Stan's List

CERT posted two vulnerabilities about Mozilla products, and Mozilla software updates are available These vulnerabilities are addressed in Firefox 2.0.0.4, Firefox 1.5.0.12, Thunderbird 2.0.0.4, Thunderbird 1.5.0.12, SeaMonkey 1.0.9, SeaMonkey 1.1.2.

Security Update 2007-005 1.1 is to address an install problem with the original update. Those that successfully installed the previous release, do not need to install this update, which comes in Universal and PowerPC versions

Apple announced that it is offering a new Apple TV build-to-order option with a 160GB hard disk drive. The standard Apple TV hard disk drive is a mere 40GB. The higher capacity hard drive could benefit those whose Apple TV accesses multiple Apple TV with a 160GB hard drive is available today for a suggested retail price of $399, the 40 GB model at $299, not bad for 4x increase

Beginning in mid-June, Apple TV will wirelessly stream videos directly from YouTube and play them on a user’s widescreen TV. YouTube will add thousands each week until the full YouTube catalog is available this fall

“This is the first time users can easily browse, find and watch YouTube videos right from their living room couch, and it’s really, really fun,” said Steve Jobs, Apple’s CEO. “YouTube is a worldwide sensation, and Apple TV is bringing it directly from the Internet onto the widescreen TV in your living room.” More …

SeaMonkey 1.1.2 closes several security vulnerabilities and fixes several smaller problems found in previous versions. With that, SeaMonkey advances to the same level of security as its siblings, Firefox and Thunderbird, which are issuing updates for the same problems this week as well. The project team strongly urges users to upgrade to SeaMonkey 1.1.2, as the old 1.0 series will not be maintained further. The 1.1 series, on the other hand, is being actively maintained and also features some new functionality such as spell checking in web forms and mail tags. More …

A minor update according to the version number, but an important security update, none the less

Security Fixes in 2.0.0.4:

MFSA 2007-17 XUL Popup Spoofing
MFSA 2007-16 XSS using addEventListener
MFSA 2007-14 Path Abuse in Cookies
MFSA 2007-13 Persistent Autocomplete Denial of Service
MFSA 2007-12 Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4)

Fire up Firefox (it is not your default browser?) and a dialog window should open inviting you to update. Or go to English English for a direct download.

Ars Technica have discovered information stored inside iTunes Plus tracks that identifies the new original purchaser.

We started examining the files this morning and noticed our names and e-mail addresses in the files, and we’ve found corroboration of the find at TUAW, as well. But there’s more to the story: Apple embeds your account information in all songs sold on the store, not just DRM-free songs. Previously it wasn’t much of a big deal, since no one could imagine users sharing encrypted, DRMed content. More …

As announced, with iTunes 7.2, you can preview and purchase iTunes Plus music–new higher-quality, DRM-free music downloads from participating music labels.

Apple also announced the launch of iTunes U, a dedicated area within the iTunes Store (www.itunes.com) featuring free content such as course lectures, language lessons, lab demonstrations, sports highlights and campus tours provided by top US colleges and universities including Stanford University, UC Berkeley, Duke University and MIT.

Many of its settings aren’t in the Options. Each hidden setting is stored as a string or integer in a file called prefs.js and is accessed by typing “about:config” in the navigation bar.

Computerworld provides instructions on 20 tweaks for speeding up page loads, making tabs behave, reducing memory drain, and generally making the interface act any way you want it to. Follow the instructions carefully. More …

Or get yourself a gigabit router.

The Seattle Times has posted part of an interview with AT&T’s iPhone’s CEO, Glenn Lurie. Captured in the course of the conversation, Lurie let it slip that Google apps are coming to iPhone.

Lurie is quoted as saying: There are other things … you have the widgets, some of the Google applications that are coming … there are just so many things here that the price will not be an issue. More …

Me hope Google Earth gets ported.

[CVE-2007-2389] A design issue exists in QuickTime for Java, which may allow a web browser’s memory to be read by a Java applet. By enticing a user to visit a web page containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to the disclosure of sensitive information. This update addresses the issue by clearing memory before allowing it to be used by untrusted Java applets. More …