Newsletters

Select newsletters below and click the button to sign up!

Boston News NY News
DC News Internet Daily
SiliconValley News
InternetNews Business Report




Become a Marketplace Partner



Partner With Us















InternetNews Bloggers

Recent Entries

Search The Blog




November 6, 2009

Google's Chrome browser updated for security fixes

googlechromologo.jpg
From the 'Auto-Update' files:

Google is updating the stable version of its Chrome browser to version 3.0.195.32.

The new release fixes two security issues and addresses a number of stability issues including a top crash condition and a bug that could have consumed 100 percent of a user's CPU.

On the security side, one of the fixed flaws deals with executable JavaScript warnings, or rather a lack thereof.
"The user was not warned about certain possibly dangerous file types such as SVG, MHT and XML files," Anthony Laforge Google Chrome Program Manager wrote in a blog post. "In some browsers, JavaScript can execute within these types of files. Because the JavaScript runs in the local context, it may be able to access local resources."
The other security issue fixed in Chrome 3.0.195.32 is a memory corruption condition in the Gears plugin. Gears (formerly known as Google Gears) is Google's attempt at providing offline storage for website information.

Chrome 3.0.195.32 also fixes what I consider to be a very serious bug that could have eaten up 100 percent of a user's CPU.

Continue reading "Google's Chrome browser updated for security fixes"

Posted by Sean Michael Kerner at 11:09 AM | Comments (0) | TrackBack (0) | Share

Mozilla updates Firefox 3.5.5 for 'annoying' bug

sr-firefox3.jpg
From the 'Quick Fix' files:

For the most part, Mozilla issues updates to its open source Firefox browser for both security and stability related issues. That's not the case with the new 3.5.5 update out today.

Firefox 3.5.5 has no listed security fixes and is all about fixing a few key stability bugs.

The official list of bugs fixed in the 3.5.5 update actually only includes 5 fixed items of which three are labeled by Mozilla as being critical.

One of the critical bugs in the fixed liste deals with crashes in Firefox's GIF image decoder. The flaw was introduced in the Firefox 3.5.4 release which came out on October 28th.  The GIF flaw was reported in Mozilla bugzilla bug tracking system by Toronto staffer Joe Drew (JOE DREW!!) on October 29th.
"We're seeing lots of crashes in the GIF decoder, involving nsGIFDecoder2::ProcessData calling GifWrite(), then a null dereference," Drew wrote in the bugzilla entry. "Right now, this is showing up in the noted crash site, but this is a Windows-specific, 3.5.4-specific crash site, since the offset in xul.dll will change with every build, and obviously xul.dll has no meaning on OS X or Linux."

Continue reading "Mozilla updates Firefox 3.5.5 for 'annoying' bug"

Posted by Sean Michael Kerner at 10:11 AM | Comments (0) | TrackBack (0) | Share

November 5, 2009

Zoho takes pride in Microsoft's 'Fake Office' zing

When the big boy kicks sand in your face, you can either go home and sulk or make jokes about what big feet the bully has. You’ve gotta love upstart Zoho for taking the second course of action.

An early provider of online productivity applications, Zoho has moved quickly to build out a substantial suite of integrated applications that compete with Google and others in the cloud computing space.

Zoho’s CEO Sridhar Vembu had an entertaining blog post yesterday responding to a Microsoft executive’s reference to “fake Office” products. Earlier this week, Microsoft announced price cuts to its Business Productivity Online Suite (BPOS) by a third, bringing the price down from $15 per user to $10 per month. Google’s App Suite, by comparison, costs $50 per user, per year.

Vembu quotes Ron Markezich, corporate vice president of Microsoft Online, as noting the company offers a scaled-down version of BPOS for $36 a year. And furthermore “…we’re not seeing any inclination that Zoho or Google or Zimbra or any other of those offering fake Office capabilities can replace [Microsoft Office].”

zoho-logo.gif

That was all too much of a red flag for Vembu not to charge after:

Continue reading "Zoho takes pride in Microsoft's 'Fake Office' zing"

Posted by David Needle at 7:03 PM | Comments (0) | TrackBack (0) | Share

Senate committee clears data breach bills

government_capitolhill3.jpgA pair of bills that would require businesses to notify consumers in the event of a data breach cleared the Senate Judiciary Committee Thursday, moving on to the full Senate for consideration.

The Data Breach Notification Act, sponsored by Dianne Feinstein (D-Calif.), would authorize the attorney general to bring civil actions against firms that failed to notify people whose personal information had been compromised in a breach. It would also extend notification requirements to government agencies.

