Apple Finally Fixes DNS Bug

With today’s release of Security Update 2008-006 Apple has finally addressed this summer’s DNS bug. In their previous update they fixed BIND, but that only affects people running servers. Now, they’ve updated mDNSResponder. Clients are no longer susceptible to DNS cache poisoning attacks thanks to the inclusion of source port randomization.

The Security Update addresses some other interesting bugs. Time Machine was saving sensitive logs without using the proper permissions, so any user could view them.

[photo: edans]

Top 10 Greatest Hacks Of All Time, According To PC Magazine

PC Magazine has published their top 10 greatest hacks of all time.  Seriously, just ten *eyeroll. It is fairly cute though and there are a few interesting tidbits.  Most notably, [Ben Heckendorn] made the list with one of his portable units. We’re a bit surprised that they didn’t choose the fantastic work he did on the one handed controller, since it could actually help people play who previously couldn’t.

LockCon Coming Soon

The Open Organisation Of Lockpickers (TOOOL) is planning a new annual gathering for lockpickers. October 9-12th they will hold the first ever LockCon in Sneek, Netherlands. The event was spawned from the Dutch Open lockpicking championships, but they’ve decided to expand beyond just competition into a full conference. This year the conference is limited to just 100 lockpickers, technicians, manufacturers, hackers, and law enforcement members. They’ll compete in picking competitions, safe manipulation, and key impressioning.

On a related note: Organizer [Barry Wels] just became the first non-German to win an SSDeV competition with his key impressioning skills. We covered key impressioning when we saw his talk about high security keys at The Last Hope. He says it’s only been about two years worth of study and 500 keys to become a master. He managed to open the lock in 5:13 filing two whole keys during that time.

[photo: Rija 2.0]

UAV Medical Couriers

We’re skeptical about most technology that’s designed to help remote villages (yes, even that one), but these new UAV medical couriers look like a great idea. The turn around time for medical sample analysis in remote South African villages can be excruciating. A team of engineers have attempted to adapt two different unmanned aerial vehicles for transport of medical samples. These could be either blood or saliva that needs testing. Test results would be relayed via phone as they are now, but the initial transport time would be much faster. The larger of the two UAVs can carry up to 500g; that’s enough to haul two units of blood for transfusion. The UAVs can be launched by hand and can survive winds up to 45kph. They fly their preprogrammed routes autonomously and don’t require any operator intervention. The team has flown two successful trials and is waiting for approval from the South African Civil Aviation Authority. For safety, they’re only transporting samples that can be sterilized before flight. New Scientist has a short video after the break. Continue reading “UAV Medical Couriers”

Apple Tries To Stop Sneaker Hackers

Apparently, Apple has decided that extending DRM to your Nike accessories will keep hackers at bay.  Sick of people cutting the sensors out of their Nike shoes for use on other apparell, they have applied for a patent. Ever noticed the warning that it’s illegal to pull the tag off of a mattress?  Did that stop you?

[via Slashdot]

Hack A Day Fail Contest Winner

We had a lot of entries for our Fail contest; there can only be one winner though. We liked [Gordon LaPlante]’s entry pictured above most of all. It’s big, it’s broken, and it’s black and white; that certainly sounds like us. [Gordon] wins $100 worth of No Starch Press merchandise.

There were plenty of other honorable entries. You can view them in the Hack a Day Flickr photo pool. We saw a couple themes emerge during the contest and have highlighted some of them after the break. Continue reading “Hack A Day Fail Contest Winner”