Friday, October 29, 2010

Security Advisory for Adobe Flash Player, Adobe Reader and Acrobat

Adobe have published details of a critical vulnerability the following applications.

Adobe Flash Player 10.1.85.3 and earlier versions
Adobe Reader 9.4 and earlier 9.x versions
Adobe Acrobat 9.4 and earlier 9.x versions

The vulnerability could cause a crash and potentially allow an attacker to take control of the affected system.

There are reports that this vulnerability is being actively exploited in the wild against Reader and Acrobat 9.x. Adobe is not currently aware of attacks targeting Flash Player.

Adobe plan to provide an update to Flash on Nov 9 2010 and for Acrobat and Reader on Nov 15 2010.

Until then, the following mitigtation procedure is recommended by Adobe:

Deleting, renaming, or removing access to the authplay.dll file that ships with Adobe Reader and Acrobat 9.x mitigates the threat for those products, but users will experience a non-exploitable crash or error message when opening a PDF file that contains Flash (SWF) content.

The authplay.dll that ships with Adobe Reader and Acrobat 9.x for Windows is typically located at C:\Program Files\Adobe\Reader 9.0\Reader\authplay.dll for Adobe Reader or C:\Program Files\Adobe\Acrobat 9.0\Acrobat\authplay.dll for Acrobat.

New Gmail Labs Feature Saves You Precious Seconds

Gmail_logoGmail has just added a new “Labs” feature that should save you some time if you’re the type of person that tends to plow through your e-mail inbox in bunches.

As the name implies, the new “Auto-advance” option (that can be enabled under “Settings” > “Labs”) lets you automatically move to the previous or next conversation after archiving, deleting or muting an individual e-mail message.

While that might sound like expected behavior, up until today, Gmail simply took you back to your inbox after taking any of those actions, meaning you essentially needed to scroll back down to wherever you were in your attempt at e-mail triage.

Thus, you can see how “Auto-advance” might save you some time –- and probably not an insignificant amount of time if you get a lot of e-mail and aim to keep your inbox clean through the use of archiving, deleting and muting.

Have your own Gmail productivity tips? Let us know in the comments.

auto_advance

Facebook Now Tries to Tell the Story Between Two Friends

friendsMashable: Facebook is rolling out a new breed of Pages called Friendship Pages that pull together the public wall posts, comments, photos (based on tags) and events that two friends have in common.

The Friendship Pages feature was cooked up by Facebook software engineer Wayne Kao and then brought to life in an internal hackathon event. The Pages are designed to the tell the story of two friends on Facebook through their shared activity.

“For those of us who have worked on it, the best part is the human side of these Pages. They can bring back memories, conversations and times spent together,” explains Kao.

Friendship Pages are accessible from under the main photo on a friend’s profile Page and via links from related wall posts or relationship stories. The Pages are public to other members so long as they have permission to view both users’ profiles.

Friendship Pages are said to be launching today, but are likely being delivered to members in a gradual rollout. We think the Pages are an interesting alternative way to organize Facebook activity around friends, though it does add another layer of complexity to the site.

friendship-page

Mozilla Gives Firefox a New Add-On for Audio and Video Recording

mozilla-rainbowMozilla Labs has been working hard on browser-based audio and video — not just for playback, but also for recording. Labs’ newest creation, called Rainbow, lets developers access your hardware’s video and audio recording capabilities with a few lines of JavaScript.

The files created are all in open-source formats, including Theora, Vorbis and Ogg (support for WebM and other formats are planned in the product’s roadmap). Once media is captured, files can be accessed via the DOM with HTML5 File APIs.

Mozilla also wants to enable live streaming video capabilities for the add-on.

Mozilla Labs employee Anant Narayanan wrote in a blog post today that the Labs team had “experimented with audio recording in the browser as part of the Jetpack prototype.” This development, however, is still a pre-alpha prototype at the moment. As such, it only works with Firefox nightly builds on Mac devices.

Another Mozilla experiment we’ve liked a lot lately is Chromeless, a DIY tool for developers who want to create their own web browser UIs.

In general, multimedia as part of the web browser experience is becoming increasingly experimental and interactive; we’re excited to see where Mozilla and developers take Rainbow in the near future. If you want to give it a whirl, you can check out the source on Github.

Taken from Mashable

3G Mobile Internet Comes to Mount Everest

mount_everestNepali mobile network operator Ncell has installed the first 3G base station at the summit of Mount Everest, giving visitors, climbers and people living in the Khumbu Valley the ability to make calls and wirelessly connect to the Internet.

To test out the new facility, Ncell also made the world’s highest video call at 17,388 feet.

So far, visitors of Mount Everest had to depend on satellite phones to make calls, but now they can do so through a standard GSM, 3G-enabled network. “The coverage of the network will reach up to the peak of the Everest,” Ncell Nepal chief Pasi Koistinen said to reporters in Kathmandu on Thursday.

Ncell is a joint venture between private investors and Sweden-based telecom TeliaSonera. Ncell’s network currently covers less than one-third of Nepal’s population, but TeliaSonera said it planned to invest $100 million in the next year to extend coverage to more than 90 percent of the country’s population.

“This achievement is as mighty as the altitude as 3G high speed internet will bring faster, more affordable telecommunication services to the people living in the Khumbu Valley, trekkers, and climbers alike,” said TeliaSonera CEO Lars Nyberg.

Taken from Mashable

Google Instant’s Blacklisted Words

GoogleGoogle search engine’s latest innovation technology that allows users to search for information in real time does not come without its own challenges. For example, how do you prevent children from seeing adult related content while conducting a live search? Howbeit controversial, the solution, it appears, is by restricting a group of search terms so that they do not function with the new instant search feature.

Consequently, users will not be exposed to viewing pornographic, hate, violent or disturbing results when conducting searches. This means that inasmuch as Google Instant was designed to simplify search and make finding information quicker on Google, no one will see results deemed to be offensive in nature by the Google team, unless they want to. Users will therefore have to hit enter to confirm a search query once Instant search stops delivering new results due to these restrictions.

Examples of Google Instant’s blacklisted words include: “bisexual”, “lesbian”, “xX”, “webcAm”, “barely Legal”, “are”, “amaTeur” and many more. Interested readers can find a complete list of Google blacklist words on the 2600 Website. Meanwhile, Google’s SafeSearch algorithm, which can filter out potentially offensive results, still applies to Instant search results.

