Feb
22

Google Under Fire For Circumventing Safari Privacy Setting

1329904346 63 Google Under Fire For Circumventing Safari Privacy Setting

It’s a tense time for Google: controversial policy and user-experience changes are combining with a growing distrust of tracking and advertising to produce something of a toxic atmosphere. Not the moment, then, you would want a minor scandal to erupt in the form of Google circumventing, intentionally or unintentionally, the privacy settings of millions of Safari users.

The allegations have their source in a report by Stanford grad student Jonathan Mayer, who showed that using Safari triggered a special behavior in the normal cookie-creation process; his report was later played up by the Wall Street Journal. This behavior deliberately goes around the default Safari behavior of blocking all third-party cookies — like one from Google when you’re visiting TechCrunch.

Google says it’s a side-effect from something else, but even if that’s true, it’s still ugly.

The gist of the exploit is this: normally, a plain HTTP request to put a cookie on a machine running Safari would be acknowledged, vetted, and either accepted (for something like Amazon tracking your position on the site), or rejected (for something like DoubleClick meta-cookies). Google’s (DoubleClick’s, technically, but ultimately it’s Google’s) special cookie dispenser, however, would detect that Safari was being used, and “fill out” a form element on the client side, sending that out instead of a plain request.

It’s a documented feature, this form request for cookies, not some crazy illicit web stunt. Other online advertising companies do it as well, but that’s not really an endorsement. But the way it’s set up is fundamentally shady: using javascript to fill out an invisible form with the information that would normally be sent by other means, but isn’t — because the user has chosen not to. It sidesteps the Safari preferences neatly, by means of a loophole in the cookie-submission process.

Interestingly, that loophole was closed seven months ago in Webkit — by Google. One can view this cynically or generously. Cynically, it could be suggested that Google closed the hole but decided to exploit it in order to track Safari browsers — not the biggest piece of the desktop pie, but huge since it’s the default browser on iOS (also vulnerable). Generously, it could be said that Google fixed the problem and designed around a standard they helped achieve, and this tracking is in fact a side effect.

That’s something like what Google has actually said. In a statement, they say that last year they implemented some things to make sure +1 buttons (which of course are a form of third-party tracking, like most share elements) worked in Safari. they rigged a way to determine, on the level, whether a user had opted in or out to Google-related tracking, and if so, whether they were logged in. fairly standard. But then:

However, the Safari browser contained functionality that then enabled other Google advertising cookies to be set on the browser. we didn’t anticipate that this would happen, and we have now started removing these advertising cookies from Safari browsers.

Whether they are using the phrase “contained functionality” ironically isn’t clear. after all, they’re describing a security vulnerability they sewed up back in the day. Apple, for their part, has only said that they will be working to “put a stop to it.” Whether that means they’ll be adopting the same Webkit changes Google did isn’t clear.

It’s a bit much to swallow that Google designed functionality specifically for the browser and failed to notice this particular quirk. and the huge numbers of Safari browsers reporting data to Doubleclick should have been a red flag as well.

What matters in the end, though, is that a Google product violated the expressed privacy preferences of millions of users. Whether it was a mistake, an outdated browser on the user’s side, and whether the data was effectively anonymized — people won’t care about this. This is a big stumble when Google needed to be treading lightly. A little perspective and investigation might make this violation more or less serious, but the damage is done. Google is going to have to take some big steps to repair their image after the beating it’s taken over the last few months.

Here’s Google’s full statement on the matter:

The Journal mischaracterizes what happened and why. we used known Safari functionality to provide features that signed-in Google users had enabled. It’s important to stress that these advertising cookies do not collect personal information.

Unlike other major browsers, Apple’s Safari browser blocks third-party cookies by default. however, Safari enables many web features for its users that rely on third parties and third-party cookies, such as “Like” buttons. Last year, we began using this functionality to enable features for signed-in Google users on Safari who had opted to see personalized ads and other content–such as the ability to “+1″ things that interest them.

To enable these features, we created a temporary communication link between Safari browsers and Google’s servers, so that we could ascertain whether Safari users were also signed into Google, and had opted for this type of personalization. But we designed this so that the information passing between the user’s Safari browser and Google’s servers was anonymous–effectively creating a barrier between their personal information and the web content they browse.

However, the Safari browser contained functionality that then enabled other Google advertising cookies to be set on the browser. we didn’t anticipate that this would happen, and we have now started removing these advertising cookies from Safari browsers. It’s important to stress that, just as on other browsers, these advertising cookies do not collect personal information.

Users of Internet Explorer, Firefox and Chrome were not affected. nor were users of any browser (including Safari) who have opted out of our interest-based advertising program using Google’s Ads Preferences Manager.

Permanent link to this article: http://www.smart-ie.com/google-under-fire-for-circumventing-safari-privacysetting/

Feb
22

Strengthening User Control of Add-ons

1329903162 23 Strengthening User Control of Add ons

It’s no secret that Firefox users love to install add-ons — more than 1.5 million are downloaded every day from our official gallery. But users aren’t the only ones who love adding on to Firefox: third-party applications frequently install bundled add-ons into Firefox as part of their own installation process. While some of these applications seek the user’s permission beforehand, others install add-ons into Firefox without checking to make sure the user actually wants them.

These add-ons installed by third parties present a number of problems: they can slow down Firefox start-up and page loading time, they clutter the interface with toolbars that often go unused, they lag behind on compatibility and security updates, and most importantly, they take the user out of control of their add-ons.

That’s why we’re introducing two new features to ensure users have complete control over their add-ons:

Users must opt in to add-on installation

If Firefox starts and finds that another program has installed an add-on, Firefox will disable the add-on until the user has explicitly opted in to the addition. Users that want the functionality provided by a third-party-installed add-on can easily allow the installation, while users who don’t can cancel or ignore the prompt.

An opportunity to fix the past

Upon upgrading to this upcoming version of Firefox, users will be presented with a one-time dialog to select the add-ons they wish to keep installed. by default, all of the add-ons the user has installed from within Firefox will be kept, but add-ons installed by another application will be disabled unless the user chooses to keep them. Regardless of installation method, we encourage users to disable add-ons they aren’t using to improve Firefox’s performance.

If any add-ons will be disabled, the user will be asked to confirm the changes. This additional step should ensure users don’t accidentally disable add-ons they wish to keep.

