Sign up for our Technology Newsletter 
Adobe Reader Security Issue Found
McAfee has discovered a vulnerability in Adobe’s Reader program that allows people to track the usage of a PDF file.
“Recently, we detected some unusual PDF samples,” McAfee’s Haifei Li said in a blog post. “After some investigation, we successfully identified that the samples are exploiting an unpatched security issue in every version of Adobe Reader.”
The affected versions of Adobe Reader also include the latest “sandboxed” Reader XI (11.0.2).
McAfee said that the issue is not a “serious problem” because it doesn’t enable code execution, however it does permit the sender to see when and where a PDF file has been opened.
This vulnerability could only be dangerous if hackers exploited it to collect sensitive information such as IP address, internet service provider (ISP), or even the victim’s computing routine to eventually launch an advanced persistent threat (APT).
McAfee said that it is unsure who is exploiting this issue or why, but have found the PDFs to be delivered by an “email tracking service” provider.
The vulnerability works when a specific PDF JavaScript API is called with the first parameter having a UNC-located resource.
“Adobe Reader will access that UNC resource. However, this action is normally blocked and creates a warning dialog,” Li said. “The danger is that if the second parameter is provided with a special value, it changes the API’s behavior. In this situation, if the UNC resource exists, we see the warning dialog.
“However, if the UNC resource does not exist, the warning dialog will not appear even though the TCP traffic has already gone.”
McAfee said that it has reported the issue to Adobe and is waiting for their confirmation and a future patch. Adobe wasn’t immediately available for comment at the time of writing.
“In addition, our analysis suggests that more information could be collected by calling various PDF Javascript APIs. For example, the document’s location on the system could be obtained by calling the Javascript “this.path” value,” Li added.
Google Fights NSL Over Data Privacy
April 16, 2013 by admin
Filed under Around The Net
Comments Off on Google Fights NSL Over Data Privacy
Google is fighting a National Security Letter (NSL) issued by the US government, with the Electronic Frontier Foundation (EFF) acknowledging it is one of the first firms to do so.
Google took the unusual step last month of revealing, albeit in vague terms, the number of NSLs it received from the US government. At the time the company said it was working with the authorities to improve transparency around the subject, but according to court filings it is also fighting against handing over users’ data.
In March, Google filed a petition to set aside a legal process. Kevan Fornasero, a lawyer for Google said in the filing that petitions “filed under Section 3511 of Title 18 to set aside legal process issued under Section 2709 of Title 18 must be filed under seal because Section 2709 prohibits disclosure of the legal process”.
Fornasero’s reference to Section 2709 refers to the ability of the FBI to issue NSLs and force the handover of user data. According to the EFF, Google is one of the first communications companies to fight an NSL, but because Section 2709 doesn’t allow firms to disclose the legal process, few people can be certain that others haven’t tried to stand up to the US government.
Matt Zimmerman, a lawyer for the EFF said, “The people who are in the best position to challenge the practice are people like Google. So far no one has really stood up for their users’ among large Internet service providers.”
Google has tried in recent years to provide users with some information on how it deals with government agencies’ requests for user data. If the firm can succeed in its fight against NSLs then it could open the floodgates for others to stand up against a law that some see to be nothing more than a snooper’s charter.
Blackberry Plans New Tablet
April 9, 2013 by admin
Filed under Around The Net
Comments Off on Blackberry Plans New Tablet
BlackBerry plans to roll out a larger tablet and two phone-tablet combos, or phablets, over the next year, according to a leaked road map presentation slide.
The three devices will run the BlackBerry 10 mobile operating system, which powers the Z10 smartphone and the upcoming Q10, which features a physical qwerty keyboard, according to the slide, which first appeared over the weekend on Twitter as @BB10Leaks.
BlackBerry officials didn’t comment on the road map. However, in comments to analysts last Thursday, CEO Thorstein Heins said repeatedly that the company will introduce more BlackBerry 10 devices this year, though he didn’t indicate what form factors the products would feature.
The three new devices shown in the slide include a BlackBerry 10 tablet with a widescreen aspect ratio, as well as a “U10″ phone-tablet, which some call a phablet, and an “R10″ phablet with a physical qwerty keyboard.
The slide indicates that the B10 tablet will ship in the third or fourth quarter, while the two phablets will be released later, with the U10 shipping at the end of the year and the R10 in spring of 2014.
There are no specifications on the slide, but the devices appear to be shown roughly in proportion to one another, with the phablets appearing to be wider than the existing Z10 and Q10 smartphones.
BlackBerry already has a 7-in. tablet called the PlayBook that is more square in shape than the widescreen look of the B10 in the slide. Some analysts and bloggers said it’s possible that BlackBerry is developing a competitor to the various 9-to-11-in. tablets already on the market, including many Android tablets, as well as the 9.7-in. iPad.
