Everything Has Changed
See how Intel developed the cure for deskside help visits in this video directed by Christopher Guest of Spinal Tap fame. Click here.
 
Cross-client Centrino® and  Core™2 processor with vPro™ Processor Technology Technical White Paper
A deeper technical dive on how vPro usage models work on both desktop and notebook PCs. Click here.
 
Intel® vPro Technology ROI Estimator
Intel® Core2™ Duo and Centrino® with vPro™ Processor technology cross-client ROI estimator. Click here.
 
WiPro Intel® Centrino® Pro with vPro™ Processor Technology
The Benefits of Intel® Centrino® Pro Processor Technology in the Enterprise. Click here.
 
Workstations Products Platforms Brief
Intel’s family of workstation platforms gives you the tools to move from serial to parallel workflows and enables you to iterate through alternatives faster and innovate more. Click here.
 
Itanium Solutions
Learn how Itanium®-based solutions are changing the way enterprises do business. Click here.


Select a newsletter and click Join to sign up!
Internet Daily
InternetNews

Business Report

Boston News
DC News
NY News
SiliconValley News




Microsoft Launch Events: Heroes Happen Here. Take a test drive, meet the teams, & leave with promo copies of Windows Server ‘08, Microsoft SQL Server ‘08, and Microsoft Visual Studio ‘08. Register now.





Mozilla Updates Firefox

The foundation fixes several flaws with the latest browser release.

February 25, 2005
By Tim Gray: More stories by this author:

The Mozilla Foundation has released the latest version of its popular Firefox browser, along with a series of patches intended to prevent spoofing and phishing attacks that have caused the browser to crash.

Firefox 1.0.1, addresses numerous security vulnerabilities and approximately 40 other browser fixes, according to the not-for-profit software foundation.

The primary glitch, which the updated browser fixed, was a vulnerability found in the Internalized Domain Names (IDN) protocol, which allows the use of certain international characters that look like other commonly used characters.

The IDN vulnerability allows hackers to spoof Web sites through phishing attacks.

RELATED ARTICLES

Firefox, Others at Phishing Risk
Mozilla: Dollars for Security Bugs

For more stories on this topic:

The update fixes vulnerabilities that range from "moderately critical" to "not critical"; none are listed as "highly critical," according to the Mozilla Foundation, said in a statement.

"Regular security updates are essential for maintaining a safe browsing experience for our users," he said.

There are no known exploits for any of the vulnerabilities.

The security update can be downloaded at the Mozilla Web site and will be available within a few days through Firefox's automatic update feature.

"I'd encourage users to get this release, especially if they've been prone to phishing attacks or spoofing," Hofmann said in a statement. "A lot of work in this release focuses on those areas."

The Shmoo Group discovered the IDN bug and said it appeared in all browsers, with the exception of Internet Explorer.

The Firefox browser has been downloaded 27 million times since it was released on Dec. 7, according to the foundation.

Opera Software also addressed the IDN flaw this week, as well as several others, with the second beta version of its browser.

The company said the beta includes an answer to the recent security difficulties with Web site spoofing.

The latest browser displays security information inside the address bar, located next to a padlock icon that indicates the level of security present on a site, according to the company. These anti-spoof measures help users make better decisions about the validity and security of visited Web sites.

"One of the most important measures to counter phishing attacks is the use of security certificates," Christen Krogh, Opera's vice president of engineering, said in a statement. "The challenge for browser vendors is to better explain the verification of certificates and to make the user more aware of this additional verification before entering into secure transactions."

The company also addressed the IDN flaw by displaying only domain names from certain top level names. This ensures that users who depend on IDN will avoid spoofed sites, the company said.





Security Archives | 7 Day InternetNews Summary | Contact Tim Gray | Back to top

Add internetnews.com
to your browser search box.

IE 7 | Firefox 2.0 | Firefox 1.5.x
Receive news
via our XML/RSS:
feed