Windows Wireless Networking Flaw Identified
Washingtonpost.com is reporting from the 2nd annual Shmoocon hacker conference about the release of a previously undocumented vulnerability in Windows. The flaw takes advantage of a feature on Windows laptops that have wireless cards built-in. Security researcher Mark Loveless found that Windows laptops which cannot find a wireless connection are configured to broadcast the name of the last SSID they associated with. They assign themselves an ad-hoc ‘link local’ (think 169.254.x.x.) address, and an attacker can configure his machine to broadcast an SSID of the same name. Thus, the attacker associates with that ‘network’ and communicates directly with the victim’s machine. The funny part from the Post blog entry is that Microsoft helped author the RFC for link local.





We know you people love your Treo 650 probably more than your first born, so here is some more juicy information about the latest toy from Palm, the Treo 700w. Dave over at MobilityToday (formerly Dave’s iPaq) has a video podcast up where he goes through all of the interior and exterior characteristics of the next generation Treo. Wipe that drool off your lip, it is just a phone.
This is the new design for a stripped-down version of the Sony Ericsson P990. The P990 is a Symbian-powered smartphone capable of a lot; the new P970 will have a Blackberry-esque QWERTY keyboard, 1-megapixel camera but no Wi-Fi. This phone is expected to drop in the first quarter of 2006, so keep your eyes open for more information.