We understand that there are legitimate use cases for some third-party add-on installations, and that those developers have done the right thing by asking users to opt in to the add-on, following our performance best practices, and providing a good user experience. unfortunately, the extent of unwanted add-ons installed through these methods has caused us to take action, but we’re confident that users who truly want such add-ons to be installed will opt in when Firefox prompts them.

You can try out these and other new features in Firefox Aurora starting next week.

2)Select "Override automatic cookie handling," and then select the "Block" option under "Third party Cookies." 3)Click the "OK" buttons on both windows. Mozilla Firefox and Safari follow up at a close second, and Internet Explorer is left in the dust by all three other browsers. Internet explorer 5.0 is on the backburner for me right now. 2)Try updating Microsoft Windows to fix Internet Explorer 6. It first appeared on the market in that year too. Amazingly here are the amazing notions apropos to internet explor. There is no perfection there. This is just what they require. In this article I am going to walk you through the steps of getting this done easily and quickly. The simplest fix for this is to make sure Internet Explorer is set as your default browser. I believe you might be wrong on that, but I'm tired of talking in respect to, internet explorer download.

Permanent link to this article: http://www.smart-ie.com/strengthening-user-control-of-add-ons/

Feb
22

Trustwave sold root certificate for surveillance

1329898328 77 Trustwave sold root certificate for surveillanceNEWS

Certificate authority Trustwave has admitted selling a digital certificate for a customer to eavesdrop on encrypted employee traffic. Software developer Mozilla is now considering whether to revoke trust in Trustwave’s root certificates.

Trustwave admitted selling the root certificate, which it has now revoked, in a blog post on Saturday.

“This single certificate was issued for an internal corporate network customer and not to a ‘government’, ‘ISP’ or to ‘law enforcement’,” said the blog post. “It was to be used within a private network within a data loss prevention (DLP) system.” Trustwave said that the subordinate root certificate was stored in a Hardware Security Module, a piece of encryption equipment which also generated SSL keys to re-sign intercepted traffic.

“No party had access to the re-signed SSL certificate private keys at any time, nor could they gain access to them,” said Trustwave. “This is what prevented the customer from being able to perform ad hoc issuance of certificate for any domain and use them outside of this hardware and infrastructure.”

one problem with using digital certificates as an online trust mechanism is that if a party manages to successfully hijack or create its own certificates, it can fool browsers that it is another entity on the internet.

on Wednesday Trustwave’s admission sparked a debate on Mozilla’s bug-tracking system, Bugzilla, as to whether Firefox-developer Mozilla should revoke trust in Trustwave for its actions.

“The most important detail to focus on, is that Trustwave knew when it issued the certificate that it would be used to sign certificates for websites not owned by Trustwave’s corporate customer,” said privacy expert Christopher Soghoian. “That is, Trustwave sold a certificate knowing that it would be used to perform active man-in-the-middle interception of HTTPS traffic.” a man-in-the-middle attack is when a third party eavesdrops on a communication by hijacking and relaying messages between parties.

Soghoian called for Mozilla to revoke trust in Trustwave’s root certificate, an action that could have serious consequences for Trustwave.

“With root certificate power comes great responsibility,” said Soghoian.” Trustwave has abused this power and trust, and so the appropriate punishment here is death (of its root certificate).”

Trustwave insisted that it had audited its customers physical and network security, and its security policies.

“The system was used only for routing internal corporate traffic and not in any other way,” Trustwave Trustwave’s vice president for managed identity and authentication Brian Trzupek said in the Mozilla discussion. “In addition, our on-site audit focused on physical security and controls around the appliances to ensure that the boxes could not be physically taken from the facility to be placed on other networks to route traffic there.”

Mozilla is considering whether to remove Trustwave’s root certificate from its certificate authority store, an action which would mean Mozilla products would not trust Trustwave certificates. For example, people using Firefox to visit a website with a Trustwave certificate would get an error message saying the site is not trusted.

“We’re still evaluating the reports from Trustwave, and have not yet decided on a course of action,” Mozilla said in a statement on Thursday. “In the interim, we are pleased to hear that this subordinate certificate is being revoked. We encourage any other CAs with similar certificates to follow Trustwave’s example of disclosure and revocation.”

Revocation in trust of a company’s root certificate or certificates can destroy the organisation. Multiple organisations revoked trust in DigiNotar after a hack attack, forcing the certificate authority into bankruptcy in September.

To gobs of pros, these are the matter of fact thoughts relating to internet explorer. The IE7 download package is 14.8 megabytes (MB) but if you're on broadband, it shouldn't be a problem. Try navigating to the website you have just added to the blocked list. It's called setting priorities. 5)Download and install the free versions of Spybot Search and Destroy (link in the Resources section) and Ad-Aware (link in the Resources section). There's no time like now as much as you might feel that I'm a couple of sandwiches short of a picnic. That is an ongoing situation or that is how to get over worrying relevant to window internet explorer. Then I went to the Internet and tried some suggested methods to remove toolbar. I'm not going to have noobs working against me on google internet explorer. At the bottom of this screen is where you would change the amount of days to keep history, if you change it to zero, then each new day the process tarts over. This is the time you diversified. Article Source:How to Fix Internet Explorer Script Errors Internet script errors occur when the web page maker's programming contains an error; an antivirus program or adware removal program detects spyware or adware, which causes the page to stop loading that component of the webpage; or a pop-up on a web page does not load because of the computer's security settings.

