Monday, February 28, 2011
This Is What Dictators Are Really Scared About [Image Cache]
Man Discovers His Online Girlfriend of 2.5 Years Is Fake—After Paying Her $200,000 [Bizarre]
CrunchGear Week in Review: New Species Edition
Samson Zoom H1 Handy Recorder Review
ELECTRONIC DATA SYSTEMS AMKOR TECHNOLOGY TOTAL SYSTEM SERVICES SAIC
Five privacy protection Firefox add-ons for Data Privacy Day
If you're reading Download Squad, you already know all of these classics. Kudos to you! Now go ahead and let your less computer-savvy coworkers or family members read this list, and make sure they install at least one of these if they use Firefox at all.
- HTTPS Everywhere is an add-on by the beardies over at the EFF (Electronic Frontier Foundation). It forces Firefox to communicate using HTTPS (secure HTTP) with a number of major websites, such as Google, Wikipedia, Twitter, Facebook, PayPal and others.
- Ghostery focuses on those corporations and institutions bent on tracking your movements around the Web (or on their own websites). It detects when you're being tracked by Google Analytics, Facebook and over 400 other ad networks, and provides an easy way to block those tracking mechanisms while leaving all other JavaScript functionality intact.
- Web of Trust provides a clear "traffic light" indication showing which sites you can trust with your credit card details, and which sites you should be leery of. The ratings are user-generated, and you don't have to access the actual website in question to view them - they show up right on the search results page when you use Google, Yahoo!, Bing and even Wikipedia.
- NoScript is somewhat similar to Ghostery mentioned above, in that it also blocks JavaScript. But it's a more extreme solution: Rather than just block trackers, it implements a "white list", blocking all JavaScript except for scripts running on domains you trust. One of its many advantages is that it protects against cross-site scripting attacks.
- BetterPrivacy protects you against a different kind of cookie - one that you can't flush just by clearing your browser history. These cookies are called Local Storage Objects, or Flash cookies, and are put on your computer using the Flash plug-in. BetterPrivacy scrubs these cookies off your system every time your exit your browser.
[Image credit: dcJohn]
Five privacy protection Firefox add-ons for Data Privacy Day originally appeared on Download Squad on Fri, 28 Jan 2011 15:00:00 EST. Please see our terms for use of feeds.
Madness Takes Physical Form Within the Caduceus Cellphone Hack [Video]
MANTECH INTERNATIONAL L-1 IDENTITY SOLUTIONS INSIGHT ENTERPRISES FINISAR
Mac OS X Lion has TRIM support for SSDs, HiDPI resolutions for improved pixel density?
Mac OS X Lion has TRIM support for SSDs, HiDPI resolutions for improved pixel density? originally appeared on Engadget on Sat, 26 Feb 2011 19:39:00 EDT. Please see our terms for use of feeds.
Permalink | | Email this | CommentsInternet Explorer 9 pinned sites: how they work, and the best examples on the Web
In essence, it takes the Firefox and Chrome idea of pinned app tabs and goes a few steps further by actually integrating with the operating system. To pin a site, simply visit it in IE9, then drag the tab down to the Windows taskbar. Your tab will quickly close and re-open in a new (color-coded!) window.
Pinned sites can do three very awesome things: they can provide notifications, such as new messages; you can right click the pinned icon to access a jump list to various parts of the site (see right); and finally, pinned sites can even have thumbnail toolbars -- you can control a media player, from a pinned site!
The thing is, though, a website has to be explicitly coded to provide these features -- and while Microsoft has done a good job of getting major Web service providers to add the IE9-specific meta tags, it will be some months before every site has IE9's special pinned site magic.
After the break, we have a comprehensive list of the best examples of IE9 pinned sites from across the Web. Make sure you've downloaded and installed IE9 before you continue, too.
Continue reading Internet Explorer 9 pinned sites: how they work, and the best examples on the Web
Internet Explorer 9 pinned sites: how they work, and the best examples on the Web originally appeared on Download Squad on Fri, 11 Feb 2011 11:00:00 EST. Please see our terms for use of feeds.
Daily Crunch: Sea Comb Edition
CERADYNE COGNIZANT TECHNOLOGY LIFECELL J2 GLOBAL COMMUNICATIONS
Fido can stand under my Dogbrella ella ella ay ay ay
TRANSACTION SYSTEMS ARCHITECTS SALESFORCE COM METHODE ELECTRONICS INTERSECTIONS
Download every Sports Illustrated 2011 Swimsuit photo with a simple Perl script
Like last year, the script doesn't only download the final, glossy-magazine-destined photos. There's tons of behind-the-scenes stuff, and lots of shots that simply didn't make the final cut. Last year there were around 1200 photos to download -- we're still running this year's downloader, but it looks like there could be even more!
