Microsoft issues advisory on Internet Explorer drive-by attack

Microsoft is warning customers of a new zero-day vulnerability in Internet Explorer being actively targeted by attackers using "drive by-attack".

The exploit code was discovered on a single website which is no longer hosting the malicious code, Jerry Bryant, group manager of response comunications, Microsoft Trustworthy Computing Group

A memory allocation error, present in Internet Explorer 6, 7, and 8 could enable an attacker to execute code and gain access to a victim's machine. An attack website was discovered targeting the IE flaw in drive-by attacks. Internet Explorer 9 Beta is not affected by the issue, Microsoft said.
"The exploit code was discovered on a single website that is no longer hosting the malicious code," said Jerry Bryant, group manager of response communications in the Microsoft Trustworthy Computing Group.
In a blog entry, Bryant said engineers were working on an automated "fix-it" repair until a permanent patch could be released. Currently, the issue "does not meet the criteria for an out-of-band release," Bryant said.
Drive-by attacks have become an increasingly common method of attack. Users are often lured to visit a malicious website in an email message, an instant message or through poisoned search engine results. Often times legitimate websites are compromised to host attack code. Blogs, social networks and Web forums can also be used to host drive-by attacks.
The Microsoft Security Advisory outlined a number of workarounds to mitigate the threat posed by the vulnerability, which include reading email messages in plain text, applying a customer cascading style sheet as an override when reading html data, enabling data execution prevention (DEP) in IE 7 and deploying the Enhanced Mitigation Experience Toolkit. (EMET).
Microsoft said the vulnerability could be targeted by attackers using drive-by attack websites or by compromising websites that accept or host user-provided content, such as blogs and social networks. In addition, website display advertisements can be compromised to trigger an exploit that targets the flaw.
"In all cases, however, an attacker would have no way to force users to visit these websites," Microsoft said. "Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or in an instant messenger message that takes users to the attacker's website."
A successful attack could give cybercriminals complete control of a victim's machine and the ability to download additional malware or attempt to gain access to the network.

wireless

Report: Facebook working with INQ on two phones

Facebook is working with mobile phone maker INQ Mobile to create two smartphones that will highlight core features of the social-networking giant, according to a Bloomberg report.
The devices, which may have a network tie-up with carrier AT&T, are expected to be released in Europe in the first half of 2011 and in the U.S. in the second half, according to the report, which cited three unidentified sources familiar with the matter. INQ, which bills itself as the world's first social mobile handset maker, in 2009 unveiled its INQ1, which featured built-in integration with Facebook, Skype, Yahoo, Google, eBay, and Windows Messenger.
Facebook did not immediately respond to a request for comment, but a statement supplied to Bloomberg said: "We've been working with INQ for a couple of years now to help them build a deeply integrated Facebook experience on their devices. While we can't speak for their future product development plans, we can say that our view is that almost all experiences would be better if they were social."
Facebook, which had previously denied reports that it was "building a phone," reached out to hardware manufacturers and carriers this summer seeking input on a potential Facebook-branded phone.

The mobile market is seen as key for companies doing business on the Internet. There are nearly 5 billion cell phone subscribers worldwide and about 20 percent of them are expected to be using a device on a wireless broadband connection by the end of 2010, according to the International Telecommunications Union.
Mobile social networking has exploded in popularity in the last year. Among the 69.6 million phone users who tapped mobile apps over the three-month period ending in April, 14.5 million of them accessed social networks--a 240 percent jump from the same period in 2009, according to a recent study released by ComScore.
Facebook wouldn't be the first to try to create a phone specifically designed for social networking. In partnership with Verizon, Microsoft in April unveiled a social media-oriented phone called Kin geared toward the mainly for the 15- to 30-year-olds who post frequently to Facebook, Twitter, and YouTube. However, Microsoft pulled the plug on sales less than two months later in the face of criticism that it lacked key features and came with monthly fees as high as more capable smartphones, such as the iPhone and Android-based devices.

Analyst: Cameras need networking--pronto

COLOGNE, Germany--Camera makers must wake up to the competitive threat of mobile phones by embracing networking technology or face unpleasant consequences as photography habits shift profoundly.

