Ditch IE – veteran bug hunter
Ditch IE – veteran bug hunter. Guninski nails another vulnerability [The Register]
software development, security, opinion
Ditch IE – veteran bug hunter. Guninski nails another vulnerability [The Register]

Dave Winer: General comment on software patents. It’s terrorism, something we’re familiar with after Sept 11, applied to technology. Our terrorists wear suits and have law degrees. It will result in bankruptcies, orphaned software, and users without tools to use. The lawyers will get rich (and the technologists who think like lawyers). Ethical technologists who welcome competition because they want to be compelled to create the best products will go by the wayside, replaced by pseudo-technologists who use lawyers as competitive weapons. Who’s to blame? In the US, it’s the USPTO who grant patent abusers a legal basis to hijack open formats and protocols and crash them into products and services offered by developers of all sizes. State-sponsored terrorism. [Scripting News]
Debian Security Advisory: exim
Patrice Fournier discovered a bug in all versions of Exim older than
Exim 3.34 and Exim 3.952.
The Exim maintainer, Philip Hazel, writes about this issue: “The
problem exists only in the case of a run time configuration which
directs or routes an address to a pipe transport without checking the
local part of the address in any way. This does not apply, for
example, to pipes run from alias or forward files, because the local
part is checked to ensure that it is the name of an alias or of a
local user. The bug’s effect is that, instead of obeying the correct
pipe command, a broken Exim runs the command encoded in the local part
of the address.”
MS security patch opens new hole. ZDNet Jan 4 2002 9:06AM ET [Computer security news]
GOVERNOR, INDUSTRY ANNOUNCE BUFFALO CENTER OF EXCELLENCE
Buffalo Center in Bioinformatics will be Foundation for New Economy in Western NY
Governor George E. Pataki was joined today by Bill Blake, Compaq’s VP of Worldwide High Performance Technical Computing and business and academic leaders to announce up to $150 million in private sector support for a Center of Excellence in Bioinformatics in Buffalo a key component of the Governor’s $1 billion high-tech and biotech Centers of Excellence proposal.
Industry partners in the endeavor include major computing, software and communications networking companies such as Compaq, Veridian, InforMax and Stryker and others such as Dell, Sun, SGI and Q-Chem. Academic and research partners include the University of Buffalo, Roswell Park Cancer Institute, and the Hauptman-Woodward Medical Research Institute.
…
The Center will be located in downtown Buffalo, near the medical campus. Plans call for a 150,000 square foot building to house drug design research space, computational and three dimensional visualization facilities, product commercialization space and workforce training facilities. Academic and industry researchers will work side-by-side in a collaborative effort to identify key research areas, and will translate that research into commercial realities and opportunities to attract high tech and biotech firms of all sizes to Western New York.
…
In addition to academic and research partners such as the University of Buffalo, Roswell Park Cancer Institute, and the Hauptman-Woodward Medical Research Institute, the Center of Excellence will also involve academic collaborations with the New York State Structural Biology Consortium, Cornell, Syracuse Health Science Center, the University of Rochester and Columbia University.
New hole in AOL Instant Messenger lets hackers take over. San Francisco Chronicle Jan 3 2002 2:34AM ET [Computer security news]
P2P Apps Share Spyware. File-sharing programs LimeWire, BearShare, Grokster and Kazaa recently included software that tracks users online. The companies plead ignorance, blaming bundled advertising software. By Michelle Delio. [Wired News]
Charlie Kaufman, Iris Associates:
Active Content: Really Neat Technology or Impending Disaster (AUDIO):
an amusing one-hour talk about how bad it is
Gartner: Creating the Next-Generation IS Organization
(Goodhue, Chris)
[Requires direct access to Gartner web site.
Within UR, contact me for a copy of this presentation.]
Dave Winer, Scripting News:
BTW, I promise you, OPML is going to be as big or bigger as anything we’ve done at UserLand, including SOAP, XML-RPC and RSS. It’s a source of cold water and it’s killer. We have the hot water to balance it, I hope, if not, Omni might be a good bet, or JOE. See how it works? Users who have choice move. Users who are locked in wait. I don’t care how big you are, you’re still in the same ecosystem.
![]()