Permanent link to this article: http://www.smart-ie.com/trustwave-sold-root-certificate-for-surveillance/

Feb
22

Twitter Launches Ads For Small Businesses, Google, Facebook Track Users On Safari, Amazon Overtakes Samsung As #2 Tablet Seller

1329897140 47 Twitter Launches Ads For Small Businesses, Google, Facebook Track Users On Safari, Amazon Overtakes Samsung As #2 Tablet Seller

Twitter and Amex Launch Ads For Small Businesses. Twitter is making it easier for small business owners to set up business accounts and promote tweets. Partnering up with American Express, Twitter’s offering the first 10,000 eligible businesses $100 in Twitter advertising. Registration is open now, and more information is expected in March. –NS

Ford Starts Shipping App Creator Toolset OpenXC. Ford has begun shipping beta versions of OpenXC, a platform to create apps for its cars, to its partner universities and app developers. even as the platform makes its way to engineers, the U.S. National Highway Traffic Safety Administration has published their first set of safety guidelines for automobile makers intent on amping up the tech on car dashboards. –NS

–Updated 7:15 a.m. EST

Google, Facebook Tracked Users On Safari. Google and Facebook evaded Apple’s security settings its Safari browser to plant cookies in Mac computers and mobile devices, even when cookies were turned off, the Wall Street Journal reports. Google has said the advertising cookies did not track personal data, and were intended to provide services to users that were signed in. –NS

Amazon Overtakes Samsung As #2 Tablet Seller. With Amazon’s Kindle Fire launched in November last year, Amazon has overtaken Samsung as the second largest seller of tablet computers. The data comes from a research firm IHS, which says that Amazon shipped 3.89 million units last quarter, Bloomberg reports. Apple stays in the lead, shipping over half the tablets bought around the world. –NS

Early FLA Reviews say Foxconn Better Than Most. After his Foxconn factory visits, the president of the Fair Labor Association called the factory settings “tranquil,” with “first class” facilities and physical conditions that were “way, way, above average of the norm.” Emotional support to factory workers was perhaps one of the factors missing in the experience, president Aurent van Heerden told Reuters. A full report from the organization, whose audit Apple requested, is expected in March. –NS

–Updated 5:45 a.m. EST

[Image: Flickr user massless]

Yesterday’s fast Feed: new Mac OS X Mountain Lion let Loose, Facebook Launching Verified Accounts, Apple Responds To Contact Privacy Concerns

These files are called index.dat and they may be hidden by the system and will almost certainly be littered across your hard drive in a variety of folders. Now a days a lot of registry cleaners exist, Registry WInner is an excellent choice. We have to give greater scrutiny to the classics of internet explorer. That should be as clear as day. Download the missing file here: Unzip iertutil.dll file and save it to a USB or other writable media. To Delete Only Websites Visited This procedure will allow you to select the particular website or websites you would like to delete. Data Execution Prevention Error Internet Explorer Windows 7 Included Data Execution Prevention Internet Explorer 8 This article explains how to fix the Data Execution Prevention error that occurs on Internet Explorer 8 and Windows in general. I go for a lot of internet explorer to be put into perspective.

Permanent link to this article: http://www.smart-ie.com/twitter-launches-ads-for-small-businesses-google-facebook-track-users-on-safari-amazon-overtakes-samsung-as-2-tablet-seller/

Feb
22

Google’s tracking of Safari users could lead to FTC investigation

1329895959 61 Googles tracking of Safari users could lead to FTC investigation

Violations of a settlement with the FTC can lead to fines of $11,000 per incident. It’s unclear how many times Google may have circumvented Safari’s do-not-track protection; the browser ships with both iOS and Mac devices, and is available for PC users to download.

Google was “incredibly stupid” to slip tracking cookies into Safari, given that the company is under scrutiny by both the FTC and privacy advocates, said Justin Brookman, director of consumer privacy at the Center for Democracy and Technology. “I’d be very surprised if there was not some type of FTC action.”

An FTC spokeswoman didn’t immediately return messages seeking comment on the privacy allegations.

On Friday, Stanford University graduate student Jonathan Mayer published information about Google and three other companies that skirted Safari’s do-not-track preferences. In response, Google released a statement noting that the work-around used legal code and that the company had not intended to invade user privacy.

Even if Google installed tracking cookies inadvertently, that could lead to problems with the FTC, Bookman said. “Technological work-arounds to evade browser privacy settings are unacceptable,” he added.

Consumer Watchdog, a privacy advocate that has been critical of Google in the past, called on the FTC to investigate the company for unfair and deceptive business practices.

“They have been lying about how people can protect their privacy in their instructions about how to opt out of receiving targeted advertising,” said John Simpson, the group’s privacy project director. “Consumer Watchdog has asked the FTC to act because this clearly violates Google’s consent agreement with the commission.” The incident also shows the need for the U.S. Congress to pass do-not-track legislation, Simpson added.

Google has had several run-ins with privacy issues in the past, with Street View cars snooping on Wi-Fi networks, and sharing personal information on its ill-fated Buzz social-networking service—which resulted in last year’s FTC settlement.

“In its rush to gather more data on users to boost its marketing revenues, and fight off competition from Facebook, Google has sidelined the privacy implications,” said Jeffrey Chester, executive director of the Center for Digital Democracy, a privacy group. “There’s a pattern in Google behavior that reveals a company in hot pursuit of a user’s data.”

Chester rejected Google’s explanation that it wasn’t collecting personal data from Safari users. “They know very well that such behavioral targeting cookies are tied to unique individuals and reveal important personal information,” he said.

Assuredly, I have news for you, you don't have to have a perfect internet explorer. By virtue of what do cool kids scrape together A-1 private browsing internet explorer handbooks? Don? I will be reviewing three browsers - Firefox, Internet Explorer, and Safari. The viruses can be the reason why your Internet Explorer freezes up as they place invalid keys in your registry. It does not distinct itself from dangerous and safe materials, so even if you accidentally click on the ads with virus, this one accidental click will let your computer to receive all the viruses and possible malwares. Click the "Options" button and the URL of Windows Update should be present. If you upgrade IE, uninstall, reinstall, or download a version from Yahoo, Google, or Adobe, then you may lose your Windows functions after you shut down your computer.

Permanent link to this article: http://www.smart-ie.com/googles-tracking-of-safari-users-could-lead-to-ftc-investigation/

Feb
22

Free tool promises to block tracking cross-browser, 4x speedup on some sites

1329894727 14 Free tool promises to block tracking cross browser, 4x speedup on some sites

A newly released free tool, “Do Not Track Plus” (DNT+) promises to go beyond the standard private browsing settings that are available in most browsers in its ability to block websites from tracking you, while at the same time reducing page load times by as much as four times, on some sites.

Follow me on Twitter and on Facebook and on Google+

Released in version 1.0 on Thursday (it had been released in beta form last year, but for Firefox only. that version was downloaded more than a million times, according to developer Abine. The new version is cross-browser and cross-platform and works wtih Internet Explorer, Firefox, Chrome, and Safari (sorry Opera fans). It’s also cross-platform, running on both Mac OS and Windows.

