root777 writes to point out a provocative blog piece by a Microsoft program manager, questioning one of the almost unquestioned tenets of open source development: that given enough eyeballs, all bugs are shallow. Are they? Shawn Hernan looks at DARPA's Sardonix experiment and the Coverity static-analysis bug discovery program in open source projects to conclude that perhaps not enough eyeballs are in evidence. Is he wrong? Why? "Most members of the periphery [those outside the core developer group] do not have the necessary debugging skills ... the vast numbers of 'eyeballs' apparently do not exist. ... [C]ode review is hardly all that makes software more secure. Getting software right is very, very difficult. ... Code review alone is not sufficient. Testing is not sufficient. Tools are not sufficient. Features are not sufficient. None of the things we do in isolation are sufficient. To get software truly correct, especially to get it secure, you have to address all phases of the software development lifecycle, and integrate security into the day-to-day activities."

California has once again been blessed with another steampunk convention, this time to be held in Emeryville, CA on March 12-14 as the "Nova Albion Steampunk Exhibition." This year's event promises to mix in much more of the DIY/maker flavor for a greater hands-on feel. Steampunk has been gaining much broader appeal in recent months with the continued growth of maker communities, and the many delightful varieties of music and literature. The con will feature, among other things, a 2 day track of 2-hour how-to, hands-on, and interactive workshops gear towards makers, DIY-ers, mad scientists, and evil geniuses. Of course, if you are an evil genius you probably don't need a workshop except as a gathering for potential test subjects.

ccktech writes "As reported by NPR and Chemistry world, the journal Science has a paper by David Ehre, Etay Lavert, Meir Lahav, and Igor Lubomirsky [note: abstract online; payment required to read the full paper] of Israel's Weizmann Institute, who have figured out a way to freeze pure water by warming it up. The trick is that pure water has different freezing points depending on the electrical charge of the surface it resides on. They found out that a negatively charged surface causes water to freeze at a lower temperature than a positively charged surface. By putting water on the pyroelectric material Lithium Tantalate, which has a negative charge when cooler but a positive change when warmer; water would remain a liquid down to -17 degrees C., and then freeze when the substrate and water were warmed up and the charge changed to positive, where water freezes at -7 degrees C."

ericatcw writes "Driven by increased crackdowns on BitTorrent sites such as The Pirate Bay, software pirates are fast moving their warez to file-hosting Web sites like RapidShare, reports Computerworld. According to anti-piracy vendor V.I. Labs, 100% of the warez in its survey were available on RapidShare, which, according to Alexa, is already one of the 20 largest sites in the world. V.I. Labs' CEO predicts file-hosting sites such as RapidShare will supplant BitTorrent, as the former appear better protected legally."

Mechanist.tm writes "I recently purchased a NAS from a well-known online computer component shop. I have purchased several items from the website and have never had much trouble before. That was until I realized what I had bought was a terrible NAS. All the reviews on the site from users seemed very good. After a little research, it became clear that the product in question was indeed terrible. After finding the product pretty much useless for its intended purpose, I proceeded to write a review for it on the website to inform other would-be buyers. After about a week, I noticed that the review never made it up there, so I wrote another one just in case. After several attempts to leave a negative review for the product, I realized that the website was screening reviews and only posting the ones that made the products look good. All the reviews on the website are positive; I've only found one at less than 3 out of 5 stars. Is this legal? Ethically speaking, it's wrong, and it's intentionally misleading to the customer. Is there a good place to report behavior like this? How common is this among online retailers who provide user reviews?"

CmdrGravy weighs in with exciting archaeological news, "one of the most important prehistoric finds in decades" according to the article: a miniature Stonehenge a mile from the famous site. "Bluehenge," as the find is being called because of the assumed color of its (now-missing) stones, is believed to have been put up around the time of Stonehenge, 5,000 years ago. "All that remains of the 60-ft.-wide Bluehenge are the holes of 27 giant stones set on a ramped mount. Chips of blue stone found in the holes appear to be identical to the blue stones used in Stonehenge. The four-ton monsters, made of Preseli Spotted Dolerite — a chemically altered igneous rock harder than granite — were mined in the Preseli Mountains in Pembrokeshire and then rolled, dragged, and floated the 200 miles to the site on the banks of the Avon in Wiltshire."