WMF zero day exploit

Latest report is that the exploit installs if you even download or index an infected WMF file. In other words if you use Google Desktop, which automagically touches your media files, then your system will be trojaned faster than you can say “how convenient”. No known patches are available.

F-secure, as usual, is ahead of the game with a new signature that detects the three variations already in the wild. They also have a pointer to Sunbelt who has a link to BugTraq.

Sparse information so far, but the early responders seem pretty concerned and recommending that WMF be filtered and/or all traffic be blocked to the following sites:

Crackz.ws
unionseek.com
www.tfcco.com
Iframeurl.biz
beehappyy.biz

This seems far more serious than a Saudi teen winning a secular talent competition, so let’s hope someone higher-up issues the appropriate fatwa and/or is able to shutdown or block traffic at the carrier level.

Watch, but you can’t vote

Reuters said on Monday that a second telecom company in Saudi Arabia will block SMS messages intended as votes for a TV show:

Saudi religious scholars last May condemned the hugely popular talent show aired by Lebanese channel LBC as a crime against Islam when a young Saudi returned to a hero’s welcome after winning in the Lebanese capital Beirut.

The Saudi Telecommunications Co. (STC) made an announcement last January that it would block the messages, based on a religious decision made the prior year. The only other cell company in the country, a UAE-based consortium called Mobily (Etihad Etisalat), is finally following suit:

“We will definitely lose money, but how much, I don’t know,” [Mobily spokesman] Alghodaini said about the decision. “If we don’t (stop messaging) it would backfire on us and affect our brand.”

So, the carriers have been prohibited from profits related to the show, which does not stop the show or other forms of voting. Moreover, this certainly raises an interesting dilemma since the content of the message itself is not the problem but rather the intent of the sender to participate in a form of communication deemed objectionable to the religious leaders. And that kind of standard makes violations hard to find, let alone block.

MS Messenger 8 is NOT released

Here’s a funny new trend in announcing software to your users. “Microsoft Messenger 8 has not been released”. In fact, you may even want to say “If you see a file called BETA8WEBINSTALL.EXE (or an obvious variation/advertisement) then please ignore.”

Even the old saying “patch early/often” can and will be held against you by the clever worm and virus authors.

Why Christmas is a holiday

Because congress adopted a federal holiday on June 26, 1870. Simple.

Why, you ask?

Well, it had an inauspicious beginning in the country. It was so controversial (decadent) in the 1700s that it was actively banned by Puritains, including those who left England to settle the early American states. Perhaps more importantly it was shunned by the Founding Fathers since it was considerd an English tradition and irrelevant to the observance of religion. Alas, Digital History suggests by the early 1800s Christmas in America had become just another famously drunken, lewd and riotous event, rivaling the decadence of old King Charles’ England:

But despite the Puritans’ best efforts, Christmas in America became an excuse for dangerous hell raising. At Christmastime, men drank rum, fired muskets wildly, and costumed themselves in animal pelts or women’s clothes – crossing species and gender. In New York, Philadelphia, Baltimore, and other cities, they formed Callithumpian parades, which involved beating on the kettles, blowing on penny trumpets and tin horns, and setting off firecrackers.

Sounds like a blast, no? Well, the fun obviously never lasts forever and so things eventually came to a head when, according to the History Channel, the effects of Christmas coupled with a rise in poverty and class conflict of the early 19th Century gave concern to those who were in power:

In 1828, the New York city council instituted the city’s first police force in response to a Christmas riot. This catalyzed certain members of the upper classes to begin to change the way Christmas was celebrated in America.

The new message was that people should stay home, sit by a fire, and drink and eat themselves senseless instead of partying outside with others. And so, out of the political discord of 150 years ago we can today say thank you to the federal government for inventing a national tradition and opening the door for America’s two great factions, corporations and religions, to fight over control of the “real” meaning of this holiday.

Nast's Santa
Thanks should also go to Thomas Nast, arguably the father of modern American political illustration, for creating the modern American image of Santa Claus during the Civil War…it might be worth noting that Santa was always pro-Union and anti-slavery.

Oh, and why December 25th? Apparently Pope Julius I wanted something to compete with the popularity of the festival “Saturnalia”, and probably found it most convenient to just rebrand the pagan holiday with a new name. Merry Saturnalia had a bad ring to it, I guess (especially since the word implied an “inversion of order” instead of something Christ-like).

Personally, I think the holiday should be celebrated on June 26th before someone starts another winter riot over the latest must-have expression of modern faith, like an XBox.