eldavojohn writes "On June 17th, the X.org team was notified by Invisible Things Lab of a critical security flaw (PDF) that affected both x86_32 and x86_64 platforms. The flaw deals with escalated privileges of a user process that has access to the X server. The founder of ITL said of the flaw, 'The attack allows a (unpriviliged) user process that has access to the X server (so, any GUI application) to unconditionally escalate to root (but again, it doesn't take advantage of any bug in the X server!). In other words: any GUI application (think e.g. sandboxed PDF viewer), if compromised (e.g. via malicious PDF document) can bypass all the Linux fancy security mechanisms, and escalate to root, and compromise the whole system.' This has apparently been a security flaw since kernel 2.6 was released. From the article, 'On 13 August, Linus Torvalds committed an initial fix, but several patches were added afterward for various reasons. The problem has been addressed in versions 2.6.27.52, 2.6.32.19, 2.6.34.4 and 2.6.35.2 of the kernel.'"

An anonymous reader writes "In my job all of our multifunction copiers scan to PDF but many of our users want and expect those PDFs to be text searchable. I looked around for software that would create text searchable pdfs but most are very expensive and I couldn't find any that were open source (free). I did find some open source packages like CuneiForm and Exactimage that could in theory do the job, but they were hard to install and difficult to set up and use over a network. Then I stumbled upon WatchOCR. This is a Live CD distro that can easily create a server on your network that provides an OCR service using watched folders. Now all my scanners scan to a watched folder, WatchOCR picks up those files and OCRs them, and then spits them out into another folder. It uses CuneiForm and ExactImage but it is all configured and ready to deploy. It can even be remotely managed via the Web interface. Hope this proves helpful to someone else who has this same situation."

eldavojohn writes "CNN is running an article on a new angle of attack to reducing greenhouse gases. After meeting with the US Department of Energy on the concept, the researchers revealed the details that each 'tree' (really a small building structure in the concept design) would cost about as much as a Toyota and remove 1 ton of CO2 from the air per day. Don't worry, they're accounting for the energy the 'tree' uses to operate: 'By the time we make liquid C02 we have spent approximately 50 kilojoules [of electricity] per mole of C02. Compare that to the average power plant in the US, which produces one mole of C02 with every 230 kilojoules of electricity. In other words, if we simply plugged our device in to the power grid to satisfy its energy needs, for every roughly 1,000 kilograms [of carbon dioxide] we collected we would re-emit 200, so 800 we can chalk up as having been successful.' Each unit would remove 20 automobiles' worth of CO2 from the air and cost about as much as a Toyota... so the plan might be a five percent surcharge on automobiles to fund these synthetic tree farms."

rgarbacz writes "Today at 13:12 GMT, the ESA launched successfully new and long-awaiting spacecraft: Herschel, the infrared telescope with a 3.5m mirror, and Planck, the CMB mapper. The spacecraft were carried by the Ariane-5, which lifted off from Kourou in French Guiana. They will stay in L2 to perform the research. This launch is one of the most expensive and important missions of the European Space Agency. Planck will measure the CMB with an accuracy more than 10 times better than the previous mission, WMAP. Because of this high sensitivity, both spacecraft are cooled to temperatures close to absolute zero by on-board liquid helium; staying in L2 is very helpful to maintain this state. Both spacecraft are designed to observe the Universe at its infancy: Herschel by observing the first stars and galaxies (whichever came first), and Planck by scrutinizing the first photons that were set free, making up the cosmic microwave background radiation."

Slatterz writes "The Chinese government is denying any involvement in the reported infiltration of US electric grid systems. Xinhua news agency quoted Chinese foreign ministry spokesperson Jiang Yu as saying that any sort of involvement from China in the incident 'doesn't exist at all.' The denial follows a report in the Wall Street Journal which claimed that agents from China and Russia along with several other countries had infiltrated the computer systems charged with managing electricity in the US and left behind software payloads which could be used to control or disable electric grids in the US." Bruce Schneier is skeptical about the whole story.

hmallett writes "FreeBSD 6.4-RELEASE, the fifth release from the 6-STABLE branch of FreeBSD development, is now available. In addition to being hosted at many FTP sites, ISO images can be downloaded via the BitTorrent tracker, or for users of earlier FreeBSD releases, FreeBSD Update can be used to perform a binary upgrade."

The NYTimes reports that Atlantic is the first major label to report getting a majority of its revenue from digital sales, not CDs. Analysts say that Atlantic is out in front — the industry as a whole isn't expected to hit the 50% mark until 2011. By 2013, music industry revenues will be 37% down from their 1999 levels (when Napster arrived on the scene), according to Forrester. "'It's not at all clear that digital economics can make up for the drop in physical,' said John Rose, a former executive at EMI ... Instead, the music industry is now hoping to find growth from a variety of other revenue streams it has not always had access to, like concert ticket sales and merchandise from artist tours. ... In virtually all... corners of the media world, executives are fighting to hold onto as much of their old business as possible while transitioning to digital — a difficult process that NBC Universal's chief executive ... has described as 'trading analog dollars for digital pennies.'"

A UK bookmaker has lowered the odds on proving that god exists to just 4-1 to coincide with the switching on of the Large Hadron Collider. The chance that physicists might discover the elusive sub-atomic object called the "God particle" has forced the odds lower. Initially the odds that proof would be found of God's existence were 20-1, and they lengthened to 33-1 when the multi-billion pound atom smasher was shut down temporarily because of a magnetic failure. A spokesman for Paddy Power said, "The atheists' planned advertising campaign seems to have renewed the debate in pubs and around office water-coolers as to whether there is a God and we've seen some of that being transferred into bets. However we advise anyone still not sure of God's existence to maybe hedge their bets for now, just in case." He added that confirmation of God's existence would have to be verified by scientists and given by an independent authority before any payouts were made. Everyone getting a payout is encouraged to tithe at least ten percent.