Forgot your password?

typodupeerror

Check out our all new Hall of Fame page.

Security

Yahoo Includes Private Key In Source File For Axis Chrome Extension 69

Posted by timothy
from the open-source-rocks dept.
Trailrunner7 writes "Yahoo on Wednesday launched a new browser called Axis and researchers immediately discovered that the company had mistakenly included its private signing key in the source file, a serious error that would allow an attacker to create a malicious, signed extension for a browser that the browser will then treat as authentic. The mistake was discovered on Wednesday, soon after Yahoo had launched Axis, which is both a standalone browser for mobile devices as well as an extension for Firefox, Chrome, Safari and Internet Explorer. ... Within hours of the Axis launch, a writer and hacker named Nik Cubrilovic had noticed that the source file for the Axis Chrome extension included the private PGP key that Yahoo used to sign the file. That key is what the Chrome browser would look for in order to ensure that the extension is legitimate and authentic, and so it should never be disclosed publicly."
Yahoo!

Axis, Yahoo's New Browser 180

Posted by samzenpus
from the new-kid-on-the-block dept.
markjhood2003 writes "Fresh on the heels of Slashdot's discussion of the lack of browser choice on mobile devices comes the announcement of Yahoo's new web browser Axis. According to VentureBeat, the browser runs on iPad and iPhone as a separate standalone browser and as an extension for Chrome, Firefox, and Safari, with support for Android and Windows Phone coming soon. It actually appears to bring some innovation to mobile search, displaying results and queries on the same page for more productive navigation between the two."
Java

The Future of Browser Choice 178

Posted by Soulskill
from the why-don't-you-support-lynx dept.
New submitter plawson writes "CNET offers an in-depth discussion of the browser's future, making the case that 'new mobile devices threaten to stifle the competitive vigor of the market for Web browsers on PCs.' Given the vertical integration of many mobile systems, the article predicts that 'the only opportunity you'll get to truly change browsers is when your two-year smartphone contract expires.' The trade-offs are security and performance. Web pages that rely on JavaScript and JIT will be big losers. How important is browser choice on a smartphone or tablet compared with a PC?"
Chrome

Chrome Browser Usage Artificially Boosted, Says Microsoft 260

Posted by timothy
from the depends-who's-counting dept.
bonch writes "Chrome was recently called the world's no.1 browser, but Microsoft is accusing the source, StatCounter, of using flawed methodology. When a user enters a search in Chrome, the browser preloads an invisible tab not shown to the user, and these were being counted by StatCounter. Net Applications, another usage tracking group, ignores these invisible tabs and reports IE at 54%, Firefox at 20.20%, and Chrome at 18.85%." Whereas the saturation of MSIE is totally organic, right?
Chrome

Google Chrome Becomes World's No. 1 Browser 444

Posted by samzenpus
from the top-of-the-class dept.
redletterdave writes "Just six months after Google Chrome eclipsed Mozilla's Firefox to become the world's second most popular Web browser, Chrome finally surpassed Microsoft's Internet Explorer on Sunday to become the most-used Web browser in the world, according to Statcounter. Since May 2011, Internet Explorer's global market share has been steadily decreasing from 43.9 percent to 31.4 percent of all worldwide users. In that time, Chrome has climbed from below 20 percent to nearly 32 percent of the market share. Yet, while Chrome is now the No. 1 browser in the world, it still lags behind Internet Explorer here in the U.S., but that will soon change. Chrome currently has 27.1 percent of the U.S. market share, compared to Internet Explorer's 30.9 percent, but IE is seeing significant drop-offs in usage while Chrome continues to rise."
Windows

Windows RT Browser Restrictions Draw Antitrust Attention 375

Posted by Soulskill
from the it's-like-deja-vu-but-different dept.
An anonymous reader writes "Last week we heard complaints from Mozilla that Windows RT would restrict users' choice in web browsers, unfairly favoring Internet Explorer over alternatives like Firefox and Chrome. Unfortunately for Microsoft, the situation is now on the Senate Judiciary Committee's radar, and they will look into claims that Microsoft is engaging in anti-competitive behavior. That said, it could be a difficult case to make, since Windows RT is destined for ARM-based tablets, and Apple currently dominates that market. 'When it comes to proving abuse of monopoly power, an important question is determining the market in which a monopolist has power — the relevant market, in antitrust legal terms. In the [late '90s] DOJ case, U.S. District Judge Thomas Penfield Jackson's findings of fact concluded Microsoft had a monopoly in the market for "Intel-compatible PC operating systems." Windows on ARM doesn't run on x86 chips, so by Jackson's standards, Windows RT hasn't been judged to be part of Microsoft's monopoly.' Microsoft addressed some of these issues in a blog post in February."
Ubuntu

