Archive for the ‘Web News’ Category

WordPress 2.2.1 Released

Thursday, June 21st, 2007

WordPress 2.2.1WordPress 2.2.1 is now available. 2.2.1 is a bug fix release for the 2.2 series. Since 2.2 was released a month ago, the WordPress community has been improving fit-and-finish by identifying and fixing those little bugs that can be so annoying and by fine-tuning some small details. The result is a nicely polished 2.2.1 release.

Unfortunately, 2.2.1 is not just a bug fix release. Some security issues came to light during 2.2.1 development, making 2.2.1 a required upgrade. 2.2.1 addresses the following vulnerabilities:

  • Remote shell injection in PHPMailer
  • Remote SQL injection in XML-RPC Discovered by Alexander Concha.
  • Unescaped attribute in default theme

Read more (WordPress.org)…

Blu-ray vs. HD-DVD for Enterprise Storage

Wednesday, June 20th, 2007

Blu-ray vs. HD DVD
In the ongoing format battle between Blu-ray and HD-DVD, the main focus has been on consumer applications, and in particular, the home movie market. This week, in fact, Blockbuster announced plans to increase the availability of Blu-ray discs in its stores. The video rental company said that customers were favoring the Sony-backed format over the Toshiba-sponsored HD-DVD, leaving many quick to suggest that this marks the beginning of the end of the latest format war.

Read more (Yahoo! News)…

Top 5 Tech News for June 19, 2007

Tuesday, June 19th, 2007

70 months in jail for convicted AOL phisher

Experts at SophosLabs™, Sophos’s global network of virus, spyware and spam analysis centers, have welcomed the news that a man has been sentenced to 70 months in prison after phishing credit card information from internet users.

47-year-old Jeffrey Brett Goodin of Azusa, California, has been sent to jail for nearly six years after using several different compromised Earthlink email accounts to send thousands of unsolicited emails posing as AOL’s billing department. The phishing emails directed recipients to bogus payment websites. Goodin was also convicted on a number of other counts including wire fraud, possession of unauthorized credit cards, misuse of the AOL trademark, and attempted witness harassment.

The court heard that it cost Earthlink nearly $1 million to detect and fight the phishing attempt, and he was ordered to pay a total of $1,002,885.58 to victims by US District Judge Christina Snyder. Read more (Sophos)…

‘Italian Job’ Web Attack Sweeping the ‘Net

Online criminals have launched a widespread Web attack that has turned tens of thousands of legitimate Web sites into weapons, security vendors said Monday.

The attack began late last week and by Monday morning, more than 10,000 Web sites had been compromised, according to security firms Trend Micro Inc. and Websense Inc. Read more (PC World)…

Safari ushers in better browser colors

Apple’s Safari may not be rewriting the rules for Web browsing on Windows just yet, but it’s leading the way with one significant change: photographs with better color.

Unlike the prevailing browsers on the Internet–Microsoft’s Internet Explorer and Mozilla’s Firefox–the Apple browser supports different ways of encoding images that can mean richer, deeper colors. With the beta version of Safari now on Windows, Mac OS X users aren’t the only ones who’ll be able to see the difference.

However, Apple won’t keep that edge for long. Mozilla’s forthcoming Firefox 3 browser, due to ship in beta form this July, likely will include support for richer color, said Vlad Vukicevic, a technical leader at Mozilla and a photo enthusiast. Read more (CNET News)…

Blockbuster backs Blu-ray

LOS ANGELES, California (AP) — Blockbuster Inc. will rent high-definition DVDs only in the Blu-ray format in 1,450 stores when it expands its high-def offerings next month, dealing a major blow to the rival HD DVD format.

The move, announced Monday, could be the first step in resolving a format war that has kept confused consumers from rushing to buy new DVD players until they can determine which format will dominate the market. Read more (CNN)…

Microsoft sues Immersion for contract breach

Microsoft said on Monday that it has filed suit against Immersion, a company whose technology adds tactile feedback to joysticks and other controllers.

Immersion had originally sued Microsoft, along with Sony, back in 2002, but the two companies reached a settlement in 2003. Under that deal, Microsoft agreed to pay Immersion $26 million for licensing rights and for a stake in the company. However, Microsoft said Monday that Immersion has not lived up to other terms of that deal, including a provision that requires Immersion to pay Microsoft “based on certain business and IP licensing arrangements.” Read more (GameSpot)…

CSS Image Replacement Being Used As Phishing Tool on MySpace?

Tuesday, June 12th, 2007


Transparent images being used as MySpace Phishing tool.SecurityFocus recently reported that the number of page views garnered by fraudulent sites climbed by a factor of five in March and April, fueled by a phishing scheme targeting MySpace users.

Nature of the Attack

According to the report:

The attack used a modification to the style sheet of a user’s profile to place a transparent image over the page, causing a click on a link — or anywhere else on the page — to redirect the visitor to a fake MySpace login page…

While a MySpace account does not have any intrinsic monetary value, phishers had come up with ways to monetize this attack… We observed hijacked accounts being used to spread bulletin board spam for some advertising revenue. -Colin Whittaker of Google’s Anti-Phishing Team

Read more…

WordPress Unmoderated Comments Disclosure Security Issue

Tuesday, June 5th, 2007

WordPress Logo

As of June 4, 2007, Secunia reported a new vulnerability in WordPress regarding exposure of sensitive information from a remote source. Here’s the description from Secunia:

The security issue is caused due to WordPress using predictable cookies to identify the author of a comment. This can be exploited to view unmoderated comments by guessing and then faking the cookies sent to the original author.

Successful exploitation requires knowledge of the original author’s name and email address.

Read more…

Google Maps’ New Street View is Freaky

Saturday, June 2nd, 2007

Google Maps Google Maps' Street View

After watching a Buzz Report from CNET TV regarding the new feature of Google Maps which is Street View, I was a bit intrigued by Brian Cooley’s claims that the street level view is cool and invasive. It’s cool in a sense that you won’t be seeing the same old rooftops or anything from a satellite’s perspective anymore. In Street View, you’ll be able to see actual streets complete with cars, trucks, establishments and people. Now many believe this is invasive. As Brian said in the video,

You’ll be able to walk up and down the street, zoom in… recognize faces… And it’s really interesting when you search a residential address… zoom in, see the house number, what car they own and maybe even read the license plate? You can basically reverse engineer the kind of license plate address lookup that most states require a court order to do.

Read more…

Web Browser Security Audit as of June 1, 2007

Saturday, June 2nd, 2007

With the recent updates on the Firefox and Opera Web browsers, I wonder which among the popular browsers is the most secure. Secunia has a huge repository of security advisories on a variety of software and what better way to check on the vulnerabilities of Web browsers than to visit the Website? However, it would take me some time and effort to find those specific vulnerabilities considering that Secunia is a huge repository.

Stay Secure

Read more…