Taken from techsling.com

Microsoft Office 2011 out for Mac

office-2011-for-macSoftware Magazine: Microsoft has launched the Apple version of its productivity suite, the Microsoft Office 2011. The package comes with a new version of Microsoft Outlook that has been specially built for Apple’s Mac. The suite supports those cloud based services Windows users have since the launch of Microsoft Office 2010 for this platform.

The reason for launching Microsoft Office for a competitor’s operating system is simple: although the platform is completely different, there are lots of Mac users in this “Windows-centric” world that need to use Microsoft Office. There are also a lot of users who, although they use a Mac for every other task, they prefer to use Microsoft Office.

With the launch of Microsoft Office 2011 for Mac, Microsoft offers its users the latest versions of Word, Excel, PowerPoint and a Mac-specific version of Microsoft Outlook – this one for the first time. The suite works with Microsoft Exchange and is compatible with Microsoft’s cloud-based service, the Office 365.

Microsoft Office 2011 for Mac is available in 13 languages.

GNOME Developers Attack Canonical’s Ubuntu Decision

Many Ubuntu users will undoubtedly have strong opinions on Canonical’s recent proposal to replace the GNOME desktop with Unity in the Ubuntu 11.04 release.  But for the programmers behind GNOME, one of the open-source community’s most important projects, the announcement might prove to be even more upsetting.  Jon McCann, lead designer for GNOME Shell, recently shared his thoughts on this topic with us–and he was none too charitable in his comments on Canonical.  Read on for details.

GNOME Shell, of course, is the new desktop interface on which GNOME developers are currently hard at work as the next big step for one of the Linux world’s most popular desktop environments.  GNOME Shell introduces a number of innovative interface concepts that, if successful, could truly redefine the way users interact with their operating system.

Unity, meanwhile, is an interface developed by Canonical that borrows many of its ideas from GNOME Shell.  Canonical began work on Unity last spring, and introduced it as the default interface for Ubuntu Netbook Edition in the Ubuntu 10.10 release, which debuted a few weeks ago.

But the big news came last Monday at the Ubuntu Developer Summit in Florida, where Mark Shuttleworth suggested that the next Ubuntu release, April 2011′s Natty Narwhal, should adopt Unity as the interface for Ubuntu Desktop Edition as well as the netbook version, which would entail major changes for many users–not to mention upstream developers, who might have to make big changes if they want their code to remain consonant with Unity.

Canonical’s Leap Off?

Ubuntu developer Jono Bacon was quick to point out that Unity will still depend heavily on GNOME’s software stack, even if the interface itself break away from GNOME.  That may be true, but GNOME developer Jon McCann nonetheless views this move as a fundamental break between Ubuntu and GNOME.

Not that McCann was surprised.  “Canonical has been pulling away from the GNOME project for about two years,” he declared.  “So, this was inevitable.  I suspect that the timing probably has a lot to do with Mark’s jealousy of the recent OS X Tiger announcement.”

Nor did McCann question the validity of Canonical’s decision.  The organization has been working “to differentiate and become a profitable company” for some time now, he said, and the break with GNOME seems to fit into that equation.

But McCann is doubtful that Canonical’s new strategy will pay off for the company.  Questioning the feasibility of getting Unity ready for Ubuntu Desktop Edition by April, McCann noted that Unity’s principal designer just left Canonical, and that it will be difficult for the company to forge a completely independent path after having relied centrally on upstream contributions for most of its existence.  “When you have been standing on the shoulders of giants for so long it is a bold move to leap off and hope you can fly on your own,” McCann asserted.

Despite his lack of optimism for Canonical’s strategy, however, McCann views the break as a change that can make GNOME stronger by lessening its dependence on downstream developers.  “We should probably stop relying on distributions to deliver our value anyway.  I think there is a valid comparison to how musicians are starting to realize they don’t need to sell their soul to record companies and corporate radio stations to reach their audience.”

And insofar as the Unity plans might represent a rift between Ubuntu and GNOME–or, indeed, between Ubuntu and much of the rest of the open-source ecosystem–McCann does not rule out the possibility of a reconciliation in the future, concluding, “I am sure that if they don’t succeed we will welcome them back like the prodigal son.”

Thursday, October 28, 2010

Will Google's Online Operating System Revolutionize the Computer?

Google OS Screener_604x341

FOXNEWS: That big old hard drive in your computer? Google says you don’t need it anymore. The company is also betting you won't need that Windows, Macintosh or Linux stuff either. No, Google wants you to access, operate, and edit all your files on the Internet.

To help with that, the company has developed a lightweight operating system of its own, the first new competition for Windows and Macs in years. It's called Chrome OS. And it could have a profound effect on the way we work with computers.

You won't be able to put it on your current PC. But Google wants it to power your NEXT computer.

And because it's based almost entirely on the Internet, Chrome is smart and superfast. No more “Where did I save that file?” No more computer slowdowns. No more crashes?

“Today’s operating systems were designed in an era where there was no web,” Google spokesman Eitan Bencuya told FoxNews.com. “Google Chrome OS is designed for people who spend most of their time on the web. It’s our attempt to re-think what operating systems should be."

What does that entail? Speed, simplicity and security, Bencuya said. For example, there's one key change that's completely invisible -- but you'll spot it almost instantly. The Windows and Macintosh operating systems load everything first, which hogs precious memory, even if a browser is all you use. Bencuya calls this approach “decades old.”

Chrome OS assumes you’re always in your browser -- which is the access point for most of your files anyway, right? Web pages, e-mails, documents on Google Docs, photos stored at Flickr, video chats, streaming music from Pandora ... most of what you do is online, isn't it? Skip the traditional desktop and save time, simplicity and memory, Google argues. And because it doesn’t load a bunch of background stuff, Chrome OS boots almost instantly. Early demos Google showed me reveal Chrome OS booting in 7 seconds or less -- significantly faster than the traditional operating systems from Microsoft and Apple.

Google underscored the point in a recent promotional video, in which the Internet giant estimates that the average desktop user spends 90 percent of his time in a browser -- more than enough to justify the use of a web-only desktop.

If Apple or Microsoft are concerned by these stats, they aren't talking. Neither Microsoft nor Apple were immediately available for comment when contacted by FoxNews.com. Maybe with good reason. Clay Wood, chief technology officer at Fogo Data Center (a company that sells computing power through the Internet, much as a power company sells electricity) argued that Google's lightweight system -- actually a return to computing paradigms from the 1960s -- may be the wave of the future.

