Symantec antivirus software update crashes some PCs

Found on CNet News on Sunday, 15 July 2012
Browse Software

An update earlier this week to Symantec Endpoint Protection 12.1 antivirus software for businesses caused some Windows XP-based computers to crash repeatedly with a "blue screen of death," the company revealed on its Web site.

"This whole episode is a joke, had the issue been a conflict with a random device driver then I could maybe slightly more sympathetic," the customer said. "But for it to conflict with its own Symantec related drivers and cause this issue is a total farce. Who tested it before release? Was it even tested?"

From the makers of Norton. There isn't really anything else to say.

Firefox Developer: ‘Everybody Hates Firefox Updates’

Found on Webmonkey on Monday, 09 July 2012
Browse Software

DiCarlo has a long and well-argued post on how and why Firefox’s attempts to ape Google Chrome have not only made the browser less usable, but done the very thing Mozilla was trying to prevent — driving people to switch to Chrome.

"Ironically, by doing rapid releases poorly, we just made Firefox look like an inferior version of Chrome. And by pushing a never-ending stream of updates on people who didn’t want them, we drove a lot of those people to Chrome; exactly what we were trying to prevent."

DiCarlo also calls out Mozilla’s user interface designers, arguing that using the rapid release cycle to constantly change Firefox’s interface compounds the problem and user frustration.

This is what everybody has said the moment when this insane race for the highest version number had started, but of course Mozilla didn't listen and decided that they know best what the users want. So now they have the results.

Mozilla shoots down Thunderbird, hatches new release model

Found on The Register on Saturday, 07 July 2012
Browse Software

Part of the problem is that standalone desktop email clients such as Thunderbird have largely fallen out of favor. Thunderbird may claim more than 20 million users, but Gmail alone boasts 425 million active users worldwide, and Gmail isn't the only web-based email service. In light of those numbers, developing Thunderbird probably hasn't been much fun for a while – and now, Mozilla has seemingly decided it isn't worth spending resources on.

I don't care about webmail interfaces. I want my mail to be stored locally, where it's added to my backup routines instead of having it saved on some remote servers with no control. With that approach, you're in the lucky position to still have all your email even if your freemail provider decides to close your account, or shuts down from one day to another without notice.

Firefox 'new tab' feature exposes users' secured info: Fix promised

Found on The Register on Friday, 22 June 2012
Browse Software

Reg reader Chris discovered the feature after opening a new tab only to be "greeted by my earlier online banking and webmail sessions complete with account numbers, balances, subject lines etc.

Firefox 13 was released on 5 June, adding new features including updated new tab and home tab pages. The updated new tab page feature is broadly akin to the Speed Dial feature already present in other browsers and displays cached copies of a user's most visited websites.

Well, now that Mozilla has pretty much copied everything from Opera and Chrome, maybe it can stop that stupid numbering and the constant pushing of new version numbers. On the other hand, this doesn't really matter anymore since many might have already switched over to the browsers which they have copied from.

Flame cyberweapon is tied to Stuxnet program

Found on New Scientist on Monday, 11 June 2012
Browse Software

Kaspersky says that a module from Stuxnet, known as "Resource 207" is actually a Flame plugin that allows the malicious code to spread via USB devices. "The code of the USB drive infection mechanism is identical in Flame and Stuxnet," says Kaspersky.

A coding error (the US reportedly blames Israel and vice versa) allowed Stuxnet to escape into the wild and reveal its existence - which a secret cyberweapon should of course not do.

Actually it's not too surprising. Stuxnet and Flame both required detailed knowledge of the systems they are made to attack, not to mention the obvious effort that has been put into keeping those pieces of software under the radar for so long.

Iranian anti-censorship software ‘Simurgh’ circulated with malicious backdoor

Found on Citizen Lab on Thursday, 31 May 2012
Browse Software

Simurgh is an Iranian stand-alone proxy software for Microsoft Windows. It has been used mainly by Iranian users to bypass censorship since 2009. The downloadable file is less than 1 MB and can be downloaded within a reasonable amount of time even with a slow internet connection, which makes it convenient for many users in Iran.

