beast

Microsoft finally vanquishes the BEAST-related bug

A Microsoft Windows update today fixes a weakness in the protocols used to secure e-commerce sites, which was first exposed by researchers using a tool they dubbed "BEAST."

Microsoft planned to release the BEAST (Browser Exploit Against SSL/TLS)-related patch last month, but had to pull it because it created compatibility issues with SAP software. Researchers had demonstrated the vulnerability using BEAST in September, prompting fears that attackers would use the tool to snoop on protected Internet sessions in what is called a "man-in-the-middle" attack. MS12-006 patches a hole in the Secure Sockets Layer and … Read more

Microsoft fixes Duqu hole, but not BEAST problem

Microsoft has finally patched a flaw being exploited by the Duqu Trojan, but a fix to protect Internet Explorer users from having their encrypted communications snooped on didn't quite make the cut.

As part of Patch Tuesday today Microsoft released 13 security bulletins, fixing 10 important bugs and three critical ones, according to the advisory.

MS11-087 fixes a critical hole in the TrueType font handling in the Windows kernel that could allow an attacker to take control of a machine. It has been used in the wild to infect systems with the Duqu malware. "Now that the patch … Read more

Browsers tackle the 'BEAST' Web security problem

Browser makers are devising ways to protect people from a security protocol weakness that could let an attacker eavesdrop on or hijack protected Internet sessions. Potential solutions include a Mozilla option to disable Java in Firefox.

The problem--considered theoretical until a demonstration by researchers Juliano Rizzo and Thai Duong at a security conference in Argentina last week--is a vulnerability in SSL (Secure Sockets Layer) and TLS (Transport Layer Security) 1.0, encryption protocols used to secure Web sites that are accessed using HTTPS (Secure Hypertext Transfer Protocol).

The researchers created software called BEAST (Browser Exploit Against SSL/TLS) that can … Read more

Google opens Wallet

The owner of the Qwikster Twitter handle is banking on selling it to Netflix, Verizon unveils a $99 4G LTE capable smartphone, and Google Wallet finally launches with support only on Sprint's Nexus S 4G phone so far.

Links from Tuesday's episode of Loaded:

Google Wallet launches Qwikster Twitter account owner wants cash Dish Networks to unveil BlockBuster streaming $99 Verizon 4G LTE phone Researchers discover HTTPS security hole OS X Lion vulnerable to local users Subscribe:  iTunes (MP3) |  iTunes (320x180) |  iTunes (HD) |  RSS (MP3) |  RSS (320x180) |  RSS HD

Report: Porn stars cuddling up to Twitter

If you don't think that porn stars want to have any direct connection with their fans, think again. While they may not invite fans over to their houses, many adult stars seem to be very, very fond of developing relationships--digitally, at least--via Twitter.

That's what a story in the Daily Beast argues. Titled "Why porn stars love Twitter," the article suggests that hundreds of adult film actresses have turned to Twitter as a way to give the impression of being accessible to fans.

This, the article says, despite years of the adult industry being slow to … Read more

The 404 666: Where we mark the sign of the beast (podcast)

We've made it to episode #666, and there's even a Call From the Public from the Dark one himself congratulating us on making it this far. The truth is that every day we get to do The 404 is a miracle, so thanks to all the listeners who make this show possible!

On this especially evil episode, we're chatting about researchers working to develop prescription music playlists, Caroline McCarthy's first look review of Sorkin's Facebook movie "The Social Network", and a whole lot of backlash from the entire state of Tennessee.

With more and more music discovery sites like Pandora and Apple's Ping network popping up, it seems the next evolution of music classification is coming in the form of prescription music playlists.

The Emotion Classification in Contemporary Music is a three year project led by a team at the Glasgow Caledonian University in the UK, who are the trying to classify music for search and organization according to emotional content. Of course, one of the major hurdles in the research are all the genre-bending artists in addition to your own personal relationship to a piece.

The article uses The Cure as a good example or a emotionally polarizing artist, which leads us to a discussion about what songs invoke certain feelings or memories within our own canon. It's probably easy to guess which of us connects to each of these three songs.

"The Social Network" finally drops in theaters on October 1st, 2010 but CNET's own Caroline McCarthy got to check out an advanced screening and posted her thoughts on her CNET blog, The Social.

She tells us that the movie is more than just a bunch of glorified status updates and poking- it's a story about how a Web site changed the way that friends communicate with each other, or in her words: "the ambiguity of friendship, identity, and social status."

She also runs down quick performance reviews of all the actors in the movie, including a surprisingly positive take on Justin Timberlake's depiction of Napster co-founder Sean Parker.

Be sure to check out the full review for more in-depth analysis, but if you're just looking for a quick take, Caroline awards "The Social Network" four out of five stars...but seriously, read the review.

Episode 666 Subscribe in iTunes audio | Suscribe to iTunes (video) | Subscribe in RSS Audio | Subscribe in RSS Video… Read more

COMPUSA.com has the Systemax Beast IV Desktop PC for $599.99, after $400 Instant savings.

Save $400 on the Systemax Beast IV Desktop PC from COMPUSA.com >> Regular price is $999.99 >> Sale price is $599.99 >> Savings $400 (40.00%) >> Click here for deal

The 404 254: Where we all wish we were at the OTHER conference

<

Today marks the first official day of the CES show here in Las Vegas, and the entire showroom floor is buzzing about the 404! Okay, not exactly, but we're here anyway to give you our unique perspective on the goings-on. Today, we ask Crave Editor Erica Ogg to join us for the first half and speak on the Palm Pre announcement.

One thing we've noticed this year is the popularity of electronic devices targeted toward the geriatric-age bracket. We're all for helping out Grandma, but does she really need a Bluetooth diabetes monitor? She's got … Read more

Killer Download: Bring the news to you

Whenever I'm setting up on a new computer or test machine at work, or even after I've downloaded my must-have programs on a new home machine, one of the first things I do is grab an RSS newsreader. Though you can use Web browser favorites to hit and save your most visited sites, newsreaders have a few advantages that make getting all the latest updates even easier.

With a good newsreader on your machine, anytime you see an available RSS feed at a Web site (usually with an orange RSS or XML label), you can have all the … Read more