Most PC security problems come from unpatched third-party Windows apps

If you’ve got 99 security problems, odds are Microsoft’s not one—or at least it’s just a minority of them. In its annual review of software vulnerabilities , security software firm Secunia found that 86 percent of vulnerabilities discovered on systems scanned by its software in the 50 most popular Windows software packages in 2012 were attributable to third-party developers and not to Microsoft’s Windows operating system or applications. And for most of these vulnerabilities, a patch was already available at the time they were discovered. Of the top 50 most used Windows packages—including the Windows 7 operating system itself, 18 were found to have end-point security vulnerabilities, a 98 percent increase over five years ago. Of those 18 packages, Google’s Chrome and the Mozilla Firefox browser were the biggest culprits, with 291 and 257 detected vulnerabilities respectively. Apple iTunes came in third, with 243 detected vulnerabilities. The remainder of the top ten offenders were: Adobe Flash Player: 67 Oracle Java JRE SE: 66 Adobe AIR: 56 Microsoft Windows 7: 50 Adobe Reader: 43 Microsoft Internet Explorer: 41 Apple Quicktime: 29 Of the vulnerabilities documented in Secunia’s database, 84 percent had already been patched by vendors when they were discovered on systems. “This means that it is possible to remediate the majority of vulnerabilities,” said Secunia Director of Product Management Morten R. Stengaard. “There is no excuse for not patching.” Read on Ars Technica | Comments

View original post here:
Most PC security problems come from unpatched third-party Windows apps

Stabilizing the electric grid by keeping generators in sync

Library of Congress When the lights go out, it affects everyone. It’s not only the inconvenience of having the TV shut off unexpectedly—a lot of heavy equipment really dislikes having the power disappear suddenly. For the most part, the power grid is very stable. But sometimes random events and seemingly small operator errors can cascade to create massive power outages. Underlying the stability of a power grid is the need to keep multiple generators operating in a synchronized manner. New research shows (in an annoyingly abstract way) that good network design can take advantage of the tendency for generators to self-synchronize. Counting the beat Depending on where you happen to be in the world, your power outlet supplies alternating current at either 50 or 60 Hz. The precise value doesn’t really matter as long as it stays within a narrow limit. Essentially, this means that the generator supplying the power needs to rotate at a rate producing this frequency. Read 14 remaining paragraphs | Comments

Follow this link:
Stabilizing the electric grid by keeping generators in sync

Brazilian docs fool biometric scanners with bag full of fake fingers

Six silicone fingers, all in a row. BBC The BBC is one of several outlets carrying the bizarre story of a Brazilian doctor arrested for allegedly defrauding her employer, a hospital in the town of Ferraz de Vasconcelos, near São Paulo. At the time of her arrest, she was equipped with a total of sixteen fingers—ten of which God gave her, and six of which were crafted of silicone and given to her by coworkers. At least three of the extra fingers bore the prints of fellow doctors at the hospital. The doctor, Thaune Nunes Ferreira, 29, claims through her attorney that she was forced to use the silicone fingers to clock in to the hospital’s time card system in order to cover for absentee colleagues. “She says she was innocent because it is a condition they imposed on her to keep her job,” the attorney notes. According to the Bangkok Post and several other sources, Brazil’s Globo TV International network obtained and played footage of Ferreira clocking in to the hospital with her own permanently attached digits, then touching the same fingerprint scanner with two of the silicone fakes. The scanner produced paper time card receipts for her and the two employees to whom the silicone fingers’ prints belonged. In this way, notes the Post, “it looked like there were three doctors on duty when there was just one.” Read 2 remaining paragraphs | Comments

Link:
Brazilian docs fool biometric scanners with bag full of fake fingers

Dropbox 2.0 brings functional drop-down menus to Mac and Windows

Dropbox for Mac received an update to version 2.0 on Tuesday, bringing with it a number of UI upgrades to the desktop. The most noticeable difference is the revamped and prettified drop-down interface, which now allows you to accept or decline sharing requests right from the menu instead of requiring a trip to the website. The new drop-down interface also displays a list of recently updated files from across your Dropbox-enabled devices, and it gives easy access to both sync settings and the Dropbox website. This is a small but significant change to the way the menu item previously functioned. In the past, there was not much functionality there, but now it’s a place where the user might actually go in order to see which files are being synced. Additionally, the new menu interface makes for much easier file or folder sharing. Select the item in the menu that you want to share and a “Share” button pops up on the right. Clicking it still takes you to the Dropbox website in order to invite other users, but it’s a start in making the desktop software a little more usable. Read 1 remaining paragraphs | Comments

Visit link:
Dropbox 2.0 brings functional drop-down menus to Mac and Windows

EA not altering return policy for furious SimCity buyers

Aurich Lawson / Thinkstock Electronic Arts has indicated that it will not be altering its usual digital refund policy in the wake of SimCity server issues that have led to access problems and scaled-back features for players that are able to log in, days after the game’s North American release. “In general we do not offer refunds on digital download games,” EA tweeted through its official Origin account yesterday, directing people to the company’s  online policy on returns and cancellations . While downloadable games purchased in North America are not be refunded “as a general policy,” EA does offer a “14-day unconditional guarantee” on any physical product sold through the Origin store. European customers, however, may be able to withdraw their downloadable purchase during a 14-day “Cooling Off period” as outlined on EA’s European return policy page . The recent tweet comes after a message posted to EA’s forums by Community Manager Raven on Tuesday, stating that “[i]f you regrettably feel that we let you down, you can of course request a refund for your order… though we’re currently still in the process of resolving this issue.” That message has now been revised to simply say “please review our refund policy here .” Read 6 remaining paragraphs | Comments