This Trojan has been specifically crafted to target people attempting to evade government censorship. Given the intended purpose of this software, users must be very careful if they have been infected by this Trojan. Additionally, they should be cautious about installing software, especially circumvention software, from untrusted sources. Where possible, software should be downloaded from trusted official websites over HTTPS. If checksums or cryptographic signatures are provided by the software vendor, these should be checked prior to installation.

There's not much doubt about who is behind this backdoor.

Microsoft to charge customers $99 to remove OEM 'crapware'

Found on ZDnet on Saturday, 19 May 2012
Browse Software

The OEMs are paid by a variety of software makers to install crapware onto systems. The OEMs don’t disclose how much money they receive from this, but sources tell me that it works out at a few dollars per PC.

Consumers are expected to take their new PC to a Microsoft Store — though there are currently only 16 of them in the United States — and pay Microsoft $99 to remove the crapware that the OEMs were paid to install.

Long gone are the times when you received a simple CD-ROM (or even just floppies) with the OS which you had to install yourself. No crapware, no "pre-configured" system, just install it the way you want. Maybe more consumers should not accept the EULAs when they buy a computer; that gives them the right to return the licenses and since the crapware and the preinstalled OS costs money too, they might even get a discount.

Adobe Introduces the Paid Security Fix

Found on Slashdot on Thursday, 10 May 2012
Browse Software

It seems there is a critical security hole that will allow attackers to execute arbitrary code in the context of the user running the affected application. Adobe's fix? You need to pay to upgrade to Photoshop CS6. For users who cannot upgrade to Adobe Photoshop CS6, Adobe recommends users follow security best practices and exercise caution when opening files from unknown or untrusted sources.

CS5 was released on April 12, 2010 for a price between $699 and $999 per copy. Now about two years later, the only fix for CS5 users is to hand over money and buy CS6; and judging from the prices of CS3 and CS4, this version will cost just as much as CS5. So to get a fix for a critical bug (which is Adobe's fault), users are expected to pay up to $999. Or, users could decide that this is a rip-off and look for pirated versions.

Apple Rejecting Apps That Use Dropbox Because *Gasp!* Users Might Sign Up For Dropbox Accounts

Found on Techdirt on Wednesday, 02 May 2012
Browse Software

While I can understand why developers feel the need to conform to Apple's sometimes ridiculous (and often arbitrary) rules for iOS development, sometimes it really seems like Apple goes to highly questionable (and potentially legally questionable) lengths to reject certain apps.

Reason for rejection is the fact that if the user does not have Dropbox application installed then the linking authorization is done through Safari (as per latest SDK).

It seems developers are eventually going to recognize that, even with Apple's giant market, it might just be easier to focus on more reasonable and open platforms.

Competiton sure is something Apple hates.

Firefox 12 released, takes Chrome mimicry to the next level

Found on ExtremeTech on Tuesday, 24 April 2012
Browse Software

Moving forward, Firefox (on Windows) will automatically (and silently) update, and — praise be — the Find function is now a lot better at centering the page on any matches.

The ability to silently update very closely mirrors Chrome, and really it’s a surprise that Mozilla has taken so long to introduce this key feature, after switching to the six-week rapid release cycle almost a year ago, with Firefox 5.

When you install Firefox 12, Windows UAC will ask you to approve Firefox Software Updater — and after that, you should never see an update dialog ever again.

In other news, the latest Nightly version of Firefox 14 has removed favicons from the address bar; the icon will now simply display a globe, or a padlock if the site is SSL-secured — just like Chrome.

"Mirrors Chrome". "Just like Chrome". You know, if these features are so insanely perfect, you can simply decide to just install Chrome and drop Firefox because it is turning into nothing but a copy. Or just use Opera which by default has the option to do a portable install; instead of relying on a 3rd party producing a portable Firefox. Plus, whoever came up with the glorious idea to let a browser bypass the security system of the operating system should consider a job change.