Oracle patches Java exploits, toughens its default security levels

Java disabled in Firefox

Oracle hasn’t had a great start to 2013. It’s barely into the new year, and Apple and Mozilla are already putting up roadblocks to some Java versions after discoveries of significant browser-based exploits. The company has been quick to respond, however, and already has a patched-up version ready to go. The Java update goes one step further to minimize repeat incidents, as well — it makes the “high” setting the default and asks permission before it lauches any applet that wasn’t officially signed. If you’ve been skittish about running a Java plugin ever since the latest exploits became public, hit the source to (potentially) calm your nerves.

[Thanks, Trevor]

Filed under: , ,

Comments

Via: Reuters

Source: Oracle

US-CERT warns users to disable Java in web browsers, Apple and Mozilla move to block it

USCERT warns users to disable Java in web browsers, Apple and Mozilla move to block it

It’s far from the first time that computer users have been warned to disable Java, but this latest security issue has risen to some high levels at a particularly rapid pace. After first being reported by security researchers on Thursday, the United States Computer Emergency Readiness Team (or US-CERT, a part of the Homeland Security department) stepped in with a warning of its own on Friday, which bluntly suggested that all computer users should disable Java in their web browsers (for its part, Oracle says that a fix is coming “shortly”). The flaw itself is a vulnerability in the Java Security Manager, which an attacker could exploit to run code on a user’s computer.

Not content to wait for a fix, some companies have already taken steps to block possible exploits. That includes Apple, which has added recent versions of Java to its blacklist covering all OS X users, and Mozilla, which has enabled its “Click To Play” functionality in Firefox for all recent versions of Java across all platforms (it was previously only enabled by default for older versions of Java). Apple’s move follows an earlier decision to remove the Java plug-in from browsers in OS X 10.7 and up last fall. You can find the full alert issued by US-CERT and additional details on the vulnerability at the links below.

Filed under: ,

Comments

Via: The Verge

Source: US-CERT, Mozilla

Chrome 24 fixes two dozen bugs, promises to speed things up

Chrome 24 fixes two dozen bugs, promises to speed things up

Google’s latest browser update landed today with little fanfare from Mountain View — just a tiny blog post proclaiming a faster, more stable Chrome. Diving into the build’s change notes, however, reveal Flash updates, bug fixes and support for MathML. Not a lot in the way of consumer facing features — though Bookmarks are now searchable, via the Chrome omnibox. Not as fancy as the last release, but we never to scoff at stability and speed. Check it out at the source link below.

Filed under:

Comments

Via: The Next Web

Source: Google (1), (2), (3)

Live from the Engadget CES Stage: an interview with Mozilla’s Jay Sullivan

Live from the Engadget CES Stage an interview with Mozilla's Jay Sullivan

Sure CES is primarily a hardware show, but that doesn’t mean that some of the top software companies aren’t getting in on the action. Mozilla will be on-hand to discuss the desktop and mobile browsing wars, and the company’s VP of products, Jay Sullivan, will be paying a visit to our stage to discuss the latest Firefox goings-on.

January 8, 2013 5:30 PM EST

Check out our full CES 2013 stage schedule here!

Continue reading Live from the Engadget CES Stage: an interview with Mozilla’s Jay Sullivan

Filed under: , , , ,

Comments

Apple Safari marks its 10th birthday as part of a much wider web

Apple Safari marks its 10th birthday in a much wider web

While most of us think of the web browser landscape as a fierce battle between Google, Microsoft and Mozilla, the situation was very different a decade ago. Internet Explorer still dominated the market, Firefox’s precursor Phoenix was months away and Chrome wasn’t even a twinkle in Google’s eye. That makes today’s 10th anniversary of Apple’s Safari a significant milestone: the public beta released on January 7th, 2003 represented the first major new competitor to Internet Explorer in years, especially for the initial Mac users who hadn’t seen many alternatives. The desktop browser has just a small slice of the market today, but it arguably played an important part in shaping the current market. Safari launched the first practical instance of the now-ubiquitous, KHTML-based WebKit rendering engine that made iOS stand out in 2007 and whose variants power some competing browsers, including Chrome.

As project originator Don Melton notes, however, Safari came close to having a different name at one stage. Among other suggestions, the late Steve Jobs was intrigued by the name “Freedom” and spent substantial time exploring its prospects before dropping it and ultimately settling on the Safari label. Such naming debates are common in technology, but they show just how important it was for Apple to make a good first impression; given that Safari is still in healthy use today, we’d say the deliberation paid off.

Filed under: , ,

Comments

Source: Don Melton

Google Now coming to Chrome browser, brings reminder cards to the desktop

http://www.engadget.com/2012/12/08/google-now-coming-to-chrome-browser/

Google Now is fast becoming one of Android‘s defining features. But, if some recent additions to Chromium are anything to go by, the nifty little life-predictor could well be finding its way to Chrome browsers, too. An entry in the Chromium project code site titled “Show Google Now notifications in Chrome” along with some code revisions for “Creating a skeleton for Google Now for Chrome implementation” hints that the idea is, at least, at some level of development. This of course means that the service would leap out of its current mobile OS restraints, and become available to a much wider audience — at least those using some portion of the Google ecosystem — and not just its Android platform. The code was spotted by an eagle-eyed François Beaufort, who points out the reference to it working with Chrome’s desktop notifications. While we wait for more official word, we guess a card to notify us of when this might be coming would be too much to ask?

