then, we have Jerry Bruckheimer working as Executive Producer. Y'know, the guy who's name is attached to Pirates of the Carribean and a whole host of other films? I think this film will end up doing OK. I'll be interested in seeing who gets the job as director."