That was the warning from Ed Lee, an InfoTrends analyst speaking to a photo industry audience at this week's Photokina imaging show here. Change has been unceasing in recent years, with the arrival of digital photography paving the way for electronics manufacturers to join traditional camera companies. Now, camera makers face new disruption.
"The digital camera vendors need to be much more aggressive about getting their cameras connected," Lee said. "Otherwise, I can see a world where the mobile phone will be king and the digital camera will be relegated to just taking pictures. I don't think that's a world the camera vendors want to see happen."
Fundamentally, mobile phones and social networking sites such as Facebook have transformed the practice and purpose of photography so it's less about preserving memories and more about sharing what's happening.
"Smartphones allow people to capture an image and share it with an online site or a social network. You're allowing your friends and family to be in the moment with you as the event is still going on," Lee said.
Indeed, smartphones are advancing rapidly. Apple's iPhone, a standout product when it comes to Internet connectivity, rapidly ascended the Flickr ranks of most-used cameras because it makes sharing images easy. With Android and other operating systems, such smartphones are spreading rapidly. At the same time, their cameras' quality is steadily improving with higher resolution, built-in flashes, and in the case of the iPhone 4, a new HDR mode for high-dynamic range shots.

AT&T launches satellite phone

The TerreStar Genus satellite phone

(Credit: AT&T)

AT&T has unveiled a new satellite phone that can provide phone reception in areas where there are no cell towers.
Available today, the TerreStar Genus is a dual-mode smartphone that uses AT&T's cellular service by default but kicks in with satellite reception as a backup in remote areas. The satellite service offers the standard mobile phone trio of voice, data, and messaging, so it can function as an overall smartphone.
Though the hybrid phone might be intriguing to AT&T subscribers unhappy with their cell service, the company is gearing this model more toward enterprise, government, and small business customers. Specifically, AT&T sees the TerreStar Genus as an option for people who work in government departments, utilities, and transportation companies, as well as members of public safety agencies and disaster recovery groups.
However, a story from PhoneScoop last year said that AT&T is working on a consumer version. And TerreStar's Web site does include a signup form if you want to be notified when a consumer version is available. An AT&T spokesperson  that there are no details on a possible consumer version yet. But the company does believe the satellite service would be ideal for recreational boaters, outdoor enthusiasts, and rural users who want broader mobile communications coverage when it's made available to consumers in the future.
As a smartphone, the TerreStar Genus runs under Windows Mobile 6.5 and offers a touchscreen, Wi-Fi, Bluetooth, 2.0 megapixel camera, MicroSD card slot, and a full QWERTY keyboard.
There are a few issues, however, worth noting. Coverage is available only in the U.S., Puerto Rico, the Virgin Islands, and territorial waters. The phone requires a clear line of sight to the satellite in the southern skies, so you can't be surrounded by trees or other tall obstructions.
The price tag? ..

Why a Facebook Phone may not be nuts

A Facebook-branded smartphone isn't as crazy as it sounds.
Before you mock that conclusion (as our editor did at first), hear us out: a branded smartphone could be the social-networking king's key to competing more aggressively with Apple and Google as the Internet heavyweights take turns competing, cooperating, and causing one another fits.
Of course, Facebook has been denying reports that it's building its own branded cell phone. Facebook execs say it's doing nothing more than working closely with handset partners, but  that the social network has reached out to hardware manufacturers and carriers seeking input on a potential Facebook-branded phone.