Google Talks About Its Ubuntu Experience 229

Posted by Soulskill
from the lynxes-grow-up-to-be-pangolins dept.
dartttt writes "There was a very interesting session at the Ubuntu Developer Summit by Google developer Thomas Bushnell. He talked about how Ubuntu, its derivatives and Goobuntu (Google's customized Ubuntu based distro) are used by Google developers. He starts by saying 'Precise Rocks,' and that many Google employees use Ubuntu — including managers, software engineers, translators, people who wrote the original Unix, and people who have no clue about Unix. Many developers working on Chrome and Android use Ubuntu. Ubuntu systems at Google are upgraded every LTS release. The entire process of upgrading can take as much as four months, and it is also quite expensive, as one reboot or a small change can cost them as much as a million dollars across the company." Bushnell also mentions that Google Drive will soon be available for Linux. Other news out of UDS: there was discussion of a GNOME flavor of 12.10, Electronic Arts reaffirmed that they "won't delay their Windows work for Linux," and Unity 2D is likely to disappear in 12.10.
Cloud

Google Set To Meld Google Drive With Chrome OS 109

Posted by samzenpus
from the when-our-powers-combine dept.
MikeatWired writes "Google will tightly integrate its new Google Drive online storage service with an upcoming version of its Chrome OS operating system, says Sundar Pichai, who oversees development of the company's Chrome products as well as its Google Apps online services. Chrome OS is Google's effort to move all applications and data onto the web (and its Chrome browser), but the OS still hasn't mastered the art of moving files from place to place. By integrating Chrome OS with Google Drive — the online storage service Google introduced on Tuesday — the company seeks to correct this problem. 'With Chromebooks, [Google Drive] is even more powerful,' Pichai says, 'because it just starts working naturally. Your local drive is also Google Drive. This makes it really powerful because you just don't think about it.' Basically, Google Drive — a service that operates on the web — will perform as if it was the local file system. If you open the 'save file' dialog box on Chrome OS, for instance, the system will take you straight to Google Drive. 'We'll effectively integrate [Google] Drive into the native file system of Chrome OS,' says Scott Johnson, Google's Google Drive product manager. 'All the core OS functionality will use [Google] Drive as a place to store data — if that's what you opt in to.'"
Firefox

Firefox 12 Released — Introduces Silent, Chrome-like Updater 411

Posted by Soulskill
from the grandma-will-never-know-the-difference dept.
MrSeb writes "Firefox 12 has been officially released, with only one major new feature: A silent, background updater. Now you will have to approve the Firefox Software Updater when you first install Firefox, but after that the browser will update silently — just like Chrome. In other news, the Find feature now reliably centers the page on any matches — hooray!" Here are the release notes, the list of bug fixes, and the download page.
The Internet

Google Shutting Out Rivals, Claims Russian Search Engine Yandex 170

Posted by timothy
from the red-in-tooth-and-claw dept.
suraj.sun writes "Ilya Segalovich, co-founder of Russia's leading search engine, Yandex, has accused Google of abusing its dominance to shut out competitors in cyberspace. Responding to comments made to the Guardian by Sergey Brin, the Google co-founder, about threats to the open internet, Ilya Segalovich described the U.S. search giant's popular smartphone platform, Android, as a 'strange combination of openness and not openness,' and its Chrome web browser as anti-competitive. Segalovich said that Brin should explain Google's 'semi-open' approach to search competitors before accusing others of endangering the unfettered internet, and suggested Google was guilty of foul play with its Chrome browser, which picks the company's own search engine as default for users, rather than offering a choice between rivals including Yahoo, Bing and Yandex."
Android

More Malicious Apps Found On Google Play 143

Posted by Soulskill
from the if-you-built-it-they-will-come dept.
suraj.sun writes "We've seen quite a few Android malware discoveries in the recent past, mostly on unofficial Android markets. There was a premium-rate SMS Trojan that not only sent costly SMS messages automatically, but also prevented users' carriers from notifying them of the new charges, a massive Android malware campaign that may be responsible for duping as many as 5 million users, and an malware controlled via SMS. Ars Technica is now reporting another Android malware discovery made by McAfee researcher Carlos Castillo, this time on Google's official app market, Google Play, even after Google announced back in early February that it has started scanning Android apps for malware. Two weeks ago, a separate set of researchers found malicious extensions in the Google Chrome Web Store that could gain complete control of users' Facebook profiles. Quoting the article: 'The repeated discoveries of malware hosted on Google servers underscore the darker side of a market that allows anyone to submit apps with few questions asked. Whatever critics may say about Apple's App Store, which is significantly more selective about the titles it hosts, complaints about malware aren't one of them.'"
Chrome