“BlackBerry wants to be a full-line competitor, particularly for business users, so they have to have a full line of products to compete head-on with Apple and Android, primarily Samsung,” said Jack Gold, an analyst at J.Gold Associates. “I would expect any viable competitor to establish a full line of products touching on all the various preferences of the marketplace, which includes smartphones, phablets and tablets.”
Gold couldn’t confirm whether any of the details in the leaked slide were accurate, but he noted that it doesn’t appear to include the mid-priced smartphones that Heins and other executives have hinted that BlackBerry may launch over the next few quarters.
The PlayBook tablet first went on sale in April 2011, running on what BlackBerry then called the BlackBerry Tablet OS, based on QNX. BlackBerry later said it would merge that tablet operating system into BlackBerry 10. The company also released a major update to the PlayBook tablet operating system in February 2012.
The first release of the PlayBook was criticized for not having native email.
Analysts are not sure that BlackBerry can keep up with production demand for so many new devices that depend on a relatively constrained supply chain for displays and other components. But to boost its global smartphone market share, currently at less than 10%, BlackBerry will need a product lineup with a variety of options.
Will Tegra 4 Help nVidia’s Financials?
Comments Off on Will Tegra 4 Help nVidia’s Financials?
Trefis analysts believe Nvidia’s Tegra business is likely to grow over the next few years, although Nvidia won’t become a mobile chip company anytime soon.
In a note published a couple of days ago, Trefis concluded that Nvidia has managed to offset the impact of the PC slump thanks to mobile revenue. The PC market took a massive hit in 2012, and although things are looking up, Tegra could still come in handy.
Nvidia currently earns about 18 percent of its revenue from Tegra processors, which is not bad for a product that was on the drawing board just a few years ago.
“We estimate Tegra sales to grow at a CAGR of 17% until 2016. While we believe that Nvidia will manage to expand its footprint in mobile computing, we think that the increasing competition will keep its growth rate lower than the industry average,” said Trefis.
However, Trefis went on to conclude that Nvidia had more lack with tablets than smartphones. Last year it scored several big tablet design wins, but relatively few phone wins. The Tegra 4i, with integrated LTE, should lend a helping hand, but it won’t be ready for much of 2013. In addition, Nvidia is facing more pressure from Qualcomm and Samsung, while at the same time it was forced to push back the introduction of Tegra 4 due to technical issues.
Trefis believes Tegra’s contribution to Nvidia’s overall revenue could reach over 25 percent by 2019, which means the Tegra business won’t expand much in a mature smartphone market.
Nvidia has Tegra, AMD has consoles, so both outfits have something to fall back on in a slow PC market, at least for the time being.
Is Android Safer Than iOS?
The general consensus is that iOS apps tend to be somewhat safer than their Android counterparts. Apple goes to great lengths to have apps vetted and as a result far fewer iOS apps end up with malware or security issues.
However, a new report fresh out of Appthority claims iOS apps have their fair share of issues and in some respects then can pose an even greater security risk than Android apps. The report covered the top 50 apps from the Apple App Store and Google Play and found that iOS apps exhibited riskier behaviour.
“The majority of iOS apps track for location (60%), share data with advertising or analytics networks (60%) and have access to the user’s contact list (54%). A small percentage of iOS apps also had access to the user’s calendar (14%),” the report found.
However, Android fans shouldn’t be too happy since their platform is not far behind. Half of them share data with ad networks or analytics companies, while 42 percent tracked location. Slightly better, but nothing to be proud about.
One of the most worrying findings is that both Android and iOS apps don’t do much to prevent personal data from leaking from our devices. Not a single iOS app analyzed in the study used encryption to send and receive data, and neither did 92 percent of Android apps.
So while it might seem that Android is a somewhat better platform for users with privacy concerns, both Google and Apple are pants at that sort of thing.
HP Goes All-In On Tablets
Hewlett-Packard garnered attention at Mobile World Congress show with its new Slate 7-inch tablet and then the sale of webOS assets, but the company is looking to put past distractions behind and will release more tablets in the future, the company said.
“You can expect going forward [to release] a family of products,” said Shane Wall, chief technology officer at Hewlett-Packard’s mobility group, in an interview at MWC. The mobility trade show is being held in Barcelona from Feb. 25 to 28.
The 7-inch tablet attracted a small crowd at the HP booth, with people lining up to photograph or use the device. The company effectively took a dive into the low-cost tablet and tried to differentiate its tablet by a lower price, and also features like a micro-SD card slot for expandable storage and dual-cameras. Google’s $199 Nexus 7 is priced higher and has a quad-core processor, a higher-resolution screen and Android 4.2, but HP believes it will sell a lot of the tablets at the $169 price.
“We’re obviously late,” Wall said. “We wanted to start and see how aggressive we can be on the low end.”
The Slate 7 also signifies HP’s re-entry into the consumer tablet market after a disastrous stint with the webOS mobile operating system, which it got with the acquisition of Palm in 2010 for $1.2 billion. The first webOS tablet, the TouchPad, was launched in 2011, but later discontinued along with webOS smartphones. Since then HP has released enterprise tablets such as ElitePad 900 with Windows 8, and now the company has adopted Android for consumer tablets.
