Orome1 writes: A default setting in Google Chrome, which allows it to download files that it deems safe without prompting the user for a download location, can be exploited by attackers to mount a Windows credential theft attack using specially-crafted SCF shortcut files, DefenseCode researchers have found. What's more, for the attack to work, the victim does not even have to run the automatically downloaded file. Simply opening the download directory in Windows File Explorer will trigger the code icon file location inserted in the file to run, and it will send the victim's username, domain and NTLMv2 password hash to a remote SMB server operated by the attackers.

Shane O'Neill writes "Ronald McDonald and the NBC Peacock may get more TV air time, but today's operating systems have cool logos, too. Google, Apple, Microsoft and the Linux crowd crafted mascots ranging from cute lizards to circles of life. In this slideshow, we look at the origins of the logos and look ahead to their future."

An anonymous reader writes "I'm a veteran user of an old 17" Dell Trinitron CRT monitor. I run it at 1400x1050 with an 80Hz refresh rate — about as high as it goes before it'll go out of the monitor's scan range. More recently I've been looking to finally upgrade to an LCD monitor but found that, for the most part, every 17" monitor on the market runs natively at 1280x1024, as does every 19" monitor — I have to go for a 20" to go higher. Now yes, I know I'm complaining about just 120 pixels horizontal and 26 pixels vertical, but my laptop's 15" display runs natively at 1400x1050. Is there any standalone monitor on the market that'll natively do higher than 1280x1024 without killing my desk space?"

Eurogamer sat down with Richard Parr and Alex Fry of Criterion Games about the evolution of the technology behind Burnout Paradise , and how they engineered a complex, open world across multiple platforms. "Criterion's method of exacting the most performance from the new architecture isn't so much about threading as such, it's all about parallelization. Rather than lump different game aspects onto different threads (where massive latencies can build as each processor waits for the other to finish its work), game code is highly optimized to make use of what processors are available at any given moment on whatever target hardware, and by choosing the all-important balance points, the experience is like-for-like on all platforms. High-level management code that is unique to each platform then processes the game code according to the hardware that is available." The first part of their Q&A session has also been posted.

Tom Farber, a calculus teacher at Rancho Bernardo high school in San Diego, has come up with a unique way of covering district cuts to his supplies budget. He sells ads on his tests. "Tough times call for tough actions," Tom says. The price of an ad on a Mr. Farber Calc test is as follows: $10 for a quiz, $20 for a chapter test, and $30 for a semester final. Most of the ads are messages from parents but about a third of them come from local businesses. Principal Paul Robinson says reaction has been "mixed," but adds, "It's not like, 'This test is brought to you by McDonald's or Nike.'" I see his point. Being a local business whore is much better than being a multinational conglomerate whore.