Every browser vulnerable to attack
The Secunia security company has warned that a new browser flaw could allow attackers to trick users into relinquishing sensitive information such as passwords.
The flaw is unusual in that it affects every mainstream browser and can be exploited on the Mac OS X operating system as easily as on Windows, reports PC World.
Secunia says because of the way most browsers handle JavaScript dialogue boxes, it`s unclear which site a dialogue box originates from. Therefore, an untrusted site could direct a user to a secure site such as a bank, and then cause a dialogue box to pop up in front of the bank site`s window. When the user enters password information, the data would be sent to the attacker.
The flaw has been confirmed in Opera, Safari, Mozilla-based browsers, iCab, and Mac and Windows versions of Internet Explorer. So far, patches have been issued only for Opera version 8.01. The flaw has also been fixed in the beta of iCab version 3.0.
Microsoft says it has no plans to distribute a fix because users who already follow the guidelines for avoiding spoofing and phishing attacks are at reduced risk of being affected.
New GeForce from Nvidia
Nvidia has unveiled a redesigned graphics card that is meant to support film-quality visual effects in videogames, reports ITNews.com.
The GeForce 7800 GTX is the new flagship of the company`s family of GeForce graphics processing cards and has been redesigned to include a new programmable "shader architecture" that has twice the shading power of the previous generation.
Nvidia claims the GeForce 7800 GTX is the most advanced graphics processor yet built, with more than 300 million transistors, and can rival any offline film rendering in terms of real-time gaming effects.
Microsoft pushes anti-spam tech
If your e-mail does not have Sender ID, Microsoft wants to junk your message, reports News.com.
According to the report, from November, Hotmail and MSN will flag as potential spam those messages that do not have the tag to verify the sender, in a move to promote adoption of the Sender ID specification for verifying the authenticity of e-mail.
Sender ID, which includes technology developed by Microsoft, ensures the validity of the server from which e-mail is sent, but critics say it is not an accepted standard and has many shortcomings.
Some are interpreting Microsoft`s move as an attempt to bulldoze the industry into adopting an incomplete standard.
Sender ID requires Internet service providers, companies and other Internet domain holders to publish so-called SPF, or Sender Policy Framework, records to identify their mail servers.
Concerns have been raised that Microsoft`s move may hurt Internet users because Sender ID is not widely deployed, meaning that average users are now at risk for having their legitimate e-mail tagged as spam when they send messages to Hotmail users.
Share