Hasta La Gadget!

If you’re particularly attuned to tech gossip, you’ll know that Google’s Chrome OS announcement has prompted a lot of whispers about something called “Gazelle” being cooked up in Microsoft’s labs. Part browser, part OS, the word on the street is that Gazelle will be announced soon, and ultimately compete in some way with either Chrome (the browser) or Chrome (the OS). As usual, most of this is just based on hopes and fairytales, but the scholarly folks at Ars Technica have done some digging and come up with a white paper from Microsoft Research that details some of what Gazelle is all about — and surprise surprise, although it shares some similarities with Chrome, it’s actually quite different.

At the most general level, Gazelle is an experiment in building an ultrasecure browser. Like Chrome, it breaks tasks up into different processes, but instead of separating at the page level, Gazelle breaks individual page elements into different processes, allowing content from different servers to be isolated and ultimately providing fine-grained security controls. To manage all these different processes, there’s a central “kernel,” which is where all the OS talk stems from — it’s all still running on Windows, and the rendering engine is still IE’s Trident engine, but Gazelle manages all those separate processes independently, kind of like a virtualized OS. It’s certainly interesting stuff, but it’s still all just a research project for now — Chrome OS is still vapor, but it’s clear that Google intends to ship something, while Gazelle seems more suited to inspire future versions of IE. Still, it’s interesting reading if you’re into it, so hit the read link for more.

Read – Ars Technica analysis
Read – Microsoft Gazelle white paper [Warning: PDF]

[Image courtesy of Robert Scoble]

Filed under: Software

Microsoft’s “Gazelle” browser detailed — it’s more of a research project originally appeared on Engadget on Fri, 10 Jul 2009 16:44:00 EST. Please see our terms for use of feeds.

Read | Permalink | Email this | Comments

Likely being mindful of the ever-watchful eye of the European Union, Microsoft’s announced its Euro version of Windows 7, affectionately and officially dubbed Windows 7 E, will not come packaged with Internet Explorer, or any other browser for that matter. Of course that’s not the whole story, as OEMs will be provided free copies of IE8 to bundle themselves alongside / instead of other browser options, and consumers can pick up their own copies via CD, FTP, or retail channels. This is undoubtedly in response to the antitrust cases the EU keeps throwing Microsoft’s way, and while we wouldn’t be surprised to see it end up on almost every European computer sold, we do wonder if this will at all speed up IE’s already rapidly diminishing share in the war of web browsers.

Filed under: Desktops, Laptops

Windows 7 E coming to Europe without Internet Explorer originally appeared on Engadget on Thu, 11 Jun 2009 22:11:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

This article was written on August 03, 2007 by CyberNet.

Cookies are used in your web browser to store information, but have you ever thought about how easy it would be for a hacker to quickly gain access to them? It is actually frighteningly easy as Robert Graham, the CEO of errata security, demonstrated at the Black Hat security convention. All it really takes is a point-and-click of the mouse:

First Graham needs to be able to sniff data packets and in our case the open Wi-Fi network at the convention fulfilled that requirement. He then ran Ferret to copy all the cookies flying through the air. Finally, Graham cloned those cookies into his browser – in easy point-and-click fashion – with a home-grown tool called Hamster.

The attack can hijack sessions in almost any cookie-based web application and Graham has tested it successfully against popular webmail programs like Google’s Gmail, Microsoft’s Hotmail and Yahoo Mail. He stressed that since the program just uses cookies, he only needs an IP address and usernames and passwords aren’t required.

In front of everyone at the convention Graham demonstrated how he could intercept the cookies from a person sending an email. He had someone creat a Gmail account, and in no time at all Graham had intercepted the cookies therefore enabling him to send an email disguised as the victim. As mentioned in the above quote, there were no usernames or passwords needed.

–Secure Yourself–

One of the easiest things that you can do to secure yourself from such an easy attack is to use https:// instead of http:// whenever it is available. Some services like Gmail offer this alternative, and using it encrypts your session using SSL so that these types of attacks don’t happen.

Firefox users (with Greasemonkey), Internet Explorer users (with IE7 Pro or Turnabout), and Opera users can use a script such as this one that is setup to automatically replace the http:// with https:// anytime that you visit Gmail. That way you never have to think about doing it yourself.

You should also try not to visit sites that use sensitive information while connected to a public hotspot, but I think we all know that by now.

Source: TG Daily [via Slashdot]

Copyright © 2008 CyberNet | CyberNet Forum | Learn Firefox

Related Posts:

• Get 4 GB of Storage with Windows Live Mail Plus
• Switch to Yahoo! Mail from Gmail and Hotmail
• Use Yahoo! Mail or Gmail for MailTo Links in Firefox 3
• Yahoo, Hotmail and Gmail Keyboard Shortcuts to Delete Emails
• Helpful Tip: How to Report a Phishing Email