An anonymous reader writes "A group of researchers from the University of Colorado and University of Washington could face both civil and criminal penalties for a research project (pdf) in which they snooped on users of the Tor anonymous proxy network. Should federal prosecutors take interest in the project, the researchers could also face up to 5 years in jail for violating the Wiretap Act.The researchers neither sought legal review of the project or ran it past their Institutional Review Board. The Electronic Frontier Foundation, which has written a legal guide for Tor admins, strongly advises against any sort of network monitoring."

Read more of this story at Slashdot.

Bobfrankly1 writes "The FBI, IRS, and the Rocky Mountain Safe Streets Task Force are helping the US Marshals search for escaped 'Spam King' Edward 'Eddie' Davidson. He apparently jumped in a car with his Wife, changed clothes at home, and hasn't been seen since."

Read more of this story at Slashdot.

Barence writes "Britain's six leading internet providers have signed a Government-led agreement to stamp out illegal music file sharing. The six providers — BT, Virgin Media, Orange, Tiscali, Sky and Carphone Warehouse — will implement a series of measures against those found to be file sharing. Offenders may find their internet connection is throttled, or may even have their traffic "filtered" to prevent media files from being downloaded. The ISPs are reportedly reluctant to impose the BPI's preferred "three strikes and you're out" approach of cutting off users' broadband connections."

Read more of this story at Slashdot.

Anonymous writes "More than three-quarters of bank Web sites have design flaws that could expose bank customers to financial loss or identity theft, according to a University of Michigan study that will be presented this week at the Symposium on Usable Security and Privacy. The study, 'Analyzing Web Sites For User-Visible Security Design Flaws,' examined 214 bank Web sites in 2006. It was conducted by University of Michigan computer science professor Atul Prakash and doctoral students Laura Falk and Kevin Borders."

Read more of this story at Slashdot.

Roland Piquepaille writes "Dutch engineers have built the third generation of the DelFly autonomous air vehicle. The DelFly Micro made its first public flight earlier today in Delft. This micro air vehicle weighs only 3 grams and has a wingspan of 10 centimeters. This very small remote-controlled aircraft carries a 0.4 gram camera. The DelFly Micro, which looks like a dragonfly, can fly for 3 minutes at a maximum speed of 5 meters/second. It could be used for observation flights in difficult-to-reach or dangerous areas."

Read more of this story at Slashdot.

The Register notes Intel's change of Linux distribution on its Moblin mobile device platform. "Intel's project to put a Linux and open source stack on mobile devices is getting overhauled to attract developer support, having failed to generate much interest. A year after launching Moblin, Intel plans a second version of its open source stack in the next three weeks, sporting a new operating system, middleware, tools and graphical user interface (GUI). Under the changes, the existing Ubuntu-based kernel is out and Fedora is in, along with a set of Gnome-compatible mobile components that updates Moblin's previous Gnome implementation." (Thanks to Rahul Sundaram).

How Software Is Built interviews Mandriva's Helio Chissini de Castro. "Sean: Would you tell me a little bit about how Mandriva’s maintained? ... Helio: Our repository, our packages, and everything we do centralizes in the supervisional server. it’s one of the largest supervisional servers ever–around a hundred gigabytes of database. It has the history of all packages and patches and branches and solutions, and it’s open for everyone that’s using the computers, so they can see what is changing in every part, every time. The most amazing thing is that you can easily port and push patches and make it available for everyone without having the harsh part of, “OK, You need to pick the package that others wish and unpack it and see what is inside and then do the patch and apply for it.” It’s open, and it’s easy to see." (Thanks to Adam Williamson).

Pippin writes "Memphis Police Director, Larry Godwin, is suing AOL for the names of the authors of the Enforcer 2.0 blog. The blog is rumored to be authored by a Memphis police officer, and is critical of the department, Godwin, and some procedures. Godwin is actually using taxpayer dollars for this and, interestingly, the complaint is sealed".

Read more of this story at Slashdot.

snydeq writes "InfoWorld's Tom Yager takes a closer look at Apple's iPhone SDK confidentiality agreement, which restricts developers from discussing the SDK or exchanging ideas with others, thereby leaving no room for forums, newsgroups, open source projects, tutorials, magazine articles, users' groups, or books. But because anyone is free to obtain the iPhone SDK by signing up for it, Apple is essentially branding publicly available information as confidential. This 'puzzling contradiction' is the 'antithesis of the developer-friendly Apple Developer Connection' on which the iPhone SDK program is based, Yager contends. 'You'll see arguments from armchair legal analysts that the iPhone developer Agreements won't stand up in court — but those analysts certainly won't stand up in court on your behalf.' Anyone planning to launch an iPhone forum or open source project should have 'a lawyer draft your request for exemption, and make sure that the Apple staffer granting it personally commits to status as authorized to approve exceptions to the iPhone Registered Developer and iPhone SDK Agreements,' Yager warns."

Read more of this story at Slashdot.