The more comprehensive Personal Data Privacy and Security Act, introduced by Judiciary Chairman Patrick Leahy (D-Vt.) and co-sponsored by Utah Republican Orrin Hatch and others, would also set notification requirements, as well as tighten criminal penalties for identity theft and willfully concealing information about a breach.

Continue reading "Senate committee clears data breach bills"

Posted by Kenneth Corbin at 6:55 PM | Comments (0) | TrackBack (0) | Share

Google brings Closure to open source JavaScript devs

google_closure_small.gif From the 'Open Source Development' files:

Google builds a lot of its own tools as part of its development efforts. Sometimes we get all 'get lucky' and the tools become open source and available too.

That's what has happened today with the Google Closure tools which are a set of JavaScript optimization tools.  Considering the extreme importance of JavaScript in all modern web applications and browsers, it makes sense in my opinion for Google and everyone else to have the best JavaScript code possible.

Among the tools released by Google is the Closure Compiler which aims to compile web apps down into compact, JavaScript code.
"The compiler removes dead code, then rewrites and minimizes what's left so that it will run fast on browsers' JavaScript engines," Google stated. "The compiler also checks syntax, variable references, and types, and warns about other common JavaScript pitfalls."
That's kinda cool, but what's even more impressive in my opinion are the usage mechanisms that Google is making available for the Closure Compiler. In addition to the command-line they've also got a Firefox extension that works with their Page Speed optimization tool.

What that means to me is I can easily check JavaScript on any page and see how the JavaScript can be improved.

That's one heck of a powerful tool to have.

Continue reading "Google brings Closure to open source JavaScript devs"

Posted by Sean Michael Kerner at 4:13 PM | Comments (0) | TrackBack (0) | Share

Cisco's Chambers & EMC's Tucci: Buddies in Bad Times

chambers.tucci.small.jpgFrom the 'Former Wang Employees'  files:

Sometimes is not what you know that's important, it's who you know -- right?

This week, Cisco, EMC and VMware entered into a partnership for delivering integrated virtual data center solutions.

Aside from the news itself, one of the most interesting pieces of drama in the whole event was the extreme chumminess between Cisco CEO John Chambers and EMC CEO Joe Tucci.

During the event there were a few back slaps (and the pic left from Cisco shows one of them, that's Chambers on the left and Tucci on the right) and many friendly words shared and said between the two CEOs.

Chambers said at multiple points during the launch press conference how his 20 years of friendship with Tucci helped to make the deal possible. Chambers actually worked for Tucci at one point, when both men were at the now-defunct Wang Labs.

Continue reading "Cisco's Chambers & EMC's Tucci: Buddies in Bad Times"

Posted by Sean Michael Kerner at 10:24 AM | Comments (0) | TrackBack (0) | Share

November 4, 2009

Adobe updates Shockwave for 5 critical vulnerabilities

shockwaveplayer_logo.jpgFrom the 'Shocking Updates' files:

Adobe Shockwave users, it's time to update.

Adobe has issued an updated version of its Shockwave Player to address 5 critical vulnerabilities. The flaws affect  Adobe Shockwave Player 11.5.1.601 and prior versions. The new version is numbered 11.5.2.602.
"The vulnerabilities could allow an attacker, who successfully exploits the vulnerabilities, to run malicious code on the affected system," Adobe stated in its advisory.
Two of the vulnerabilities deal with invalid pointer issues that could lead to arbitrary code execution.

Arbitrary code execution is also the potential end result for two of the other flaws fixed by Adobe in this new Shockwave update. There is an invalid index issue that could also lead to code execution vulnerabilities. As well there is an invalid string length vulnerability that has now been addressed.

A potential Denial of Service (DoS) attack vector is fixed in the Shockwave Player 11.5.2.602 release thanks to a fix for a boundary condition issue.

The  Shockwave Player 11.5.2.602 is the third security update for the Adobe product this year.

In June, Adobe issued the 11.5.2.600 update fixing a critical zero day flaw. That update was followed in July with the 11.5.3.601 update which was related to Microsoft's Active Template Library (ATL) fixes made at the same time.

Posted by Sean Michael Kerner at 10:58 AM | Comments (0) | TrackBack (0) | Share

Sun updates Java 6 for the 17th time

javasmall.jpg
From the 'Still Owned by Sun' files:

If you're like 80 percent of all web users, chances are that you're running Java. Have you updated to the latest version yet?

Yesterday, Sun released Java 6 Update 17, fixing multiple vulnerabilities.