“In a way, Chrome OS comes full circle in how we used to access computer files in the '50s and '60s, logging into a centralized mainframe computer (i.e. the Internet) with a dumbed-down computer to do your work,” said Clay Wood, chief technology officer at Fogo Data Center, which sells "cloud" computing as a service.

Google says that the "back to the future" approach provides a significant security advantage. Instead of worrying about what kind of scary viruses might overrun your local computer, Chrome OS leaves security to the people hosting websites and the online applications the operating system uses.

Google itself hosts several apps, such as g-mail and docs, and the company runs anti-virus programs on its server before letting you view any hosted files. Furthermore, since there’s really no local files to corrupt, your computer stays safe; it’s merely a window to the Internet, after all.

Even Wood agrees that most PC users already spend a majority of their time online. “If pulled from the network, most computers wouldn’t even be used,” he admits. “Even in many business environments.” Yet a web-only desktop such as Chrome OS is only as good as the Internet apps it has access to.

“There’s a lot you can do on the cloud, but there’s also a lot you still can’t do,” says Wood, noting a lack of web-based accounting, production and specialty software. Google’s Bencuya argues that robustness and availability is getting better every day. “You’re already seeing a lot of functionality moving to the web, including both video and photo editing,” he told FoxNews.com. “The gap between personal computing and server-side computing is closing.”

Even that won’t put Chrome OS entirely in the clear, though. Support for odd gadgets, compatibility with Microsoft and Apple docs and programs, and offline access present different sets of problems. While Google promises offline access to documents, mp3s, photos and other multimedia files, it’s unclear how much access the operating system will provide. In other words, how dumbed down will it be offline?

“PC enthusiasts will struggle with it,” Woods admits, citing the challenge Google will face from the vast array of headphones, graphics cards, fancy keyboards, microphones, thumb drives and more. “It’ll be interesting to see how Google will handle that,” he said.

Perhaps the company won’t have to. In a very un-Google like move, Google announced that Chrome OS will be available only on newly sold machines -- that means no free downloads from the Internet. So how can you get it -- and how much will it cost?

"We’ll have more to share before the end of the year," Bencuya told FoxNews.com. But Bencuya refused to say exactly when this year the OS would arrive.

Whenever it does arrive, the real effect of the lightweight Chrome operating system will be felt in how well it catches on with users -- but the concept of a browser-only operating system is eye-opening.

“Ultimately, Chrome OS can already be achieved by staying in your browser 100 percent of the time,” Woods noted. “In that sense, it’s not really doing anything new. It’s just simplifying the experience.”

Mozilla delays Firefox 4 until 2011

Firefox is slipping in its development schedule; Mozilla says it won't be able to release version 4.0 this year, and will have to delay the final version until early next year. "Completing this work is taking longer than initial estimates indicated as we track down regressions and sources of instability," the company said in a statement. "As part of our commitment to beta users, we will not ship software before it is ready."

The new schedule means that Beta 7 has been delayed till early November. Meanwhile, assuming everything goes according to plan, Beta 8 is set for November 12, Beta 9 is expected on November 26, and Beta 10 should arrive on December 10. "The frequent beta releases have been extremely helpful in identifying compatibility issues with existing web content, so we plan on continuing to release beta milestones through the end of December. Our estimate is now that release candidate builds will ship in early 2011, with a final release date close behind. Please note that, as always, this schedule is subject to change based on feedback from users and community members."

firefox_4_beta

Firefox 4 was originally supposed to be released in June, but Mozilla keeps making changes to the browser. Currently, Firefox 4 is at Beta 6. Many believe version 4.0 is the only thing that can save the browser from a stagnating market share.

Zynga now valued at $5.51 billion, more than Electronic Arts

zyngaSharesPost has valued Farmville developer Zynga Game Network at $5.51 billion, according to Business Week. That means it is now estimated to be bigger than console publisher Electronic Arts, which stands at a market cap of $5.16 billion. It still has a long way to go to beat Activision Blizzard, which has a market cap of $13.9 billion.

While making such direct comparisons isn't completely accurate, nor fair, it gives us a snapshot at how quickly social network gaming is growing. Zynga was founded four years ago and already six of the 10 most popular apps on Facebook belong to it, and it has more than 210 million monthly active users.

The valuation for Zynga is so high because it is based on the growth of the virtual goods space, which by itself is at a whopping $1.6 billion this year. The social firm isn't the only one in the virtual goods game though: EA also has a toehold in that market, having acquired Playfish late last year.

Adobe confirms Flash 10.1 coming to everything but iPhone

At its MAX conference, Adobe not only announced Air 2.5 for phones, tablets, and TVs but it also confirmed that it would be bringing Flash Player 10.1 to Microsoft's Windows Phone 7, RIM's BlackBerry OS, HP's WebOS 2.0, Symbian, MeeGo, and the LiMo platform. Unfortunately, there's still no timeline for a release on each platform; Adobe is only saying that Flash 10.1 is "expected" to hit each mobile OS.

These six platforms will join Android 2.2, which has had Flash since June 2010. The current list of Adobe Flash Player 10.1 certified devices is thus not very long, but if Adobe manages to deliver on what it's promising, it should grow very rapidly. The news today also means that the iOS is the only major mobile platform that will not support the plug-in: Apple won't let it touch the iPhone, the iPod touch, or the iPad.

Windows 7 SP1 RC released

article_imgMicrosoft has announced the launch of the Release Candidate version of Windows 7 Service Pack 1, the last test version prior to its official release.

While the service pack, which is shared between Windows 7 and Windows Server 2008 R2, comprises a collection of all the latest bug fixes and security patches to have been released since the launch of the operating system, Microsoft's Brandon LeBlanc has confirmed that Windows 7 users won't be getting any new features if they choose to install the update.

While Windows Server 2008 R2 users will enjoy the addition of two new virtualization-related technologies, Dynamic Memory and RemoteFX, to their operating system, Windows 7 users will have to be content with the knowledge that they are running the very latest patches on their system.

Dynamic Memory is an improvement to Microsoft's Hyper-V virtualization hypervisor which, the company claims, increases the software's memory usage efficiency, allowing physical memory to be rapidly allocated to hard-working virtual machines with no down time.

