ie8 fix

flaws

HTC cooking up fix for security flaw

HTC is promising to plug a security hole in its Android phones that gives certain mobile apps access to a user's personal information.

Recently discovered by a trio of researchers, the vulnerability can expose e-mail addresses, network and GPS locations, phone numbers, SMS data, and system logs to apps that connect to the Internet. The flaw exists among HTC's portfolio of Android phones, including the Evo 3D, the Evo 4G, and the Thunderbolt, and has been traced to a logging tool that HTC recently installed during a software update.

Related stories: • Thunderbolt, other HTC phones have big security hole, report claims • Security duo finds another pair of vulnerabilities in Android • Android hole could be used to disable antivirus apps

In a statement released today, HTC acknowledged the security hole in its software but tried to assuage its users about the impact.

"HTC takes claims related to the security of our products very seriously. In our ongoing investigation into this recent claim, we have concluded that while this HTC software itself does no harm to customers' data, there is a vulnerability that could potentially be exploited by a malicious third-party application," the company said in its statement. "A third party malware app exploiting this or any other vulnerability would potentially be acting in violation of civil and criminal laws. So far, we have not learned of any customers being affected in this way and would like to prevent it by making sure all customers are aware of this potential vulnerability."

Read more

The 404 916: Where just cause we can doesn't mean we should (podcast)

The 404 welcomes back infamous guest Stoopid Andy to the show, to explain that one can never have enough RAM installed on a desktop machine--even if that supercomputer you're running is only used for occasionally checking e-mail.

As the calm before the iPhone 5 announcement storm hits, we'll discuss some of the headlines that are guaranteed to be forgotten 24 hours from now. They include a gaping security flaw that affects HTC Android devices, the Xbox 360's new leaked dashboard interface, and how Google Chrome is taking a sizable bite out of the browser market.

Finally, we ask "do you still use the United States Postal Service?" A couple of USPS commercials hit the Web today and we're having a tough refraining from picking them apart. They suggest doing business through snail mail is not only hackproof, but safer. We, along with dumpster divers across the world, politely disagree as you'll see in today's episode.

The 404 Digest for Episode 916

HTC security flaw New 360 dashboard looks all mobile-phoney Chrome could overtake Firefox browser share in 2012 Arrested Development return sounds very likely! USPS thinks human hands are safer than 256-bit encryption

Episode 916 Subscribe in iTunes (audio) | Subscribe in iTunes (video) | Subscribe in RSS Audio | Subscribe in RSS VideoRead more

Microsoft MHTML flaw targeted by hackers

Microsoft has warned that hackers are targeting a zero-day flaw that affects all Windows operating systems.

The flaw, which was first highlighted by Microsoft in an advisory in January, allows an attacker to inject a client-side script into the response to a request made by Internet Explorer. The script could allow a hacker to compromise the user--by performing actions online that appear to have originated from the user; by stealing information from the user; or by otherwise trying to fool them.

The company updated its January security advisory on Friday, saying that it had seen attacks in the wild.

Read … Read more

HP: PCs can be returned with faulty Intel chip

Hewlett-Packard announced today that customers can return products that use Intel's faulty Sandy Bridge chipset, following a similar announcement yesterday from Dell.

Intel said Monday that it had stopped shipments of the chipset that accompanies its Second-Generation Intel Core ("Sandy Bridge") processor due to a flaw that can affect access to a hard-disk drive, optical drive, or other device that connects to a computer using SATA technology.

Customers can "return their affected product and choose a comparable product or receive a refund," HP said today in a statement. The world's largest PC maker repeated … Read more

HP, Dell laptops still advertised with faulty chip

Hewlett-Packard and Dell as of this afternoon were still advertising laptops with the Sandy Bridge processor--despite the fact that Intel has halted shipment of Sandy Bridge's accompanying chipset due to a flaw.

Intel announced yesterday that it had stopped shipment of the Second-Generation Intel Core (Sandy Bridge) chipset due to a circuit design "oversight." The defect in the "Cougar Point" chipset--which accompanies the main Sandy Bridge processor--can potentially affect access to a hard-disk drive, optical drive, or other device that connects to a computer using SATA technology.

Today, it was possible to order a Dell XPS 17 online, for example, with a Second-Generation Intel Core i7-2630QM processor and a delivery date of February 22 (the link to that Dell product page was not accessible from the Dell XPS 17 sales page front door, but was generated from a product search on Google Shopping). This system configuration was generated despite a statement from Intel yesterday that it had "discovered a design issue in a recently released support chip, the Intel 6 Series, code-named Cougar Point, and has implemented a silicon fix...[Intel] expects to begin delivering the updated version of the chipset to customers in late February and expects full volume recovery in April."

