Makesolutions.net

snake-oil-security writes "Last fall Amit Klein found a serious weakness in the OpenBSD PRNG (pseudo-random number generator), which allows an attacker to predict the next DNS transaction ID. The same flavor of this PRNG is used in other places like the OpenBSD kernel network stack. Several other BSD operating systems copied the OpenBSD code for their own PRNG, so they're vulnerable too; Apple's Darwin-based Mac OS X and Mac OS X Server, and also NetBSD, FreeBSD, and DragonFlyBSD. All the above-mentioned vendors were contacted in November 2007. FreeBSD, NetBSD, and DragonFlyBSD committed a fix to their respective source code trees, Apple refused to provide any schedule for a fix, but OpenBSD decided not to fix it. OpenBSD's coordinator stated, in an email, that OpenBSD is completely uninterested in the problem and that the problem is completely irrelevant in the real world. This was highlighted recently when Amit Klein posted to the BugTraq list."

Read more of this story at Slashdot.

U of Tennessee blocked P2P sites before RIAA law

Obama transition team names tech policy group

Security firm Finjan raises $22 million

Report: Swedish carrier planning iPhone MMS app

Netflix streaming service suffers licensing setback with Sony

More cosmetic delights for Gmail: themes

Green Hills spins off Integrity operating system

Photos: Nokia, Navteq team up as traffic monitors

Texas University launches security tech incubator

CNET News Daily Podcast: Microsoft shakes up security world

Windows Breaks Into Supercomputer Top10

Start-up Meraki to sell solar-powered Wi-Fi gear

The 'Morro' of the story

Interviewing Experienced IT People?

Trulia partners with 1020 Placecast for targeted ads

Mozilla chairman unfazed by Google Chrome

Broadband proponents to Congress: Invest in future, not autos

Monty Python Banks On the Long Tail Via YouTube

An Adobe browser, briefly considered

FCC Publishes "White Spaces" Rules