RemoteFX is designed to improve the use of thin-client machines on Microsoft's Remote Desktop protocol, adding support for local USB peripheral pass-through and improved performance for graphics-intensive applications.

The release candidate has been made available for public download on Microsoft's TechNet site, although early adopters are warned that the installation process can take up to two hours to complete.

Taken from Bit-Tech.net

Google CEO: Don't Like 'Street View'? Move

1027In a CNN interview Monday, Google CEO Eric Schmidt responded to questions about what Google knows about people by saying that if people don't like having their homes photographed for Google Street View for the world to see, they can "just move."

The comment came during an interview on the Parker Spitzer show. "With Street View, we drive by exactly once, so you can just move," said Schmidt, eliciting uncomfortable laughter from interviewer Kathleen Parker. "The point is, we only do it once. This is not a monitoring situation."

Those few sentences stirred up the blogosphere, and various news sites erupted with stories about Schmidt apparently telling people they can move if they don't like having their houses on Street View.
The San Francisco Chronicle, for instance, called Schmidt's statement an "epic gaffe," and a blogger for the UK's Telegraph asked, "What is Eric Schmidt going to say next?"

Google e-mailed a statement from Schmidt to Computerworld that said he misspoke.

"As you can see from the unedited interview, my comments were made during a fairly long back and forth on privacy," Schmidt said in the e-mail. "I clearly misspoke. If you are worried about Street View and want your house removed please contact Google and we will remove it."

Christine Chen, a Google spokeswoman, added that if people want to remove their homes from Street View, they can simply locate the specific image, click "Report a problem" in the bottom left of the window, fill out the form and click "Submit."

Street View is a popular feature of Google Maps and Google Earth that gives users a 360-degree view of many streets, and the homes and cars that sit on them, around the world.

"They are not only flagrantly violating privacy, they are joking about it," said Rob Enderle, an analyst at Enderle Group. "It is really painting the picture of a "let them eat cake" kind of royal disregard for the feelings of their customers that is unmatched in this decade by any company. [Google is] almost begging for regulatory action and may get fined in Europe."

Schmidt's comments didn't help what has become an already tumultuous situation. Last week, Google said that nearly 250,000 German households had requested that their homes be removed from Street View. Many Germans have been upset that Google is getting ready to launch the service in 20 of the largest cities in that country.

Taken from newmediajournal.us

Steve Jobs calls the new MacBook Air the future of laptops

apple-macbook-air_BY3IL_48

During a 90-minute presentation on Wednesday at Apple headquarters, Steve Jobs unveiled Apple’s latest thinner MacBook Air 11-inch and 13-inch models, along with the new operating system. The redesigned Mac notebook combines features from the iPhone and iPad with those of a MacBook. The new MacBook Air features a multi-touch that offers you an iPad/iPhone-like experience. Instead of a hard drive, the new thinner, lighter and expensive Mac laptop uses flash storage. Jobs said that all notebooks will be like this someday and added that the Air is the future of the MacBook and all laptops.

Specs at a glance - MacBook Air (11-inch)

• Height: 0.11-0.68 inches

• Width:11.8 inches

• Depth:7.56 inches

• Weight: 2.3 pounds

• Processor: 1.4GHz Intel Core 2 Duo processor

• Flash storage: 64GB to 128GB

• Connections: USB 2.0, headphone, mic

• Battery: up to five hours

While the 11-inch Air with a 64GB memory will set you back £999, the 13-inch version with 256GB of storage is set to cost you £1,549.

What others are saying?

Kevin Hall from Dvice says…

There’s no doubt that Apple has turned the Air into something far more interesting than the gimmick it first came off as. Only time will tell how far Apple pursues this marriage of its mobile and laptop philosophies.

Matt Tinsley from TUAW says…

At this stage, it’s not clear whether all new Macs are shipping without Flash or if it’s just the new MacBook Air models. Either way, Apple is sending a pretty clear message to web developers and consumers alike: they don’t like Flash.

Brian Caulfield from Forbes says…

The most remarkable feature, however, isn’t cosmetic, it’s these machine’s boot time. Bootup takes less than 15 seconds, according to my watch. That’s a good deal less than the roughly 50 seconds it takes my trusty Windows laptop to come to life.

Brooke Crothers from CNet says...

The new MacBook Air offers an interesting paradox: a spanking-new, ultra-thin design that is wrapped around old Intel chips.

Apple New MacBook Air Picture Gallery

apple-macbook-air_1_52apple-macbook-air_3_52apple-macbook-air_4_52apple-macbook-air_52apple-macbook-air_2_52

Credit to bornrich.org

Russian government decides to develop Windows alternative

The Russian government is no longer comfortable being dependent on the Windows operating system, and has thus decided to create its own flavor of Linux for internal use. 150 million rubles (€3.55 million or nearly $4.89 million) has been put aside for the project. That's a huge amount of money to invest into something that isn't certain (what if Russia gives up and goes back to using Windows 7?).

"We will become independent of Windows ... but it risks becoming an unthinking implantation of Linux [that was probably supposed to be translated as "implementation"]," Russian deputy and computer expert Ilia Ponomarev told the AFP. Nevertheless, he admitted that it will be difficult to create and implement an operating system secure enough for government use, conceding that "the devil is in the details." Those details will be hashed out during a December meeting headed by Vice Prime Minister Sergei Ivanov.

Until the project comes to fruition and Russia actually declares its solution superior to Windows, this won't be a big deal. Even then though, we doubt Microsoft will be particularly worried. The software giant will undoubtedly be unhappy for losing some business, but it won't be a huge blow.

Source: TechSpot.com

Want a free Google TV? Tell Google you're a Web developer

Google knows it's going to have a tough time convincing users to switch to its TV platform. As a result, over the next few weeks, the search giant is handing out 10,000 free Google TV units to developers in hopes of "empowering the developers of the world to make Google TV an even better experience, through websites that have been built with the TV screen in mind." 3,000 Google TV devices (specifically, Logitech Revues) were already given away to attendees of the Adobe MAX conference.

The remaining devices will go to existing Web developers in the Google Code community, but the company is also accepting entries from professional Web developers into the Google TV Web Developer Promotion. You'll need to include a short summary about the type of interesting website your company would like to create or optimize for Google TV. Google is planning to select 2,500 winners from those entries.