Filed under: , ,

Comments

Via: CNET

Source: Francois Beaufort (Google+)

PlayStation Store hits the web under the radar

It’s time to get busy with Sony’s vast collection of content for multiple different platforms with the first appearance of their browser-based PlayStation Store. This store is set to sell TV and movie content as well as PlayStation games galore, but at the moment isn’t quite perfectly synced up for all media that’s offered across the platforms it serves. In other words you should certainly check it out, but you won’t be able to see everything your PlayStation sees.

This online store will eventually allow you to download content to your Sony account, this connecting with your PlayStation as well as your PlayStation Vita and your Sony Tablets running Android. What’s happening right this minute is that the company is going through sort of a live test-run with limited content to make sure everything is up-to-spec for a more vast release. It’s not that you’re not going to get the content you purchase now, it’s just that you might not have the full store experience.

In the near future you’ll be able to easily purchase content from the web-based store and have it sent to your devices one-by-one. This is a method that the Google Play store uses for your many connected Android devices and relatively similar to what iTunes does with purchases through their app as well – everyone is owned by you through your account, not just on your device.

According to a comment made by official PlayStation Blog SCEE Blog Manager Fred Dutton, the store is set to be launched in a larger way soon:

“Regarding [the lack of a major announcement] – we are testing a new web store, which we look forward to announcing and launching to the PlayStation/Sony community shortly.” – Dutton

Have a peek at the timeline below to get more info on recent events surrounding the PlayStation Store and device connected to it, and get pumped up about a wider release as soon as this afternoon!

[via EuroGamer]


PlayStation Store hits the web under the radar is written by Chris Burns & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.

Chrome OS: Google’s Most Underrated Project That You’ve Already Been Testing And Just Didn’t Know It

photo 1

There are hundreds of devices to choose from when you’re considering a new desktop computer, laptop or mobile device. We’re overwhelmed by all of the choices we have, but choice is good. When it comes to computing, as far as operating systems, there are three huge players: Microsoft, Apple and Google. Yes, Google.

A curious thing happened during Chrome’s rise to being the most-used browser – an operating system was born. Perhaps that was the plan all along, one can never truly know with Google. What I do know is that when you’re on the go, especially with a laptop, the primary piece of software that everyone uses is the web browser, so why not build an operating system on top of it?

That’s exactly what Chrome OS is and it’s starting to make its way to consumers. Google has announced strong partnerships with hardware manufacturers like Samsung and Acer to build affordable (not cheap) laptops built for a world that accesses information in the cloud. When I say the cloud, I mean, email, files, web surfing, chatting and social networking. These things are all done very well through the browser and not through an installed desktop application.

You’d be hard-pressed to find something that you can’t do through the browser, and need actual installed software for. For me, it was using Spotify to listen to music, but that’s being sorted out as we speak. I sat down with the Chrome OS team to discuss its evolution and current iteration and came away quite impressed.

The OS

Chrome OS is an open-source operating system built on many of the things that you might be using already with the Chrome browser. Everything is quite familiar, with the full integration of all of Google’s core products: Drive, Chrome, Gmail, Play, Plus, and of course Search. If you use Google products, then using Chrome OS will be an extremely natural experience for you.

Everything runs pretty quickly on the device that I’m using right now, the latest Samsung Chromebook. I find that I’m not looking to drag and drop things onto a desktop, because it gets messy. Instead, everything is held in an internal filesystem that can be dragged and dropped anywhere, including Google Drive. This makes for moving files between systems super simple. Since all of the things you would probably want to do are available via Chrome extensions, you’ll be able to evolve your environment as new things become available.

Speaking of super simple, I was able to open this laptop, log in with my Google credentials, and start using it as if it were my tablet or phone within three minutes. Since everything is synced, it doesn’t matter what device you’re using in a Google world. It just works. And more importantly, it’s easy to iterate on, on the fly.

Caesar Sengupta, Product Management Director on Chrome OS at Google, told me:

The story for Chrome OS starts way back. It starts with the browser, Chrome. Google’s a web company: We push the boundaries of the web; everything we do is largely on the web. One of the things we realized early on was the web wasn’t keeping up with the potential of what the web could be. We were building apps like Gmail and Google News – rich and vibrant. Browsers weren’t able to handle it. And the web is a platform that allows you to deploy globally without installation. You could pick up any machine login and work. In order to build fun and sexy stuff, you have to build on it.

The Hardware

The hardware itself, like I mentioned, the Samsung Chromebook, looks strikingly similar to the MacBook Air. Yes, start your complaining about copycatting now, that’s not the point. It’s light, runs quickly, and does exactly what you’d want to do. Especially if you rely on a web browser a lot.

