Haven

Game of the Year 2009 by GameSpot

2009-12-25T22:36:00.001+08:00

Firefox 3.0.16 Release

2009-12-15T22:35:00.000+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-65 Crashes with evidence of memory corruption (rv:1.9.1.6/ 1.9.0.16)

Self assembling GSXR!

2009-12-11T21:54:00.001+08:00

Thunderbird 3

2009-12-08T20:24:00.026+08:00

Thunderbird 3 has been released.

New features include:

New Search with Advanced Filtering Tools

New Search with Advanced Filtering Tools
Search results now include advanced filtering tools. You have the option to filter your results by sender, tag, attachments, people, folder, and mailing list. You can also filter your email using the timeline tool.
New Global Search Field with Autocomplete
When typing in the Global Search field, Thunderbird autocompletes against your address book. You have the option of searching everywhere or filtering against different parts of the email such as by subject or by sender.

User Experience Improvements

New Mail Account Setup Wizard
The new Mail Account Setup Wizard matches against a database of email settings from popular mail providers so that you will only need to provide your name, email, and password to set up new mail accounts.
Redesigned Mail Toolbar
The Mail Toolbar is redesigned to include the new Global Search bar. Buttons such as reply, forward, delete, junk are part of each email message. You can add those buttons back to the main toolbar by customizing the toolbar.
Tabbed Email Messages
Double-clicking or hitting enter on a mail message will now open that message in a New Tab window. Middle-clicking on messages or folders will open them in a Tab in the background. When quitting Thunderbird, visible tabs will be saved and will be restored when you open Thunderbird the next time. There is also a new Tab menu on the Tab toolbar to help you switch between Tabs.
Smart Folders
The folder pane offers a Smart Folders mode which combines special mailboxes, like Inbox, from multiple accounts. Smart Folders is now on by default.
New Message Summary View
Selecting multiple messages will give you a summary view of the emails you have selected.
Column Headings
The column headings that are displayed and the order in which they are displayed can now be set on a per-folder basis.
Message Archive
You can now file messages from your Inbox or other folders into the new Archive folder system.
Activity Manager
The Activity Manager records all the interactions between Thunderbird and your email provider in one place.
New Add-ons Manager
The new Add-ons Manager (Tools > Add-ons) can now be used to find, download, and install Thunderbird Add-ons which includes Extensions, Themes, and Plugins. Note that few Add-ons are compatible with this beta at the time of release, as Add-on developers need to upgrade them.
Improved Address Book
If someone is in your address book, it is indicated by a new star icon which you can click to edit contact details inline. If they are not in your address book, you can add them with one click of the icon. A new birthday field allows you to keep track of your friends' birthdays. You can also add a photo for contacts in your address book.
Improved Gmail Integration
Better recognition and integration of Gmail's special folders such as Sent and Trash including non-English versions of Gmail. Thunderbird also uses All Mail as the Archives folder.
For Windows Vista users, Thunderbird 3 is now integrated with Vista search results. On first start, Thunderbird will prompt to install its indexing system into Windows Vista and you can choose to see Thunderbird email and news messages in Windows search results.

For Mac users, Thunderbird 3 is now integrated with Spotlight, can import from Mail.app, read your OS X address book, and use Growl for new mail alerts.

Performance Improvements

IMAP Folder Synchronization
Thunderbird will download IMAP messages by default in the background to allow for faster message loading and better offline operation. This feature can be enabled on an individual folder basis via Folder properties, or for all folders in an account via Account Settings / 'Synchronize & Storage'.

MediaFire blocking Skipscreen again!!

2009-11-07T12:54:00.000+08:00

Firefox 3.0.15 Release

2009-10-27T20:53:00.002+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.
MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15)
MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
MFSA 2009-62 Download filename spoofing with RTL override
MFSA 2009-61 Cross-origin data theft through document.getSelection()
MFSA 2009-59 Heap buffer overflow in string to number conversion
MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS()
MFSA 2009-56 Heap buffer overflow in GIF color map parser
MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
MFSA 2009-53 Local downloaded file tampering
MFSA 2009-52 Form history vulnerable to stealing

Firefox 3.0.14 Release

2009-09-09T22:47:00.004+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-51 Chrome privilege escalation with FeedWriter
MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters
MFSA 2009-49 TreeColumns dangling pointer vulnerability
MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal
MFSA 2009-47 Crashes with evidence of memory corruption (rv:1.9.1.3/1.9.0.14)

#Fixed several stability issues.

