Comment At Least... (Score 1) 49
At least Microsoft didn't buy them out in the spring, or we'd be seeing this vulnerability built right into the next Windows kernel!
Submission + - Tapping the iPhone, brought to you by Yahoo!
tdalek writes: You may remember the recent Slashdot article about Yahoo! Zimbra Desktop exposing authentication information. It turns out that more that other Yahoo! applications are affected, although to a lesser degree. With Yahoo!'s desktop program, it transmitted the usernames and passwords in plaintext. Yahoo! is one of the lucky few default e-mail providers on the iPhone; sadly it looks like Apple didn't insist on encryption from Yahoo! On the iPhone, authentication is encrypted, but you can see all the messages sent and received in plaintext. Incoming messages are downloaded in plaintext over the standard imap port. Outgoing mail is a bit harder to find, it is apparently sent by an HTTP post request wrapped up inside a bundle of XML, but security through obscurity isn't very effective. If you have Yahoo! mail on your iPhone (and since its one of the default accounts, I'm assuming quite a few do), now would be a good time to forward it elsewhere for the time being, and using that account instead.
Submission + - Yahoo! exposes user passwords (uwaterloo.ca) 3
kingofthehobos writes: In a move hearkening back to the days of telnet, Yahoo!'s newest addition to there mail system exposes the full usernames & passwords over the wire (or wireless) in plaintext. Both CNET news & Wired's Webmonkey are reporting on the story (although in true Wired fashion the individual is called a "hacker"). So, if you know anyone who might have installed Yahoo! Zimbra Desktop getting them to switch back to the web interface and change there password (until the issues are fixed) would be ++good.
Submission + - Protecting IM from the NSA, a Canadian's view 3
holden writes: "Ian Goldberg, leading security researcher, professor at the university of waterloo, cypherpunk and co-creator of the Off-the-Record Messaging (OTR) protocol recently gave a talk on protecting your IM conversations. He discusses OTR and its importance in today's world with warrant-less wire tapping and all that bad stuff. With OTR users benefit from being able to have truly private conversations over IM, by using encryption to obtain authentication, deniability, and perfect forward secrecy, while working within their existing IM infrastructure. With the recent NSA wiretapping activities and increasing Big Brother presence, security and OTR are increasingly important. An avi of the talk is available by http as well as by bittorrent and a bunch of other formats."
Submission + - Designing software with Privacy in mind 6
dalektcalum writes: Dr. Ann Cavoukian, Canada's Information and Privacy Commissioner, recently gave a talk entitled Privacy by Design. The talk starts of by covering the basics of privacy, and privacy law, and then moves onto the important component, how to design software that properly protects users privacy. The majourity of the time is spent on design principles, but also examines specific technologies (such as Elliptical Curve Cryptography).
Bill Gates Talk From 1989 Surfaces 317
70sstar writes "A 1-1/2 hour recording of Bill Gates addressing a crowd of university students in 1989 was recently found and digitized, and has been circulating in some IRC channels for the past few weeks. The speech has found a permanent home on the web page of the University of Waterloo CS Club, where the talk is reported to have taken place. Gates covers the past, present, and future of computing as of 1989. While the former two might be of interest to tech historians, the real fascination is Gates's prediction of computing yet to come. Like the now-legendary '640k' remark, some of his comments are almost laughably off-target ('OS/2 is the way of the future!'). And yet, by and large, he had accurately, chillingly, prophesied an entire decade or two of software and hardware development. All in all, a fascinating talk from one of the most powerful speakers in CS and IT."