The Fixes That Google Chrome OS Still Needs To Make 128

Posted by timothy
from the ok-but-where's-the-windows-menu dept.
CowboyRobot writes "Thomas Claburn at Information Week opines that Google's Chrome OS is actually morphing into the Windows-style os that it intended to make obsolete. There's still room to grow, and here are his suggestions for how to make it better: Get better hardware, Include a Web-based IDE, Support local storage, Allow offline apps. 'When Chrome OS was launched in 2010, Google SVP of Chrome and apps Sundar Pichai declared, "Chrome OS is nothing but the Web." Now, if you peer behind the browser pane, it's clear that Chrome OS is looking beyond the Web. It's not a complete repudiation of Google's bet on the appeal of a thin-client system that keeps user data in the cloud. But it is a concession to the realities of a market that's more comfortable with the familiar desktop metaphor.'"
Chrome

Chrome OS Introduces Aura Window Manager 162

Posted by Soulskill
from the they've-innovated-through-to-the-other-side dept.
An anonymous reader writes "Don't look now, but Google has officially revealed their intentions to go after Windows and OS X. Chrome OS 19 has arrived for Samsung Series 5 and Acer AC700 Chromebooks running the developer channel, and the changes it brings may shock you. The new Aura window manager has landed, bringing with it a number of features that you'd expect from a traditional OS. For starters, there’s the Shelf along the bottom of the screen. It’s set to hide when you’ve got a browser window maximized by default, but you can choose to have it always on top or auto-hide, too, just like the Windows taskbar or OS X dock."
Chrome

Chrome Beats Internet Explorer On Any Given Sunday 212

Posted by timothy
from the don't-let-lumberg-find-out dept.
tsamsoniw writes "Over the past three weeks, Chrome has beaten out Internet Explorer as the No. 1 browser in the world — but only on Sundays. In fact, according to data from StatCounter, Chrome usage is higher on weekends than it is during the work week, whereas IE usage drops on Saturdays and Sundays. Evidently, end-users prefer Chrome at home, which might be helping the browser get a foothold at work." (So apparently it's not just a freak occurrence.)
Chrome

Adobe Releases Last Linux Version of Flash Player 426

Posted by timothy
from the end-of-the-line dept.
dartttt writes "Adobe has released Flash Player version 11.2 with many new features. This is the final Flash Player release for Linux platform and now onward there will be only security and bug fix updates. Last month Adobe announced that it is withdrawing Flash Player support for Linux platform. All the future newer Flash releases will be bundled with Google Chrome using its Pepper API and for everything else, 11.2 will be the last release."
Chrome

Websites Can Detect What Chrome Extensions You've Installed 131

Posted by timothy
from the incognito-no-more dept.
dsinc writes "A Polish security researcher, Krzysztof Kotowicz, makes an worrisome entry in his blog: with a few lines of Javascript, any web site could list the extensions installed in Chrome (and the other browsers of the Chromium family). Proof of concept is provided here. As there are addons which deal with very personal things like pregnancy or religion, the easiness of access to those very private elements of your life is really troubling." Note: the proof of concept works, so don't click that link if the concept bothers you.
Chrome

Pinkie Pie Earns $60K At Pwn2Own With Three Chromium 0-Day Exploits 148

Posted by timothy
from the omg-pwnies! dept.
Tackhead writes "Hot on the hooves of Sergey Glazunov's hack 5-minutes into Pwn2Own, an image of an axe-wielding pink pony was the mark of success for a hacker with the handle of Pinkie Pie. Pinkie Pie subtly tweaked Chromium's sandbox design by chaining together three zero-day vulnerabilities, thereby widening his appeal to $60K in prize money, another shot at a job opportunity at the Googleplex, and instantly making Google's $1M Pwnium contest about 20% cooler. (Let the record show that Slashdot was six years ahead of this particular curve, and that April Fool's Day is less than a month away.)"
Chrome

Chrome Hacked In 5 Minutes At Pwn2Own 169

Posted by samzenpus
from the what-took-so-long? dept.
Skuto writes "After offering a total prize fund of up to $1M for a successful Chrome hack, it seems Google got what it wanted (or not!). No more than 5 minutes into the Pwn2Own cracking contest team Vupen exploited 2 Chrome bugs to demonstrate a total break of Google's browser. They will win at least 60k USD out of Google's prize fund, as well as taking a strong option on winning the overall Pwn2Own prize. It also illustrates that Chrome's much lauded sandboxing is not a silver bullet for browser security."
Firefox

Ask Slashdot: Life After Firefox 3.6.x? 807

Posted by Soulskill
from the i-hear-netscape-is-good dept.
Mooga writes "I am a hard-core user of Firefox 3.6.x who has chosen to stick with the older, yet supported version of Firefox for many years now. However, 3.6.x will soon hit end-of-life, making my life, and the lives of similar users, much more complicated. 3.6.x has been known for generally being more stable and using less RAM than the modern Firefox 10 and even Chrome. The older version of Firefox is already having issues rendering modern websites. What are others who have been holding onto 3.6.x planning on doing?"

Howe's Law: Everyone has a scheme that will not work.

Working...