Microsoft, McAfee, Firefox Fix Security Loopholes
May 23, 2010 6:43 PM
The bugs keep marching in, with Microsoft, McAfee, and Mozilla all having to deal with serious security-related software problems in the past month.Another Windows Fix
According to Microsoft, "two privately reported vulnerabilities in Windows Authenticode Verification...could allow remote code execution." In other words, an attacker could take control of your PC by exploiting either of those flaws. The intruder could gain administrator rights, with the ability to add, change, or delete practically any file.
Microsoft has issued an update that addresses the vulnerabilities by performing additional verification operations. This update is critical to all supported versions of Windows, including 98, XP, Vista, and 7, as well as Server 2003, 2008, 2008 R2, 2003, 2000, and 2000 Professional.
If you have automatic updates enabled (recommended), you'll get this update and others instantly. If you do not have automatic updating turned on, Microsoft suggests downloading critical updates manually; go to the Control Panel, click the Windows Update icon, and then select Check for Updates. You can learn more about this patch, and download it manually, at Microsoft TechNet.McAfee Update Makes Windows PCs Crash
McAfee released an update in mid-April that unfortunately caused Windows PCs to fail spectacularly. The update improperly identified a Windows component known as svchost.exe as a virus, which caused McAfee's software to delete it.
The error was so severe that 8000 of the 25,000 computers at the University of Michigan Health System and Medical School crashed, along with thousands of computers around the world.
Put simply, svchost.exe is a process that hosts other services used by various programs on your PC (read Microsoft's explanation for more-technical details). If you look in Windows Task Manager, you may see quite a few svchost.exe processes running (under "Image Name"), and as you can imagine, attacking all of them could be catastrophic for any system.
The problematic update mostly affected users running Windows XP Service Pack 3. If it affected you, pick up McAfee's SuperDAT Remediation Tool to restore svchost.exe.Firefox Flaw Corrected
A hole in the Mozilla Firefox Web browser has blossomed into a major flaw. A week after releasing Firefox 3.6.2, Mozilla released version 3.6.3 to address a critical security issue that could allow remote attackers to run commands of their choice.
To fix the bug, download Firefox 3.6.3, or click Help, Check for Updates, Get the New Version in the Firefox toolbar. Mozilla says the bug does not affect versions 3.5 or earlier.
If you still want to obtain and use add-ons that are not compatible with version 3.6, don't worry: Mozilla says that it will issue a patch for Firefox 3.5 in an upcoming release in case another method of exploiting this security hole exists.
Instagram may be designed for smartphones, but you've probably noticed that the best photos have a distinctly non-camera-phone vibe to them. Savvy Instagrammers post high-quality DSLR or point-and-shoot photos instead. You can create a high-quality Instagram feed, too, with a little help from Dropbox and your iOS or Android device.
Foursquare has been teasing its rebirth for months, and now it seems the end (or is that the beginning?) is near. As of Thursday, you'll no longer be able to check into a location on Foursquare. The service will push you to its dedicated check-in app Swarm from now on.
Taxis suck. Waiting for taxis sucks, paying for a taxi is always more difficult than it needs to be, and actually riding in a taxi? Well, that sucks too. That's why on-demand ride-sharing services such as Uber and Lyft have exploded in popularity over the past couple of years: They're fast, clean, and dead-simple to pay for.
First, Microsoft axed its video-producing Xbox Entertainment Studios and spun off Nokia's MixRadio streaming radio service as part of its devastating round of layoffs, which will see 18,000 jobs cut over the next year. Then, during Tuesday night's portentous quarterly earnings call with analysts and investors, CEO Satya Nadella dropped this little bomb:
Earlier this week, we brought you word of Simpsons World, the forthcoming app and website that promises to bring humanity to a standstill with on-demand access to every episodes of The Simpsons along with extensive search and supplemental features.