Here are full details about what’s inside:

  • 11.6’’ (1366×768) display
  • 0.7 inches thin – 2.42 lbs / 1.1 kg
  • Over 6.5 hours of battery 1
  • Samsung Exynos 5 Dual Processor
  • 100 GB Google Drive Cloud Storage2 with 16GB Solid State Drive
  • Built-in dual band Wi-Fi 802.11 a/b/g/n
  • VGA Camera
  • 1x USB 3.0, 1x USB 2.0
  • HDMI Port
  • Bluetooth 3.0™ Compatible

It’s pretty impressive, but who cares about all of that. It just works, and it works quite well.

Regarding its strategy in rolling out Chromebook hardware over the past year, Group Product Manager Ryan Tabone told me:

The point of the prototype was to develop the software. Samsung and Acer shipped devices last year – same form factor but based on Atom. We basically just offered these devices online. The people who were ready for it, came to it. We realized at Google this journey is going to take us some time. The world is moving into these ecosystems. For a web company to have hardware, it was an area we needed to have a strong offering in.

The Price

Price is one of those things that trips everyone up. We know what an iPhone costs, kind of. We know what an iPad and a Surface costs. Prices are expensive to some and cheap to others. This particular Samsung Chromebook is $249. You can call it cheap, or you can call it inexpensive. I’ll go with the latter.

The nice part about machines at that pricepoint is that you can get them into the hands of kids. In fact, Google is seeing pretty good traction in schools that are picking up Chromebooks for entire classrooms. They’re easy to administer from a high level and low-priced enough if they were to get broken, stolen or lost.

Also, I tend to break things or drop them in toilets. Don’t ask. In that case, running out and picking up another laptop that I can be up and running on in a matter of minutes in my exact previous state is pretty priceless. So let’s call this thing inexpensive, shall we?

Sengupta had this to say on the price:

There was a core group of people who were using these as additional computers, for other people in the family, like my wife. She does a lot but does it all online.

Tabone had a good point:

When have you ever thought of giving someone a computer as a gift?

Never.

The Point

Computing doesn’t have to be difficult, it should be fun and efficient at the same time. You can do both, and Google does a wonderful job of facilitating that with its current suite of products and services. Even if you’re not an Android phone user, which I’m not, you can still find value in Chrome OS.

From a usability, price, and compatibility perspective, it’s difficult to find another operating system on hardware that runs this well, and without so little effort to actually make it work. Basically, you won’t be getting tons of calls from mom and dad on how to use it. That’s good for us, but for them too. It’s empowering. You should use technology, it shouldn’t use you. And the best technology finds itself getting completely out of the way.

If you use the Chrome browser, you’ve already been testing it, you just didn’t know it. Chrome OS won’t change the way that you compute, it’ll just make it easier.

Chrome update for iOS and Android brings bug fixes, Passbook support

Google has pushed out Chrome browser updates for iOS and Android, bringing with them a few bug fixes and some new features, with the new features being skewed toward the iOS version. As with all updates, you can nab the apps from the Google Play Store for Android, and from the App Store for iOS. Both updates are available for download now.

The Chrome for iOS update includes both new features and bug fixes. On the features side of things, users can now open PDF files in other applications, and there’s a user option for having the browser auto detect text encoding. Support has been added for Passbook, allowing users to save tickets and airline passes. A variety of security and stability updates have also been applied. This is version 23.0.1271.91.

For Android users, the Chrome update is a bit more sparse, side-stepping new features in favor of a few bug fixes and not much else. An update has been released for both ARM and x86 devices, with both of them offering a variety of fixes for common stability problems. This is version 18.0.1025469 for ARM and 18.0.1026322 for x86.

As is expected, there are some known issues with both varieties of Chrome. Apple device users might experience a “Data Unavailable” error message when trying to save images from the web, and may be disappointed to find out that there is presently no “History” option for viewing browsing history. Android users may find font size inconsistentcy on some websites, error messages and instructions for non-mobile versions of Chrome, tabs loading blank, and laggy scrolling.

[via Chrome Blogspot]


Chrome update for iOS and Android brings bug fixes, Passbook support is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.


Firefox Beta 18.0 supports Retina Display

Mozilla has launched its latest Firefox beta for mobile and desktop, bringing a host of new features, including Retina Display support. Also tossed into the mix is W3C Touch Event support, as well as opt-in search suggestions and improved phishing security for Android users. You can nab the latest download over at the Mozilla website.

New features include Retina Display support for OS X 10.7 and higher, as well as preliminary support for WebRTC. A new HTML scaling algorithm is present in the beta release, which provides better image quality than is available in other iterations of the browser. There are also performance improvements when switching between tabs.

A couple fixes have also been included. Insecure content loading on HTTPS pages has been disabled, while the responsiveness experienced by proxy users has been improved. There’s added support for “@supports,” and a faster startup time. Finally, for the designers out there, CSS3 Flexbox, also called Flexible Box, has been implemented.

Of course, as with all beta releases, there are some known issues. Starting up the browser with a locked profile will cause the application to crash, for example. Some users will experience slow scrolling in Gmail, while starting in “-private” mode will return the false message that the user is not Private Browsing. Finally, for those on Windows, using System Restore soon after updating the browser could result in being unable to run future updates.

[via Firefox]


Firefox Beta 18.0 supports Retina Display is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.