* You are viewing the archive for April, 2008
Browser Newsletter #24
- Apple, Mozilla Plug Critical JavaScript Browser Flaws
- iPhone’s Safari browser simplifies phishing, researchers say
- PayPal Gives Safari Users a Break Despite Security Shortcomings
- Flock Announces Eco-Edition of Award Winning Social Web Browser
- Firefox 3 Bookmarks (My god, it’s full of stars…)
- about:mozilla - Firefox 2.0.0.14, Camino 1.6, Privacy policy, AMO, Security metrics, and more
- Live Mesh: First Look at Microsoft’s New Platform
- Now your mobile phones get to take some Acid
- The Next Browser War
- WebKit GTK+ port passes Acid3 on Linux
- Mozilla: Fennec to Revolutionize Mobile Browsing
- Firefox reached 29% share in Europe
- Opera Desktop Beta 2 (Kestrel) now available for download
- Web 2.0: Firefox Key To Open Mobile Web
- IETester
- Firefox wins Webware 100 2008!
- Hackers Focus Efforts on Firefox, Safari
Browser Newsletter #23
- iPhone is already the top mobile browser
- First look: Mozilla Fennec takes browser fight to handhelds
- The story behind Opera Mini on Google Android
- HTML and DOM Standards Compliance in IE8 Beta 1
- The new Internet Explorer Mobile for Windows Mobile 6.1 - desktop browsing from Windows Mobile
- Research fingers ActiveX, QuickTime as buggiest browser plug-ins
- Mobile Firefox Prototype Arrives
- Why Firefox Is Thinking Small: Mobile Browser Market To Explode
- Updated Web Browsers: Which One Works Best?
- First look: AT&T’s Pogo browser beta tries too hard, fails
- Is the Mobile Web Dead? Some Mobile Entrepreneurs Say Yes
- about:mozilla - Firefox 3 RC1, New tinderbox trees, Fennec reviewed, Web analytics, AMO, and more
- Mobile Web must die!
- Gomez Announces Web Performance Testing Support for Microsoft Internet Explorer 8
- Firefox 2.0.0.14 security and stability update now available for download
- Camino 1.6 released
- After Criticism, Apple Software Updater Gets UI Makeover
- AT&T, Vizible To Launch Firefox-Based Browser With Ads
- Mobile Web Browsers Have No Where To Go But Up
- Apple patches Safari bug from hacking contest
- Paypal to block ‘unsafe browsers’
- Apple Ends Stealth Safari Installs Via Software Update For Windows
- PayPal Bans Browsers; Mac Love; Cell Phone Bans
- Apple should call PayPal’s bluff
- Yahoo! BrowserPlus: The rumour is true
- AT&T Pogo Browser
Install Sun Java in Ubuntu Offline
There are a handful of scenarios I can think of where you might require to install Java (in this case JRE to be specific) without an Internet connection: remote location, bad drivers, your corporate firewall to name a few. Here is a short tutorial to quickly get around two unpleasant issues with dependency hell.
Continue Reading »
Browser Newsletter #22
- First look: Adobe AIR alpha unleashed for Linux
- Mozilla wants to put Firefox in the cloud and your pocket
- Firefox 3 Beta 5 twice as fast in the cloud: Mozilla
- iPhone browser to be updated soon, adding CSS Transforms and Animations
- Opera Mini 4.1 Mobile Phone Browser released
- Microsoft to make full-scale web browsing mobile this year
- Silverlight Timetable: 2.0 Coming This Summer
- Create Distraction-Free, Customized Webapps with Prism
- Designing for Add-on Performance
- Opera 9.27 released
- Companies struggle to remove Apple’s Safari browser
- Microsoft’s Internet Explorer still popular
- The Complete Field Guide to Testing Firefox 3
- Apple Safari for iPhone most popular mobile browser in USA
- Tree is entering lockdown for Firefox 3 Release Candidate 1
- Why We Need Web Apps on the Desktop
- about:mozilla - Firefox 3 Beta 5, SUMO Day, Thunderbird Bugdays, Labs updates, and more
- IE April Security is Now Available
- IE Automatic Component Activation Now Available
- IE8 Security Part I: DEP/NX Memory Protection
Web Input Boundary and Validation Matrix
The most common web application security weakness is the failure to properly validate input from the client or environment. This weakness leads to almost all of the major vulnerabilities in applications, such as interpreter injection, locale/Unicode attacks, file system attacks and buffer overflows. Data from the client should never be trusted for the client has every possibility to tamper with the data.
In many cases, Encoding has the potential to defuse attacks that rely on lack of input validation. For example, if you use HTML entity encoding on user input before it is sent to a browser, it will prevent most XSS attacks. However, simply preventing attacks is not enough - you must perform Intrusion Detection in your applications. Otherwise, you are allowing attackers to repeatedly attack your application until they find a vulnerability that you haven’t protected against. Detecting attempts to find these weaknesses is a critical protection mechanism.
Browser Newsletter #21
- WebKit gets perfect score on Acid3 web standards - iPhone Safari and S60 web browsers will be even better
- Q&A with Mozilla’s John Lilly on 10 years of Mozilla and the future of browsers
- Two vulnerabilities found in Safari browser for Windows
- Apple’s Safari Security Woes
- First look: Adobe AIR alpha unleashed for Linux
- Mozilla wants to put Firefox in the cloud and your pocket
- Internet Explorer: A Browser Breaks
- Firefox Gains On Internet Explorer In Businesses
- Updated IE Mobile to bring “real Internet” to Windows Mobile
- JavaScript slows down the Internet; WebKit to the rescue
- IE 8 strict mode doesn’t allow for CSS opacity?
- The New Opera Mini Arrives - Now 50% Faster Than Before
- Firefox 3 beta 5 now available for download
- Firefox 3 Beta 5 is here, and reviewed
Browser Newsletter #20
- Safari 3.1 on Windows: a true competitor arrives (seriously)
- TeaShark Web Browser Launches, Brings Webkit-Based Browsing To All
- Firefox 2.0.0.13 update now available
- Apple’s Safari browser likened to malware
- Mozilla: Final Version of Firefox 3 Will Ship in June
- Will IE8 & HTML5 Make RSH Irrelevant?
- WebKit achieves Acid3 100/100 in public build
- Firefox 3 expected for June
- Internet Explorer 8 Beta 1 for Developers – Standards Highlights Part 2
- Mozilla’s Asa Dotzler on Firefox, Fighting Bloat and the Problem with Democracy
- Safari on Windows: decidedly not illegal (plus, font fixes!)
- Where is Firefox on Acid 3? Here.
- Why did Apple try to push its browser onto Windows PCs?
- Opera and Safari Race to Pass the ACID 3 Browser Test
- Public Acid3 build
- New Mozilla Add-ons an inch short of the perfect central
- When in Rome: engineering the Firefox 3 user experience
- Adobe AIR Makes Its Way to Linux