Tweak Allows Installing Any Win7 Version from One DVD

2009-08-24T21:03:00.002+08:00

Once deleted, you'll get a menu of choices, as shown above. You can select any version of Windows 7 to install, and thus try out any version, to see if you really, really want to buy that version.

Via Hot Hardware

Thunderbird 2.0.0.23 Release

2009-08-20T20:48:00.000+08:00

Users can download the full version from here

One can also do a update instead by going to Help > Check for Updates in Thunderbird

MFSA 2009-43 Heap overflow in certificate regexp parsing
MFSA 2009-42 Compromise of SSL-protected communication

How To Jailbreak NEW 3.0.1 Firmware For iPhone, 3G & 3G S

2009-08-09T21:32:00.000+08:00

Firefox 3.0.13 Release

2009-08-03T21:25:00.001+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-44 Location bar and SSL indicator spoofing via window.open() on invalid URL
MFSA 2009-43 Heap overflow in certificate regexp parsing
MFSA 2009-42 Compromise of SSL-protected communication

30 Dumb Inventions

2009-08-01T21:27:00.000+08:00

The 20th century saw many astounding technological innovations. The automobile revolutionized the way people live and work, the internet changed the way people think about information, and the U.S. of A put a man on the moon. But some technological advances that came in the earlier part of the 20th centry weren't exactly meant for the history books. Because they were stupid.

Via LIFE

Firefox 3.0.12 Release

2009-07-21T21:19:00.001+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-40 Multiple cross origin wrapper bypasses
MFSA 2009-39 setTimeout loses XPCNativeWrappers
MFSA 2009-38 Data corruption with SOCKS5 reply containing DNS name longer than 15 characters
MFSA 2009-37 Crash and remote code execution using watch and __defineSetter__ on SVG element
MFSA 2009-36 Heap/integer overflows in font glyph rendering libraries
MFSA 2009-35 Crash and remote code execution during Flash player unloading
MFSA 2009-34 Crashes with evidence of memory corruption (rv:1.9.1/1.9.0.12)

#Fixed several stability issues.
#Fixed an issue introduced in Firefox 3.0.11, where Firefox would occasionally freeze when accessing the Java plug-in on Windows XP. (bug 498132)
#Fixed an issue introduced in Firefox 3.0.11, where Firefox would not save data properly when a user stored their home directory on a remote location using AFP. (bug 497792)
#On Mac OS X, fixed an issue where certain AppleScripts failed to return the proper information. (bug 427448)

Dancing Paperclips on Japan's Electromagnetic Trains

2009-07-17T10:40:00.000+08:00

The video - shot on the Rokko Liner in Kobe, Japan - shows how paperclips stand on end when the train accelerates and brakes. The magnetism, which is produced by the electric current that drives the motors located under the floor, apparently poses no harm to the human body, though it could damage credit cards, mobile phones, or other electronic devices if left on the floor. The Kobe New Transit Company, which operates the Rokko Liner (as well as the Port Liner, which uses similar trains), says extra shielding is being installed just in case.

Via Pink Tentacle

Firefox 3.5.1 Release

2009-07-16T21:31:00.000+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-41 Corrupt JIT state after deep return from native function
MFSA 2009-35 Crash and remote code execution during Flash player unloading

India's Got Talent - Mario Edition

2009-07-14T00:12:00.002+08:00

Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution

2009-07-13T18:50:00.021+08:00

Microsoft has released an advisory related to an Office Web Components ActiveX vulnerability, it is available here. This vulnerability exists in the ActiveX control used by IE to display Excel spreadsheets. The CVE entry for the vulnerability is CVE-2009-1136. At the moment there is no patch, but there is a workaround, and it can be automated for enterprise deployment. The specific CLSIDs to set the killbit for are:

{0002E541-0000-0000-C000-000000000046}
{0002E559-0000-0000-C000-000000000046}

Start working on this on ASAP. The impact is remote code execution with the privileges of the logged in user running Internet Explorer, and might not require user intervention. As in browse to a nasty web site and be pwn3d.

