Exploit Released for Airport Drivers

Metasploit founder HD Moore has released an exploit for an unpatched vulnerability in the Apple Airport driver that ships with some PowerBook and iMac computers. Moore said the exploit is not related to the Wi-Fi driver flaws discovered and discussed in Aug. 2006 by researchers David Maynor and Jon Ellch at the Black Hat Briefings. Moore, who is collaborating with Ellch on Wi-Fi flaw research, named the exploit after Daring Fireball, a Mac blogger who doubted the Black Hat findings and issued a public challenge to Ellch and Maynor.

Haiku Icon Set Contest Winner

Many BeOS enthusiasts were eagerly awaiting the results from the contest Haiku held in order to determine its icon set. People unfamiliar with BeOS won't understand what the fuss is all about; well, BeOS's isometric icon set was one of the defining elements of the look of BeOS. I am happy to report that the icon set for Haiku is almost exactly identical to the svg version of the original BeOS icon set (used in Zeta, among others). On a slightly related note, there's news about Vista's icons as well.

Trusted Computing for Mac OS X

Amith Singh writes about the Trusted Computing Module found in Intel Macs. "Regardless of what the media has been harping on for a long time, and regardless of what system attackers have been saying about the 'evil TPM protection' Apple uses, Apple is doing no TPM-related evil thing. In fact, Apple is doing no TPM-related cryptographic thing at all in Mac OS X. Yes, I know, there has been much talk of 'TPM keys' and such, but there are no TPM keys that Apple is hiding somewhere. More specifically, Apple simply does not use the TPM hardware. In Apple computer models that do contain a TPM, the hardware is available for use by the machine's owner. Of course, to use it you need a device driver, which Apple indeed doesn't provide."

Thoughts on Mandriva’s Future

"Mandriva 2007 may be the best distribution I have used. Looking through Mandriva's forum, you see employees of the company who care and are genuinely trying to help. Mandriva offers 'Free as in freedom' versions and versions with propriatery software. You would expect a release like this to be trumpeted. Instead, the release was met with hostility. Forums on tech sites were filled with Linux users cheering for the end of Mandriva. What happened? How did a company that was loved at one time become so unpopular? Is the hostility justified?"

Review: Ubuntu 6.10

Edgy. Eft. Review. "Dapper Drake was a huge step forward since Breezy Badger. Edgy Eft doesn't impress as much but still brings its lot of innovations and improvements over its predecessor; its artwork is a tiny bit better, its software selection is more up to date, its package manager is better than ever and its new upstart makes it really fast to boot. Of course it doesn't have the desktop and the artwork of Fedora Core 6, or the integrated 3D effects of Mandriva 2007, but it's still in my opinion the best Linux distribution there is and as with every single one of its releases, it just proved it once more."

Working with the WebKit Nightly Builds

"One of the main benefits of an open source WebKit is allowing developers to download nightly browser builds from the WebKit Open Source Project page. Nightly builds allow you as a developer to prepare for changes before they wind up on your users' desktops. This article describes how you can leverage WebKit nightly builds to determine how changes in the framework may affect your web content, Dashboard widgets, or WebKit-based application in future versions of Mac OS X."

Microsoft Application Verifier 3.3

"Application Verifier is designed specifically to detect and help debug memory corruptions and critical security vulnerabilities. It makes it easier to create reliable applications by monitoring an application's interaction with the Windows operating system, profiling its use of objects, the registry, the file system, and Win32 APIs (including heaps, handles, locks, and more). It also includes checks to predict how well the application will perform under Least-privileged User Account operation, compatibility tests to be used in logoing, and print tests to verify your usage of the print subsystem."

OpenBSD 4.0 Released

"We are pleased to announce the official release of OpenBSD 4.0. This is our 20th release on CD-ROM (and 21st via FTP). We remain proud of OpenBSD's record of ten years with only a single remote hole in the default install. As in our previous releases, 4.0 provides significant improvements, including new features, in nearly all areas of the system." More here. Update: First review here.

Writing A Lisp Interpreter In Haskell

"The article is about my experience with Haskell and the process of working with it. I will describe which features of Haskell I used to implement particular aspects of my interpreter, how they're different from the object oriented world, why they helped me get things done faster, and how I had to change my program whenever my initial efforts took me to a dead end. While the jury's still out how well Haskell performs in other domains (I'm just starting my web application project) I hope this article sparks your interest in this beautiful language and explains some things programmers new to Haskell often find confusing." More here.

‘Fedora Core 6 Innovates Unabated’

"During tests, Fedora Core 6 impressed eWEEK Labs with the progress it has made toward making Security - Enhanced Linux - and the dramatically improved security protections that SELinux helps afford - more palatable. We also liked the look of Fedora Core's new graphical and command-line tools for managing Xen virtual machines, although, as with every Xen product we've yet tested, plenty of rough spots remain."

South East 2006 Show Videos

"Following the talks given at this month's South East RISC OS show in Guildford, Surrey, Leo White has kindly uploaded the video recordings he made of the theatre presentations. If you have a web browser with a recent version of Flash installed, you can go watch them now on Google Video. The three pieces, which cover RISCOS Ltd, Castle, RISC OS Open and RISC OS Now, are fairly good quality, and it's pretty clear what the speakers are saying."

Picture Your Disk Space with 3D Filesystem Browsers

"You don't need a Ph.D. in scientific visualization to have some fun with three-dimensional data. Whether you're searching for an unused nook in a cramped disk partition, or trying to find the bloated temp/ folder that's crashing your system, sometimes the flat folder view of a traditional GUI file browser is little help. Luckily, Linux offers a variety of 3-D filesystems that can make your disk usage statistics come alive."

What’s Wrong with Software Patents?

"The simple question 'what's wrong with software patents?' stirs up controversy and divides the IT industry into two camps like no other. Every group has their own ideology about software patents. Those who don't like them claim that they are anti-competitive, that they are tools used by industry giants to crush free and open software, that they are bad for innovation, that they are monopolies. Those who like them claim that they are simply units of intellectual property, to be traded like any other commodity."

WalterCon 2006 Coverage

"The Haiku Project had its annual conference in Orlando this past weekend, and though I have little experience with BeOS or Haiku, I decided to attend and write about the conference because it's 20 minutes from my home. It's called WalterCon because 'Walter' was one of the proposed names for what was to become a free replacement for BeOS. Be, Inc. may be dead and gone, and the BeOS source code may have been sold and warehoused, but the spirit of Be lives on in Haiku and WalterCon. If only it had a little more developer support, you'd be hearing about the Haiku operating system a lot more often. Heck, you might even be using it."