For those outside of US borders: "this giveaway is only for U.S based developers," Google said. "We hope to make Google TV available in other markets soon.

Taken from TechSpot.com

New Trojan Virus Attacks Mac Computers Via Social Networking Sites

Mac: Hi PC, I'm not feeling so hot today...
PC: Oh, I know ALL about that. I think you have a virus!

Mac users are now at risky of getting a nasty virus.Security experts by and large agree that security via obscurity is not a wise model for protecting customers over the long term.  That's exactly the model Apple has employed successfully for some time now.  However, its luck finally appears to be running short.

Hot on the heels of a newly discovered iOS exploit that allows access to locked iPhones, new reports [1] [2] from security research firms SecureFirm and Intego reveals that a new Trojan is targeting Mac users using a vulnerability in OS X's Java player.

According to the Intego report the new malware, Trojan.osx.boonana.a, is really a reworked version of the Koobface malware, which has attacked Windows in the past.  The malware acts as a worm when it spreads and as a Trojan when it is infecting your computer.

Users may encounter the worm via links posted on Facebook, MySpace, Twitter, and other websites.  When clicking the link, the applet attempts to run.  Users can stop the infection before it starts by denying the applet permission to run when OS X's Java player pops up a dialogue.

If it you approve, you are a sad noob, and your Mac is infected.If they allow the applet to run, they may get another warning if they have a Mac antispyware program like VirusBarrier X6’s Anti-Spyware installed.  If they don't get the warning, or choose to disregard it, the applet will attempt to make a connection with a remote server and installs a rootkit, backdoor, command and control, and other elements.  These files are copied to an invisible folder -- .jnana -- in the user's home directory.

If the virus is allowed to carry out its infection process, the unsuspecting Mac user may find themselves part of a botnet.  When they log on social networks, the virus will post links to spread the infection.  It may also send spam e-mail via their logged-in accounts

Other variants of this virus target Windows and Linux, making it a rare true cross-platform virus.  All these viruses share the fact that they use the Java player as a route of attack.  According to Intego, other OS X-specific versions of the virus have shown up, but most are broken or try to connect to offline servers.
The malware could become potentially more dangerous in the future if it is able to eliminate the warnings from the Java player and/or change the name/location of the infection directory, making it hard for virus removal software to find it.

While it does not appear that this virus takes advantage of any unique flaws in Apple's version of Java, some security experts say that Apple's Java player may have more vulnerabilities than Window's.  That's because Apple makes its own Java player, which according to an e-mail reportedly attributed to Apple Chief Executive Steve Jobs, is always a version behind the official Linux/Windows builds from Sun and Oracle.

Apple is reportedly considering ditching its Java player in future versions of OS X, such as OS X 10.7 "Lion".  Similarly it's considering rejecting Flash, another multimedia web technology.  Ultimately these efforts may eliminate some routes of attack, but now that Apple is being targeted it must realize -- there is always a back door.

Taken from DailyTech.com

Tuesday, October 26, 2010

Facebook Credits to be Sold at Walmart and Best Buy

facebook-gift-cardsMashable: There’s a new stocking stuffer for the social gamer on your holiday shopping list: Facebook Credits.

Already available at Target stores, the social networking site is set to offer the credits -– which can be used for in-game purchases in games like FarmVille –- at Walmart and Best Buy too. Walmart will offer $5, $10 and $25 versions of the gift cards, while Best Buy will sell them in denominations of $10, $25 and $50.

A Facebook spokesperson tells Mashable that, “As we approach the holiday gift-giving season, we’re happy to expand the availability of Facebook Credits gift cards to Walmart and Best Buy. More than 200 games and applications accept Facebook Credits, giving people a fun, convenient and secure way to buy premium items, and making Credits gift cards a unique gift for the holidays.”

The soon to be ubiquitous nature of Facebook Credits gift cards speaks to the momentum behind the rapidly growing social games and virtual goods business, which is expected to grow to $6 billion by 2013.

Gift cards help make that currency available to everyone — not just those with credit cards or PayPal accounts — and we imagine we’ll continue seeing them hit the “impulse purchase” section of many a chain store.

VLC Media Player Now Available for iPhone

vlcVLC Media Player, an app that lets you watch videos in several formats that aren’t natively supported by the iPhone, has arrived in Apple’s iTunes store.

The app originated on the iPad and is now compatible with iPhone 4, iPhone 3GS and “recent” versions of the iPod touch.

The features include quick decoding of “almost every” video format, playback in landscape and portrait mode, as well as deleting files directly from the application (bypassing iTunes). Check out an early video review of the application over at 9to5Mac.

The app is available for free in the iTunes store.

Credit to Mashable

Google Finally Upgrades Feedburner

rssBelieve it or not, Google hasn’t forgotten about Feedburner. The RSS feed service has received an experimental new interface that better matches Google Analytics and looks like it might actually integrate into other Google AdSense and Webmaster tools.

The interface doesn’t work for every component of Feedburner — if you need to access feed management or change certain settings, you can continue to use the old interface. The new interface — which is accessible via feedburner.google.com/gfb/ — shows real-time stats for clicks, views and podcast downloads from across your feeds.
This is really powerful, especially if you use the Feedburner Socialize service to auto-ping Twitter when you publish a post. This can let you track how users are referred and what RSS clients are being used to access feeds.

The stats take a lot of the information that used to be spread across multiple panels and put it into one interface. You can also view the last two hours of activity for a feed to see different waves of traffic and click-throughs.

feedburner-new-640-2

The new Feedburner dashboard also has a new message center that displays notices if there are any problems with a feed or other things that you need to know.

feedoverview-new-640

We hope these new real-time tools and the improved interface are the start of some real momentum behind the Feedburner product. RSS might be going out of favor in a world of Facebook, Twitter and mobile apps, but publishers still need a central place to control and manage their content streams. Feedburner no longer does everything publishers need it to do, but there just aren’t a lot of alternatives.

What do you think of the new Feedburner interface? Let us know.

Taken from Mashable

Google Now Accounts for 6.4% of Internet Traffic

google_traffic

The Internet is growing fast, but Google is growing even faster. According to online security company Arbor Networks, Google now represents an average 6.4% of all Internet traffic.

This is a new record for Google, as it gained more than 1% of all Internet traffic share since January. Now, only one global ISP handles more traffic, and a lot of that traffic is – unsurprisingly – Google’s traffic.

