Monday, February 28, 2011
First off: don't worry. Cardwell reported the vulnerability to LastPass before writing it up, and it has since been fixed. We're not sure if the fix has propagated out to the Chrome and Firefox add-ons -- but we have to assume that Cardwell wouldn't have written his blog post if the vulnerability still existed.
With that said, you should still be more than a little concerned about the fundamental architecture of LastPass as an in-the-cloud password manager. While this cross-site scripting attack was fixed quickly, Cardwell thinks a similar attack "could easily happen again in future."
Beyond being susceptible to XSS attacks, LastPass doesn't even use HSTS, which means that man-in-the-middle (MITM) attacks are also rather easy to pull off.
It's very hard for us to recommend LastPass as a password manager when further vulnerabilities will almost certainly be found. For the time being, you should check out KeePass, an offline password manager that, for now, is a lot more secure than LastPass.
Update: LastPass has now implemented HSTS and a few other features to make their website and browser add-ons a lot harder to attack in the future. Hooray!
[Thanks to Brad for the tip!]
OpenFeint Connect that will let gamers on iOS, Android, Windows Phone 7, OS X and Windows compare scores. Even Facebook games could potentially connect to OpenFeint. This move makes a ton of sense, considering the way successful iOS games like Angry Birds have been ported to Android, Mac and Windows.
OpenFeint Connect is in private beta now, allowing developers on any platform to tap into OpenFeint's APIs for social gaming. Unfortunately, that doesn't mean cross-platform simultaneous play, but does mean that game devs will be able to push news and updates to all their players at once, and players will be able to compete for high scores against their friends on other platforms.
We broke the good/bad/indifferent news earlier today in our rumored devices forum -- the Samsung Gem has been resurrected, and dummy units are hitting Verizon stores as we speak. The Gem is a pretty basic 3.2-inch Android smartphone with a 3.2MP camera and an 800MHz processor. Not all that much to write home about, but it did see release on Alltel just a few weeks ago.
So, yeah, dummy units are arriving. We've got one more pic after the break, and that's probably as close as we're going to get to this thing. Thanks to you know who!
The Samsung Gem lives! Dummy units heading to Verizon stores posted originally by Android Central
Sponsored by Android Cases and Accessories
The program, which is aptly named Android File Transfer, provides third-party Media Transfer Protcol (MTP) support, which Mac OS X doesn't natively provide. MTP started off as a Windows Media Player technology, which is probably why Apple doesn't support it, but today it's represented by a standard USB device class and an extension of its precursor, PTP.
MTP support is definitely a step up as far as Android is concerned. Rather than 'turn on mass storage mode,' which locks local apps out of your SD card, MTP allows both the phone and the PC to access your phone's filesystem at the same time. Hopefully Medial Transfer Protocol will find its way to the smartphone version of Android in due course
Incidentally, it's possible that the upcoming version of OS X, Lion, could support MTP. If anyone has Lion, and a Motorola Xoom, we'd love to know if you've had any luck connecting them.
Gallery: AdvanceTC Magic W3 press shots
Secondo le ultime sconcertanti notizie pubblicate da Wikileaks, oggi è cominciato il mese di dicembre. Fa freddo, qualcuno comincia ad andare in letargo e sì, molti di noi stanno già pensando a cosa regalare o farsi regalare a Natale. Potevamo mai scegliere giorno diverso per inaugurare il nostro Natale geek e proporvi qualche bella idea [...]
© naqern per Geekissimo, 2010. | Permalink | 15 commenti | Aggiungi su del.icio.us
Hai trovato interessante questo articolo? Leggi altri articoli correlati nelle categorie Curiosità, Gadget Geek.
Post tags: natale, natale 2010, natale geek
SendGenie also supports contact groups, so you can build a list for your department at work, your family, or your clan mates for easy mass sharing. You can also send clipboard contents -- like screenshots -- by tapping the Paste button in the main window and naming your clip. Once uploaded, your contacts will receive an email with a link to a page from where they can download your files. Friends running SendGenie on their desktop can choose to automatically receive files you send -- they'll appear in Documents\Me SendGenie\Your Email Address\Inbox\.
The app can optionally auto-resize photos you share, but there are no settings you can tweak. We'd like to see that option added before the final release, but SendGenie is still a very slick, easy-to-use desktop app for sharing files with your contacts.
WebKit2, rather than being a whole new rendering engine, is a layer around WebKit that adds more stability, security and speed -- not entirely unlike the Google Chrome sandbox, which is also strapped onto a version of WebKit. The most exciting feature of WebKit2 is that it splits the browser UI and the rendered content into separate processes. It's possible that each tab will have its own process, too, like Chrome.
This is the first solid news of a Safari update since the minor revisions of desktop and iOS versions back in November. It also represents a major change for the browser, so we wouldn't be surprised if it is Safari 6, rather than 5, that ships with OS X Lion.
Estimates peg the number of Internet users in China at around half a billion. Groupon will be fighting for market share with other group buying services, and it has apparently partenered with Tencent -- which develops China's most popular instant messaging app QQ -- to get Gaopeng off and running.
Competitors aren't totally thrilled with Groupon's arrival, and not just because there's another deal site in China. Groupon has been accused of poaching staff -- and competitors have firmly stated that employees who leave for Grouon will not be welcomed back.
MyBlogLog was a service which allowed bloggers to create a community for their sites. The shutdown was called out in the famous "sunsetting" slideshow in late 2010, where Yahoo! revealed that popular bookmarking site Delicious would also not be part of its future plans.
Despite all this, Yahoo! remains one of the most popular sites on the Internet -- it actually topped ComScore's U.S. traffic chart for January 2011.
Oggi, 7 gennaio, ha preso il via uno degli eventi geek più attesi dell’anno. Il Consumer Electronics Show (CES, per gli amici intimi) di Las Vegas ha finalmente spalancato le sue porte e per i prossimi tre giorni tutte le più grandi aziende operanti nel settore tecnologico – da Microsoft a Google, passando per Samsung [...]
© naqern per Geekissimo, 2010. | Permalink | 11 commenti | Aggiungi su del.icio.us
Hai trovato interessante questo articolo? Leggi altri articoli correlati nelle categorie Gadget Geek.
Post tags: ces 2010, eventi, islate, nexus one, tablet