Penquis Beekeepers’ March Meeting

Penquis Beekeepers’ monthly meeting will be held Tuesday, March 14th at the VFW on Cedar Street in Dexter at 7:00 p.m. Anyone interested in learning about keeping bees is welcome to attend. Jennifer Lund, the new Maine State Bee Inspector, will be coming to meet us and speak on basic …

Penquis Beekeepers’ monthly meeting will be held Tuesday, March 14th at the VFW on Cedar Street in Dexter at 7:00 p.m. Anyone interested in learning about keeping bees is welcome to attend. Jennifer Lund, the new Maine State Bee Inspector, will be coming to meet us and speak on basic …

Google Discloses Yet Another New Unpatched Microsoft Vulnerability In Edge/IE

An anonymous reader quotes BleepingComputer:
Google has gone public with details of a second unpatched vulnerability in Microsoft products, this time in Edge and Internet Explorer, after last week they’ve published details about a bug in the Windows GD…

An anonymous reader quotes BleepingComputer:
Google has gone public with details of a second unpatched vulnerability in Microsoft products, this time in Edge and Internet Explorer, after last week they’ve published details about a bug in the Windows GDI (Graphics Device Interface) component… The bug, discovered by Google Project Zero researcher Ivan Fratric, is tracked by the CVE-2017-0037 identifier and is a type confusion, a kind of security flaw that can allow an attacker to execute code on the affected machine, and take over a device.

Details about CVE-2017-0037 are available in Google’s bug report, along with proof-of-concept code. The PoC code causes a crash of the exploited browser, but depending on the attacker’s skill level, more dangerous exploits could be built… Besides the Edge and IE bug, Microsoft products are also plagued by two other severe security flaws, one affecting the Windows GDI component and one the SMB file sharing protocol shipped with all Windows OS versions…

Google’s team notified Microsoft of the bug 90 days ago, only disclosing it publicly on Friday.

Read more of this story at Slashdot.

Leer y charlar

Tuesday, March 14, 2017 1 p.m. to 2 p.m.Tuesday, March 28, 2017 1 p.m. to 2 p.m. Location: Camden Public Library, 55 Main St., Camden, ME For more information: 207-236-3440; librarycamden.org/event/28426/2017-03-14/ Read and chat–entirely in Spanish! Spanish-language reading and conversation group. All who are proficient in Spanish are welcome. FMI …

Tuesday, March 14, 2017 1 p.m. to 2 p.m.Tuesday, March 28, 2017 1 p.m. to 2 p.m. Location: Camden Public Library, 55 Main St., Camden, ME For more information: 207-236-3440; librarycamden.org/event/28426/2017-03-14/ Read and chat–entirely in Spanish! Spanish-language reading and conversation group. All who are proficient in Spanish are welcome. FMI …

Apache Subversion Fails SHA-1 Collision Test, Exploit Moves Into The Wild

WebKit’s bug-tracker now includes a comment from Friday noting “the bots all are red” on their git-svn mirror site, reporting an error message about a checksum mismatch for shattered-2.pdf. “In some cases, due to the corruption, further commits are blo…

WebKit’s bug-tracker now includes a comment from Friday noting “the bots all are red” on their git-svn mirror site, reporting an error message about a checksum mismatch for shattered-2.pdf. “In some cases, due to the corruption, further commits are blocked,” reports the official “Shattered” web site. Slashdot reader Artem Tashkinov explains its significance:

A WebKit developer who tried to upload “bad” PDF files generated from the first successful SHA-1 attack broke WebKit’s SVN repository because Subversion uses SHA-1 hash to differentiate commits. The reason to upload the files was to create a test for checking cache poisoning in WebKit.

Another news story is that based on the theoretical incomplete description of the SHA-1 collision attack published by Google just two days ago, people have managed to recreate the attack in practice and now you can download a Python script which can create a new PDF file with the same SHA-1 hashsum using your input PDF. The attack is also implemented as a website which can prepare two PDF files with different JPEG images which will result in the same hash sum.

Read more of this story at Slashdot.

Joseph Wapner, 97, folksy ‘People’s Court’ judge, dies at 97

Joseph A. Wapner, a retired California judge whose flinty-folksy style of resolving disputes on the show “The People’s Court” helped spawn an entire genre of courtroom-based reality television with no-nonsense jurists and often clueless litigants, died Feb. 26 at his home in Los Angeles. He was 97.