The number is even more incredible if you consider that Internet traffic is growing at a staggering 40% to 45% each year, and Google is still gaining market share.

However, Google’s share may be even bigger, possibly up to 8% to 12%, if you account for traffic offloaded by Google Global Cache deployments, Arbor Networks’ Craig Labovitz claims.

So far, Google’s revenue seems to be keeping up with its traffic; we wonder which one will grow faster?

Taken from Mashable

Web filtering: are employees offended?

Paul Mah, on the ITBusiness Edge blog, reported on GFI’s September survey of web filtering practices in small and medium businesses and got some interesting feedback from readers.

Web filtering is put in place primarily to improve network security, but another big reason is to stop the loss of productivity, he said. Employees however can be offended by the implied lack of trust.

One of Mah’s readers said he dutifully “practices self-censorship to enhance personal productivity.” Another, however, asked: "What makes you think your employees are productive now? A slacker will always find a way to slack around."

GFI’s survey last year found that 47 percent of U.S. SMEs had the means to monitor or filter HTTP traffic. The GFI survey released in September (631 respondents), showed an increase in the number monitoring or filtering HTTP traffic (69.9 percent).

SME_Web_filtering

(GFI graphic -- click to enlarge)


From the report:
“When asked why they had invested in a web filtering and web security solution, 9 in 10 SMEs said they did so to block inappropriate content, to prevent malware infections from downloaded files and to prevent malware attacks via drive-by downloads. More than half said they wanted to reduce cyber slacking, to control what sites employees can or cannot visit and to reduce bandwidth costs associated with unnecessary browsing/streaming.”

Paul Mah story here: Survey Finds SMBs are Implementing Web Filtering

GFI-Sunbelt report here.

Credit to Tom Kelchner, Sunbelt

Firesheep: who is eating my cookies?

Internet is great, and everyday millions of people spend their day surfing it, using Google, Gmail, Youtube, Twitter, Facebook, etc. Some people buy at ebay, or Amazon. Even some people use it to work, though these cases maybe not that common Winking smile

As a reader of this blog, you are concerned about security and therefore you already know that connecting through public WiFi is a risky sport. But it is also really convenient, how many of you have done it in McDonalds,Starbucks, etc.? Yeah, me too Open-mouthed smile

As we always say, anyone could be sniffing the traffic and capture the data. There are even some websites that send the password in plain text! Yes, incredible but true. Anyway, that’s not the way of working of the main websites, as the ones I mentioned earlier. As we use to spend a lot of time in these webs (how many hours do you spend on Facebook per day?) in order to keep us logged in, once we validate ourselves a cookie is created with our session information, so we don’t have to enter our credentials over and over again.

Do you imagine what would happen if these cookies were sent in plain text, so anyone could capture them? Yes, that would be a nightmare, anyone could capture them and recreate them in their computers and steal our session. Well, this is something that happens ALL THE TIME. And it is no new. But yet, to perform this operation the guy must be smart enough to sniff the traffic, and work with it in order to steal your cookie. Not hard, but not everyone could do it.

Now the bad news; it’s been made available a Firefox add-on you can install that will do everything for you: sniff the traffic, gather the cookies around and show you the different ’stolen’ cookies, so you only have to click on them to steal the session. Easy, isn’t it? Even Netkairo, the Mariposa guy, would be able to do such thing.

This has been shown in Toorcon last weekend by Ian Gallager and Eric Butler, in a talk called “Hey Web 2.0: Start protecting user privacy instead of pretending to“. The slides can be found here.

A screenshot od the add-on working, with stolen sessions from Google, Facebook, Twitter and Flickr:

Mozilla-Firefox

Don’t panic. Yes, this is bad, but there are some countermeasures to take. The best solution would be to use SSL encryption in all communications, but this has to be supported in the server side, so that won’t be happening (at least massively) anytime soon. Meanwhile, you should use HTTPS Everywhere, which will force to use https when connecting to some mayor websites, such as Twitter or Facebook:

HTTPS-Everywhere-Preferences

I installed it since it went public and it is always on.

But the best solution right now if you are connecting through an open WiFi, is using a VPN. If you cannot, at least use the HTTPS Everywhere.

Credit to Luis Corrons, Panda Labs

When technology fails

I love computers and technology in general. Actually, I am an advocate of technology and I try to push high tech solution whenever that makes sense.

But, what happens when technology fails?

We have seen many movies with various apocalyptical scenarios where one or another technology fails on us: computer systems in nuclear power plants, satellites, ground or air traffic and so on.

The picture below were taken by me with the mobile’s phone camera in two airports in Europe.

The first three pictures show a not so horror scenario: computers displaying on which band the luggage coming from a certain flights are delivered were offline. Instead of chaos and panic, the officials of the airport wrote on a board exactly what the computers normally display.

IMG_0189IMG_0191IMG_0190

Now, that wasn’t so bad, isn’t it ?

The last picture shows a Lufthansa quick checking booth being rebooted. The unpleasant part for me was that just a second before reboot I was preparing to check-in. I think that the computer was rebooted after an Windows update, but I can’t be 100% sure. It can be seen clearly that it is a Windows XP shutting down. Only that terminal was rebooted, because usually there are 4 or more terminals positioned in a circle. Of course, after seeing that the machine rebooted, I went directly to the checking counter were a human smiley face helped me check-in. I don’t want even to think what would have happened if all computer in the airport would have started to reboot because of that update (or for whatever reason).

lufthansa-reboot

Writing on a board or on a paper who checked in and where each luggage should go doesn’t seem to count as a possible solution.

As a conclusion: technology fails from time to time. This is a fact which doesn’t need a demonstration. Each entity which is dependent on technology should have plans to survive without it or to gracefully shut down without computers (yes, nuclear plants included!).

Credit to Sorin Mustaca, Data Security Expert, Avira Tech-Blog

Monday, October 25, 2010

Spam from the Advocate

Currently cyber criminals try to make fast money by spamming out emails in masses in Germany which allegedly stem from an Advocate specialized in copyright. According to the spam mails, the user was downloading copyrighted material. An IP address is in the email to proof that. To not call the attorney to action, the recipient of the mail is offered to send 100 Euros via a payment system called Ukash. Don’t fall for that social engineering, don’t pay!