HP Looks Beyond Windows
Hewlett-Packard has announced the availability of its latest Pavilion laptop with Google’s Chrome OS as the PC maker attempts to improve laptop sales by offering an alternative to the Windows OS.
The Pavilion 14 Chromebook has a 14-inch screen and runs on a dual-core Intel processor. The laptop is roughly 21 millimeters thick, and weighs 1.8 kilograms. It offers just over four hours of battery life, said David Conrad, director for product management at HP’s consumer products group.
The laptop is expected to ship on Monday in the U.S. starting at $329.99. The company did not immediately provide worldwide availability information.
HP wanted to widen its product offerings and the new Chromebook is targeted at those who do most of their computing on the Web, Conrad said.
“It’s really about choice. We have a very wide offering,” Conrad said. “We think the time is right for an additional choice for people to have a gateway to their Google digital lifestyle.”
The laptop has only 16GB of solid-state drive storage, but will offer 100GB of free Google Drive storage for two years.
The Chromebook has the same design as HP’s other PC offerings, which mostly run on Windows and have standard-capacity hard drives. But, with a lot of data moving to the cloud, the Chromebook provides a different usage model.
“We see this as another device to be used around the house. It’s easily managed,” Conrad said.
Blackberry Makes A Comeback
February 5, 2013 by admin
Filed under Smartphones
Comments Off on Blackberry Makes A Comeback
Research In Motion has hinted that it will unveil two new handsets early next month to accompany the release of its BlackBerry 10 operating system.
RIM is expected to unveil the phones at an event in New York City on Wednesday and will begin promoting BlackBerry 10 to consumers the following Sunday, Feb. 3, when it will air a TV commercial during the Super Bowl.
The sporting event attracts one of the largest TV audiences of the year in America, and companies pay millions of dollars for a 30-second advertising spot, underscoring how important it is for RIM that its new BlackBerry platform will be a hit. The same commercial will also air in Canada, RIM’s home country.
In announcing its publicity plans Friday, RIM also hinted at when the phones will be available to consumers. It said the TV spot “kicks off a week of worldwide launch activity for RIM’s BlackBerry 10 platform, along with the first two devices to run on the new platform.”
If the commercial marks the start of a weeklong buildup to the launch, that would put the North American release of the phones at roughly the start of the second week in February.
Is Apple Hiding Billions?
February 4, 2013 by admin
Filed under Around The Net
Comments Off on Is Apple Hiding Billions?
According to Apple’s Q4 corporate filings, the company channeled $11 billion into tax havens in a single quarter. The Sunday Times claims the company is sheltering a total of $94 billion in tax havens. However, Apple’s activities are completely legal and the IRS can’t do anything about it.
But Apple’s tax avoidance strategy is not limited to the US. The company is avoided an estimated £550 million in tax in Britain back in 2011. A different analysis suggests a £550 million tax bill. Let’s not forget Kate Middleton is about to have a baby, and babies tend to cost money, so shame on you Apple.
American politicians, from both sides of the political spectrum, like to have their photos taken next to anything Apple. The company is often viewed as an American success story, as it managed to reinvent itself and come back from the brink to become the world’s second most valuable company.
FTC Defends Google Decision
January 25, 2013 by admin
Filed under Around The Net
Comments Off on FTC Defends Google Decision
The FTC defended its decision to let Google carry on with its anti-trust-like antics, while other regulations in civilized nations are planning to put the boot in.
The US Federal Trade Commission reached a settlement with Google which really did little to stop the company using its dominance to push down search results from its competitors. The move attracted considerable criticism because it followed a letter from US senators to go easy on the search engine because it was good for US jobs. We guess they mean the jobs of US senators who Google paid campaign contributions.
Google promised to change the ways it presents some search results and runs search advertising, but was exonerated of the results bias claims. Rivals including Yelp and Microsoft claimed that Google had favored its own product results over those of its competitors and called for the anti-trust case. What makes the case look more suspect is that the EU is less frightened of actually fining Google or forcing it to behave. Indeed indications from Brussels are that it has not only agreed with the rival’s complaints but will do something about it if Google does not pull finger.
But FTC chairman Jon Leibowitz told Talking Points Memo that the agency’s decision was legally sound and would be beneficial to competition and consumers. Under facts we found, all five of us, from liberal Democrat to conservative Republican, agreed that the evidence militated against an anti-trust case,” Leibowitz told TPM.
The fact that we managed to have both Google and Google’s rivals unhappy, in an odd way that’s maybe unique to Washington, that puts us in the right place substantively, he claimed. When asked if Google’s $25 million lobbying budget for the duration FTC’s investigation helped, he said that lobbying makes the companies feel good and lobbyists feel good.
“At the end of the day, whether you want to say lobbying had any influence, or cancelled itself out because there was lobbying on both sides, if you’re going to do what lobbyists want you to do in a regulatory agency, you’re not doing your job.”