See the article here:
EA not altering return policy for furious SimCity buyers

Bill would force cops to get a warrant before reading your e-mail

Last fall we wrote about how easy it probably was for the FBI to get the e-mails it needed to bring down CIA chief David Petraeus over allegations of infidelity. Under the ancient Electronic Communications Privacy Act, passed in 1986, the police can often obtain the contents of private e-mails without getting a warrant from a judge. A bipartisan group of legislators has introduced a bill to the House of Representatives to change that. The bill would require the police to get warrants before reading users’ e-mails in most circumstances and would also repudiate the view, advanced by the Obama administration last year, that the police can obtain information about the historical location of your cell phone without a warrant. The new legislation , proposed by Rep. Zoe Lofgren (D-CA) and supported by Reps. Ted Poe (R-TX) and Suzan DelBene (D-WA), would extend privacy protections for both e-mail and location privacy. “Fourth Amendment protections don’t stop at the Internet,” Lofgren said in an e-mailed statement. “Establishing a warrant standard for government access to cloud and geolocation provides Americans with the privacy protections they expect, and would enable service providers to foster greater trust with their users and international trading partners.” Read 2 remaining paragraphs | Comments

Read the original:
Bill would force cops to get a warrant before reading your e-mail

Newly spotted miles-wide comet bearing down on Mars

A comet spotted earlier this year may pass close enough for Mars to feel the rock’s hot breath down its neck, according to new reports that surfaced Monday and Tuesday. The comet, named C/2013 A1, may pass within a few tens of thousands of miles of Mars’ center, with a remote chance that the miles-wide comet will collide with the planet. C/2013 A1 “Siding Spring,” a comet between 5 and 30 miles wide, was spotted January 3 by astronomer Robert H. McNaught. Researchers were able to look back in the image history of the Catalina Sky Survey in Arizona and spot signs of the comet as early as December 8, 2012. NASA states that other archives have traced sightings back to October 4, 2012. According to scientists at NASA’s Near-Earth Object Program Office , Siding Spring originates from the Oort Cloud of our Solar System and has been journeying to this point for more than a million years. In less than two years, around October 19, 2014, the comet will pass very close to Mars. Read 2 remaining paragraphs | Comments

See the original article here:
Newly spotted miles-wide comet bearing down on Mars

Five features iOS should steal from Android

Aurich Lawson, Age 5 If you’ve come anywhere near a tech site in the last year or so, you’ve heard it all before. “iOS is getting stale compared to Android! It needs some new ideas!” Whether that’s actually true is up for (heated) debate, but those with an open mind are usually willing to acknowledge that Apple and Google could afford to swap a few ideas when it comes to their mobile OSes. So in a fantasy world where we could bring over some of the better Android features to iOS, which features would those be? Among the Ars staff, we sometimes have spirited “conversations” about what aspects would be the best for each company to photocopy. So, we thought we’d pick a few that might go over well with iOS users. Don’t worry, we have a companion post of features that Android could afford to steal from iOS. The copying can go both ways. No one wants iOS to become Android or vice versa. This is about recognizing how to improve iOS with features that would be useful to people depending on their smartphones for more than the occasional text or phone call. We recognize that Apple tries to keep an eye towards elegant implementation, too. So which features are we talking about? Glad you asked… Read 18 remaining paragraphs | Comments

See the original article here:
Five features iOS should steal from Android

Five-year-old runs up $2,500 in-app purchase tab with Apple

Five-year-olds know as well as adults do: iPads are fun to play with. Parents who regularly hand their iDevices over to their children, take note: you can still be burned by kids making in-app purchases. The  BBC published a story on Friday highlighting a five-year-old’s impressive feat in running up a £1,700 iTunes bill—about $2,500—after his father entered a passcode to allow him to download a “free” game from the App Store. The details of the situation reveal a series of unfortunate events that led to the truly epic tab, though Apple has since refunded the money. There are a few things the Kitchens could have done better when their son, Danny, began using an iPad to play games. The article doesn’t specify whether Danny’s father entered a passcode for the device, for the App Store, or within the app itself, but the last scenario listed seems most likely. Entering a password to download apps in the App Store used to mean the user could begin charging in-app purchases without re-entering that password for 15 minutes as the default iOS behavior. Apple made that more difficult with iOS 4.3 in early 2011 by requiring the App Store password a second time when in-app purchases are made. Assuming the family’s iPad was running a more recent version of iOS, it sounds like Danny’s father entered his password when Danny began to make purchases, not realizing what he was authorizing. Read 4 remaining paragraphs | Comments

Read More:
Five-year-old runs up $2,500 in-app purchase tab with Apple

Outages result in gray skies for iCloud users

Apple’s System Status page offers some info, but no expectation of when the services will be back up. If you’re a regular Photo Stream or Documents in the Cloud user, this morning’s iCloud outage is probably already giving you hives. The entire service isn’t down, but key parts of it are. Users can still make use of Find My Friends, iTunes Match, and Contact, Calendar, Reminders, and Notes syncing, but iOS device backups, document syncing, and Photo Stream have been down for (as of this writing) almost seven hours and counting. Apple’s System Status page , which was revamped last December to offer more information to users, shows that the three iCloud services have been down since just after 3am CST. Apple claims “less than 3%” of users are affected by this outage, though such a claim seems disingenuous—at the very least, there’s a hefty portion of iPhone, iPod touch, and iPad users who back up their devices to the cloud, and tons of others sync documents over iCloud through various apps. (And, as noted by 9to5Mac earlier, some users on Twitter are reporting other iCloud services being down that Apple has not indicated on the status page.) iCloud outages are, unfortunately, nothing new. Still, they rarely last this long. There’s no indication when these services will be back up; we’ve reached out for comment, but Apple has yet to respond. We’ll update this article if we hear anything back. Read on Ars Technica | Comments

Visit link:
Outages result in gray skies for iCloud users