Joseph A. Wapner, a retired California judge whose flinty-folksy style of resolving disputes on the show “The People’s Court” helped spawn an entire genre of courtroom-based reality television with no-nonsense jurists and often clueless litigants, died Feb. 26 at his home in Los Angeles. He was 97.

UMaine baseball team wins first two weekend games

The University of Maine baseball team picked up wins in its first two weekend games at Del Rey, Florida, beating South Dakota 4-3 on Saturday before taking a 6-0 decision against the Jackrabbits on Sunday morning. In Sunday’s first game, three UMaine pitchers combined on a shutout behind six innings …

The University of Maine baseball team picked up wins in its first two weekend games at Del Rey, Florida, beating South Dakota 4-3 on Saturday before taking a 6-0 decision against the Jackrabbits on Sunday morning. In Sunday’s first game, three UMaine pitchers combined on a shutout behind six innings …

Open Source Car-Hacking Tool Successfully Crowdfunded

An anonymous reader writes:
Two geeks are crowdfunding an open source car hacking tool that will allow builders to experiment with diagnostics, telematics, security, and prototyping. “Cars have become complicated and expensive to work with,” they expla…

An anonymous reader writes:
Two geeks are crowdfunding an open source car hacking tool that will allow builders to experiment with diagnostics, telematics, security, and prototyping. “Cars have become complicated and expensive to work with,” they explain on a Kickstarter page. “Macchina wants to use open source hardware to help break down these barriers and get people tinkering with their cars again.” After years developing a beta prototype, they announced a tiny plug-and-play device/development platform (that can also be hardwired under the hood) on an Arduino Due board with a 32-bit ARM microcontroller. They almost immediately reached their $25,000 funding goal, and with 24 days left to go they’ve already raised $41,672, and they’re now also selling t-shirts to benefit the EFF’s “Right to Repair” activism.

Challenging “the closed, unpublished nature of modern-day car computers,” their M2 device ships with protocols and libraries “to work with any car that isn’t older than Google.” With catchy slogans like “root your ride” and “the future is open,” they’re hoping to build a car-hacking developer community, and they’re already touting the involvement of Craig Smith, the author of the Car Hacker’s Handbook from No Starch Press.

“The one thing that all car hobbyists can agree on is that playing with cars isn’t cheap,” argues the campaign page. “Open source hardware is the answer!”

Read more of this story at Slashdot.

Can a really strict diet prolong your ‘health span’?

A discovery, published recently in the peer-reviewed journal Aging Cell, raises the possibility of developing therapeutic drugs that stave off aging and prolong the “health span” in humans — without the unpleasant and potentially risky constraints of severe dietary restriction.

A discovery, published recently in the peer-reviewed journal Aging Cell, raises the possibility of developing therapeutic drugs that stave off aging and prolong the “health span” in humans — without the unpleasant and potentially risky constraints of severe dietary restriction.

DownEast Dancers March Dance

Saturday, March 11, 2017 7 p.m. to 9:30 p.m. Location: Downeast Family YMCA, State Street, Ellsworth, Maine For more information: 207 664-3355; n/a Saturday March 11, 2017 DownEast Dancers March Dance at the Moore Community Center, 125 State Street, Ellsworth. 7:00PM Rumba Lesson with David Lamon, followed by open dancing …

Saturday, March 11, 2017 7 p.m. to 9:30 p.m. Location: Downeast Family YMCA, State Street, Ellsworth, Maine For more information: 207 664-3355; n/a Saturday March 11, 2017 DownEast Dancers March Dance at the Moore Community Center, 125 State Street, Ellsworth. 7:00PM Rumba Lesson with David Lamon, followed by open dancing …

Horace Parlan, jazz pianist who overcame disability, dies at 86

Horace Parlan, a jazz pianist who overcame limited use of his right hand to develop a distinctive punchy style that made him a stalwart of the hard-bop movement of the 1950s and 1960s and a notable collaborator with such stars as Charles Mingus and Dex…

Horace Parlan, a jazz pianist who overcame limited use of his right hand to develop a distinctive punchy style that made him a stalwart of the hard-bop movement of the 1950s and 1960s and a notable collaborator with such stars as Charles Mingus and Dexter Gordon, died Feb. 23 at a nursing home in Naestved, Denmark. He was 86.