TechBlog

Avira TechBlog: A vulnerability within the current versions of Adobe Flash Player on all supported platforms has been found, warns the company. Affected are not only the Flash Player installations, but also Adobe Reader and Acrobat via the “authplay.dll” Flash Player integration. Currently there is no mitigation which will help against the exploitation – so only opening expected documents from trusted sources for the time being is a good advice. ...

Yahoo Mail Blog wrote: Greetings, Yahoo! Mail Beta users! Some exciting updates to Yahoo! Mail Beta that we’re in the middle of rolling out: “Hello, my name is Stephanie and I’m a Facebook addict.” To all you fellow Facebook addicts out there, you might already know that we provide Facebook integration in our downloadable Messenger client. Now you can chat with your Facebook friends in Yahoo! Mail too! On the left, you’ll see “Facebook Friends” under “Online Contacts”. If you click on the thunderbolt, you will be prompted to authenticate on Facebook Connect (if you haven’t already). Once you’ve authenticated, your online Facebook friends will appear below “Online Contacts” and you can chat freely. As if Facebook was not addictive enough on its own, right? 😉 ...

Symantec: Only a few days ago, Japan experienced one of the worst earthquakes in its history. The earthquake registered 8.9 on the Richter scale and triggered an enormous tsunami. The heart-wrenching images on television have left the world shaken. It was the worst earthquake and tsunami in the past century and at least 50 countries have since received related tsunami warnings. As the death and injury tolls continue to rise, one must not forget those who awake to exploit such delicate situations—spammers continue to maintain the guise of charitable institutions and governmental organizations! Don’t be surprised to suddenly see an email message in your inbox marked as URGENT and pleading with you for “monitory help” [sic] or a phishing mail urging you to donate to the rehabilitation of those affected by the quake and tsunami. Use prudence in finding out the genuine intent of email senders before you reach out or respond. ...

Sophos Labs Blog: If you’re interested in computer security, you’ve probably heard of PWN2OWN. It’s a competition which has become an annual fixture at the annual CanSecWest conference in Vancouver, British Columbia. The competition gets its name because, as the CanSecWest organizers explain, “If you can execute arbitrary code (PWN) on these [laptops or mobile phones] through a previously undisclosed browser (Firefox, IE, Safari) exploit, you can go home with one (OWN).” ...

Avira TechBlog: Well, actually we expect some more updates as some security vulnerabilities have been revealed at the Pwn2Own contest during the CanSecWest security conference. Google is the first and pushes out version 10.0.648.133 – which fixes one security vulnerability within WebKit (the base of the Blackberry, Chrome and Safari webbrowsers). As usual, the update is spread via the built-in automatic update mechanism. Users can make sure to use the latest version by clicking on the tool symbol and choosing the “About Chrome” menu entry. ...

Today I’ve read a nice article in readwriteweb.com so I wanted share it with you: We believe that Google will preview a major new social service called Google Circles at South by Southwest Interactive today. Update: Google has now officially denied that Circles will launch here, but not that it exists. Others, including Tim O’Reilly, have also now confirmed that they’ve seen it and that it’s awesome. If what we’ve heard is correct, the service will offer photo, video and status message sharing. Everything users share on Circles will be shared only with the most appropriate circle of social contacts in their lives, not with all your contacts in bulk. Circles may be shown off at an event co-hosted tonight by the ACLU, an organization focused on privacy and the liberties it affords. It may not be a big public launch yet, but it’s clear that this is a major product in the works at the very least. ...

Examiner.com wrote: As many people are aware, bullying today is not like it used to be. Back in the day, all one had to do to turn his bully in was give the name of the person who bothered him to a trusted adult. Today, it is not that easy. Bullying doesn’t end at the school bell. It follows students from the blacktop to their cell phones to their computer screens. Many times, these “cyber bullies” create fake online profiles which allow them to bully anonymously. Kids in turn learn to fear school instead of perceiving it as a place of safety. Consider these staggering statistics- One third of middle school and high school students report being bullied during the school year. Almost 3 million students have said they were pushed, shoved, tripped and even spit on. Those are only the reported incidents of bullying. It does not include the day to day bullying that goes unreported. Bullying has also shown to lead to absences and poor performance in the classroom. ...

TheNextWeb wrote: We’ve received a solid report from a reliable and proven source that Yahoo has sold social bookmarking site Delicious for $5m+. The service was placed on the market in December after a meeting to discuss Yahoo’s future direction. After a heated bidding process, the site has reportedly been sold to a rival bookmarking service – who exactly we’re unsure of but we’ll update once we have confirmation. We do know its been sold to an existing competitor with “strong user base.” ...

Twitter has issued a statement to its mailing list encouraging third-party developers to cease creating applications that use the Twitter API solely to duplicate the functionality offered by Twitter’s own official clients. Citing an effort to improve consistency of the Twitter user experience, the social networking behemoth is exercising more control over how its service is utilized. Developers who already have an established audience, such as those who create such popular clients as TweetDeck and Seesmic, may continue developing their applications and supporting their user bases. However, developers are encouraged to cease creating new applications that duplicate existing functionality. With 750,000 applications in existence that already use the Twitter API, it is quite clear why Twitter wants to stop the tide of new apps and grab the reins of its users’ experience: it wants to own the user experience. ...

Safari just got served. At this year’s Pwn2Own conference, security firms and enthusiasts are doing their very best to discover and deploy exploits to some of the world’s most popular browsers. Chrome, Firefox, Internet Explorer, and Safari, they’re all on the menu for conference attendees and some have definitely faired better than others. Google issued a challenge, promising $20,000 to any person or team that could crack Chrome on the conferences opening day, but the two teams scheduled to take a swing backed down. Firefox is, for the time being, still standing, and, per usual, Microsoft’s Internet Explorer was taken down without much fuss. But which browser faired the worst? That would be Apple’s Safari. A French security research firm named Vulpen managed to break into Safari running on a MacBook Air in a cool five seconds. The company noted that the Safari update issued by Apple yesterday — version 5.0.4 — fixes some of the vulnerabilities, but not all. The takedown of Safari 5.0.3 used exploits that are still available in the updated code base. Go ahead Apple detractors, have a little fun in the comments section. ...