A scuffle broke out Thursday between saffron-robed monks and anti-war demonstrators at peace rally in Sri Lankan capital.

About six or seven monks from a right-wing Buddhist faction had stormed the stage during a peace rally attended by about 1,000 people in the capital, Colombo, shouting pro-war slogans, an AP reporter at the scene said.

... how does that work? "Fight this war now or we burn ourselves alive?

Maybe Jello, being in India, knows a little more about the civil war in Sri Lanka.

Pro-war Buddhist monks in Sri Lanka?

-How to ride a motorcycle
-How to take your hand off the throttle *before* shifting gears
-How to do a wheelie, for about half a second, when the bike's transmission jerks it upward
-How to properly bandage road rash
-How not to ride a motorcycle

******************************************

UPDATE 11.30 PM GMT

We are receiving 17,000 more defaced websites in these minutes. We will account them in this news but we are not sure we will ever be able to handle such a huge amount of notifications as to mirror all of them we should possess a distributed platform such the one Google is having on Akamai. The latest notified defacements seems to belong to the ISP secureserver.com

We have not examined the source code to the asp file in detail or done more than superficial research on this mass defacement, but this does not appear to be a vulnerability in IIS. This appears to be a problem with poor script coding and / or failing to properly validate user form input. I would guess that the hacker is able to inject their own code into the asp or php script being used to send mail."

Holy Shit! I was just handed something fun to look at for work.

Basically, this guy found 0day in the godaddy administration pages for every godaddy account. The count is 22,000+ and rising!

The biggest hacking incident in the web-hosting history!

Dc0de has joined what we have started referring to as "the club." People we know who have received legal threats for saying true things in a public place. This seems to happen a lot to computer security people.

People who use the legal system to squash critics instead of appropriately addressing their criticism in print are operating in a manner that is out of sync with the core values of this nation. I hold this sort of behavior in very poor esteem.

All around scary stuff. Its a sad day when opinions get silenced by lawsuits.

That slander charge is a bitch. I said a lot of very bad, public things about Blackboard, their executives, and the sexual habits of their mothers. Thankfully no one ever pulled that crap on me.

Actually, slander is a growing concern of mine. The way you all have seen me give a presentation at say, Phreaknic, is the same way I give a presentation at BlackHat: rather informal with a fair amount of profanity directed at those who deserve it.

Its only a matter of time before some no talent ass clown somewhere takes offense.

RE: Telling the Truth hurts...

Ran into a file on my laptop with some funny quotes from Shmoocon this past January:

"Boobs are always relevant"
-Rattle

"That is the most manly drink I've ever seen you drink"
-Decius

"Into freaky shit. I mean, I'm asian and it was freaky to me!"
-timball

"Are you interested in making lots of money?"
"Sure, Don't we all?"
-Abaddon to some Amway drone

"I just want to smack these people and say 'It's a freaking pyramid schema!'"
-Acidus

Gholamreza Aghazadeh, the head of Iran's nuclear program, said that Iranian scientists had succeeded in enriching uranium to a concentration of 3.5 percent.

There is a lot of scary talk going on today, so I did some digging and I finally found a number: Iran has used centrifuges to enrich Uranium Hexfloride gas to 3.5%. Spinning the gas in centrifuges is the most common technique for enriching uranium and was the appoarch used at Oak Ridge TN in the 1940s to create the first bombs. It is a slow and crude method, as uranium hexfloride is very corrosive and dangerous, and is not really used by the US or western nations anymore.

According to Wikipedia:

-85% enriched is considered "weapons grade" and is the minimum purity of the uranium in the US's arsenal.
-20% will create a usable bomb
-3% to 5% is what a light weight nuclear reactor will use. This is most common reactor and what Iran claims it wants to build.
-While the uranium could be placed in a dirty bomb, this would not be the best use. Since dirty bombs simply spread radioactive material, isotopes like Strontium-90 are more effective than Uranium-235

Update:
According to this history of nuclear weapons the average enrichment of the Little Boy nuclear weapon was 80%

Iran enriched Uranium to 3.5%

Today, the Chairman FCC stated they support a so-called "tiered Internet" where telcos can change the priority of the packets for other peoples data depending on who pays them.

Martin told attendees at the TelecomNext show that telcos should be allowed to charge web sites whatever they want if those sites want adequate bandwidth.

He threw in his lot with AT&T, Verizon, and the other telcos, who are no doubt salivating at the prospect at charging whatever the market can bear.

If this sounds like extortion that because it is (See Meme). So who is this FCC Chairman and why is he favoring the telecoms?

Martin worked several years for Wiley, Rein, and Fielding, "Rated Top Telecommunications Lobbyists" according to an article on their website. The firm represents the Bells as well as Viacom/CBS, Gannett, Belo, Emmis, Gray Television, and Motorola.

Bush nominated the slimeball lobbyist to become the chairman of the FCC? Martin now chairs the organization he spent years lobbying? You can't get a better example of "Fox guarding the hen house." But all can't be lost! This little clip from the "tiered Internet" article was hopefuly:

[Martin] did throw a bone to those who favor so-called "net neutrality" -- the idea that telcos and other ISPs should not be allowed to limit services or bandwidth, or charge sites extra fees. He said that the FCC "has the authority necessary" to enforce network neutrality violations. He added that it had done so already, when it stepped in to stop an ISP from blocking Vonage VoIP service.

Wow, the FCC did seem to foster VOIP, and why would a guy in the telecom's pocket do that?... oh wait, Kevin Martin didn't do any such thing. Kevin Martin wasn't even AT the FCC when that decision was made. It was the previous chairman, Michael Powell.

Update - My mistake, Kevin Martin was at the FCC during the Vontage VOIP issue. He was serving as one of the five FCC Commissioners. I'm looking up now how he voted on that issue.

Kevin Martin can suck it.

Hume did not have any quarrel with anything Thomas wrote. At least, he never mentioned any. His quarrel was with her questions -- her habit of asking argumentative questions.

That used to be what journalists did every day, but in the last 25 years, journalists have so gotten out of the habit of doing that, that people like Helen Thomas stand out. All journalists used to be like her. Now, she is an oddity. Bush always avoided calling on her because he knew she would ask tough questions. If all the journalists asked tough questions, however, Bush would not have been any better off in ignoring her. But modern celebrity journalists have been less willing to make waves than the likes of Thomas.

If Helen Thomas has an agenda, it's to hold our leaders accountable for us. Too bad more journalists don't have the same agenda.

More people should ask tough questions. How they are framed is another thing entirely, but its a comfort to see a President's statements being questioned so pubicly

Where oh where did the hard questions go?

the XSS security challenge
Anybody bored and want a permanent account? Read on:

We're going to be running an XSS (Cross site scripting / Javascript injection) bug hunt challenge soon here. The biz people like the idea but need to squabble over rules and legal stuff. Unofficially, it'll involve giving out permanent accounts and money (or gift certificates).

So while I can't promise you jack right now in terms of money, I can give out permanent accounts like candy, so I'll announce the first round of the game:

Hmmmmmm

The XSS security challenge

Who is listening-in on your phone calls? Probably nobody. Right now, there is huge interest in phone tapping in the United States because the Bush Administration (through the National Security Agency) was caught listening in without appropriate court orders. What I have noticed is that, for all the talking and writing on this subject, there seems to be very little real information being presented. So this column is my attempt to share what I've learned about the topic. It might surprise you.

Gold star

Cringley on phone tapping