Microsoft Security Research & Defense - More information about the Office Web Components ActiveX vulnerability

Microsoft Security Response Centre - Microsoft Security Advisory 973472 Released

There is a long list of affected products:

* Microsoft Office XP Service Pack 3;
* Microsoft Office 2003 Service Pack 3;
* Microsoft Office XP Web Components Service Pack 3;
* Microsoft Office Web Components 2003 Service Pack 3;
* Microsoft Office 2003 Web Components for the 2007 Microsoft Office system Service Pack 1;
* Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 3;
* Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition Service Pack 3;
* Microsoft Internet Security and Acceleration Server 2006;
* Internet Security and Acceleration Server 2006 Supportability Update;
* Microsoft Internet Security and Acceleration Server 2006 Service Pack 1; and
* Microsoft Office Small Business Accounting 2006.

More Info via SANS Internet Storm Center

Firefox 3.5 Release

2009-06-30T22:52:00.002+08:00

Today the world celebrate the release of a major new release of the Firefox web browser.

Firefox 3.5 is based on the Gecko 1.9.1 rendering platform, which has been under development for the past year. Firefox 3.5 offers many changes over the previous version, supporting new web technologies, improving performance and ease of use. Some of the notable features are:

* Available in more than 70 languages. (Get your local version!)
* Support for the HTML5 and elements including native support for Ogg Theora encoded video and Vorbis encoded audio. (Try it here!)
* Improved tools for controlling your private data, including a Private Browsing Mode.
* Better web application performance using the new TraceMonkey JavaScript engine.
* The ability to share your location with websites using Location Aware Browsing. (Try it here!)
* Support for native JSON, and web worker threads.
* Improvements to the Gecko layout engine, including speculative parsing for faster content rendering.
* Support for new web technologies such as: downloadable fonts, CSS media queries, new transformations and properties, JavaScript query selectors, HTML5 local storage and offline application storage,

Thunderbird 2.0.0.22 Release

2009-06-22T20:43:00.003+08:00

Users can download the full version from here

One can also do a update instead by going to Help > Check for Updates in Thunderbird

MFSA 2009-33 Crash viewing multipart/alternative message with text/enhanced part
MFSA 2009-32 JavaScript chrome privilege escalation
MFSA 2009-29 Arbitrary code execution using event listeners attached to an element whose owner document is null
MFSA 2009-27 SSL tampering via non-200 responses to proxy CONNECT requests
MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)
MFSA 2009-17 Same-origin violations when Adobe Flash loaded via view-source: scheme
MFSA 2009-14 Crashes with evidence of memory corruption (rv:1.9.0.9)

Firefox 3.0.11 Release

2009-06-11T09:43:00.001+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-32 JavaScript chrome privilege escalation
MFSA 2009-31 XUL scripts bypass content-policy checks
MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar
MFSA 2009-29 Arbitrary code execution using event listeners attached to an element whose owner document is null
MFSA 2009-28 Race condition while accessing the private data of a NPObject JS wrapper class object
MFSA 2009-27 SSL tampering via non-200 responses to proxy CONNECT requests
MFSA 2009-26 Arbitrary domain cookie access by local file: resources
MFSA 2009-25 URL spoofing with invalid unicode characters
MFSA 2009-24 Crashes with evidence of memory corruption (rv:1.9.0.11)

#Fixed several stability issues.
#Several issues were reported with the internal database, SQLite, which have now been fixed by upgrading to a newer version.
#Fixed an issue where, in some specific cases, the bookmarks database would become corrupt. (bug 464486)

Firefox 3.0.10 Release

2009-04-27T09:35:00.001+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-23 Crash in nsTextFrame::ClearTextRun()

#Fixed a major stability issue.

