If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!

A new security update for Firefox 2 is available for download.

The Mozilla Foundation has put online a new security update for Firefox 2, the older version of its Internet browser open, multi-platform (Windows, Macintosh and Linux). Serialized 2.0.0.16, this sixteenth revision since October 2006 announced the correction of two vulnerabilities described as critical.

The first of these allows the opening of several tabs calling URLs (Uniform Resource Locator) command line while Firefox is not already executed, while the second allows the execution of arbitrary code remotely via overflow at an object CSS.

Note that these two vulnerabilities also affect Firefox 3.0 and will be corrected in the version 3.01 out very quickly.

Download Firefox from the official site

The customary indiscretions are launched on the next operating system with Apple to start 5 new features for which the firm the Apple has not officially reported.

The last conference WWDC in San Francisco was an opportunity for Apple to say more about the future of its operating system Mac OS X 10.6.

Snow Leopard, which will devote itself to computers based on Intel processors with a preference for multicores, will include support for native Microsoft Exchange 2007, accepting huge amounts of RAM (up to 16), operate more effectively powerful graphics processor. It also will integrate the multimedia platform QuickTime X with a better supporting new audio and video formats, and a new version of Safari promise with a better implementation of JavaScript pledge of greater timeliness.

Already in pre-game versions available to developers, some interesting details have filtered Safari 4 such as the possibility of converting a site application on the desktop. Without great surprise, Snow Leopard also begins to be the victim without doubt the consent of indiscretions.

A little more about Snow Leopard
Thus, several screen shots of Mac OS X 10.6 have been published on various sites, but Apple is keeping watch, they had to be withdrawn. Even so, writings and remain mentioning RoughlyDrafted, the site AppleInsider unveils 5 features of the OS, due out in a year:

* A new framework multi-touch: all software libraries for the use of trackpads new MacBook (paved circular touch to control the user interface)
* Applications lighter: the example of Mail whose weight increase from 287 MB to 91 MB or even iChat, 111 MB to 52 MB
* Some features of word processor: after correcting spelling and grammar (for Mac OS X 10.5 English version), this will be the turn of the automatic correction, inserting intelligent dashes, features replace
* The self-activation: widespread use of technology Data Detectors to automatically identify certain data contained in such messages received in Mail
* Full support (reading and writing) of ZFS, file system, 128-bit Sun

Five years and five billion tracks downloaded, shop online music, Apple crosses a new course.

For iTunes Store, the first billion tracks downloaded was reached in February 2006 after a launch in April 2003 in the USA, and before various openings in several places around the world.

Since then, Apple has the habit of tarnishing us informed of developments meter iTunes Store. Two billion in January 2007, three billion in July of that year, then four billion last February and then five billion today. What claim first place on record, the USA in any case, with a rich catalogue of more than 8 million shares.

And for movies …
For music, no doubt thanks to the success of its digital music players, the victory seems to be acquired for the Cupertino company, and the opportunity to give a small spotlight on its offer of films, because over time iTunes Music Store is well and truly become iTunes Store.

Each day, it would be more than 50 000 films and TV series to be downloaded and dug into in a catalogue still small with 20000 episodes of TV series, 2000 films including 350 in high definition.

The company delivers an opinion SecureMac security following the discovery of a Trojan horse that wants to Mac OS X 10.4 and 10.5. The security risk is described as critical.

SecureMac claims to have discovered several variations of a new Trojan horse targeting Mac OS X 10.4 and 10.5. Loosened the Web wild animal gallops through sharing networks are distributed by iChat and LimeWire. It takes the form of a script compiled AppleScript weighing 60 ko and bearing the name of ASthtv05 barbaric, even as an application of 3.1 Mo, Astht_v06.

For an infection, the user must download and run, the Trojan will then stay in the folder / Library / Caches / “and will launch at each startup.

Tremble Mac Users (?)
According SecureMac, Trojan act with discretion and allows a remote attacker to gain access to vulnerable system. It can transmit user passwords, and escapes detection by opening up ports in the firewall and disabling the system messages. To finish brushing the blackboard, SecureMac adds that the Trojan horse on board an impactor recorder, can enable sharing of files, make screenshots even photos applying for the iSight.

Nothing really gratifying a priori for this malware that exploits a recently discovered vulnerability in Apple Remote Desktop, an application that allows remote administration of computers. Via this vulnerability administrator rights are unduly granted.

Apple will soon provide a fix for the vulnerability, cutting the grass under the feet of the Trojan horse. In the meantime, SecureMac proposes obviously … its security solution. Still, this malware comes the ranks, still very skinny, threats targeting specifically to Mac OS X. In Mac OS, as elsewhere, users should exercise caution in downloading not do anything. Perhaps this is a tangible sign of the growing popularity of the OS company to the apple.

Apple book for a new Windows version 3.1.2 stamped its Safari Web browser and its share of work to prevent the exploitation of the loophole Carpet Bomb, which is real danger in association with an IE vulnerability.

For several weeks the controversy raged between Microsoft and Apple against the backdrop of a vulnerability in shared responsibility, although for most computer security experts, it is primarily the Internet Explorer browser that is to blame.

It all started in late May with the publication of a notice of security in which Microsoft has indicated conduct an inquiry about a vulnerability clearly attributed to Safari. In fact, the vulnerability of qualified Carpet Bomb as a result of having to wallpaper the user desktop Windows, or the directory ~ / Downloads / Mac OS X with unwanted files had actually been discovered in mid-May by a researcher named Nitesh Dhanjani. The latter had warned Microsoft that Apple as its discovery.

Real Menace in Windows
The real danger of this flaw, however, has been proved that under Windows environment with the publication of an exploit code and a Web page proof of concept by another researcher, Liu Die Yu

At the launch, Internet Explorer research DLL files in cases where files are stored Windows system but also on the desktop. By default, Safari downloads files on the same office and without prior warning to the user, this is the fault of Apple’s browser. For the rest, everything is a matter of vulnerability in IE6, 7 and 8 for the beta to be willing to consider a DLL file specially designed, and therefore placed on the desktop made by a download via Safari. Liu Die Yu has been demonstrated with a “schannel.dll” corrupt borne by IE, resulting in the automatic opening of the notebook which bodes well for other actions far more damaging.

Apple makes the job
With version 3.1.2 for Windows Safari, Apple has therefore adjusted the lax behaviour of its browser now repatriate default files in the folder “My Documents” on Windows XP, and “Downloads” in Windows Vista. By the way, Apple took the opportunity to correct other security problems. Still if IE …

Download Safari 3.2.1 for Windows