_Sharp'r_ writes "This new security audit from Texas is an example of why the solution to medical privacy isn't to store it all in a big government database. The report describes a myriad of problems with state health and welfare agency's information security. Some of the problems cited include lack of firewalls, wide open wireless access points and all the other "usual suspects" that we've come to expect from a government security solution. The network is especially vulnerable to internal misuse, according to the report. For example, 'poor access controls' allowed a Department of Health customer service employee to create 74 fraudulent birth certificates. The report found that many of the agencies' nearly 50,000 workers have access to "tremendous amounts of decentralized, confidential data." You can also access an html formatted version of the full report."

Casey West writes "Version 0.25 of the award-winning POE networking and multitasking framework has been released. This version is mainly a bug fix release." Read on for more...

scubacuda writes "C|net reports that the 9th U.S. Circuit Court of Appeals court has ruled in favor of Alan Porter's website, Voteexchange2000.com, a site enabling Gore and Nader voters to swap their Gore votes in states where Bush was likely to win anyway for the Green party candidate Nader. In response to the court's decision, Mark Rosenbaum, legal director of the ACLU's Southern California office, said, "We're pleased that the court's ruling permits us to challenge the legality of the secretary of state's partisan attempt to silence political speech on the Internet during the 2000 election." (For a look at some of the legal issues behind "vote swapping," visit Gigalaw)"

A few months ago, PGP creator Phil Zimmermann became a reseller for the current graphical version of the software he originally spawned, produced by PGP Corporation. Now, Zimmermann has just started selling through his own website a modern command-line encryption product called FileCrypt, which has its roots in an older version of PGP. Confusingly enough, this software is produced by a company called (Veridis), and doesn't say PGP on the box, because legally it can't. Network Associates, which acquired PGP Inc. in 1997, still holds the rights to that name; when NAI spun off PGP to PGP Corporation in 2002, they held onto the command-line version. PGP Corporation, for whom Zimmermann serves as a technical advisor (as well as a reseller), is contractually unable to sell a command-line version. (He is on the board of Veridis as well.) But why introduce a text-only version of utility software, anyway, when the GUI-fied desktop version has been maturing for years and costs less? Update: 02/07 23:07 GMT by T : Here are three instant clarifications: PGP Corporation was misrendered as "Open PGP" in this paragraph; Veridis' command line product was inspired by PGP but independently created; its codebase is separate from NAI's version of PGP; and the rights holder to the PGP name is PGP Corporation, not NAI.

wilko11 writes "There have been two cases recently where websites have requested the removal of modules from CPAN. These modules could be used to access the websites (EuroTV and Streetmap) from a PERL program. The question being asked on the mailinglists (threads about EuroTV and about Streetmap) is 'can companies dictate what software you can use to access web content from their server?'"

mvw writes "Wanna go beyond Java, Perl, or Python? Joe Armstrong has published a nice tutorial on implementing robust servers in the functional concurrent Erlang language. Here is the link."

davorg writes "One of Perl's great strengths is in processing text files. That is, after all, why it became so popular for generating dynamic web pages -- web pages are just text (albeit text that is supposed to follow particular rules). As XML is just another text format, it follows that Perl will be just as good at processing XML documents. It's therefore surprising that using Perl for XML processing hasn't received much attention until recently. That's not saying that there hasn't been work going on in that area -- many of the Perl XML processing modules have long and honourable histories -- it's just that the world outside of the Perl community doesn't seem to have taken much notice of this work. This is all set to change with the publication of this book and O'Reilly's Perl and XML." Read on to see how well Davorg thinks this book introduces XML text processing with Perl to the wider world.

We ran the "Call for questions" Monday, January 13, under the headline, Discuss BIOS and Palladium Issues With an AMIBIOS Rep. Note that Brian Richardson, AMI sales engineer, is a real engineer, not just a salesperson, and is also a staunch Slashdot reader who knows we have low tolerance for PR whitewashes around here. Brian's answers are real, not laundered, and he responded not only to the 10 questions we sent him but also to some he felt deserved answers even though they weren't moderated all the way up. Please note that in much of this interview he is speaking as "Brian Richardson, individual," and that his opinions do not necessarily reflect those of AMI's management. With that said, be prepared to learn a lot about the BIOS business, and how TCPA and Palladium relate (and don't relate) to it.

Ben Olmstead writes with the review below of Henry S. Warren's Hacker's Delight, which is not about tricking folks into providing sensitive information, but rather about how to cleverly manipulate computers into doing more work on their part with less work on yours. Read on for his brief review.

Mitchell writes "People from several language communities came together to create a joint year-in-review for Lua, Perl, Python, Ruby, and Tcl."

jonknee writes "During the latest MacWorld keynote, Steve Jobs announced new presentation software dubbed Keynote. It looked pretty sweet, but what caught my ear was Jobs' remark that it was XML based. As soon as I got my hands on Keynote, I investigated the .key file and found its XML portion (which is quite excellent XML at that). For those not lucky enough to have the software, I posted the blank presentation I took a peek at." I just want to know when someone is going to write up a Keynote module for Perl ...