Though it's still unclear exactly what, if anything, Facebook is cooking up, the two big questions many people are asking are why would the company even consider such a move and what are its chances of being successful?
Answering the first question is easy. The mobile market is important for any company doing business on the Internet because that is where the eyeballs are. There are close to 5 billion cell phone subscribers worldwide, according to the International Telecommunications Union. About a billion of them will be using a device on a wireless broadband connection by the end of 2010. And that number is quickly growing.
For companies like Facebook and Google, which have based their businesses on Internet advertising, more eyeballs often translate into more money.
It makes sense that Facebook would be looking to tap the fast-growing U.S. mobile advertising market, in which both Apple and Google have recently made significant moves, according to eMarketer. Mobile advertising spending in the U.S. is expected to grow 42.5 percent to $593 million this year, up from $416 million in 2009 and $320 million in 2008. By 2013, the mobile ad market in the country is expected to reach an estimated $1.5 billion.
And so it's easy to see that Facebook's apparent interest in developing or sponsoring the distribution of mobile handsets may be tied closely to the company's faith in the potential of mobile platforms. Facebook is already the most popular application on smartphones in the U.S., according to Nielsen. More than 50 percent of all iPhone, BlackBerry, and Android phone subscribers use the Facebook application regularly, Nielsen recently reported.
According to internal Facebook statistics, more than 150 million out of Facebook's 500 million active members access the social network on mobile devices, and Facebook mobile applications are "deployed and promoted" by more than 200 mobile operators in 60 countries. Most promisingly, Facebook has said that these mobile users are twice as active on Facebook as nonmobile users.
But smartphone apps alone may no longer suffice. Facebook has had trouble deeply integrating the Facebook service and features into some mobile platforms. While Research In Motion and Palm have each embraced Facebook, others such as Apple and Google have not.
For example, Apple's iPhone still has no deep Facebook integration. And Apple is actually launching its own social products, such as the Game Center and a music social network it calls Ping.
Google has also not fully embraced Facebook. Even though Android is an "open" platform, none of the manufacturers developing phones using the Android OS has released significant Facebook integration. Still, millions of people are downloading and using the application.
Meanwhile, RIM is including Facebook status updates in its messaging platform on the new BlackBerry Torch. And Palm natively integrated Facebook friends as part of its contact list.
It's clear that deeper Facebook integration is not sending these devices off the shelves, but Palm has noted that its Facebook ties have gotten positive feedback from users and reviewers. And HP, which now owns Palm, will continue to keep the Facebook integration in the next iteration of software.
Still, Apple and Google are major players each with their own mobile ad networks and payment systems. And they're not looking to share any of the spoils with Facebook. As a result, Facebook, the largest social-networking platform on the Internet, has been relegated to a developer role. And that may not be good enough for Facebook's ambitions.
There have been other hints that Facebook is looking to take a greater stake in the mobile market. The revamped iPhone app that Facebook launched last year seemed structured to imitate a mobile operating system in itself, perhaps facilitating the addition of third-party applications. This summer, it added Facebook Places, a geotagged "check-in" service in the league of Foursquare and Loopt, to its suite of smartphone app features.

