An anonymous reader writes: The AVG Web TuneUp Chrome extension, forcibly added to Google Chrome browsers when users were installing the AVG antivirus, had a serious flaw that allowed attackers to get the user's browsing history, cookies, and more. "This extension adds numerous JavaScript APIs to Chrome, apparently so that they can hijack search settings and the new tab page," explains Mr. Ormandy. "The installation process is quite complicated so that they [AVG] can bypass the Chrome [Store] malware checks, which specifically tries to stop abuse of the [Chrome] Extension API." Simple XSS and MitM attacks exposes data from other tabs opened in the browser, browsing history, and even manages to render SSL useless.

Read more of this story at Slashdot.

Al Jazeera highlights key issues and players for Wednesday's elections in the troubled Central African Republic.

schwit1 writes: Faced with a shrinking budget and poor economic conditions, Russia has once again trimmed back its proposed ten-year space plan for the next decade in space, canceling all Moon missions until after 2025. Russian might now have a giant government-run aerospace corporation, but flying space missions is not really its primary task. Like all government agencies divorced from profit and loss, its primary task is really to provide pork barrel jobs, regardless of whether those jobs do anything useful or not. Thus, Russia will have a very expensive space program for the next decade, but the money spent will not accomplish much of anything new.

Read more of this story at Slashdot.

Compensation to be paid for revoking licence after referee's sexual identity was leaked to the press.

Testing tools for Alien modules

Perl interface to the Unified Medical Language System (UMLS)