A Dell saleswoman said she was not aware of the Sandy Bridge flaw and gave a quote with a build time of "a couple of weeks."

Today, Dell issued this statement. "Dell and Intel are in communication regarding the design issue in the recently released Intel 6 Series (Sandy Bridge) support chip, code-name Cougar Point. This affects four currently available Dell products, the XPS 8300, the Vostro 460, the Alienware M17x R.3 and the Alienware Aurora R.3, as well as several other planned products including XPS 17 with 3D. We're committed to addressing this with customers who have already purchased one of the four products and will provide further details on this as it becomes available," Dell said. … Read more

Will Sandy Bridge issues delay new Apple MacBooks?

With Intel's surprising Sandy Bridge news suggesting new computers featuring the processors might see delays, we couldn't help but ask ourselves whether the Sandy Bridge issues mean new MacBook Pros will come later rather than sooner.

First of all, we have no idea when new MacBook Pros are hitting next. However, assuming they're due for a refresh within the next few months, a few things seem likely: They're going to receive new Sandy Bridge processors, including the older Core 2 Duo-toting 13-inch MacBook Pro. And, they'll likely arrive after the competition. At least, that's … Read more

What to do if you've already received a flawed Sandy Bridge desktop

Update: Unedited desktop vendor responses added to the bottom of the post. We'll add more as they come in.

Following the news this morning about the serial-ATA chip flaw in Intel's new Sandy Bridge-supporting chipsets, we immediately thought of the two (soon to be three) Sandy Bridge-powered PC's we've reviewed since the January 9 launch.

In addition to the PCs we've gotten our hands on from Falcon Northwest and Origin (and soon Maingear), virtually every other large and small desktop vendor has been shipping Sandy Bridge-equipped PCs for the past few weeks.

In light of this chipset flaw, whether you've spent $5,000 on a gaming system or $1,000 on a more modest desktop or all-on-one, you'd be right to want to know whether you need to send your system back, as well as who is going to pay for and parts, labor, or shipping costs.

First, the problem. According to Intel: "In some cases, the Serial-ATA (SATA) ports within the chipsets may degrade over time, potentially impacting the performance or functionality of SATA-linked devices such as hard disk drives and DVD-drives."

A vendor who requested anonymity (Update: Intel is now on the record with the details of the flaw) told us the problem actually affects serial ATA ports two through five on a six-port motherboard. The affected ports are all Serial ATA II, so if you ordered a higher-end Serial ATA III/6.0 hard drive (and the vendor connected it to the right port), you should be safe (upgrade path anxieties not withstanding). If you do have components connected to the afflicted ports, we're told you may not ever see the issue. Intel told Anandtech regarding the frequency of the flaw: "over 3 years of use it would see a failure rate of approximately 5 - 15% depending on usage model." If the issue does manifest itself, you will experience slower read and write performance, but data integrity, according to Intel, won't be an issue.… Read more

Intel's Sandy Bridge chipset flaw: The fallout

The flaw Intel disclosed today in its Sandy Bridge chipset was caught early in the rollout of the company's new processor, so there aren't large numbers of systems in customers' hands. But the buyer beware caveat applies, as always.

Officially launched at this year's CES, Sandy Bridge--or "Second Generation Intel Core Processor"--is the first mainstream Intel chip to integrate graphics silicon directly onto the processor. It is also the first chip line based fully on Intel's leading-edge 32-nanometer manufacturing process. These two features allow Intel to offer a power-efficient processor with improved multimedia … Read more

Intel reveals design flaw in Sandy Bridge chipset

Intel has discovered a design flaw related to its new Sandy Bridge chip, the company said today.

The flaw has forced the chipmaker to stop shipments of a chipset, though Intel also announced that it has a design fix in place. Intel expects the cost of repair and replacement to be around $700 million, forcing it to cut its sales forecast for the first quarter by $300 million.

Prior to the announcement, trading of Intel's stock was halted on the New York Stock Exchange for about 25 minutes. Since trading resumed around 7:20 a.m. PT, investor reaction … Read more

CNET TV Apple Byte: iPhone security flaws unlocked

This week's Halloween-inspired Apple Byte features CNET TV's Brian Tong discussing the latest in Apple news, tips, tricks, and of course rumors. This week, Apple's biggest security flaw has been exposed by simply initiating an emergency call, iOS gets major competition from a forthcoming Sony PSP phone and major dap from Nintendo, and the MacBook Air gets a speed test versus popular MacBook Pro versions.

On an iOS device? View the Apple ByteRead more