Apple released a security update for its Safari Web browser on Wednesday. Available for Windows and Mac, Safari 4.0.4 plugs what sound like moderate to severe security holes. Unlike competitors Internet Explorer, Firefox, and Chrome, Apple doesn't rate the severity of its security fixes.
The security fixes address a wide range of problem points. On both Windows and Mac, parsing maliciously written XML content could have led to a browser crash, using shortcut menu options within a maliciously created Web site could have led to the disclosure of local information, and visiting a maliciously built Web site could have resulted in unexpected actions on other opened Web sites.
For Windows only, viewing a maliciously made image with an embedded color profile that could lead to a browser crash or running arbitrary code is no longer a threat, nor is accessing a maliciously crafted FTP server, which could have led to an unexpected crash, information disclosure, or arbitrary code execution. For Mac only, an exploit that could have allowed e-mail to remotely load audio and video content when loading a remote image has been disabled.
Although it's good practice to update a program whenever a security fix has been released, more transparency from Apple on the matter would pull the company up to competitors' standards.
Click here to read the full changelog for Safari 4.0.4.
It was a controversial new addition: Twitter had just started rolling out a new feature that built "retweets," a user-created way to quote other tweets, into the main Twitter application. But on Wednesday, plagued by errors, Twitter appears to have pulled the feature for further maintenance.
A post on the Twitter status blog late on Wednesday morning reads that it was "working on (a) high number of errors." The Next Web dug up some discussion from Twitter's developer IRC channel and found that "retweet is temporarily unavailable while we deploy a bug fix." There is not yet word on when it will be back.
The feature was so new that some Twitter users, myself included, never had it in the first place. But it promises to significantly change one part of the Twitter experience: with official, integrated retweets, gone is the signature "RT" in front of a quoted tweet. Instead, a retweet button pushes the original tweets into the retweeter's followers' streams of messages. Like so many Facebook redesigns and restructurings, that hasn't gone over so well with existing users. The blog Twitter Watch called integrated retweeting "the worst ever."
"While current users may get used to the feature, it's going to alienate new users," the Twitter Watch blog asserted. "Twitter isn't like Facebook; it can't boast the same network effect that makes Facebook indispensable. So it needs to keep things simple for new users. But now each new user will need to understand why much of their early friend feed will consist of messages they didn't subscribe to."
But there are advantages, too: with built-in retweets, it gets much easier to track exactly how popular or influential a given message or user is.
Making microdonations on the Web is a little harder than it once was. Many of the services I would have included in this roundup have shuttered in the past year. In fact, there are just a handful of viable such services left.
Regardless, each of the services listed below will help you connect with the charitable organization (or person) you care about most. You can choose a cause, decide how much to donate, and you're done. It's a really simple process. And if you're in the mood to share, it should be a rewarding one.
Get giving
#BeatCancer Although the #BeatCancer initiative that asked for users to include the hash tag in their tweets to raise cash for cancer awareness is over, the organization's site still allows users to make donations to four different cancer organizations. They include organizations dedicated to breast cancer awareness, childhood cancer, an organization dedicated to better research, and a group that provides support for cancer patients.
You can use the site to donate whatever you'd like to any of the organizations. You can also get the word out about the organizations by clicking on the "spread the word" option in each donation widget. Upon doing so, your Twitter account will be populated with a link for others to donate to the same organization. It's a convenient way to be social and contribute to the fight against cancer.
#BeatCancer allows you to fight cancer.
(Credit: Screenshot by Don Reisinger/CNET)ChipIn ChipIn is a fine way to start raising money for the charity you care about. It also provides an easy way to get all your social-networking friends to dole out some cash.
When you get to ChipIn, you'll need to input the cause you're trying to raise money for. You can also input how much cash you want to raise over the term of the fundraiser. From there, you need to input your PayPal account. It works well, but it's the social element that might help most. With the help of ChipIn's Facebook widget, you can put your donation box in front of all your friends. You can also add plug-ins to your Web site. Overall, ChipIn makes it quite convenient to make and receive microdonations.
ChipIn will help you raise cash for things you care about.
(Credit: Screenshot by Don Reisinger/CNET)Google plans to release a Mac beta of Chrome in early December, judging by some chatter on a mailing list for the browser.
Chrome 4.0 is available today as a beta version for Windows but only as a rougher developer-preview version on Linux and Mac OS X. The standout feature of the new version is customization through extensions, a technology that long has been a core asset of another open-source browser, Firefox.