Firefox 3.0.9 Release

2009-04-21T09:21:00.001+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-22 Firefox allows Refresh header to redirect to javascript: URIs
MFSA 2009-21 POST data sent to wrong site when saving web page with embedded frame
MFSA 2009-20 Malicious search plugins can inject code into arbitrary sites
MFSA 2009-19 Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString
MFSA 2009-18 XSS hazard using third-party stylesheets and XBL bindings
MFSA 2009-17 Same-origin violations when Adobe Flash loaded via view-source: scheme
MFSA 2009-16 jar: scheme ignores the content-disposition: header on the inner URI
MFSA 2009-15 URL spoofing with box drawing character
MFSA 2009-14 Crashes with evidence of memory corruption (rv:1.9.0.9)

# Fixed several stability issues.
# Official releases for the Bulgarian, Marathi, and Occitan languages are now available.
# Many users experienced an issue where a corrupt local database caused Firefox to “lose” its stored cookies. (bug 470578)
# Fixed an issue where, starting with Firefox 3.0.7, inline image attachments on popular webmail services (like AOL and AIM) would not display. (bug 482659)
# Large forms would sometimes take a long time to submit. (bug 426991)
# In certain cases, new windows would not have proper focus. (bug 446568)

Firefox 3.0.8 Release

2009-03-27T23:38:00.003+08:00

Users can download the full version from here.

One can also do a update instead by going to Help > Check for Updates in Firefox.

Push updates is also available.

MFSA 2009-13 Arbitrary code execution through XUL element
MFSA 2009-12 XSL Transformation vulnerability

Ubuntu 7.10 End of Life

2009-03-24T22:55:00.000+08:00

On the 18th of October 2007, Canonical announced the release of Ubuntu 7.10, codename Gutsy Gibbon. Many important features and updates made Ubuntu fans all over the world extremely happy and eager to upgrade. The default desktop environment for Ubuntu (GNOME) reached then a very important milestone: 2.20, bringing a huge list of changes.

Ubuntu 7.10 (Gutsy Gibbon) was the first Ubuntu operating system to include Compiz 3D effects enabled by default. Tracker replaced Beagle as the desktop search tool of choice. Also, the Ubuntu restricted extras package was included, enabling users to install almost all proprietary codecs on their system with just a few clicks. Not only that, but the Adobe Flash Player 9 could be installed just as easily, allowing the increasing number of flash-based websites to display better. Of course, new wallpapers, redesigned Boot Splash and fresh login screen themes were part of Gutsy's menu. Also newly introduced, the Fast user switching function gained many supporters. The monitor and video card configuration got a lot easier with Ubuntu 7.10's new Graphical configuration tool and printers were automatically detected and installed.

It was undoubtedly an awesome release, allowing many to make the switch from other operating systems and plunge into the Linux experience without any regret. But as we all know, all good things eventually come to an end, so here we are today, announcing the end of life for Ubuntu 7.10 (Gutsy Gibbon) on April 18th, 2009. This means that starting with April 18th, Canonical will stop "feeding" its Ubuntu 7.10 operating system with security/critical fixes and software updates! Those of you who still use Gutsy and want to upgrade will have to do that incrementally, from Ubuntu 7.10 to Ubuntu 8.04 LTS and from Ubuntu 8.04 LTS to Ubuntu 8.10. Or wait for Ubuntu 9.04 (Jaunty Jackalope) and do a clean install with the new EXT4 filesystem.

Thunderbird 2.0.0.21 Release

2009-03-18T22:36:00.009+08:00

Users can download the full version from here

One can also do a update instead by going to Help > Check for Updates in Thunderbird

MFSA 2009-10 Upgrade PNG library to fix memory safety hazards
MFSA 2009-09 XML data theft via RDFXMLDataSource and cross-domain redirect
MFSA 2009-07 Crashes with evidence of memory corruption (rv:1.9.0.7)
MFSA 2009-01 Crashes with evidence of memory corruption (rv:1.9.0.6)