My own takes: http://eapen.in/to-www-or-not-to-www/ http://eapen.in/to-www-or-not-to-www-update/
415 karma · joined June 16, 2009
email: myusername at mydomain
[ my public key: https://keybase.io/eapen; my proof: https://keybase.io/eapen/sigs/oC70QafCExo6tG8K9ZP34UdO2BqX6wZy6kDnETk0Xf4 ]
My own takes: http://eapen.in/to-www-or-not-to-www/ http://eapen.in/to-www-or-not-to-www-update/
When I needed to get a document in India (in a more rural area), the young government official, who I assumed was above all this corruption, kept telling me to come later (when there were fewer people around) and had me go to a nearby Xerox shop to get copies of a document. While I was going there, the official called the guy at the Xerox shop and told him to tell me how the process works. Suffice to say that I gave something and apparently that wasn't enough, so I had my mom visit him the next day and he made a comment that I hadn't given enough. My mom just smiled, picked up the certificate (which was in front of him) and left.
On the other hand, reporting an official is still a bit scary knowing that him or his partners-in-crime can accidentally mess up any of the other official documents and since most of the documents are still on paper and not digitized, it could throw you down into a deeper hole. Unless a massive campaign against corruption is introduced, I dont see this problem going away anytime soon.
In fact HN, should do an April Fools celebration of allowing everyone to down-vote every article that is an April Fools joke.
Vulnerabilities in *McAfee.com
1. VULNERABILITY DESCRIPTION
-> Cross Site Scripting http://download.mcafee.com/products/webhelp/4/1033/#javascri...
-> Information Disclosure > Internal Hostname: http://www.mcafee.com/js/omniture/omniture_profile.js
($ ruby host-extract.rb -a
http://www.mcafee.com/js/omniture/omniture_profile.js)-> Information Disclosure > Source Code Disclosure:
view-source:http://download.mcafee.com/clinic/includes/commoninc/cookiecommon.asp
view-source:http://download.mcafee.com/clinic/includes/commoninc/appcommon.asp
view-source:http://download.mcafee.com/clinic/includes/commoninc/partnerCodesLibrary.asp
view-source:http://download.mcafee.com/clinic/Includes/common.asp
view-source:http://download.mcafee.com/updates/upgrade_patches.asp
view-source:http://download.mcafee.com/updates/common/dat_common.asp
view-source:http://download.mcafee.com/updates/updates.asp
view-source:http://download.mcafee.com/updates/superDat.asp
view-source:http://download.mcafee.com/eval/evaluate2.asp
view-source:http://download.mcafee.com/common/ssi/conditionals.asp
view-source:http://download.mcafee.com/common/ssi/errHandler_soft.asp
view-source:http://download.mcafee.com/common/ssi/variables.asp
view-source:http://download.mcafee.com/common/ssi/standard/oem/oem_controls.asp
view-source:http://download.mcafee.com/common/ssi/errHandler.asp
view-source:http://download.mcafee.com/common/ssi/common_subs.asp
view-source:http://download.mcafee.com/us/upgradeCenter/productComparison_top.asp
view-source:http://download.mcafee.com/us/bannerAd.asp
view-source:http://download.mcafee.com/common/ssi/standard/global_foot_us.asp
2. RECOMMENDATION- Fully utilize Mcafee FoundStone Experts - Use outbound monitoring of traffic to detect potential information leakage
3. VENDOR
McAfee Inc http://www.mcafee.com
4. DISCLOSURE TIME-LINE
2011-02-10: reported vendor 2011-02-12: vendor replied "we are working to resolve the issue as quickly as possible" 2011-03-27: vulnerability found to be unfixed completely 2011-03-27: vulnerability disclosed
5. REFERENCES
Original Advisory URL: http://yehg.net/lab/pr0js/advisories/sites/mcafee.com/[mcafe... Former Disclosure, 2008: http://www.theregister.co.uk/2008/06/13/security_giants_xsse... Former Disclosure, 2009: http://news.softpedia.com/news/McAfee-Websites-Vulnerable-to... Former Disclosure, 2010: http://security-sh3ll.blogspot.com/2010/04/mcafee-communitie... host-extract: http://code.google.com/p/host-extract/ Demo: http://yehg.net/lab/pr0js/training/view/misc/XSSing_McAfee_S... xssed: http://www.xssed.com/search?key=mcafee.com Lessont Learn: http://blogs.mcafee.com/mcafee-labs/from-xss-to-root-lessons...
#yehg [2011-03-27]
DL: http://piro.sakura.ne.jp/xul/xpi/confirm.cgi?treestyletab.xp...
btw... TabCandy is now called Panorama.
Better Tab handling and has the ability to hold tabs in "groups" and a "panorama" view which allows you to view all tabs across groups.
The awesome bar has also improved significantly and has some smart features (like the option of tab switching instead of opening a new tab when you already have a URL open).
Better Add-ons management interface and some add-ons work without a restart of the browser.
Websockets disabled (for security)
I still prefer Chrome though.
PS. I've been using the FF 4 beta version for a 3-4 months now and probably dont remember the other significant changes.
Sometimes, I wish I could downvote an article on HN.
The only thing missing was converting the dictionary data into a trie. ;-)
I am taking it out of context but it seems like a good pun for the dickbar.
Apple has sometimes been infamous for charging for updates typically expected for free. The most frequent example has been major iPod touch firmware upgrades, which cost a small fee up until iOS 4. In 2007, the company went so far as charging $2 to enable 802.11n Wi-Fi on some Macs.
Read more: http://www.macnn.com/articles/11/02/24/may.be.trying.to.avoi...
http://www.reddit.com/r/AskReddit/comments/ciiag/so_if_my_de...