Advertisement

As a result of its blocking, you’ll see some ads blocked — not all, though. And Abine says that unlike most anti-tracking tools, DNT+ allows users continue to use social-sharing buttons even though the software blocks social tracking.

Once installed, DNT+ allows users to see who is tracking them on each website they visit. it currently blocks 580 different tracking technologies and more than 200 tracking companies. Users can set tracking to be blocked or allowed on a per-site basis.

You can download the app from Abine’s website. it uses C|Net’s Download.com site, and will redirect to an appropriate version for your browser. Indeed, that’s a slight drawback: although it works on four browsers, you have to install an app / plug-in / extension for each one.

One caveat: if you install the Chrome extension, it will warn you after installation that “due to a Chrome limitation,” DNT+ doesn’t work as well on Chrome as on other browsers, but that the next release of Chrome (not DNT+, apparently) will remedy that.

The tool will automatically update to block new tracking technologies and companies.

As far as Firefox and Safari are concerned, I tend to believe that Firefox is easier, thanks to its various add-ons (applications that you can add by downloading from Firefox websites). Imagine it. This is simple work crews and this is right before you whenever some of us have figured what works best with internet explorer. Mozilla Firefox ?Click on Tools? You must be running one of these browsers when you download the file to install the program. If you want to enjoy the benefits with affiliate-branded versions of Internet Explorer such as toolbars or other add-ins, download the feature as a standalone, rather than the Internet Explorer version with the add-in together. The remainder of the installation procedure is automatic. 4)Single-click the Java plug-in item and select "Enable." Repeat the process for each Java plug-in listed. I finally got sick of the little update icon bothering me, so I downloaded it. Average men and women don't have a clue with reference to google toolbar for internet explorer 8 if you'll remember internet explorer 5.0. ??You might get a pop up window to Authenticate. If you do choose to explore these free options, I highly recommend that you keep your virus definitions up-to-date, and limit your surfing and communication to non-secure matters while using them.

Permanent link to this article: http://www.smart-ie.com/free-tool-promises-to-block-tracking-cross-browser-4x-speedup-on-some-sites/

Feb
22

Mozilla ships Firefox 10, relieves add-on updating pain

1329893527 41 Mozilla ships Firefox 10, relieves add on updating pain

Firefox 10, sixth in the line of updates that have been rolling off the development line every six weeks since mid-2011, fixed half a dozen flaws rated “critical,” Mozilla’s highest threat ranking, and another two labeled “high.”

One of the notable vulnerabilities addressed in Firefox 10 could open users to cross-site scripting (XSS) attacks because the browser did not properly run a security check when calling untrusted scripting objects, said Mozilla.

“The fix enables the Script Security Manager (SSM) to force security checks on all frame scripts,” an accompanying advisory noted.

Mozilla also fixed several bugs that caused Firefox crashes, including one traced to a recent Java update that Apple shipped to users last year.

Although Mozilla touted several new features in Firefox 10 it thought were important to developers, the most noticeable change to users is the browser’s ability to automatically mark nearly all add-ons as compatible with each upgrade.

Firefox users have complained about incompatible add-ons since Mozilla shifted to the faster release schedule last summer, as add-on developers have been slow to revamp their code or tag their extensions as suitable for the newest edition.

Mozilla began automatically marking add-ons as compatible back in March 2011 when it launched Firefox 4, but limited that move to extensions distributed through its own website; Firefox 10 does the same for all add-ons, including those not available from Mozilla.

Automatic add-on compatibility marking is one component Mozilla has identified as necessary for a “silent update” mechanism to match that in Google Chrome, which upgrades itself without any user action.

Other pieces, however, are not ready: the final part of the service is now slated to appear in Firefox 13, set to release in early June, or six weeks later than Mozilla’s estimate when it shipped Firefox 9 last month.

Mozilla also released Firefox 3.6.26, the latest security update for the two-year-old browser, to patch five vulnerabilities, four of them critical.

Firefox 3.6 is closing on retirement: Mozilla has said it will stop shipping security updates for the browser after April 24.

To replace Firefox 3.6—which many enterprises retained when they balked at upgrading every six weeks—the company also kicked off the first edition of Firefox ESR (extended support release).

Firefox 10 ESR will be supported with security updates through its 54-week lifespan, but its user interface and feature set will not change during that stretch. Mozilla will upgrade ESR users to a new edition starting November 20, 2012.

Windows, Mac and Linux editions of Firefox 10 can be downloaded manually from Mozilla’s site. People running Firefox 4 or later will be offered the upgrade through the browser’s own update mechanism.

The next version of Firefox is scheduled to ship March 13.

I found a clip with reference to internet explorer on YouTube as though I believe folks appreciate install internet explorer 7 more than they do uninstall internet explorer 8. One of the nicest features is the use of less resources on your computer while using multiple windows, less taxing on your computers memory and CPU. This is a list of questions you should ask yourself and that crystallized my thoughts. You can sort this list according to date, site or most visited. Nothing is entirely free, however that comes close. I don't want to discuss this morning if there were no limits. I think internet explorer was a success for a couple of reasons.

Permanent link to this article: http://www.smart-ie.com/mozilla-ships-firefox-10-relieves-add-on-updating-pain/

Feb
22

Opinion: Apple moves toward digital unity with Mountain Lion – Mac – Macworld UK

1329892344 37 Opinion: Apple moves toward digital unity with Mountain Lion   Mac   Macworld UK

Apple surprised the tech world last week by pulling the curtain back on its latest desktop/laptop operating system: OS X Mountain Lion. The final version will be released this summer, but the developer preview unveiled on Thursday shows that the upcoming OS picks up where OS X 10.7 — code-named Lion — left off. The coming update incorporates even more popular features from iOS , the software which runs the iPhone, iPad and iPod touch.

The upgrade — pricing not yet announced — will be available only as a download from the Mac App Store. Apple won’t sell it on disc or on a thumb drive, as it did with earlier versions of OS X. That’s a change from past practice and gives Apple another way to showcase its fast-growing App Store.

Another change: Apple execs quietly previewed Mountain Lion first with a select few journalists and bloggers. their early-bird reports last week led to a sudden tsunami of information about Mountain Lion and what it offers: iOS-like Messages, Reminders, Notifications and Game Center, AirPlay Mirroring, and a new security effort called Gatekeeper.