James G. Speth writes "I just released a free public beta of iCommune, a plug-in for iTunes that enables music sharing over the network. Your friends' music libraries appear in the iTunes source list. You can browse their collections, and choose to download or stream their music. It also allows you to make your own music library available to others." It's a bit buggy, but it is a beta. It shows a lot of promise. It also comes with an indexer (in Python, though I might write my own in Perl :-) so you can share MP3s to iTunes clients outside of iTunes on the server end (such as from a Linux box, in theory).

Slashback this evening brings you a few corrections, updates, amplifications and reversals -- read on for more on the Xbox key cracking project, the new version of FireWire, and more.

Webi writes ""XP[http://www.extremeprogramming.org/] works best for medium-sized teams where a product can be delivered in stages, and where there's freedom to experiment with some of the more controversial techniques," author Ron Jeffries said. http://www.newsfactor.com/perl/story/20348.html"

Ursus Maximus writes "Scripting Language City is for folks who want to learn more about the future of this increasingly important subset of the programming universe. Scripting languages are not just for odd jobs anymore ;-))). Special attention is paid to four languages in Python City, Ruby City, Perl City, and JavaScript Expert Systems which includes a Scripting Language Chooser Program as well as a Basketball Expert Ssystem and a Football Expert System that are certainly something different from the usual same old mouse-over scripts usually found on JavaScript sites. There is also a web spider program that scrapes the web daily and provides updated lists of new web articles on scripting languages, with seperates outputs for each of the featured languages. as added bonuses, there is a page of essays and resources on open source and the free software movement called Farnham's Freehold and a page called The Linux Chronicles that follows the experiences of a Linux newbie with wit and humor. Not a slick professional web site, Scripting Language City is a work of love by a paramour of everything connected with scripting languages, open source, and the programming of free software."

bedessen writes "An article at NewsFactor summarizes the developments in new plastics that exhibit magnetic fields of fractal dimensions. Whereas a simple bar magnet produces magnetic fields that go from the north pole to the south pole, the fields of the new hybrid plastic sprout like branches of a cactus lined with secondary fields that resemble needles. As these fields become increasingly interlocked, they exhibit a unique kind of order. This intensely ordered structure might one day be key to storing information with a very high density. The researchers behind this are Arthur Epstein, director of the Center for Materials Research at Ohio State University, and Joel Miller, a professor of chemistry at the University of Utah. There's also this PDF overview of the subject, which is quite technical but still readable."

Stéphane Thiell writes, "I just released an update of Whamb, a little shareware CD/MP3/OGG player for Mac OS X 10.2. It's not as advanced as iTunes, though it now has playlists sharing using Rendezvous. A friend even wrote a tool in Perl which allows to run playlists server on POSIX systems." Nifty. It's still in development, but works pretty well. I've got the Perl daemon running too, with some local modifications. The Rendezvous support has some scalability issues with my 25GB of MP3s, which maybe why iTunes still doesn't have it ...

An anonymous reader writes "I found this while searching for Perl Jobs in India: "The Microsoft Next Generation Shell Team is designing and developing a new command line scripting environment from the ground up. The new shell and utilities, based on the .NET Frameworks, will provide a very rich object-based mechanism for managing system properties. To be delivered in the next release of Windows, it will include the attributes of competitors' shells (e.g. aliases, job control, command substitution, pipelines, regular expressions, transparent remote execution) plus rich features based on Windows and .NET (e.g. command discovery via .NET reflection API's, object-based properties/methods, 1:many server scripting, pervasive auto-complete)."

possible writes "Rapid7 has discovered a new class of vulnerabilities affecting SSH2 implementations from many vendors. These vulnerabilities affect a wide variety of SSH servers and SSH clients. Rapid7 designed an SSH protocol test suite called SSHredder. The SSHredder test suite contains a large number of SSH2 protocol binary test cases, and is released under the BSD license. Rapid7's testing has revealed many defects in products such as F-Secure, SSH.com, PuTTY, etc. OpenSSH and GNU LSH are not affected." Some of the affected vendors have released fixed versions, and some say there's nothing exploitable about the reported holes.

Henri Poole writes "I've got friends who ride their bikes for a week and get me and others to donate $100 to their cause. Spending more time on lists then roads, we've set up an analogous service for Free Software and Open Source projects. Substitute the physical sweat with a good hack, and you'll see the match. After you save your next newbie from tech-hell, just ask them to help your cause. In Lessig's blog, he writes "If there's one thing I've learned from watching, and tinkering, in this web-log space, it is that the many tiny brushstrokes of thousands paints more and more powerfully than the blast of even the most important and powerful papers...As I indicate on my Affero page, I count FSF and EFF as the two key players to support." And if you don't think you can make a difference, do this math: A $1 donation to the FSF for every user of GNU/Linux would increase their budget by 30 fold."