Google has been moving to a new extensions presentation technology called Browser Actions that let people interact with extensions through a small button toward the upper right of the browser window. "We've noticed that many of you have updated your extensions to take advantage of the new UI. We'd like to encourage the rest of you to do so as well," said Nick Baum, a Google Chrome product manager, in a mailing list posting.
But here's the hitch: Browser Actions only work on Windows and Linux right now. That means those building extensions will leave Mac Chrome users behind for a time. But in telling those developers they won't have long to wait, Baum mentioned the deadline for the beta version.
"The earlier you switch, the more time you will have to polish your experience for our Beta launch in early December," he said.
And Google is on the case for adding Browser Actions to the Mac version of Chrome.
"We realize this means dropping Mac support for a couple of weeks, but we already have people working on that," Baum said. "If you prioritize the Windows and Linux versions, we'll bring you cross-platform parity as soon as we can!"
Unsurprisingly, at least one research company agrees that valuing a company at $1.1 billion before it's unveiled a long-term revenue strategy is a little bit premature.
A firm called Next Up Research released a study this week that estimates Twitter's actual value as somewhere between $526 million and $674 million--or somewhere between 47 and 61 percent of what its valuation was in September when Insight Venture Partners, T. Rowe Price, and other investors pumped nearly $100 million into the company..
The positives for Twitter? It's been able to scale to approximately 70 million users while maintaining a single office in San Francisco and about 80 employees--well, sure, but the fail whale does tend to rear its head--and the fact that you can use it almost exclusively as a low-end mobile application means a whole lot of potential for global reach.
Next Up's concerns are pretty predictable: It's not sure how Twitter will keep up its momentum as it prepares to roll out a revenue model. It spelled out a few options that have been tossed around over the past few years--ads on Twitter.com, ads in tweets, charging for access to its application program interface (API), premium accounts, selling data and analytics--but noted that "most revenue generation options available to the company have the potential to alienate at least some of cult-like Twitter's user base."
Regardless, the research firm is guessing that revenues will come. It's projecting $134 million in revenues in 2013, "in an optimistic scenario." Now let's sit back and see how Twitter does it.
Yahoo CEO Carol Bartz
(Credit: Yahoo)Yahoo CEO Carol Bartz has abruptly canceled her scheduled keynote speech at CES, arguably the biggest event on the technology calendar.
Tech Trader Daily noticed Tuesday that Bartz's name had disappeared from the list of keynote speakers for the 2010 CES, almost a month to the day that the Consumer Electronics Association announced her plans to attend the show. A representative of the CEA later confirmed that Bartz was no longer in the mix, and announced plans to have Qualcomm's Paul Jacobs keynote the event.
A Yahoo representative cited "changes in her calendar" that would prevent Bartz from showing up at CES but declined to provide any further details. Bartz was recently forced to cancel appearances on Yahoo's third-quarter earnings call and an interview at the Web 2.0 conference due to the flu.
Unlike when you stand over your coworker's desk, Microsoft's Bing search engine actually works better when you hover.
One of the key features of the would-be rival to Google is that when you hover to the right of a result, you can get a preview of what to expect. As part of an update this week, Bing's hover result will now feature more information including a thumbnail preview of the site in question.
Microsoft is using Wolfram Alpha to help power certain results, such as this search for the fat content of french fries.
(Credit: CNET News)One of the ongoing challenges for Bing, besides just getting more people to use the site, is letting them know that the hover feature is there. Microsoft's research has shown it gets high usage from those who know about it, but also finds that lots of people don't know the feature is there. Microsoft has been experimenting with some different visual cues that might make it easier to stumble upon the previews.
The hover feature was developed by the San Francisco-based team that Microsoft acquired as part of last year's acquisition of Powerset. Powerset, which developed a semantic search technology, also powers Bing's index of Wikipedia.
Bing's fall update update also includes the first fruits of a deal with Wolfram Alpha. As part of that arrangement, certain health related searches, such as "how many calories in a hamburger" will now feature information from Alpha. Bing will also rely on Alpha for some math calculations, Microsoft said in a blog posting on Wednesday. Wolfram noted that Microsoft is one of the first customers for a commercial licensing program that was formally announced several weeks ago.
Other changes to Bing include improved local results for topics such as weather and events.
It's all part of a wave of updates Microsoft is making to Bing this week. On Tuesday, Microsoft said it is moving its MSN Video site under the Bing umbrella, with a new video page that can be used to watch videos from places like Hulu and elsewhere.
