jamie writes with news of a Facebook app developer who found a significant security hole while he was trying to get around function limitations for his application. Quoting: "Luckily — just with browser AJAX requests — a flash application hosted on domain X is unable to open a file on domain Y. If this would be possible, domain X [would be] able to access content on domain Y, and when the user is logged in on domain Y retrieve and post back any personal data. In certain cases this could limit a Flash application's capabilities. ... To resolve such issues, Adobe (Flash's developers) introduced a 'crossdomain.xml' file which could allow certain domains to access another domain, leading to cross-domain access by certain or all domains. While indeed Facebook locked the front door from any non-Facebook domain access via Flash, a simple subdomain change allowed any flash application (domain="*") to access its domain data." He found a similar problem in MySpace's crossdomain.xml. Both sites were notified, and they have implemented fixes.

Bucc5062 writes "LaserMotive has achieved the first step towards the creation of a working space elevator by qualifying for the $900,000 prize in a contest sponsored by NASA. To achieve this first level, LaserMotive needed to propel a platform up a cable dangling from a helicopter at over 2 m/s. They hit a top speed of 4.13 m/s. The next level of qualification will be to achieve a climb speed greater then 5 m/s. LaserMotive beamed roughly 400 watts of laser power to a moving target at a distance of 1 kilometer, as part of the vertical laser alignment procedure. The target was a retro-reflective board a little larger than 1 meter on a side. The contest will continue for another two days with at least two other teams challenging for the prize. To win the Power Beaming competition, the LaserMotive system uses a high-power laser array to shine ultra-intense infrared light onto high-efficiency solar cells, converting the light into electric power which then drives a motor. 'Our system will track the vehicle as it climbs, compensating for motion due to wind and other changes. Building on our experience from last year’s competition, we are designing an improved system able to capture the full $2,000,000 prize.'"