Around the same time, the company purchased a start-up called Hot Potato, which brought the "check-in" craze beyond merely logging presence at physical venues and instead encouraged users to spread real-time information about events and activities. Upon completing the acquisition, Hot Potato announced that Facebook would be shutting it down. Founder Justin Shaffer, the real reason for the buy, has joined Facebook; sources suggested at the time that his focus would either be to help build out the Facebook Places geolocation service, which had just launched, or to revamp its Events product. Given his mobile expertise, it's easy to imagine that his likely role as part of Facebook Events would be to retool the limited product for mobile use.
Another factor to consider is the still-expanding Facebook Credits, the virtual currency that the company finally began to roll out last year. Credits is now the standard currency in many of the biggest and most popular games on Facebook's developer platform, and given sunny predictions about mobile commerce, bringing Credits to mobile is a likely forthcoming step.
But as with so many other Facebook projects, bringing the Credits system to Facebook's mobile apps would be heavily limited by handset, carrier, and operating system restrictions. Launching its own mobile handset or operating system may be one strategy that the company has explored to combat these inevitable roadblocks.
Could a Facebook phone succeed?
Now on to the second big question about a Facebook phone: what are its chances for success?
It's hard to say, but it's clear it wouldn't be an easy road for Facebook. Other companies have tried and failed to build their own branded cell phones. Google's Nexus One phone and Microsoft's social-networking Kin phone, both of which launched earlier this year and lasted only a few months on the market, serve as cautionary tales for Facebook.
Google launched the Nexus One in January. But by summer, it abandoned hopes of making the device a mass market hit, and it stopped selling it. Google's biggest mistake was that it didn't work with carriers to distribute the device. The company expected customers to pay full retail price for the phone. And Google only offered the device online. But few customers bought the device, teaching Google and others the importance of carrier distribution.
"Google underestimated what it takes to market and support a hardware device," said Charles Golvin, an analyst with Forrester Research.
As for Microsoft's Kin, which more closely parallels a possible Facebook phone, Microsoft tried to build a social-networking brand out of thin air. The company had worked on the phone for years and decided to target the always-connected teen market with a high-end feature phone. But the phone was a huge disappointment from the start, and after having the device on the market only two months.
The lesson with the Kin is that Microsoft went for the midrange market. The device was neither a cheap feature phone nor a full-fledged smartphone. Though this mid-tier market still exists, consumers are quickly bypassing advanced feature-phones and upgrading straight to smartphones, as wireless operators make data service plans more affordable.
The major advantage that a Facebook phone would have over the Kin is the fact that Facebook is already a hugely popular brand. As mentioned before, there are 500 million Facebook users and about 150 million already using the mobile Facebook application. And it is already the most popular application on many smartphones. For many consumers, Facebook is social networking.
Still, building a phone is no easy task, nor is it inexpensive. The most cost-effective path for Facebook if it builds its own phone would be to work with a handset maker, such as HTC, and use the Google Android OS as the basis for the device. This would allow Facebook to develop a phone quickly.
This could present challenges on a couple of different levels. First, Google may view Facebook as a competitive threat, which could make a relationship between the two companies sticky. Secondly, to get the level of integration that is necessary for Facebook to make its smartphone stand out against competitors using the same Google Android OS, the company would likely have to sacrifice some Google applications and standard Android features. And this might mean that a possible Facebook phone wouldn't be able to access apps in the Android Market.
Even though Facebook may be the most used mobile app on most smartphones, it is not the only application that consumers are interested in.
"Basically, Facebook would have to sacrifice a lot of the cool applications that come on an Android phone that many consumers want," said Ross Rubin, an analyst with NPD Group. "And I'm not sure that the deeply integrated Facebook functionality would be enough to win over consumers if these other features are missing."
Even if Facebook is able to build the new phone, Forrester's Golvin said that's only one piece of the bigger puzzle. Facebook would still need strong relationships with wireless carriers to distribute the device. And it would have to work out a retail strategy, likely offering the phone in places such as Best Buy.
"These are all things that Facebook knows nothing about today," he said. "And getting all of this in place is not insignificant, and it's expensive."
"Google underestimated this when it went to market with the Nexus One," he said. "And they got hammered. I think it's fair to say that Facebook as a private company doesn't have the same level of capitalization that Google has. So it just seems like an awfully big risk."

Originally posted at Signal Strength

Google News turns 8 amid industry turmoil

A boon and a bane to news sites and bloggers, the heavily trafficked news aggregator is drawing readers but needs to adapt with a quickly changing industry.

windows 8

Windows 8 leaks show Microsoft's eyes on Apple

Although still early in the process, newly leaked documents about Windows 8 offer some keen insight into where Microsoft wants to head with the next version of the operating system.
One thing that is made abundantly clear is that Microsoft has been paying attention to Apple. In the documents, which appear to come from an April meeting with computer makers, Microsoft discusses its Cupertino, Calif.-based rival and outlines plans to offer a Windows Store similar to the way Apple distributes software on its iPhone. The documents, which Microsoft has declined to comment on or authenticate, also talk about plans to give Windows a more iPad-like response time through new power management settings.

Among the Windows 8 details outlined in a leaked presentation are plans for a Windows Store, where consumers could go to directly buy PC software.

(Credit: Courtesy of Microsoft Kitchen)

In particular, one slide titled "How Apple Does It: A Virtuous Cycle," talks about the need for simplicity in design. "Apple brand is known for high quality, uncomplicated, 'it just works,'" the slide says, adding that "This is something people will pay for!"
Other slides don't directly reference Apple, but talk about the need for a number of features popularized by its products, including the App Store, as well as a more instant-on feel.
Although Windows has continued to dominate the PC market, still holding roughly 95 percent of global market share, it faces a significant threat from mobile operating systems looking to encroach on the low end of the computer market, including the iPad and Android-based devices.
Hewlett-Packard, which originally talked about plans for a Windows 7-based slate PC in January, now refuses to say whether it will build that product and has since announced plans to buy Palm in a deal expected to close shortly. Microsoft has been working on tablets for nearly a decade and, as early as 2005, outlined the hardware trends that would enable a device like the iPad. Thus far, however, only Apple has been able to create a hit with consumers.
Among the goals outlined for Windows 8 are some features that would appear to be aimed at making Windows more competitive in this market, including improved simplicity, better support of touch and gestures, as well as support for smaller-size screens.

