Thursday, July 16, 2009

A critical security vulnerability in Firefox 3.5



A critical security vulnerability affecting Firefox 3.5 has been discovered and published on the security portal Milw0rm entitled Firefox 3.5 Heap Spray Vulnerability. A proof of concept exploit has been provided. In short, the vulnerability can lead to remote code execution. The good news is that a security patch has already been published by Mozilla Links.

The security vulnerability can be fixed the following way. Type in about:config in the Firefox address bar and hit enter. Now filter for the term javascript.options.jit.content and double-click it afterwards to set it to false which disables the Tracemonkey JavaScript engine. This in turn could (and most likely will) reduce the JavaScript performance of the Firefox 3.5 web browser until an official security patch is provided by the Mozilla Firefox team.

The security patch is expected to be released soon by the Firefox development team. Stay tuned, we keep you updated.

Thursday, July 2, 2009

New iPhone 3.0


iPhone Operating System 3.0



Copy, Cut and Paste: Apple is late with this common feature, but it’s the best implementation I’ve seen on a phone. In a text page, you just double tap on a word, and it is selected with little handles around it that let you expand or contract the selected area. Then, you just click on a copy icon that pops up over the selection. To paste, you tap elsewhere in the page, or even in another app, and a paste icon pops up. Click that icon, and the selected text is pasted in. It worked well in all my tests.

The feature works a bit differently for some Web pages, where you hold down your finger over an area and it selects a whole block of text, like a paragraph, but still has the handles that allow adjusting the selection. It also allows copying and pasting photos. You can also just select a word or a section or a whole page of text and delete it. And if you want to undo a paste, just shake the phone.

Some Web pages and third-party apps don’t yet support this feature, but most do.

Search: Before, you could search only in the Contacts app. Now, there are search features in Mail, Calendar, the built-in iPod and Notes. And there is a way to search the whole phone at once. You just hit the home button, slowly, twice, and a special search screen appears. Type in any phrase, and it brings up every instance in multiple apps.

This is another catch-up feature, but it works well. For instance, when I searched for the word “Phil,” it brought up songs by Phil Collins, a note about Philadelphia, calendar items mentioning people named Phil or Phillips, emails to or from people with those names, and contacts for people named Phil or Phillips.

In email, the search function will even find messages that aren’t on your phone but that are stored on the servers of certain email services. For instance, I was able to almost instantly find emails from two years ago stored on Google’s (GOOG) Gmail.

One downside — in email, search looks for words only in email headers, not in the body of the messages.

Landscape Keyboard: In older iPods, the only built-in program that supported a wider, landscape keyboard, which is better for thumb typing, was the Web browser. Now, you can turn the phone horizontally and use a landscape keyboard in the Mail, Messages and Notes programs as well.

Find My iPhone: If you belong to Apple’s $99 a year MobileMe service, you can now locate a lost iPhone on a map on any computer, send the iPhone a message saying how to return it to you, and cause it to emit a beep, even if the sound is turned off. I tested this and it worked well. You can even remotely wipe all your data off the phone.

Voice Memos: The OS includes a Voice Memo app that lets you dictate reminders or other messages, and then edit and email them. I found it worked well.

Navigation: Another catch-up feature, turn-by-turn navigation with voice prompts, is also now supported. I tested this with a third-party app called Gokivo, and it did OK, though the developer admits to a prerelease bug I encountered.

Auto-Authentication: In the new OS, the iPhone can remember your log-in credentials for commercial Wi-Fi hotspot services, so you don’t have to enter them again and again. Unfortunately, in my tests with the AT&T Wi-Fi service, this failed repeatedly in several Starbucks (SBUX) shops. Apple blames a glitch in my prerelease phone’s SIM card.

Push Notification: To make up for its lack of multitasking, the new iPhone OS has a feature where third-party apps can notify you of new events, like a sports score, or a new invitation to an online game. I tried this with a game called TapTap Revenge, and it worked fine.

Stocks: The built-in stock application now has much more detailed data, including market cap, news headlines and price/earnings ratio for each stock.

MMS and Tethering: I couldn’t test these useful features because my tests were all done on AT&T, which hasn’t rolled them out.

Minor Touches: You can now move an icon among screens with one continuous motion, instead of stopping at each screen. And there are two more screens to house icons. You can finally synchronize Notes with your PC or Mac. You also can now maintain both calendars and contacts synced wirelessly with online services and those synced via cable with your computer. And you can play games and transfer files wirelessly over Bluetooth with other iPods or Touches that are nearby.

Bottom Line: Both the new iPhone and iPhone OS are packed with features that make a great product even better. But, for many users, the software may be enough of a boost to keep them from buying the new model