Post

Mozilla CEO: incertezza sulle future relazioni con Google

Mountain View (CA) - Google was widely speculated to sacrifice Mozilla’s existence, which it supports quite extensively, in its quest to launch another assault at Microsoft. The simple fact that Google is now pursuing its own browser could leave Mozilla scratching its head. And quite apparently, Mozilla has not quite figured out how its relationship with Google will work out over the next few years. Infatti me lo sono chiesto anche io che tutto sono fuorché un analista però è anche vero che... But Mozilla CEO John Lily said that “it should come as no real surprise that Google has done something here - their business is the web, and they’ve got clear opinions on how things should be, and smart people thinking about how to make things better.” Lily believes that Chrome “will be a browser optimized for the things that they see as important, and it’ll be interesting to see how it evolves.” ... Google non pensa ad un web "generalista" ma ad un tool in grado di portare valore al s...

google_chrome.tgz

Reblogged Condivisi da Andrea Lazzari ... sarà l'effetto "open" o l'effetto accanimento? Tutto serve a migliorare cmq ;) Google Chrome Browser version 0.2.149.27 suffers from a denial of service crash vulnerability when mishandling a malicious link. Proof of concept code included. Qui il riferimento originale

google-download.txt

Reblogged Condivisi da Andrea Lazzari Cominciamo subito subito :) Google Chrome Browser version 0.2.149.27 automatic file download exploit. Qui il riferimento originale

Holy Ghost . . . !

Immagine
xkcd - A webcomic of romance, sarcasm, math, and language - By Randall Munroe Vi ripropongo una vignetta estrapolata da xkcd ripresa a sua volta da lastknight ... Semplicemente superba ! :D

Dopo la decisione del blocco, TPB registra un incremento del traffico dall'Italia

Immagine
Following the decision in Italy to block access to The Pirate Bay comes the inevitable announcement. Has the world’s largest BitTorrent tracker faded away in the face of media industry pressure? Hardly. Traffic from Italy to the ‘bay has actually increased this week and the site has jumped 10 places on Alexa in Italy. It’s been all over the news this week. Following attempts in other countries to block access to The Pirate Bay, this week saw the Italians take their turn . Could they succeed where they had previously failed and actually force a decrease in traffic to a site they block? The Pirate Bay Sees Boost in Italian Traffic Following ‘Block’ | TorrentFreak Come ci si poteva aspettare, il tam tam mediatico dietro alla questione The Pirate Bay non ha fatto altro che incrementare la curiosità di chi non conosceva questo sistema di sharing, avvicinandolo in maniera definitiva al mondo torrent e facendo luce sul "Cosa sono i Torrent Tracker ". PS: Negli articoli si legge ...

Apache Tomcat 6.0.18 UTF8 Directory Traversal Vulnerability

Description As Apache Security Team, this problem occurs because of JAVA side. If your context.xml or server.xml allows 'allowLinking'and 'URIencoding' as 'UTF-8', an attacker can obtain your important system files.(e.g. /etc/passwd) Exploit If your webroot directory has three depth(e.g /usr/local/wwwroot), An attacker can access arbitrary files as below. (Proof-of-concept) http://www.target.com/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability . Anche se questo mi sembra un tantinello più pericoloso IMHO!

Joomla Remote Admin Change Password Vulnerability

Gli sviluppatori del noto CMS Joomla hanno fatto sapere che è già in circolazione un pericoloso exploit che sfrutta una vulnerabilità presente nelle versioni del software dalla 1.5.x alla 1.5.5. Il bug riguarda la funzionalità di password reset e potenzialmente può consentire ad un utente di ottenere l’accesso amministrativo al CMS. Massimo Rabbi » Pericolosa falla per Joomla già in circolazione . Ci stavo giusto giocherellando l'altro giorno :) Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability milw0rm - exploits : vulnerabilities : videos : papers : shellcode .