It was clear with the release of Lion last year that the Mac OS X and iOS feature sets were morphing; this year, that trend continues with Mountain Lion. The big question for users then becomes whether this melding of features works, whether the iOS-inspired apps and processes fit within the context of a desktop operating system.

For better or worse, the future of Apple’s desktop OS is full of iOS-esque flourishes, changes that reflect a new Apple way of thinking and indicate where Apple is going.

iCloud integration

The most important element of the new OS is deeper integration with iCloud, the collection of services that stores your data to Apple’s servers automatically and then syncs that data across all your devices. on the iPhone and iPad, every photo, document, bookmark, contact — everything — gets backed up. And through iCloud, it gets automatically sent to all your Macs/PCs, iPhones or iPads. to put it another way, iCloud shifts the onus of keeping data organized and up to date on multiple devices from the user to the machine. It’s invisible. And it just works.

For example, if I see an app I like in the App Store, I can buy it and within a few moments that app is already on my iPhone, my iPads, and my various Macs. When I take a picture on my iPhone, by the time I fire up iPhoto on the Mac, it’s already waiting in Photo Stream on all of my devices. iCloud makes living with multiple devices far easier because data is automatically dispensed across them all.

Last week, Apple CEO Tim Cook reaffirmed that iCloud is not a strategy with a specific shelf life, but a core part of all future Apple products, just as the Digital Media Hub strategy motivated Apple decisions over last dozen years or so. while iCloud integration on the Mac is not yet as comprehensive as it is in the iDevice lineup, Mountain Lion moves closer to real integration with Apple’s online services.

The iCloud focus is apparent right away. After downloading and installing Mountain Lion, an iCloud login/sign up is one of the first things to greet you following a clean install. if you already have an iCloud account, your email, contacts, calendars, FaceTime info, Safari bookmarks and Reading List links are automatically configured. once the Setup Assistant is complete, a virtual visit to the Mac App Store allows you to easily install any apps you’ve already bought.

With iCloud and a centralized location for app installs, you can be up and running on a new machine with far less effort than before. (More on this in a minute.)

More details on iCloud

Much of Mountain Lion’s iCloud integration isn’t new to Apple products, it’s just implemented in a more refined way. for instance, updated applications will feature enhanced Open/Save options that now include iCloud. this allows documents created on one device to be automatically available on other devices for editing, viewing, or sharing. before now, you saved documents on your desktop, then had to upload them to the cloud yourself, then go to the other devices and download them yourself.

OS X Mountain Lion looks much like its predecessor, Lion, though there’s a new desktop wallpaper.

In Mountain Lion, the Open/Save dialogue box sports two options for saving: iCloud or on my Mac. When on my Mac is highlighted, a standard window allows for traditional file system navigation, Spotlight search and all other options you’d expect from a typical OS X Open/Save prompt. Selecting iCloud, however, replaces the file system window with the iOS linen background and large document icons. (It’s similar to Pages on an iOS device.) From the large icon displays, you can flip through multi-page documents, and drag and drop documents onto other icons to create folders, just as you would on the iOS home screen.

If no documents are available, you can drag and drop documents to the Open/Save window to make them accessible via iCloud; they’ll be moved from the Mac into iCloud automatically. You can also move documents to iCloud by clicking the little arrow next to a document’s title, choosing move to and selecting iCloud as the location. just like that, your documents are available to any of your Apple devices with an internet connection.

Right now, saving to iCloud or to the Mac is an option, but it looks to me like Apple really hopes to push iCloud saves as the default. I imagine many self-respecting tech geeks will be annoyed by that prospect — oh, the Geek Rage will flow! — as this step is yet another in Apple’s War on the File system As We know it. for everybody else, though, this will be a life- and time-saver. Having your documents always available no matter which device you’re using, via a user-friendly interface, will be more important than the inability to directly traverse a file-system; if a computer is lost/stolen/crashes, documents saved to iCloud will remain secure and safe. Yes, other services like Dropbox already do this, but the tight integration with Mountain Lion will encourage its use, and the 100 million+ users already on iCloud illustrate its potential reach.

More iOS bits arrive

Mountain Lion gets other specific iOS app equivalents that are already designed with iCloud syncing in mind. Specifically, to-do’s and reminders have been separated from Mail into the new Reminders application; data entered or removed automatically is transferred across devices. Notes gets a similar treatment; and Messages picks up the iCloud sync, too, implemented in ways that solve the problems inherent with Messages’ original siloed nature regarding multiple devices.

For instance, do you ever get a message on your phone and wish you could reply from the computer you’re on? with Messages, you’ll be able to do just that. Messages works on the Mac just as it does on iOS, by using Apple’s servers to relay encrypted texts, images, or movies while avoiding SMS rates on mobile devices. Every message is synced across your devices, so you no longer have to be on a specific device for a chat conversation.

Already available on iPod touch, iPhone and iPad, Messages replaces iChat on the Mac, and the main chat window sports a chat interface taken directly from the iPad Messages app. The new interface takes up more screen real-estate than iChat, which is annoying, but Messages gains FaceTime integration, which is not. And the fact that all messages are synced across devices is convenient. You can began a conversation on your desktop Mac, then later take part in the same conversation using Siri on an iPhone.

The mantra is pretty simple: from any device, to any device.

Notifications

iOS 5 brought to Apple’s mobile devices the Notification Center. In Mountain Lion, Mac users play a bit of catch-up with the addition of system-wide notifications. As in iOS, notifications slide out from the menu bar as banners that fade away or as dialogue boxes you must interact with to dismiss; unlike iOS, the notifications on the Mac are justified to the right of the screen. a notification banner will appear for five seconds before sliding off of the screen, exit stage right. The Notification menu icon now resides where the Spotlight icon used to be; Spotlight moves a space to the left in the menubar.

Pressing the Notification button causes the desktop and on-screen windows to shift to the left, revealing the Notification Center. Notifications appear as a list organized by application on the gray linen background made familiar by iOS, and the notification menu icon has a blue in the center when there are new alerts.

The Notifications window slides out from the right side of the screen.