The company also announced some enhancements to Bing Maps, including the ability to use the mouse to alter a suggested route and have one's directions re-calculated.
The improvements come as Microsoft is looking for ways to stand out from Google as it tries to wrest share from its much larger rival. The software maker has seen a modest uptick but faces steep hurdles in trying to make more significant gains.
Experian Hitwise said Wednesday that Bing's share reached 9.57 percent in October. That's up from 8.96 percent in September, but still well behind Google, which had more than 70 percent and Yahoo, with 16 percent of the U.S. search query market.
While adding features is clearly important, trying to stay ahead in the search game can be quite a challenge. Just hours after Microsoft announced a deal last month to index real-time tweets from Twitter, Google announced plans to do the same.
Microsoft has also gotten some unwanted attention for one of its features--the Bing Cashback program--where users can get a portion of their online transactions rebated by starting off on Bing. A blog posting outlined a flaw in the mechanism that could allow people to get cash back without ever spending money via Bing.
That posting was pulled after a
Mozilla, racing to release Firefox 3.6 before the end of the year, has released a second beta of the open-source browser for Windows, Mac, and Linux.
Firefox 3.6 beta 1 introduced most of the new features, most visibly the ability to customize Firefox's look through Personas, less than two weeks ago. But among the 190 patches in the new beta is what Mike Beltzner, Mozilla's director of Firefox, described in a blog post as "a mechanism to prevent incompatible software from crashing Firefox."
There also are a number of deeper changes in Firefox 3.6 that Web developers likely will be more interested in. Note that one of them, the ability to use color gradients with formatting technology called Cascading Style Sheets (CSS), has changed syntax in between Firefox 3.6 beta 1 and beta 2.
Mozilla is trying to accelerate the pace of Firefox releases; Firefox 3.7 is set for release in the first half of 2010 and 4.0 some time later that year. The project faces new competition from Google's Chrome browser.
Google's new SafeSearch page
(Credit: Google)Google has long allowed parents a SafeSearch filtering setting that keeps kids from using the search engine to find inappropriate sites like those with explicit sexual images or text.
The problem was that kids could easily change those settings.
Starting Wednesday, however, the company is allowing parents to lock those settings to make it harder (though not impossible) for kids to bypass the settings.
To change the settings, the parent will have to log into his or her Google account and enter a password. Once the settings have been changed, the Google search engine will change in appearance to indicate that it's locked. The new page will have large balls in the upper right corner so that parents can see from across the room that their kids are on the safe search page.
The settings, which places a cookie on the machine, must be configured for each browser the child uses. If you set them only for Internet Explorer, for example, they won't restrict access from Firefox, Chrome, or other browsers. Also, according to a Google representative, the child can get around the settings by using the private browsing feature that is now built into the latest versions of Firefox, Internet Explorer, and Chrome. So, while this will keep kids from accidentally using Google for inappropriate searches, it will not deter tech-savvy kids who are determined to bypass the filters.
As I've said in other posts, filters are never a foolproof way to keep "tweens" and teenagers from inappropriate content. There are always ways to get around them, including using a different machine or mobile phone. Filters are effective for keeping young children from stumbling onto disturbing Web sites and they can be a deterrent to somewhat older kids who might have a momentary or casual interest in looking at material that their parents wish to block.
With all filters and controls, it's important for parents to think about how you use them to help teach your child to exercise self-control and critical thinking so that, eventually, they can safely use the Web without filters or adult supervision. Also, for very young children, say 5 and under, its remains a good idea to be with the child while he or she is online. Tools like Google's SafeSearch are helpful, but they are no substitute for close parental supervision, especially with young children.
Listen to Larry's interview about Google SafeSearch with Google's Scott Rubin
After a trial release in July, Face.com on Wednesday launched Photo Tagger to the public. Photo Tagger is a free third-party application for Facebook that uses facial recognition technology to automatically tag photos of people.
Facebook users can use Photo Tagger to automatically tag their photos, it uses facial recognition software to tag all of the photos in an album. After selecting an album photo Tagger scans the photos, then batches them into groups by subject and suggests tags for them. When tags are confirmed, they are pushed live to Facebook, within the users privacy settings.
Photo Tagger also features its Face Alerts system that continuously scans newly uploaded photos automatically and alerts the user when it detects their photo, or their friends, image whether tagged or untagged.
"Face.com recognizes the ever-expanding scope of Facebook and takes it one step further--making photo sharing better, faster and more fun. Photo Tagger connects names to faces and you to your friends." said Gil Hersch, CEO, Face.com.
