We have issued a flash for a serious security issue.  We want to ensure that all customers using Connections 3.0 apply this patch - certainly if they are in production, but also if they have pilots where a breach in the security of the logon would be an issue. 

ÂTime to get patched - you have been warned.
https://www-304.ibm.com/support/docview.wss?mynp=OCSSYGQH&mync=E&uid=swg21462435&myns=swglotus 



The issue was found internally by our team.  There are no public disclosures of the vulnerability at this time, and no evidence that anyone has found or exploited the issue yet.  We won't be sharing any information on the nature of the issue, in order to minimize the risk of a public disclosure. 


It is a WAS issue, specific to WAS 7.0.0.x, and the WAS patch completely protects against the issue. 

Whether the customer has seen an issue or not, they are exposed. 

Our own evaluation of the threat level of this specific exposure dictated that the patch be applied immediately to Greenhouse for example. 


We have also created Connections ifixes to make us less exposed to WAS bugs in this area in the future.. Â They aren't mandatory, just additional defensive code.
Archive for the ‘Google Reader’ Category
Deployed or upgraded to Lotus Connections 3.0? Read this
Twitter Dots: Mapping all Tweets for a specific Keyword
Twitter Dots [twitterdots.com] translates individual tweets as simple dots on a geographical world map. It is as simple as that. The actual keyword changes each day.
Still interesting to observe how a timeline animation shows some people still tweet "Good Morning" in the late evening... That or the geographical location might be off for a lot of people (e.g. overseas holidays?).
More information is available here.
Feature: Anonymous speaks: the inside story of the HBGary hack
It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the denial-of-service attacks that hit MasterCard, Visa, and other perceived enemies of WikiLeaks late last year.
When Barr told one of those he believed to be an Anonymous ringleader about his forthcoming exposé, the Anonymous response was swift and humiliating. HBGary's servers were broken into, its e-mails pillaged and published to the world, its data destroyed, and its website defaced. As an added bonus, a second site owned and operated by Greg Hoglund, owner of HBGary, was taken offline and the user registration database published.
Over the last week, I've talked to some of those who participated in the HBGary hack to learn in detail how they penetrated HBGary's defenses and gave the company such a stunning black eye—and what the HBGary example means for the rest of us mere mortals who use the Internet.
Read the comments on this post
The truth about why things smell bad: Vibrating molecules [Biology]
Jeopardy -Playing Watson Computer System Could Revolutionize Research
By Nicola Jones
IBM's supercomputer Watson is going up against top players of the US television quiz programme Jeopardy! this week, stirring up excitement in the artificial-intelligence community and prompting computer science departments across the country to gather and watch.
"It is, in my mind, a historic moment," says Oren Etzioni, director of the Turing Center at the University of Washington, Seattle. jeopardy-playing-watson>[More]
Possible Ninth Planet Rocks the Web
by Claudine Zap
Forget the "Sputnik moment." If two astrophysicists are correct, we may be having a "Tyche moment" -- a ninth planet to add to our solar system. But that's a big "if."
The two scientists who make the claim, Daniel Whitmire and John Matese from the University of Louisiana at Lafayette, say a planet they named Tyche -- that is four times the size of Jupiter -- may be lurking in the outer solar system.
The pair says that the NASA Wise telescope may already have data to prove its existence, but that the planet, if it exists, won't reveal itself for another two years.
That hasn't stopped astronomically high searches on Yahoo! for "tyche planet," which have soared 3,000% in the last day alone.
The researchers have been collecting data for the last 10 years, and though they admit the unusual orbital patterns in a far-out region of the solar system called the Oort Cloud could be explained by a ginormous planet, it also could be a statistical fluke.
Many scientists have their doubts about a possible planet: After all, seeing is believing when it comes to astronomy.
"There could very well be something causing the orbital anomalies in the Oort Cloud that are claimed, " says Bing Quock, the Assistant Director of the Morrison Planetarium at the California Academy of Sciences. He added, "But astronomers won't actually believe it until they see it, and that's going to take repeated observations."
Sources:
Space.com
Time Magazine
California Academy of Sciences
Ikea Stonehenge
Published in the QI H Annual. Written by Justin Pollard with input from John Lloyd and Stevyn Colgan.
Thank you to Justin Pollard, John Lloyd and Stevyn Colgan.
If you like this, try:
Solar-powered hornet is the Superman of the animal kingdom [Mad Biology]
Giant ice caverns lead the hunt for exotic particles [Mad Science]
Spousal Shout-Out
Have I mentioned that my lovely wife Jennifer writes a blog called Cocktail Party Physics? And that she’s written a wonderful book called The Calculus Diaries: How Math Can Help You Lose Weight, Win in Vegas, And Survive a Zombie Apocalypse?
Well it’s hardly any secret now. Last night she was on one of the best things on TV these days, the Late Late Show with Craig Ferguson. Where she rocked, both literally and figuratively.
How much more proud could I be? None more proud.