Submission Summary: 0 pending, 11 declined, 10 accepted (21 total, 47.62% accepted)
Submission + - Chinese developer web forum stores and leaks 6 mil (thehackernews.com)
The CSDN has issued a letter of apology to its users. In the letter, it is explained that passwords created before April 2009 had been stored in plain text, while later passwords were encrypted. Users created between September 2010 and January 2011 may still suffer from email address leaks.
A summary of the most frequent passwords without the corresponding usernames is available at GitHub. Somewhat surprisingly, the cryptic sounding password "dearbook" ranks 4th with 46053 accounts using it.
Submission + - US defunds UNESCO after Palestine vote, what's nex (csmonitor.com) 2
Submission + - XML Encryption Broken, Need to Fix W3C Standard (ruhr-uni-bochum.de)
As pointed out by the Ars Technica article, XML Encryption is used widely as part of server-to-server Web services connections to transmit secure information mixed with non-sensitive data, based on cipher-block chaining. But it is apparently too weak, as demonstrated by Juraj Somorovsky and Tibor Jager. They were able to decrypt data by sending modified ciphertexts to the serve by gathering information from the received error messages. The attack was tested against a popular open source implementation of XML Encrytion, and against the implementations of companies that responded to the responsible disclosure — in all cases the result was the same: the attack worked.
Fixing the vulnerability will require a revision of the W3C XML encryption standard, Somorovsky said. The researchers informed all possibly affected companies through the mailing list of W3C, following a clear responsible disclosure process.
Submission + - Teacher Cannot Be Sued For Denying Creationism (csmonitor.com)
Submission + - Right-Wing Extremists Tricked by Trojan Shirts (spiegel.de)
Submission + - 'Death Strip' Game Sparks Controversy in Germany (spiegel.de)
The name of the multi-player FPS game, "1,378 (kilometers)", was inspired by the length of the border between East and West Germany. Players choose between the roles of the border guards or would-be escapees: the escapee only has one goal — to get over the wall, but the border guard has more options, and can shoot or capture the escapee. He can also swap sides and try to clamber over the border defenses himself. By choosing to play the boarder guard and kill the escapee, the player would won an in-game medal from the government of East Germany. But then the guard would time-travel forward to the year 2000, where he would have to stand trial.
Jens Stober, 23, designed the game as a media art student at the University of Design, Media and Arts in Karlsruhe. He said that his intention was to teach young people about German history. "In the game, you ask yourself: 'What would I do?'" explained Stober. "You may come to the conclusion that you would not shoot at your fellow countrymen and women." But others disagree. "Basically you are just picking off people, as if you were shooting rabbits," said Axel Klausmeier, director of the Berlin Wall Foundation. Hubertus Knabe, head of the Berlin-Hohenschoenhausen Memorial to the victims of the Stasi secret police, has even filed criminal charges. He wants the Berlin public prosecutor to investigate whether the game glorifies violence. Rainer Wagner, from former East Germany, said it was like a punch in the face. "It feels like I'm being shot at again, emotionally," said Wagner, who was arrested by border guards during his escape attempt.
Initially, Stober's university and Professor Michael Bielicky, who had supervised Stober's work, defended the student. However, on Thursday a university spokesman said that the game will not be released on Sunday, the anniversary of German reunification, after all. Instead, the release is being postponed until December.
Submission + - SCO Proposes Sale of Assets to Continue Litigation (sltrib.com)
The embattled SCO Group Inc. is proposing to auction off its core products and use proceeds to continue its controversial lawsuits over the alleged violations of its copyrights in Linux open-source software.
The Lindon company has filed a new reorganization plan with the federal court in Delaware where it sought bankruptcy protection from creditors after an adverse ruling in the Linux litigation.
If approved by a bankruptcy judge, the plan could mean SCO's server software and mobile products lines are owned by other parties while SCO itself remained largely to pursue the lawsuits under the leadership of CEO Darl McBride.
"One goal of this approach is to separate the legal defence of its intellectual property from its core product business," McBride said in a letter to customers, partners and shareholders.
Jeff Hunsaker, president and COO of The SCO Group, said the litigation had been distracting to the company's efforts to market its products.
"We believe there's value in these assets and in order for the business to move forward it's imperative we separate it from our legal claims and we allow our products business to move forward," he said Friday.
Submission + - CrossOver for free on Oct. 28, thanks to Bush (softpedia.com)
In July, CodeWeavers launched the Great American Lame Duck Presidential Challenge to encourage President Bush to make the most of his remaining days in office by accomplishing a major economic or political goal by January 20, 2009. One of the goals is "reducing gas price": lower the average gas price in the Twin Cities below $2.79 per gallon.
On Monday, Oct. 14, gas prices in Minneapolis and St. Paul did just that.
White admits this is not how he foresaw the Challenge unfolding.
"I launched the campaign to inspire President Bush to make the most of his final days in office. Who knew that our Challenge would have this kind of impact on the country?" White said. "On the other hand, who knew that the economy would implode, causing oil demand to drop into the abyss and gas prices to plummet as well. Clearly, investigating Bear Stearns, AIG and those guys is misplaced — CodeWeavers is responsible for this mess. So it's free software for all!"
"I realize that by giving away all my software, I've caused horrific damage to my company's bottom line," White said. "In fact, our vice president of sales wretched Starbucks all over his shirt when he learned the news. But, I figure, the way the economy is going, in a few months everyone might be out on the streets, wearing potato sacks and standing in line for squirrel soup, so why not?"
Submission + - Sourceforge.net blocked in mainland China (moon-blog.com)
The current blocking may be related to the recent anti-China protests of Beijing Olympic Games, which will begin on 8 August. Some days before, a very popular free source code editor in SourceForge named Notepad++ start to boycott Beijing 2008. The project's developer said that the action is not against Chinese people, but against Chinese government's repression against Tibetan unrest earlier in this year.
SF.net has once been banned by China in 2002. However, the ban was lifted later in 2003.
Submitter's note: As a SourceForge user in Beijing, I can confirm this first-hand. I also tried traceroute to sourceforge.net, only to find the connection being dropped at a Beijing ISP's gateway router. It appears that the projects' respective homepages are available even if they are hosted by SF, but the summary and download pages are blocked."