01-Spam-Screenshot

Some hints to detect that this is a scam and no real offer:

- The address the mail was sent to is wrong; the real recipients address was BCC’ed.
- The recipient isn’t addressed via his/her real name and nowhere addressed directly.
- Sometimes Umlauts get used, sometimes they are replaced by “ae”, “oe”, “ue”, and sometimes even just the basis letter is used.
- An advocate would send something like this by old-school snail mail. Additionally, some sending-proof-system like registered letters gets used.
- An advocate wouldn’t use services like Ukash.

So please, if you received that mail, just smile about it and delete it. Don’t pay in any case!

Credit to Dirk Knop (Technical Editor – Avira)

Connect Any Wi-Fi Device to Any Other Wi-Fi Device with Wi-Fi Direct

Mashable: The Wi-Fi Alliance is about to drop a wireless connectivity bombshell called Wi-Fi Direct. It will enable device-to-device connections using current Wi-Fi standards. The Wi-Fi Alliance will begin certifying Wi-Fi Direct devices today.
Communication between Wi-Fi devices isn’t specifically new. The Nintendo DS, for instance, has had device-to-device Wi-Fi interaction for some time, but the technology is proprietary.
The Wi-Fi Alliance differentiates Wi-Fi Direct by certifying the standard, ensuring interoperability. Devices stamped with the Wi-Fi Direct certification don’t need wireless networks, as they essentially become micro-hotspots.
This technology will conceivably allow devices like an Eye-Fi memory card to directly beam an image to a wireless printer. Since Wi-Fi Direct is largely software based, many recent devices should be upgradeable.
Speeds for Wi-Fi Direct are based on 802.11b/g/n channels, so we’re looking at intra-device throughput at rates upwards of 300Mbps. Range will also be a major selling point, and it’s reasonable to expect that future Wi-Fi Direct devices will eventually achieve distances similar to our home wireless networks.
Bluetooth will undoubtedly be the first technology to suffer as a result of Wi-Fi Direct. Although Bluetooth is aimed, almost universally, at close connections like headsets, it will be hard to trump the speed of Wi-Fi direct. Additionally, Wi-Fi Direct would use the same transponders as other Wi-Fi functions, so device manufacturers will likely be quick to cut redundant technologies.
Here’s a quick animation that illustrates the functionality of Wi-Fi Direct:

Nokia N900 PR 1.3 Firmware Now Available

Well in time for the MeeGo Conference next month, Nokia has just started the rollout of the all new PR 1.3 firmware (v20.2010.36-2) for the N900. The update is available over the air (OTA) in the UK with other countries expected to follow suit tomorrow. It should also be available via Nokia’s Software Updater in the coming days, but if you can’t wait or want to flash your device to get a fresh start, grab the firmware images from here and get cracking.

n900-closed

Simply grab the vanilla version for PR 1.3 for your region and get flashing using this guide. If you are on a Mac, this is the guide to follow. The new firmware brings bug fixes, stability improvements and support for Nokia’s Ovi Suite. This firmware is also supposed to aid developers (& power users?) in dual booting their devices into MeeGo and I suspect this would be the main draw come November and the MeeGo Conference.

Steve Jobs: iPad Mute Switch Won’t Double as an Orientation Lock

ipad_switch

Mashable: After iOS 4.2, iPad’s screen rotation lock switch, located on the upper-right edge of the device, will become a mute switch, similar to the mute switch on the iPhone.

According to Steve Jobs himself, who answered one of 9to5Mac’s readers in an email, the change is permanent, and – although it’s just a matter of a software tweak – users won’t be able to switch between the two functions.

This is a slight disappointment for users who are already accustomed to using this switch for locking the screen orientation on their iPad, but Apple is a company that likes having as little buttons as possible on its devices, and having one button doing two different things obviously wasn’t an option.

Facebook exceeds 500,000,000 users

facebook(low)Last night Facebook announced that it had over 500 000 000 users.

Some facts that have come out of this are that:

8% of the entire world are on Facebook Metro
Facebook was valued at $11.5 billion The Telegraph
More than 150 million log in through their phone The Guardian

Taken from TalkWeb

Lady Gaga Hits 1 Billion Views on YouTube

ladygaga

Lady Gaga took to Twitter this morning to announce that her YouTube videos have hit the lofty milestone of 1 billion total views. The musician is the first to reach such a goal, but Justin Bieber is trailing close behind with 962,726,797 total video views.

Sources were predicting this outcome a few weeks ago, with Lady Gaga reaching 1 billion YouTube views around October 20, and Bieber hitting the mark on November 1.

Nevertheless, Bieber continues to hold court as the King of YouTube with the most-viewed video of all time — his song “Baby” has 365,428,461 views.

My Personal Note: I’m not a fan of Lady Gaga or Justin Beiber, I Highly Dislike both of them!

Source: Mashable

President Obama signs iPad

Obama-Signing-iPad-Photo

Sylvester Caan dropped us a note to tell us (and show us!) his iPad being signed by US President Barak Obama. Take it away, Sylvester:

At a rally in Seattle, WA at the University of Washington, the President used the touchscreen on my iPad to give me his autograph.

He looked slightly surprised, but proceeded to use his finger to scribble on the iPad using the Adobe Ideas app.

How well was he able to sign? Check out the results and the video after the break. And if you and your iPhone or iPad have had any brushes with power or celebrity, let us know in the comments!

President-Signature

 

Taken from TiPb

Microsoft CEO: next Windows release is "riskiest product bet"

Windows 7 might be selling like hotcakes but that's only going to make it even harder for Microsoft to top. When asked about the riskiest product bet that the software giant is currently developing, Microsoft CEO Steve Ballmer answered "the next release of Windows" without so much as a second of hesitation. Unfortunately, his interviewers don't ask him for an explanation, so we'll have to speculate as to why he chose Windows and not something else like Windows Phone, Xbox Kinect, or Bing.

Microsoft sells more copies of Windows than anything else. It's the most popular piece of software in the world. That alone makes it "risky" to improve on because so many people depend on it. It's interesting that Steve calls it "the next release of Windows" rather than simply "Windows 8" but then again, Microsoft makes a point of not using a product's name, or even its codename, till after the official announcement. You can watch Ballmer's most recent interview, at the Gartner Symposium in Orlando, below:

Early details on Windows 8, which is expected to arrive in 2012, leaked in June 2010 but we wouldn't classify any of them as particularly risky. Highlights included USB 3.0 and Bluetooth 3.0 support, "instant on" booting, stereoscopic 3D, facial recognition as a security option, touch improvements for slates, and an app store.

