Mozilla, Google Patch Browsers Before Hacker Fest

Google and Mozilla have been preparing for the Pwn2Own contest by patching their browsers. This is in anticipation to the contest, where hackers congregate to find and exploit vulnerabilities, especially in browsers. The same contest in the past had hackers holding on to existing but undiscovered vulnerabilities they knew about until the contest, when they exploited the same to save time. It’s little wonder that the Internet majors have patched up their browsers, as Google had paid $1,000 for their troubles last year. Google had also announced a $20,000 reward last month to anyone who can compromise its Chrome browser, which wasn’t be exploited in the last contest.

Google was the first to release a patch fixing 19 flaws in the Chrome browser; of which three bugs were classified as “medium” while the rest were marked as “high” risk vulnerabilities. This was followed by Mozilla publishing fixes for 10 security flaws in Firefox that included eight rated “critical,” while the remaining two were rated “High” and “Moderate”. One of those was particularly malicious, with the hackers being able to code a JPEG image that could save malicious code onto the system memory.

Speaking on the vulnerability, Mozilla warned its users, “Security researcher Jordi Chancel reported that a JPEG image could be constructed that would be decoded incorrectly, causing data to be written past the end of a buffer created to store the image. An attacker could potentially craft such an image that would cause malicious code to be stored in memory and then later executed on a victim’s computer.”

The Pwn2Own hacker contest has been an annual event since 2007, where hackers are encouraged, and even paid to compromise software, computing platforms and web browsers. However, it’s nothing illegal. The event sponsor pays reward money to the hacker and it in turn profits by alerting the vendors of vulnerabilities in their software/OS. The browsers targeted include Firefox, Internet Explorer, Chrome and Safari. Opera hasn’t been targeted because of the lack of widespread usage and the fact that the contestants use the browser for the same reason.

Successful hackers are asked to sign a confidentiality agreement regarding the vulnerabilities, and the vendors are free to patch their code with the information on vulnerabilities provided the sponsor. Think of this as a monetised form of ethical hacking, and everyone profits at the end of the day.

Epic: first web browser for India launched

Hidden Reflex, a Bangalore based software startup, has launched a browser targeted at Indian audiences: Epic.

The browser has been created by a team of Indian engineers on the open-source Mozilla platform, it said in a statement.

Any internet user can now download the browser for free by logging onto the website http://www.epicbrowser.com “Epic provides a uniquely Indian browsing experience. Epic’s India sidebar supports Indian content by providing users access to the latest national and regional news from popular publications, live television channels, videos, stock quotes, live cricket scores, top music albums, and local events”, it said.

Users can choose from 1500+ customized Indian themes and wallpapers ranging from freedom fighters to famous Bollywood and regional film stars. Writing in Indian languages is supported throughout Epic. Users can instantly write in Indian languages on any webpage or in Write, Epic’s free built-in word processor. Twelve Indian languages are currently supported, the statement said.

Free antivirus scanning and healing is built into Epic, while another security measure warns users when they’re about to visit potentially dangerous websites.

Mozilla Releases Firefox 4.0 Beta

Mozilla has released the first beta of its Firefox 4.0 web browser based on the Gecko 2.0 Web platform layout engine. Obviously, all the add-ons you’ve been using with the Firefox 3.7 version won’t work on with the new Firefox 4.0 beta. This new 4.0 beta version of the web browser mainly revamps the looks and brings a sizeable number of features that include WebM video format and HTML5 support.

The first noticeable feature of this new Firefox 4.0 beta is that all tabs would be visible on the tab. However, this is visible for Windows based OS users only. We believe that the visual delight would slowly appear for the Linux and Mac OS X versions of the web browser when the final build of Firefox 4.0 releases. The new significant features included in the Firefox 4.0 beta are:

• Add-ons Manager: More space to efficiently manage your favorite add-ons, plugins and themes.
• HD Video: The future WebM format is supported and promises HD-quality hardware accelerated HTML5 video on the web.
• HTML5 Support: Better HTML parsing, support for HTML5 form controls and also runs the latest web apps based on HTML5 such as Google’s Gmail and Yahoo’s Mail interface for the mobile phones.
• Full WebGL support for in-browser 3D rendering.

Apart from these features, the new Firefox 4.0 beta also promises performance improvement and the necessary security improvements to protect browser history.

Download the Firefox 4.0 beta for Windows, Linux or Mac OS X from here.

Nokia N900 handset soars into Indian market

Nokia has news for those looking out for a mobile computing solution that’s easy to fit into a pocket. Nokia has brought the N900 smartphone to Indian shores. The handset flaunts a high resolution 3.5″ WVGA touch screen and full slide-out QWERTY keypad for comfortable typing.

The device is fitted with a 5MP camera that boasts of Carl Zeiss optics and dual LED flash. Users can enjoy multiple connectivity options like access to 3G networks, Ovi services and apps like Nokia Maps, messaging, IM, Ovi Files through the Ovi Store. This phone allows access to e-mail, social networking sites, music, websites, images, and more. It provides users with memory of up to 32GB that can be expanded by up to 48GB through a microSD card.

“Mobile computing has undergone a substantive evolution owing to changing consumer needs. Technology enthusiasts and mobile workers today seek much more from their mobile device more power, more ability, enhanced functionality and constant connectivity,” affirmed Jasmeet Gandhi, Head of Product and Services Marketing, Nokia India, while commenting on the N900’s unveiling.

Apart being powered by an ARM Cortex-A8 processor, the handset offers up to 1GB of application memory and OpenGL ES 2.0 for graphics acceleration. Users can switch between applications and access running content through the dashboard. The phone allows the home screen to be customized with favorite shortcuts, widgets and applications as per user requirements.

The N900 has been attributed with Nokia’s Linux based Maemo operating platform which is a web based program which complements Nokia’s smartphones that run the Symbian OS. This software equips developers to create various applications such as podcasting, IM apps and Twitter among others. The tag cloud UI allows users to share images and videos online directly from the phone. The device is touted to possess multi tasking capabilities that let users to open several applications simultaneous.

Automatic Maemo updates provide users with video calling and FB chat support, software upgrades, portrait browsing, e-mail and calendar improvements. This gadget is equipped with Mozilla technology that makes websites look the way they would appear on a PC. Additionally, the quality of the online videos and interactive apps is enhanced with full Adobe Flash 9.4 support. The device enables speedy internet connectivity via 10/2 HSPA and WLAN. Users can surf web pages while chatting on instant messaging or listening to music.

“The Nokia N900 has been designed specifically to address the unique needs of this section of consumers, who are obsessed with all new forms of technology. With an open source operating system, faster multitasking ability, incorporated technology like an OMAP processor, real time web widgets and the ability to be connected just about anywhere, the Nokia N900 has kick started a new era of powerful mobile computing,” added Gandhi.

The winning participant or ‘Maemo Master’ of Nokia’s newly launched ‘The Maemo Masters Invitational Series’ interactive web based initiative for mobile and technology buffs across India will be invited to purchase a special Maemo Master Edition of the N900. This special edition will encompass the Nokia N900, Nokia BH 214 Bluetooth stereo headset and more.

The Nokia N900 will be available for purchase from June 9 this year through Nokia branded outlets in major cities across India. The price tag attached to this handset is unclear for now.