Story 2014-10-29

ChromeOS and Android to remain separate for now

by
in mobile on (#2TS3)
CNET just interviewed Brian Rakowski, Google's vice president of product management for Android, who has confirmed that the two teams in charge of the Android mobile device software and the Chrome OS software for PCs [should] work together much more. But that won't mean sweeping changes, at least for now.

"There's no plans to change the way the products work," said Rakowski. That might be disappointing to fans of Android who were hoping to see convergence of the two product lines as a result of internal reorganization that sees both Android and Chrome being developed under the same division.
Android and Chrome, both headed by Google Senior Vice President Sundar Pichai, are important businesses to Google. The company's cash cow is still search and advertising -- now a $50 billion a year business -- but Google CEO and co-founder Larry Page has called Android "the future" of the company.
There's some more, related commentary at OSNews.

wget prior to 1.16 allows for a web server to write arbitrary files on the client side

by
Anonymous Coward
in security on (#2TS1)
Here's a concern for most of us. Be aware that the popular program wget, in versions prior to 1.16, allows for a FTP server to write arbitrary files on the client side. Wget is commonly used in shell scripts to get files or web pages from servers for further processing locally. Wget has many other uses as well, and is an important part of much command line sorcery.

A Metasploit module is available for testing:

https://github.com/rapid7/metasploit-framework/pull/4088

the disclosure is here:

https://community.rapid7.com/community/metasploit/blog/2014/10/28/r7-2014-15-gnu-wget-ftp-symlink-arbitrary-filesystem-access

Redhat's bug is here:

https://bugzilla.redhat.com/show_bug.cgi?id=1139181

Orbital Sciences' Antares rocket and Cygnus cargo spacecraft explodes moments after launch

by
in space on (#2TRQ)
story imageAn unmanned NASA-contracted rocket exploded early Tuesday evening along the eastern Virginia coast, causing a huge fireball. Video shows the rocket rising into the air for a few seconds before an explosion. It then plummets back to Earth, causing more flames as it hits the ground. NASA tweeted that the failure occurred six seconds after launch. Afterward, the launch director said on NASA's feed that all personnel were accounted for and that no injuries were reported.

According to NASA, the Orbital Sciences Corp.'s Antares rocket and Cygnus cargo spacecraft were set to launch at 6:22 p.m. ET from the Wallops Flight Facility along the Atlantic Ocean. It was set to carry some 5,000 pounds of supplies and experiments to the International Space Station. Since the end of NASA's space shuttle program, it has relied on private companies -- specifically Orbital Sciences and SpaceX -- to bring materials to the space station, albeit using NASA facilities for launch. Tuesday's launch was supposed to be the fourth flight for Orbital until it ended, as the company acknowledged in a statement, in "catastrophic failure." Marking the first accident since NASA turned to private operators to deliver cargo to the International Space Station.