Linux users, you'll be able to simply download the script, chmod +x, and run. Windows users will need a copy of wget and a Perl distro, such as ActivePerl. Mac users can use the Xcode Developer Tools.
Alternatively, be a cool kid and run Ubuntu in VirtualBox!
Download every Sports Illustrated 2011 Swimsuit photo with a simple Perl script originally appeared on Download Squad on Wed, 16 Feb 2011 06:20:00 EST. Please see our terms for use of feeds.
LastPass XSS vulnerability found, website and browser add-ons affected (updated)
First off: don't worry. Cardwell reported the vulnerability to LastPass before writing it up, and it has since been fixed. We're not sure if the fix has propagated out to the Chrome and Firefox add-ons -- but we have to assume that Cardwell wouldn't have written his blog post if the vulnerability still existed.
With that said, you should still be more than a little concerned about the fundamental architecture of LastPass as an in-the-cloud password manager. While this cross-site scripting attack was fixed quickly, Cardwell thinks a similar attack "could easily happen again in future."
Beyond being susceptible to XSS attacks, LastPass doesn't even use HSTS, which means that man-in-the-middle (MITM) attacks are also rather easy to pull off.
It's very hard for us to recommend LastPass as a password manager when further vulnerabilities will almost certainly be found. For the time being, you should check out KeePass, an offline password manager that, for now, is a lot more secure than LastPass.
Update: LastPass has now implemented HSTS and a few other features to make their website and browser add-ons a lot harder to attack in the future. Hooray!
[Thanks to Brad for the tip!]
LastPass XSS vulnerability found, website and browser add-ons affected (updated) originally appeared on Download Squad on Sun, 27 Feb 2011 10:30:00 EST. Please see our terms for use of feeds.
Permalink | Email this | Comments
SALESFORCE COM METHODE ELECTRONICS INTERSECTIONS HEARTLAND PAYMENT SYSTEMS
Daily Tip: How to move your iTunes library to another hard drive
Daily Tip: How to move your iTunes library to another hard drive is a story by TiPb. This feed is sponsored by The iPhone Blog Store.
TiPb - The #1 iPhone, iPad, and iPod touch Blog
Consumer Reports Finds Antenna Issue on Verizon iPhone
More�Verizon iPhone coverage on Wired.com:
Review: Verizon iPhone
Hands-On With the Verizon iPhone Hotspot
Price Chart: Verizon iPhone vs. AT&T iPhone
Switching to Verizon iPhone? 3 Ways to Shave the Termination Fee
Verizon [...]
LM ERICSSON ROGERS COMMUNICATIONS WESTERN DIGITAL VERIFONE HOLDINGS
Gaikai beta goes live, brings Mass Effect 2, Dead Space 2, Sims 3 and Second Life demos to your browser window
Gaikai beta goes live, brings Mass Effect 2, Dead Space 2, Sims 3 and Second Life demos to your browser window originally appeared on Engadget on Sun, 27 Feb 2011 20:17:00 EDT. Please see our terms for use of feeds.
Permalink | | Email this | CommentsCOGNIZANT TECHNOLOGY LIFECELL J2 GLOBAL COMMUNICATIONS RED HAT
Transphorm promises brickless laptop chargers, power savings aplenty
Transphorm promises brickless laptop chargers, power savings aplenty originally appeared on Engadget on Sun, 27 Feb 2011 16:50:00 EDT. Please see our terms for use of feeds.
Permalink | | Email this | CommentsMANTECH INTERNATIONAL L-1 IDENTITY SOLUTIONS INSIGHT ENTERPRISES FINISAR
LastPass XSS vulnerability found, website and browser add-ons affected
First off: don't worry. Cardwell reported the vulnerability to LastPass before writing it up, and it has since been fixed. We're not sure if the fix has propagated out to the Chrome and Firefox add-ons -- but we have to assume that Cardwell wouldn't have written his blog post if the vulnerability still existed.
With that said, you should still be more than a little concerned about the fundamental architecture of LastPass as an in-the-cloud password manager. While this cross-site scripting attack was fixed quickly, Cardwell thinks a similar attack "could easily happen again in future."
Beyond being susceptible to XSS attacks, LastPass doesn't even use HSTS, which means that man-in-the-middle (MITM) attacks are also rather easy to pull off.
It's very hard for us to recommend LastPass as a password manager when further vulnerabilities will almost certainly be found. For the time being, you should check out KeePass, an offline password manager that, for now, is a lot more secure than LastPass.
[Thanks to Brad for the tip!]
LastPass XSS vulnerability found, website and browser add-ons affected originally appeared on Download Squad on Sun, 27 Feb 2011 10:30:00 EST. Please see our terms for use of feeds.