Warning: DO NOT install the latest version of CCleaner [Updated]

Found on Betanews on Sunday, 05 August 2018
Browse Software

When you run the updated version, you’ll notice some worrying changes -- active monitoring refuses to stay turned off, and the privacy settings have been removed in the free version. Avast has also stopped users from being able to quit the software -- yes, really.

That means, for most users, CCleaner will run continually in the background, reporting back to Avast.

Avast is clearly in no hurry to fix these issues, and given its past behavior this probably won’t be the last time we have to warn users off installing or upgrading the software.

So CCleaner now moved into the adware/malware section. With the history Avast has, the best solution is to completely uninstall the program now after Piriform sold out to them.

An open letter to Microsoft management re: Windows updating

Found on Computerworld on Saturday, 04 August 2018
Browse Software

Today, as Windows 10 turns three years old, I am writing to you to ensure that you are aware of the dissatisfaction your customers have with the updates released for Windows desktops and servers in recent months.

Recently many of the participants on the listserve have expressed their concerns and dissatisfaction with the quality of updates as well as the timing of updates.

Some are disabling Windows Update as a drastic measure to ensure that updates do not reboot systems when they are not wanted.

The sad truth is that disabling updates can be a much safer choice by now. It would not be rare to read about an update which accidentally causes side effects, forcing the admin to wait for updates on other software. That's not really acceptable on home PCs, and even less on business installations. Any OS needs to be as minimal as possible and the user should have full control over what gets installed; but Microsoft decides that, for example, the Xbox tiles on a Windows 10 Professional installations are a requirement.

Mozilla Is Working on a Chrome-Like "Site Isolation" Feature for Firefox

Found on Bleeping Computer on Sunday, 29 July 2018
Browse Software

The Mozilla Foundation, the organization behind the Firefox browser, is working on adding a new feature to its browser that is similar to the Site Isolation feature that Google rolled out to Chrome users this year.

But Chrome won't be the only browser with Site Isolation. Work on a similar feature also began at Mozilla headquarters back in April, in a plan dubbed Project Fission.

CloneFox does it again. Instead of constantly implementing what Chrome comes up with, Mozilla should come up with new ideas.

Enterprise Windows 10 users, Microsoft has some 'quality' patches coming your way

Found on The Register on Wednesday, 25 July 2018
Browse Software

While flinging these patches at expectant Windows 10 machines would be a good idea, admins do need to exercise caution and should perform some testing first. All three packages suffer from a known issue where installing the July 2018 .NET Framework Security Updates could bork some COM components with a System.UnauthorizedAccessException error triggered when an affected application tries to load them.

An OS installation where "apps" like Groove Music and Xbox are default and cannot be removed during installation should never be called "Enterprise". Such an OS needs to come with only the most lightweight and cruft-free configuration. Adding any additional bloatware by default counts as a failure.

This Bot Tweets Photos and Names of People Who Bought 'Drugs' on Venmo

Found on Motherboard on Sunday, 22 July 2018
Browse Software

A new bot called “Who’s buying drugs on Venmo” tweets the usernames and photos of Venmo users who have marked their transaction with a particular drug keyword or emoji.

The bot also potentially exposes people in ways they didn’t originally anticipate, touching on issues of consent and privacy.

Venmo, owned by PayPal, is a social-network-mobile-payment-service crossover, allowing users to easily and quickly send money to each other. Users can make all their transactions and activity private, but by default, Venmo publicly presents the username, name, photo, and message sent with the money within the service’s app for others to see.

You have to ask why a service would, by default, make your transaction details possible; but hey, it's Paypal and that's pretty much the kind of crap you can expect from this company. They should get a big lawsuit for violating basic privacy rules.

It walks, it talks, it falls over a bit. Windows 10 is three years old

Found on The Register on Monday, 16 July 2018
Browse Software

Flushed with success having "fixed" the disastrous Windows Vista with the jumped-up service pack of Windows 7 in 2009, Windows boss Steven Sinofsky had a relatively free hand with the next version of the platform.

Coming six years after the release of the beloved Windows 7, Windows 10 had a lot to live up to.

From now on changes would be incremental, regular and a lot more frequent. Whether users wanted them or not.

It's Microsoft biggest failure; apart from Vista. They don't listen to users, but spy on them and shove everything they want down the throats of the users without giving them much of a choice.

Compromised JavaScript Package Caught Stealing npm Credentials

Found on Bleeping Computer on Friday, 13 July 2018
Browse Software

A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the poisoned package inside their projects.

"We determined that access tokens for approximately 4,500 accounts could have been obtained before we acted to close this vulnerability. However, we have not found evidence that any tokens were actually obtained or used to access any npmjs.com account during this window," Silverio said.

This is the third incident in the past year when a hacker has inserted malicious code in an npm package.

The sooner NPM vanishes, the better.

Rewards of Up to $500,000 Offered for FreeBSD, OpenBSD, NetBSD, Linux Zero-Days

Found on Bleeping Computer on Friday, 29 June 2018
Browse Software

Exploit broker Zerodium is offering rewards of up to $500,000 for zero-days in UNIX-based operating systems like OpenBSD, FreeBSD, NetBSD, but also for Linux distros such as Ubuntu, CentOS, Debian, and Tails.

Since Zerodium drew everyone's attention to the exploit brokerage market in 2015, the market has gotten more and more crowded, but also more sleazy, with some companies being accused of selling zero-days to government agencies in countries with oppressive or dictatorial regimes, where they are often used against political oponents, journalists, and dissidents, instead of going after real criminals.

With rewards like that, it's suprising that many researchers still announce the bugs they find so that they can be fixed.

Firefox 61 arrives with better search, tab warming, and Accessibility Tools Inspector

Found on Venturebeat on Tuesday, 26 June 2018
Browse Software

The release builds on Firefox Quantum, which the company calls “by far the biggest update since Firefox 1.0 in 2004.”

Mozilla doesn’t break out the exact numbers for Firefox, though the company does say “half a billion people around the world” use the browser. In other words, it’s a major platform that web developers have to consider.

Firefox is constantly dropping in terms of usage numbers. Mozilla really does it's best to recreate another Netscape fiasco.

Firefox Is Back. It’s Time to Give It a Try.

Found on New York Times on Sunday, 24 June 2018
Browse Software

The web has reached a new low. It has become an annoying, often toxic and occasionally unsafe place to hang out. More important, it has become an unfair trade: You give up your privacy online, and what you get in return are somewhat convenient services and hyper-targeted ads.

Most notably, Firefox now offers privacy tools, like a built-in feature for blocking ad trackers and a “container” that can be installed to prevent Facebook from monitoring your activities across the web. Most other browsers don’t include those features.

In addition to the normal Firefox browser, Mozilla offers Firefox Focus, a privacy-centric mobile browser that blocks trackers by default and purges your web browsing history as soon as you close out of a page.

Focus should be the default then. With the endless tracking and profiling, browsers need to be more aggressive and do everything to protect privacy.