Microsoft's Windows 8 game plan (images)

Although the iPad is not referenced directly, the presentation does refer to the slate form factor as a "center of gravity," alongside laptops and all-in-ones.
To achieve quicker boot-up, Microsoft is looking at several things, including a new combination of logging off and hibernating a machine that would offer a faster boot-up than a full restart. That combination would become the default on-off behavior, though just what to name the setting is still a question mark, according to the documents. The company is also looking to resume from sleep in less than a second, according to the documents.
"Windows 8 PCs turn on fast, nearly instantly in some cases, and are ready to work without any long or unexpected delays," reads one of dozens of slides posted to enthusiast site Microsoft Kitchen, among other places.
Of course, the goal of instant-on PCs is a long held, but as yet unrealized aspiration. Microsoft significantly improved its boot-up, resume, and shut-down times with Windows 7, but they all pale when compared to the nearly instantaneous response one gets from a mobile device such as the iPhone or iPad.
As for the store, Microsoft apparently plans to let each computer maker brand the store under their own name. Among the benefits to consumers would be the ability to access those applications on any PC they own. It is also outlined as an opportunity for partners to make money after the PC sale, though it is described as "revenue neutral" for Windows, suggesting that perhaps Microsoft is not planning to take a cut of sales.
One slide suggests that, in an earlier forum with hardware makers, Microsoft heard that such a store is seen as needed as soon as possible, though this is clearly a tricky undertaking with Microsoft having to balance the needs of software creators, consumers, partners, resellers, and the PC makers--not to mention Microsoft itself.
The slides also offer up a time frame for Internet Explorer 9, suggesting a beta of the new browser is expected by August. Microsoft has had developer platform previews of IE9, but those have lacked a significant user interface and other features. The beta, according to the slides, will be the "first release of full IE functionality."

fool key logger

These days Agents spy on u everywhere, in college, at work, maybe a trojan virus on your home PC which keylogs your paswords and mails it to someone else. If u think u r being logged, try this:
Whenever u have to type a password, never type the complete password in one go, ie, if your password is WINDOWS, u should type NDOW, then move cursor to start of the password field using the mouse ONLY, then type WI, then move cursor to end using the mouse and type S. This way the logger will record your keystrokes as [ndowwis] instead of [WINDOWS].

Data Leakage Bug in Mozilla Firefox Confirmed

It seems a data leakage bug has struck Firefox recently and has been confirmed by Window Snyder the security bod at Mozilla.
It’s basically a Chrome directory traversal bug (It seems a lot of the Firefox issues have had to do with chrome?).
It’s rated as low risk, but it can give away the existence of files (if the attacker knows the name and location).
The bug resides in Firefox’s chrome protocol scheme and allows for a directory traversal when certain types of extensions are installed. Attackers could use it to detect if certain programs or files are present on a machine, gaining information to use in perpetrating another, more malicious exploit.
Normally, Firefox’s chrome package is restricted to a limited number of directories, but a bug in the way it handles escaped sequences (i.e. %2e%2e%2f) allows attackers to escape those confines and access more sensitive parts of a user’s computer. The exploit only works if a user has made use of Firefox extensions that are “flat,” this is, those that don’t package their files in a jar archive. Examples of flat add-ons include Download Statusbar and Greasemonkey.

Add Vedio or flash in orkut about me in our profile

this post is to about how to add a flash video or flash song in about me of orkut profile. For reference you may see my profile. The tutorial is very simple. If you have some good song's link which is in swf format then ok else you may convert mp3 to swf by so many softwares that are available. i use mp3 to swf converter software. To ADD...