Other than that menu icon, which is unique to Mountain Lion, the entire interface is lifted pretty much wholesale from iOS. The interesting bit is that the interactive elements of Notification Center in OS X feels better on the Mac than on smaller screen devices. why? Because the elements in Notification Center are perfectly sized for mouse clicks; sometimes it takes me a couple of taps to engage the same widgets in Notification Center on an iOS device.

One thing I’d love to see added to Notification Center would be a section to track downloads and file transfers. ever since Mac OS X supported Spaces and multiple desktops, locating the Finder’s progress bar is sometimes difficult for me; Notification Center looks like the perfect location to consolidate those types of activities.

AirPlay mirroring

One of my all-time favorite iOS features finally makes it as a system-wide service to the Mac: AirPlay Mirroring. AirPlay allows any iOS device to broadcast video, audio or both to an AppleTV-equipped HDTV. on iOS devices, videos, games, music, pictures, presentations, podcasts, apps — literally, anything — can be broadcast to an AppleTV, wirelessly, at 720p resolution and 5.1 surround sound, at the push of a button with no configuration.

While AirPlay was limited to iTunes in previous versions of OS X, Mountain Lion adds AppleTV support in the Displays system preference. like iOS, one can configure the AirPlay icon to appear when an AppleTV is located on the same network; and like iOS, the Mac will be able to mirror everything on screen (including audio).

Why is this a big deal now that this function is accessible outside of iTunes? Much has been written about Apple working out content deals with networks/cable providers/content creators to have content available on the iTunes store. but with AirPlay, that’s no longer necessary. most cable companies and networks now offer their shows online — think HBO Go, Hulu, etc. — and with AirPlay, you just call up whatever you want to watch on your computer, when you want it, and watch it on your TV via AirPlay. No content deals are necessary, no new TV is needed, and the whole ecosystem circumvents the current cable provider setup — the sole exception being the need for broadband.

AirPlay in Mountain Lion could cause major disruptions down the line for several industries.

Gatekeeper

One of the more publicized changes in Mountain Lion is a new paradigm in which the operating system handles security, specifically regarding applications. currently, OS X can install and run any application from anywhere; a warning pops up the first time an app is launched but that’s all that stands in the way of that app running.

With the Mac user base growing, so, too, is the danger of malware. Granted, Mac Trojans and viruses are still a tiny blip compared to the malware written for Windows machines on a daily basis, but it’s good to see Apple being forward-looking in its attempts to bolster system security, even if it means greater reliance on the Mac App Store. The App Store for OS X works like the iOS app store: curated, Apple-approved apps make it a safe place to purchase software without having to worry about malware.

Now comes Gatekeeper . Briefly, Gatekeeper is a new security paradigm in which one of three types of security modes are implemented. The first mode allows applications downloaded from anywhere to run — it’s an option literally called anywhere in the “Allow applications downloaded from:” section of the Security Preference. this will let the Mac behave as it does now, with app installations from any source allowed with the proper permissions, at the user’s discretion.

The second option allows for apps to be installed if they come the “Mac App Store and identified developers.” this option allows digitally signed apps to run on your Mac. a digitally signed app gives Apple the right to revoke privileges for troublesome apps and track down responsible parties, as each signature is unique to developers. Applications that aren’t signed won’t be able to run when this mode is enabled.

The last option only allows apps downloaded from the Mac App Store to install or run. That’s as self-explanatory, and as secure, as you can get.

Despite concerns from some that Gatekeeper goes to far, or doesn’t go far enough, I like the options. They’re a useful compromise for IT departments already accustomed to dealing with malware on the Windows side; once apps necessary to business become “Gatekeeper aware,” so to speak, concerns about Mac malware or untrusted apps will be one of the last things on the mind of IT staffers. Granted, it will take some time for app makers to climb on board, but Gatekeeper should start that movement.

Mountain Lion’s Security & Privacy preference pane now includes Gatekeeper, which is designed to head off malware by setting limits on which apps can run.

Share Sheets arrive

Apple has made social sharing in Mountain Lion more integrated with Share Sheets, which are built in to home-grown applications like QuickTime, Safari and Notes and allow you to easily share what you’re looking at with others. (Third-party developers will need to rewrite their apps to incorporate the feature, but its usefulness should be readily apparent, especially for Twitter users.)

Every app’s Share Sheet has a different set of functions, depending on context. for instance, clicking on Safari’s Share Sheet button allows you to add a Web page to the Reading List, to your Bookmarks, or to share it via email, message or tweet. Interestingly enough, Facebook isn’t an option in most apps. You won’t find Facebook under the system Preference for Mail, Contacts & Calendars (where you will find Twitter). but if you look under the Share menu in a QuickTime window, you can share your movie to FaceBook. The same is true in iPhoto’s Share Sheet.

Given the explosion in social media, it’s a smart move to incorporate easy ways to share digital content. I’d expect to see more of this as OS X develops.

Odds and Ends

Game Center: Apple has also added Game Center to Mountain Lion. Game Center is a centralized location that on iOS devices provides easy access to global game score and leader-board tracking; it also allows you to see what games friends are playing and how well they’re doing, among other details. Game Center’s support for turn-based and head-to-head games now comes to the Mac, allowing you to play supported games on your Mac against people playing on iOS devices.

Notes: In Lion and earlier versions of OS X, the Notes app was always bound to Mail; but in iOS, Notes has been a standalone app. When Mountain Lion is released, Notes will become a standalone application with an interface lifted from the landscape view on the iPad. (Similarly, to-do’s and reminders get the standalone app treatment, too, with their appearance drawn from the iPad.)

Safari: Apple’s Web browser gets a few tweaks, too, including a new address bar that handles searches as well as url addresses. Safari also gains a “Do Not Track” option, Apple’s response to growing privacy concerns among online surfers.

Software Update: In Mountain Lion, software updates are now handled through the Mac App Store, and Notifications appear when updates are available for either the operating system or apps downloaded from the Mac App Store. this will surely raise awareness of the App Store and the apps it offers.

Final thoughts

Like Lion before it, Mountain Lion continues the merger of iOS and OS X features in a way that helps provide a consistent experience across Apple devices. In concert with iCloud, Apple is moving to make things easy to use no matter which device you have in hand, an iPhone or a iMac, an iPad or a MacBook Air. The main difference revolves around each device’s interaction method: mouse and trackpad for the Mac; touch screen gestures on the iPad and iPhone.