Taken from: TechSpot.com

MySpace moves against apps who share user data

myspaceNew York (CNN) -- Social networking site MySpace, while acknowledging it shares profile information with advertisers, said Saturday that it is taking action against app developers who may have violated the website's terms of use by sharing user data.

A spokesman for MySpace who refused to be named told CNN that it shares information with advertisers, but that it does not identify a user. Although MySpace users are not required to provide an actual name when registering, their user IDs link the public information displayed on their profile, which can sometimes reveal names, addresses and other critical information.

MySpace users have been at risk of having any public information they post on their profiles released to outside advertisers. When users click on advertisements on the site, their user IDs are released to third-party vendors who have been able to use the public information displayed on a user's personal page and release it to other companies.

The company told CNN in a statement that the site shares "non-personally identifiable information with advertising companies as part of our ad serving process."

"It has come to our attention that several third-party app developers may have violated these terms and we are taking appropriate action against those developers," the spokesman said. He said the company prohibits third-party developers from sharing any user data, including a user ID, with other entities.

One of the apps that was in violation of MySpace's user privacy policy was the "Tag Me," application. Upon notification of this violation, the application was briefly suspended from the site, according to MySpace.

MySpace maintains that it collects user information for metrics and analytics purposes and only reveals information that is made public by users on their personal profiles.

The leaks follow similar privacy issues experienced by Facebook.

Facebook issued a stern warning to independent developers Monday in response to reports that some applications on the site were sharing identifying information about users.

Facebook's leaks were considered more serious because of the number of users and the fact that personal information including names was released to both advertising and data firms. Facebook said it will block the transmission of user IDs.

Google's Spam Report Extension

If you want to improve Google's results and report spammy web pages, there's a Chrome extension for you.Google Webspam Report adds a link next to each Google search result and automatically fills the spam report form with information like the URL of the page and your query.

google-webspam-report

You can also use the button from Chrome's toolbar to report pages. The most interesting feature is the integration with Chrome's browsing history that lets you select recently visited pages and recent Google searches.

google-webspam-report-2

Google links to a feedback form at the bottom of the search results pages and some of the options let you report spam, irrelevant pages and dead links. Unfortunately, Google doesn't make it easy to select the pages you want to report.

Saturday, October 23, 2010

Windows XP no longer allowed on PCs, Windows 7 turns one

Today is a very important day for Microsoft: it's the first day that Windows XP can no longer be bundled on new PCs and it's also the first anniversary of the release of Windows 7. Either Microsoft planned for these dates to coincide, or we just have a big coincidence on our hands.

Due to Vista's performance issues on cheap netbooks, Microsoft had to extend the Windows XP installation deadline for its OEM partners. Back in 2008, Microsoft told OEMs that October 22, 2010 would be the last day they could sell computers that come with Windows XP.

windows_xp_wallpaper

XP was first released to retail channels on October 25, 2001. In recent years, the OS has become a thorn in Microsoft's side as the company tries to push the operating system's successors. Despite its outdated security systems and other issues related to being a nine-year old OS, many users still cling to it due to familiarity. In fact, it's still the most popular operating system in terms of market share.

In related news, Windows 7 turns one today. Despite XP's popularity, it has been growing the fastest of any operating system to date. In its first year it has already sold 240 million licenses. Microsoft hopes to push more users to it with releases that use hardware acceleration only available on Windows Vista and Windows 7. So far, these include Windows Live Essentials 2011 and Internet Explorer 9, neither of which can be installed on Windows XP.

Taken from TechSpot

Reuters: Google says its cars grabbed email and passwords

download(Reuters) - Google Inc said its "Street View" cars around the world accidentally collected more personal data than previously disclosed, and that it was changing its privacy practices.

Regulators in some of the more than 30 countries where the cars operated are looking into the issue.

Google's Street View cars, which are well known for crisscrossing the globe and taking panoramic pictures of the city's streets, collected the data. The company displays the pictures in its online street maps.

Google said it wants to delete the data as soon as possible. It disclosed the snafu in May, but said at the time that the information it collected was typically limited to "fragments" of data because the cars were always moving.

"It's clear from those inspections that while most of the data is fragmentary, in some instances entire emails and URLs were captured, as well as passwords," Google Vice President of Engineering and Research Alan Eustace said in a post on Google's blog on Friday.

Google had deleted the data in countries where regulators had given it permission to do so, a Google representative said. The representative said there were investigations in other countries and that Google could not delete the data until the investigations were closed.

Google said it has appointed Alma Whitten as director of privacy for engineering and product management, and that the company was adding new internal procedures requiring engineering product managers to maintain a privacy design document that records how user data is handled.

Google also said it was enhancing its privacy training for engineers and other important groups within the company.

Collecting the WiFi data was unrelated to the Google Maps project, and was done so Google could amass data on WiFi hotspots that could help provide location-based services.

Google said collecting the additional data was a mistake resulting from a piece of computer code from an experimental project that was accidentally included.

Desktop Linux: The Dream Is Dead

linuxThe author of this article seems to think Linux in the desktop is dead, with so many missed opportunities, especially during the failure of Windows Vista, they will never break into the market now that Win 7 is so successful.

In some ways I agree, but personally, I never thought Linux even had a chance with the average user on a home system. Being in IT, like most peeps in my field, I have become the "help desk" for family and friends; I really do not think the average user is ready for it. Add in the lack of applications and games that are available, it really did not stand a chance. I design and write software, the development costs these days are huge, and the money peeps want a good ROI to out weigh the risks, developing from scratch or even porting an existing app is just too risky.

On the business end, ever since the SOHO fiasco where they were threatening to sue any and all companies that were using Linux, many of my large clients, including a major international bank, dropped Linux as a server operating system faster then you could say Penguin. I remember sitting in a systems and architectural conference call at the bank, they had just spent the past month or two doing a risk assessment of the chances of being sued by SOHO; they considered it to be high as their Linux supplier was IBM. They then presented their operating costs of the data centers running Linux and data centers running Windows over the past few years, the costs and risks were lower for Windows; within 6 months all the servers were Windows.

On the other hand, the new Apple products are Linux based and are very successful, so with the right backing, the money to support and write applications, Linux could everything their supporters want it to be and I wish them luck.

Read The Article in PCWolrd