Among the issues fixed by Sun is a command execution vulnerability in the Java Runtime Environment Deployment Toolkit. According to Sun's advisory on the issue, the vulnerability could potentially be leveraged to execute arbitrary code.

There is also critical fix for a vulnerability in the Java Web Start Installer which potentially could enable an untrusted Java app to run as trusted and then run whatever code it wants.

Update 17, also addresses what Sun refers to as, "Multiple buffer and integer overflow vulnerabilities in the Java Runtime Environment". The overflow vulnerabilities could potentially lead to a privilege escalation attack.

From my perspective, there is one other key vulnerability that Sun is addressing with this update. It has to do with the actual Java update mechanism. Many (if not most) users have their Java installations automatically checking Sun's server periodically for updates. According to Sun, it didn't always work.

Continue reading "Sun updates Java 6 for the 17th time"

Posted by Sean Michael Kerner at 10:28 AM | Comments (0) | TrackBack (0) | Share

November 3, 2009

AMD opening shop in the Middle East?

It looks like AMD and Globalfoundries are going to set up shop in Dubai after taking a hefty chunk of change from an investment firm based in the emirate. AMD CEO Dirk Meyer told Emirates Business that the firm is looking to a open chip design center in Dubai, and maybe a fabrication plant in Abu Dhabi.

"We have chip design centers around the world, including in India and China, and the capabilities by Dubai Silicon Oasis present interesting future opportunities. In time we will [design chips in the UAE], and it's hard to be specific on the time frame. There is a definite opportunity in such a partnership," said Meyer.

The Dubai Silicon Oasis Authority (DSOA) is a proposed massive integrated technology park intended to create a Silicon Valley for the Middle East to lure offices for the major players in the semiconductor industry, except this would be design on the large scale like everything else in Dubai. The intention is to provide a giant "technology oasis" for all of these firms, with housing, commercial and other considerations all close to work.

But the first priority is a new Globalfoundries fab in Abu Dhabi. "The top priority for AMD is to deepen our partnership with ATIC and Globalfoundries, which continues to expand its partner pool to make sure that infrastructure in Abu Dhabi gets ready for a fabrication plant in the future," said Meyer.

Meyer went on to say that "as a company, we will want to participate fully in the market through our sales and marketing team and make sure people are IT savvy. Acquisitions are not on the agenda presently but could be a possibility over a period of time."

Such talk and interest is not surprising, given Advanced Technology Investment Company (ATIC) owns approximately two-thirds of Globalfoundries' fully-converted common stock and a large chunk of AMD as well. AMD might be bankrupt by now were it not for the ATIC bailout. ATIC's sole shareholder is the government of the Emirate of Abu Dhabi, making it a state-owned investment firm.


Posted by Andy Patrizio at 8:03 PM | Comments (0) | TrackBack (0) | Share

Creative: cooking up an e-reader?

nook_alex_200x180.jpg (Two new e-reader entries: left, Spring Design's Alex; right, B&N's Nook.)

Creative Labs, maker of the Zen MP3 player, PC speakers and other hardware, surprised investors by showing off a prototype of a touchscreen e-reader during a recent annual meeting -- and by trash-talking the Kindle.

If reports are true as described by blog EpiZENter, the device is being called the MediaBook for now and features a touchscreen, text-to-speech, SD memory card slot and will offer Internet access. It will be powered on the company's Zii processor.

Though spokesmen for Creative had not returned calls by press time, CEO Sim Wong Hoo wrote in the introduction of the company's most recent earnings filings that new Zii products "can possibly include mobile phones, TV set-top boxes, video conferencing systems, digital signs, netbooks, eBooks and other mobile communication devices."

The MediaBook would join a fleet of fledgling wireless reading devices, including Barnes & Noble's Nook, Sony's Daily Edition, the iRex by iRex Technologies, Que by Plastic Logic and Spring Design's Alex, all chasing after Amazon's front-runner, the Kindle.

However, William Png, Creative's chief of strategic business, believes the MediaBook will stand out from the crowd. He reportedly described the Kindle as "just another electronic device that displays books in text," while the Creative device would appear to be almost an e-reader-multimedia-tablet hybrid that "will harness videos, pictures, text and services in one device that supports a media-rich experience."

Posted by Michelle Megna at 1:13 PM | Comments (0) | TrackBack (0) | Share

Add internetnews.com
to your browser search box.

IE 7 | Firefox 2.0 | Firefox 1.5.x
Receive news
via our XML/RSS:
feed