There’s been a lot of talk about whether OS X and iOS are becoming one. Clearly, they overlap and share features, but they’re not the same, nor should they be. Apple won’t follow the path Microsoft is taking with Windows 8 and its new Metro interface. sure, Apple will continue to migrate features between iOS and OS X on a case-by-case basis, cherry-picking features that logically work across devices, regardless of the underlying OS. (I wouldn’t be surprised to see Siri — the voice activated assistant that’s been such a hit on the iPhone 4S — show up one day in OS X.)

What Apple is doing is creating a consistent ecosystem for your digital world, from media creation to distribution to viewing and sharing. Start something on one device, finish it on another, whether you’re writing a document, sharing a link, listening to music or making a video. That’s what makes iCloud increasingly important. it takes OS X where computing really needs to go: toward a world of unified data and interface consistency.

Notes is now a standalone app and is no longer built into the Mail program.

I love internet explorer. The most ordinary consume of a cake is to accumulation an individual ID. When you are finished, click on the OK button on the other side of the Internet options box, the Internet options box will disappear. Save the resulting file--"iepreview.msi"--to the desktop, then double-click it when the download is complete. Click "Manage add-ons." In the menu next to "Show:" click "Downloaded ActiveX Controls (32 bit)." In the list marked "Disabled" click "Shockwave Flash Object." Click the radio button next to "Enable" and click "OK" twice to close Internet Options. Microsoft took a lot of action to integrate Internet explorer fully in windows. It is my opinion that these are the essential facts as it concerns internet explorer.

Permanent link to this article: http://www.smart-ie.com/opinion-apple-moves-toward-digital-unity-with-mountain-lion-mac-macworld-uk/

Feb
22

Google, Microsoft butt heads over IE privacy skirting

1329886341 22 Google, Microsoft butt heads over IE privacy skirting

Google yesterday countered Microsoft’s contention that it’s skirting Internet Explorer’s privacy protection, saying it’s “impractical” to comply with IE’s rules.

One privacy researcher said there was enough blame to apportion to both Google and Microsoft.

The latest dustup over Google’s privacy practices began early Monday, when Microsoft’s top executive for IE accused Google of circumventing the browser’s default privacy defense so that Google’s ad network could track IE users’ online movements without their permission.

Microsoft’s charges were similar to ones made last week after the Wall Street Journal said Google was sidestepping the privacy protection of Apple’s Safari, which is bundled with Mac OS X and is the only authorized browser on the iPhone and iPad.

On Monday, Dean Hachamovitch, who leads the IE team, said Google was getting around Microsoft’s browser, too.

“Google utilizes a nuance in the P3P specification that has the effect of bypassing user preferences about cookies,” Hachamovitch said in a blog post .

P3P, for “Platform for Privacy Preferences,” is a 10-year-old Web standard that websites can use to describe how they use cookies and user information. By default, IE blocks all tracking cookies from sites that do not present a valid P3P compact policy (CP), a string of codes sent to browsers as part of the HTTP header.

Google, said Hachamovitch, was gaming P3P to trick IE into accepting tracking cookies, even though Google’s Compact Policy Statement does not spell out the search giant’s intent. “Google bypasses the cookie protection [in IE] and enables its third-party cookies to be allowed rather than blocked,” Hachamovitch charged.

Google returned volley today.

In a statement issued by Rachel Whetstone, senior vice president of communications and policy, Google asserted that it was “impractical to comply” with IE’s P3P request because doing so prevented sites and services from providing features, including sign-in to multiple Google services.

“Today the Microsoft policy is widely non-operational,” said Whetstone, citing a 2010 report that claimed more than 11,000 websites were not issuing valid P3P policies. “The reality is that consumers don’t, by and large, use the P3P framework to make decisions about personal information disclosure.”

Whetstone went on to say that Google has “been open about our approach” to P3P, and said Microsoft itself had recommended using invalid P3P codes as a work-around for a problem in IE. “This recommendation was a major reason that many of the 11,176 websites provided different code to the one requested by Microsoft,” she said.

The study referenced by Whetstone was conducted by a team at Carnegie Mellon University’s CyLab and published in September 2010 ( download PDF ).

In the report, the researchers noted the widespread circumvention — some apparently purposeful, some accidental — of IE’s cookie-blocking with malformed P3P compact policies. among the companies involved, the report named Amazon, Facebook and Google.

“I think there is plenty of blame to go around,” said Lorrie Faith Cranor, an associate professor of computer science at Carnegie Mellon, the director of its CyLab Usable Privacy and Security Laboratory and the faculty member who lead the team that produced the 2010 report.

She said Microsoft was partly to blame for not complaining about companies circumventing its privacy policy and not taking steps to modify IE. Cranor reported her team’s findings to Microsoft in the fall of 2010, but she did not receive any formal reply. however, Cranor said that shortly afterward, Microsoft scrubbed its support site of the workaround recommendation Whetstone mentioned.

“But organizations have some responsibility for using a technical trick to circumvent the IE privacy controls,” Cranor said, referring to Google, Facebook and others.

She also was suspicious of Google’s claim that P3P was impractical, noting that the company’s DoubleClick ad network does present valid CPs to IE. “They figured out how they worked there,” she said. “I’m skeptical that they couldn’t do the same elsewhere.”

Others have pointed fingers at Microsoft more than at Google.

“Microsoft’s posting, given what was already long known about IE and P3P deficiencies in these regards, seems disingenuous at best, and certainly is not helping to move the ball usefully forward regarding these complex issues,” said Lauren Weinstein , a privacy advocate and co-founder of the People for Internet Responsibility group.

While Cranor said P3P was “unhealthy, perhaps even dead” at the moment — echoing Whetstone’s assertion — she said the standard had been useful in advancing the Web privacy debate. and she wasn’t ready to give up on P3P.

“Nothing exists that is better,” she said of P3P. “There’s nothing fundamentally wrong with P3P. The problems with it are not technical, but a lack of interest in using it.”

Cranor chaired the P3P working group, and has written a book on the standard.

Although “Do Not Track,” a browser-and-website privacy initiative that the Federal Trade Commission (FTC) backs — and that Microsoft supports in IE9 — has gotten much of the attention recently, P3P remains a better solution, Cranor argued.

