From the category archives:

Browser

Google’s Chrome Browser-Beta

by certifiedbug on September 2, 2008

in Browser

A few first impressions, Chrome on a Vista machine.

The Incognito window is interesting, although businesses may not take to employees surfing without leaving a browsing history.

The UI is clean and compact. This beta does not give the option to set a master password to hide passwords from other users.

Opening a tab shows the nine most recently opened tabs and on the right-hand side, “Recent bookmarks” and “Recently closed tabs”.

As this is Google I’d expect contextual sponsored search items may be placed on the page at some point.

Chrome uses a “powerful engine” built for handling Javascript, named ‘V8′, which sandboxes the code running in each tab and prevents one tab from crashing another. Each tab opens a page that is self contained.

Installed on Vista, Chrome is a whopping 46.5 MB.
In contrast, my Firefox is 23.7 MB and Opera-5.61 MB.

Google’s Comic book. Chrome Download

{ 3 comments }

Opera 9.52 fixes flaws

by certifiedbug on August 22, 2008

in Browser

Opera 9.52 is a recommended security and stability upgrade.

The patch closes 7 holes in Opera for Windows, 5 holes in Opera for Mac OS X, and 6 holes in the Linux version.

Extremely Severe Advisory, Opera for Microsoft Windows.

When Opera is registered as a handler for a given protocol, it can be started by external applications. In some cases, being started in this way can cause Opera to crash. To inject code, additional techniques will have to be employed.

This vulnerability is fixed by upgrading to Opera 9.52.

Download

Changelog for Windows

{ 0 comments }

New search engine Cuil launched

by certifiedbug on July 28, 2008

in Browser

Cuil (pronounced kewl)

Cuil is an old Irish word for knowledge. For knowledge, ask Cuil.

http://www.cuil.com/

http://www.cuil.com/info/

The layout is very different from Google, Live Search and Yahoo’s, it’s a magazine style popular with bloggers, complete with tabs.

cuil2

cuil3

cuil

Typed spyware into the search box.

We didn’t find any results for “spyware”

Some reasons might be…

* a typo. Please check your spelling.
* your search includes a term that is very rare. Try to find a more common substitute.
* too many search terms. Please try fewer terms.

Finally, try to think of different words to describe your search.

Update
A few hours later Cuil produced 317,325,062 results for spyware.

Google produced results 1 - 10 of about 94,900,000 for spyware. But Cuil was just launched and looks promising, especially with the founders’ credentials.

The super-stealth search project was founded by highly respected search experts. Husband and wife team Tom Costello (CEO) and Anna Patterson (VP Engineering) were joined by Russell Power. Patterson and Power are also ex-Google employees, and the company has been the subject of intense speculation over the last couple of years.
TechCrunch.com: Cuil Exits Stealth Mode With A Massive Search Engine

{ 0 comments }

Firefox 3.0.1 Released

by certifiedbug on July 16, 2008

in Browser

Release Notes

Upgrading Firefox

Automatic updates

By default, Firefox is configured to automatically check for updates for itself.

1. When an update is available, the Software Update dialog is automatically displayed. It contains a list of updates for Firefox components that are installed on your system. To begin updating your software, click OK. The new versions of any selected updates are downloaded and installed.
2. When the install process is complete, you must restart Firefox. To close Firefox and re-open it, click Done.
3. After Firefox restarts, all updated versions of Firefox components are available.

http://www.mozilla.com/en-US/firefox/

{ 0 comments }

Opera 9.51 for Windows

by certifiedbug on July 3, 2008

in Browser

Opera 9.51 is a recommended security and stability upgrade

Fixed an issue where functions could reveal data from random places in memory, as reported by Philip Taylor. See our advisory.
Fixed an issue that could be used to execute arbitrary code, as reported by Billy Rios. Details will be disclosed at a later date.
Security status is now correctly set when navigating from HTTP to HTTPS.
Corrected an issue related to OCSP and CRLs that would lower security.
Note: This will take effect with the weekly update, or when checking manually for an update

Download

{ 0 comments }

Firefox on the Security front

by certifiedbug on June 24, 2008

in Browser

Based on a Google blacklist, Firefox 3 blocks sites known to spread malware.

Firefox in action.

firefox

{ 0 comments }

Safari update fixes “carpet bomb”

by certifiedbug on June 21, 2008

in Browser

Apple had previously said that the vunerability, found by security consultant Nitesh Dhanjani and dubbed the”carpet bombing” bug, would not be treated as a security issue, but rather filed as an enhancement request.
Certifiedbug: Apple’s Safari Carpet Bomb

A second researcher, Aviv Raff, found a way to execute files on the desktop without notifying the user.
Safari pwns Internet Explorer

Microsoft released a Security Advisory (953818) May 30th:
Blended Threat from Combined Attack Using Apple’s Safari on the Windows Platform

Apple:

To help mitigate this issue, the Safari browser has been updated to prompt the user prior to saving a download file. Also, the default download location is changed to the user’s Downloads folder on Windows Vista, and to the user’s Documents folder on Windows XP. This issue does not exist on systems running Mac OS X.

About the security content of Safari 3.1.2 for Windows

{ 0 comments }

Firefox 3 Vulnerability

by certifiedbug on June 18, 2008

in Browser

According to Tipping Point’s Zero Day Initiative, the vulnerability was reported within the first five hours of Firefox 3’s release.

While Mozilla is working on a fix, we wont be divulging anything else until a patch is available, adhering to our vulnerability disclosure policy.  Once the issue is patched, we’ll be publishing an advisory here. Working with Mozilla on past security issues, we’ve found them to have a good track record and expect a reasonable turnaround on this issue as well.

{ 0 comments }

Firefox 3.0 Released

by certifiedbug on June 17, 2008

in Browser

3.0 does not show on Mozilla as of writing, and my browser’s internal updater did not find a new version.
http://www.mozilla.com/en-US/firefox/all.html

I downloaded Firefox 3.0 from File Hippo:
http://www.filehippo.com/download_firefox/

Most of my add-ons worked after installation, a couple were updated shortly thereafter.

If you like to use duplicate tabs and the add-on is not yet compatible with the latest upgrade, Firefox 3.0 allows Ctrl+Drag Tab for placement.

{ 0 comments }

Opera 9.50 Released

by certifiedbug on June 15, 2008

in Browser

http://www.opera.com/products/desktop/security/

In Opera 9.5, Fraud Protection is enabled by default, automatically detecting and warning you about fraudulent Web sites. Fraud Protection is powered with phishing information from Netcraft and PhishTank, and Malware protection from Haute Secure.


Opera now supports EV Certificates. Issued under stricter criteria, they provide added assurance for EV enabled web sites, that they are who they claim to be.

http://www.opera.com/download/

{ 0 comments }