Hasta La Gadget!

It was just over two years ago that the paragon of internet privacy, the Tor project, decided to build its own browser by forking Firefox. Wired reports that an exploit of that very same browser has been recently discovered that allowed a number of users’ Windows computers to be infected with malware. Once installed, the code delivered infected machines’ hostnames and MAC addresses to a remote web server in Reston, Virginia, a city located just outside Washington D.C. The browser exploit — a JavaScript vulnerability inherent to Firefox version 17, the version upon which the Tor browser was built — was enabled by a breach of Freedom Hosting servers. In this case, affected Freedom Hosting servers delivered web pages to users with the JavaScript exploit embedded in them.

There’s no direct evidence that the malware comes from the government, but the malware’s command and control IP address is registered to a governmental defense contractor. Plus, the data pulled from infected machines indicates it could be an example of the FBI’s computer and internet protocol address verifier (CIPAV) software first identified by Wired in 2007. CIPAV has been used by the FBI to help identify and catch terrorists, hackers and criminals since 2002, but the exact nature of the software has never been revealed. Regardless, the vulnerability in the browser has been identified and fixed, so users need only update to the newest version of the Tor browser to keep their web traffic away from prying eyes… for now, at least.

Update: To be clear, the Firefox exploit in question was fixed, along with the Tor browser well over a month ago, and any users who have updated since June 26th were not affected.

Filed under: Internet

Comments

Via: Wired

Source: Tor Project, Tor Blog

Sick and tired of picking your own music to play all the time? Spotify’s been working to up its recommendation game, through the launch of features like social and Discover, now pushing things even further with Browse. The feature brings curated playlists to the music streaming service, starting with a “gradual” rollout on iOS and Android today, followed by the rest of Spotify’s platforms at some point. The playlists, chosen by Spotify staffers, are built around moments, moods and new releases. More info can be had after the break.

Filed under: Cellphones, Mobile

Comments

As promised, Internet Explorer 11 is making its way to Windows 7, slowly but surely. Almost a month after we got our first serious taste of Microsoft’s latest browser, currently available on Windows 8.1 only, the developer preview version for Win 7 has hit the web. Obviously, there’s a lot less Metro-flavored flash, but the most important features and improvements should still carry over. The biggest news is the improved performance and load times. Microsoft is quite proud of the enhancements it’s made to Chakra, it’s JavaScript engine, and claims it’s significantly faster than Chrome, Firefox and Opera. As always, though, you can take these self-administered benchmarks with a grain of salt. There’s also support for WebGL and advanced HTML5 video features, like those powering the next-generation Netflix player. And, seeing as how this is a developer preview, the package wouldn’t be complete with out some updated tools for building sites and web apps, in the form of an overhauled F12, that borrows heavily from Visual Studio. If your’e looking for some more fine-grained details or just want to download it for yourself, hit up the source link.

Filed under: Internet, Microsoft

Comments

Source: MSDN

Everyone has had to deal with malware of some sort at one point or another, with some being unlucky enough to come across the FBI-themed “ransomware” variety that presents itself as being a government threat of criminal charges should one refuse to pay a fine. This kind of malware has typically been the domain of Windows users, but has made its way to OS X.

The information comes from Malwarebytes, an anti-malware company. According to the rundown they’ve provided, the FBI ransomware is presenting users with a page that, at a quick glance, looks official enough: the beginning of the URL starts with fbi.gov.id, and and it harbors the real FBI logo, as well as a fake logo stating “The FBI” cyber department has targeted the user.

The trojan targets the users by using the “restore from crash” feature in the browser, which prevents the user from getting rid of the page. Attempting to close the tab results in a popup stating “YOUR BROWSER HAS BEEN LOCKED. All PC data will be detained and criminal procedures will be initiated against you if the fine will not be paid.” The “fine” in question? $300.

Aside from the threats of criminal procedures and other such nonsense, the ransomware tries to scare the user into paying the amount by specifying specific criminal activities it accuses the user of committing, such as violating copyright laws regarding music, video, and software, as well as viewing “prohibited pornographic content.”

Causing Safari to force quit won’t do any good for the user, with the ransomware page reappearing the next time the browser is fired up. Fortunately, the issue is pretty easy to get rid of by simply resetting Safari, which can be done by clicking “Safari” from the menu. All the items must be checked under the reset options.

SOURCE: Malwarebytes

FBI-themed ransomware now affecting OS X users is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

Chrome for Android just turned 28! Version 28, which today moved out of beta to the stable channel, includes a pair of notable additions, along with the typical variety of bug fixes and performance improvements. The first new feature is Google Translate integration. When you come across a website in a foreign language, the browser will offer to translate the text into your language. Additionally, tablet users are now able to take advantage of the fullscreen mode already available on smartphones. After updating to 28, you should be able to scroll down the page and see the toolbar disappear. Finally, there’s a new interface option for right-to-left languages, which include Arabic, Farsi and Hebrew. Snag the update at the source link below.

Filed under: Software, Mobile, Google

Comments

Via: Chrome Releases

Source: Google Play