Grablets writes "Using a link analysis algorithm similar to Google PageRank, researchers at the SANS Institute and SRI International have created a new Internet network defense service that rethinks the way network blacklists are formulated and distributed. The service, called Highly Predictive Blacklisting, exploits the relationships between networks that have been attacked by similar Internet sources as a means for predicting which attack sources are likely to attack which networks in the future. A free experimental version is currently available."

Read more of this story at Slashdot.

Iddo Genuth writes "Researchers at Purdue University are developing a miniature refrigeration system, small enough to fit inside laptop computers. According to the researchers, the implementation of miniature refrigeration systems in computers can dramatically increase the amount of heat removed from the microchips, therefore boosting performance while simultaneously shrinking the size of computers."

Read more of this story at Slashdot.

get_Rootin writes "That didn't take long. ZDNet is reporting that HD Moore has released exploit code for Dan Kaminsky's DNS cache poisioning vulnerability into the point-and-click Metasploit attack tool. From the article: 'This exploit caches a single malicious host entry into the target nameserver. By causing the target nameserver to query for random hostnames at the target domain, the attacker can spoof a response to the target server including an answer for the query, an authority server record, and an additional record for that server, causing target nameserver to insert the additional record into the cache.' Here's our previous Slashdot coverage."

Read more of this story at Slashdot.

Brian Jordan and other readers sent in word that Google has taken the wraps off Knol, its expert-written challenger to Wikipedia. (We discussed Knol when it was announced last year.) Wired has an in-depth look. Knol's distinctions from Wikipedia are that authors are identified by their real names (and verified), and that they can share in ad revenue if they choose to. The service initially features a lot of medical articles, which is interesting considering that Medipedia also launched today. This medical wiki is backed by Harvard's and Stanford's medical schools.

Read more of this story at Slashdot.

ruphus13 writes "Ubuntu and Canonical have been very active at OSCON this year. They showcased a new distro, announced improvements to their code-hosting platform, and made Mark Shuttleworth available for a couple of talks and panel sessions. Quoting: 'Ubuntu Netbook Remix, a complete distribution designed to run on Atom-based Netbook PCs. The main difference that sets it apart from its big brother Hardy Heron is the Ubuntu Mobile Edition (UME) Launcher, a user interface created specifically for use on the teensy screens and keyboards of today's popular ultra-portable computers.' Canonical also announced Version 2.0 of Launchpad, their code-hosting platform. Enhancements include 'a planned API that'll allow third-party applications to authenticate, query and modify data in the massive Launchpad database, without a user needing to manually access the system via a browser.' Mark Shuttleworth went on to state that Linux's market share will grow when it has better eye-candy than Apple's."

Read more of this story at Slashdot.

ydrol writes "After building my new Core 2 Quad Q6600 PC, I was ready to unleash video conversion activity the likes of which I had not seen before. However, I was disappointed to discover that a lot of the conversion tools either don't use SMP at all, or don't balance the workload evenly across processors, or require ugly hacks to use SMP (e.g. invoking distributed encoding options). I get the impression that open source projects are a bit slow on the uptake here? Which open source video conversion apps take full native advantage of SMP? (And before you ask, no, I don't want to pick up the code and add SMP support myself, thanks.)"

Read more of this story at Slashdot.

snydeq writes "InfoWorld's Peter Wayner delves into the ill-defined realm of 'cloud computing,' providing a deeper look at four shared services: Amazon EC2, Google App Engine, GoGrid, and AppNexus. Offering wildly divergent amounts of hand-holding at various layers in the stack, the services simplify your workload but force you into a set, 'ball-and-chain-computing' routine that you may not prefer. Sure, the services allow you to pull CPU cycles from thin air whenever you need to, but they can't solve the deepest problems that make it hard for applications to scale gracefully, Wayner writes. He describes these 'clouds' as an evolving experiment, rife with potential but 'far from clear winners over traditional shared Web hosting.' The sobering look at the trend includes a QuickTime tour of each service — EC2, App Engine, GoGrid, AppNexus (those links all .MOV)."

Read more of this story at Slashdot.

Barence writes "Google's Blogger service is responsible for 2% of the world's malware hosted on the Web, according to a new report from security firm Sophos. The company claims hackers are setting up pages on the free blogging service to host malicious code, or simply posting links to infected websites in other bloggers' comments. 'Blogger accounts for around 2% of malware,' according to Sophos's senior technology consultant, Graham Cluley. 'It's head and shoulders above the rest [of the blogging services].'" Sophos believes that Blogger is favored because, being part of Google, it gets spidered early and often.

Read more of this story at Slashdot.

The LWN.net Weekly Edition for July 24, 2008 is available.

Chromodromic writes "Apress's newest Django offering, Practical Django Projects by James Bennett, weighs in lightly at 224 pages of actual tutorial content, but trust me, they're dense pages. Filled with pragmatic examples which directly address the kinds of development issues you will encounter when first starting out with Django, this book makes an important addition to the aspiring Django developer's reference shelf. In particular, the book's emphasis on demonstrating best practices while building complete projects does an excellent job of accelerating an understanding of Django's most powerful features — in a realistic, pragmatic setting — and which a developer will be able to leverage in very short order." Read below for the rest of Greg's review.

Read more of this story at Slashdot.