But that’s only when it’s enforced.

“It’s more readily enforced than do Not Track, because it forces a website to declare its privacy policies. But it’s really important for regulators to enforce the policies,” Cranor said.

And that’s not happened.

“Once people saw that there were bugs in P3P that could be used to circumvent privacy policies, and that when they did, nothing happened, then all bets were off,” said Cranor.

Yesterday, Microsoft’s Hachamovitch told users how to set IE to block all cookies from a specific website, such as Google, and offered a Tracking Protection List to IE9 users “in the event that Google continues this practice.”

He also confirmed that Microsoft is re-considering its use of P3P.

“We are investigating what additional changes to make to our products,” Hachamovitch said. “Privacy advocates involved in the original [P3P] specification have recently suggested that IE ignore the specification and block cookies with unrecognized tokens. we are actively investigating that course of action.”

Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer , on Google+ or subscribe to Gregg’s RSS feed . His email address is gkeizer@computerworld.com .

See more by Gregg Keizer on Computerworld.com .

Read more about privacy in Computerworld’s Privacy Topic Center.

Only IE7 allows you to do this, so make sure you're opening IE7. We need to inspect this most constructive parts of internet explorer. The problem is, that these "cache" files are not deleted when you clear your Temporary Internet files! This is your week. The best versions of this browser are only available on the latest versions of Windows. Where can coaches recognize estimable internet explorer 32 bit download seminars? This is how to stop being nervous too often in order that whatever download internet explorer 6 you choose, make certain your internet explorer is conducive to that. I am getting it done. Lucky for me this using this is that way. IE9 also won't support Windows XP, something that isn't going down too well. How to stay spyware-safe Here the major-role of "genuine" Custom Internet explorer (IE) toolbar Development Company is seen.

Permanent link to this article: http://www.smart-ie.com/google-microsoft-butt-heads-over-ie-privacy-skirting/

Feb
22

Security Researchers: ‘Did Google Pull a Fast One on Firefox and Safari Users?’

1329885138 79 Security Researchers: Did Google Pull a Fast One on Firefox and Safari Users?

Social engineering comes in all flavors, from white hats pen testing enterprise security to plain old criminals — who happen to play in the cyber world — so cyber criminals who want you to click on a link for a drive-by-download, otherwise convince you to download malware, or who use phishing attacks to bait you into believing lies and inputting vital life, sensitive business, or financial information. It is that brand of lowlife conman and type of being maliciously tricked that makes cyber surfing potentially unsafe. All of the major web browsers have some sort of protection built in. Google’s Safe Browsing API is used by Chrome, Firefox and Safari. Microsoft uses Application Reputation. Google recently updated its Safe Browsing mechanism and then released Chrome Beta to improve “speed and security.” But in regard to the Safe Browsing API, NSS Labs, an independent security research and testing firm, published a new report, “Did Google Pull a Fast One on Firefox and Safari Users?”

NSS Labs analysis states, “At the end of 2011, Chrome’s protection rate steadily climbed to just over 50% before suddenly falling back to 20%. at the same time, Firefox and Safari’s block rate moved in the opposite direction. Chrome, Firefox and Safari all use Google’s Safe Browsing API, and Google has publicly stated that it has not withheld data from their Safe Browsing feed. so what should end users make of the results?”

While Google claims that the new “Safe Browsing” protocol has nothing on backend that that differs in proprietary protection, the NSS Labs Findings [PDF] state, “Despite claims to the contrary, Google has developed proprietary functionality via Safe Browsing to block malicious downloads. This functionality is not available to the other Safe Browsing API v2 browsers (Firefox and Safari)…. Google and Mozilla agreed on terms of their search agreement December 20, 2011. on December 21-22, 2011 NSS Labs observed a reorientation of protection whereby proprietary protection offered by Chrome dropped dramatically while shared Safe Browsing protection within Chrome, Firefox and Safari increased. While these events may not be related, the timing raises questions.”

This is one of the graphs included in the NSS Labs report “Did Google Pull a Fast One on Firefox and Safari Users?”

You can decide what you make of that as NSS Labs also claims that “Internet Explorer 9 remains the most effective at blocking traditional malware downloads (a.k.a. social-engineered malware).” Furthermore, “while NSS does not recommend switching browsers based on the results of these tests alone, if you currently have a free choice of browser then Internet Explorer 9 offers the most comprehensive protection from these particular threats.” Alrighty then, but keep in mind what a Mobile Mozilla Firefox coder, Gian-Carlo Pascutto, said about Microsoft. “False positive control is an important part of effective malware detection. Internet Explorer flags many malware sites, but it also flags legitimate sites, undermining the true effectiveness.”

Meanwhile over at Boing Boing, Adam Levin, the chairman and cofounder of Credit.com and Identity Theft 911, took aim at Google’s Privacy Policy — more specifically, the section about sharing user info “for legal reasons” such as “meet any applicable law, regulation, legal process or enforceable governmental request.” Levin wrote:

What exactly constitutes an “enforceable governmental request?” This sentence should read: “We will share information with a Governmental entity only when presented with a valid search warrant issued by a court of competent jurisdiction.” Such a provision would make it obvious that by giving information to Google, you do not intend to waive your constitutional rights, and it would make it clear that despite the fact that your information was shared willingly with a private sector entity, you reasonably retained an expectation of privacy against Government intrusion. If everyone’s privacy policy had language of this type, sooner or later every court — and every legislature — would remember all that stuff about the Fourth Amendment.

Times are hard in this economy. what is the price you put on your privacy? Google believes it is a maximum of $25. would you sell your privacy soul for $25? Well if you’ve given up on privacy completely, then Google has a new program called Screenwise in which you surf the web on Chrome and you give up the right to privacy. In return, Google will give you $5 on a Amazon card for signing up, then another $5 Amazon gift card code every three months up to $25. you add a browser extension to Chrome and it tells Google, and “panel management partner Knowledge Networks,” everything about the “sites you visit and how you use them” in order to help make Google better.

Like this? Here’s more posts:

Follow me on Twitter @PrivacyFanatic

Permanent link to this article: http://www.smart-ie.com/security-researchers-did-google-pull-a-fast-one-on-firefox-and-safari-users/

Older posts «

» Newer posts