A previously reported directory traversal vulnerability in Firefox which was rated as Low Severity has been upgraded to “Hig Severity”, but fix is on the way.

The issue is about the so-called ‘flat’ add-ons that store their components in multiple files instead of using a single .jar file. A flaw in the way the program handles the chrome protocol means a maliciously crafted web page is able to traverse directories in order to read data from known locations.

The problem will be resolved when Firefox 2.0.0.12 (which will be available shortly, according to the Mozilla Security Blog) becomes available.

Popularity: 1% [?]

Attractel is an all-solution VoIP (Voice over Internet Protocol) company founded in 2005, specialized in developing VoIP applications, mostly based on the Asterisk open-source PBX project.

If you will notice, there have been tremendous amount of applications and gadgets to make VoIP a lot easier to use for our day to day work. However, what VoIP could not offer was faxing, faxing over VoIP is practically impossible for one simple reason: VoIP telephony cheapness is achieved through compression of signals for the sake of making more calls with less bandwidth. This means that voice data gets compressed to travel to the other side, where it gets decompressed. This is performed by codecs.

One of Attractel’s products is the Faxterisk, a commercial software solution to support T.38 fax support to your Asterisk.

This is how Attractel’s Faxterisk works

• A fax terminal passes analogue data to a T.38 gateway
• The gateway takes the signal, demodulates it and transmits it over the existing IP network to another T.38 capable device(e.g. Internet Aware Fax(IAF) or a compatible Analogue Telephone Adapter (ATA)) or another T.38 gateway that modulates back the digital signal and sends it over the PSTN to another fax terminal.

From Attractel’s website:

The sensational part of our Faxterisk solution is that it is actually a far more reliable faxing method than traditional analogue faxing. This is not a phenomenon; it is due to the fact, we may want to believe that landlines are good carriers, but this is far from true as far as greater distances are concerned. IP networks are more reliable carriers over long distances and with our FoIP solution, you will inevitably enjoy faxing more than ever!

The Faxterisk package includes:

• T30faxRX for receiving normal faxes over PSTN
• T30faxTX for transmitting normal faxes over PSTN
• T38faxTX for T.38 fax origination (IAF fax)
• T38faxRX for T.38 fax termination (IAF fax)
• T38gate for FoIP gatewaying

There is no need to change anything in your Asterisk’s dial plan if you install Faxterisk. Faxterisk detects the fax signal and automatically switches to fax mode, which makes it most convenient for your working process.

NOTE: Faxterisk works with Asterisk* 1.4.X versions only.

Popularity: 2% [?]

Sony PSP’s latest firmware update which includes Skype VoIP chat software has arrived in North America and Europe.The chat software, which is only compatible with the PSP Slim because of its increased internal memory allows users to call other Skype members for free.

Aside from PSP Slim, other requirements for Skype chat software to work include Wi-Fi, memory stick and microphone headset.

The 3.90 firmware can be obtained by selecting Network Update from the PSP’s settings menu. The firmware can be found in Sony’s official system update page.

Popularity: 1% [?]

Completely Automated Public Turing test to tell Computers and Humans Apart or CAPTCHA, is a technique being used by Yahoo, Google, Microsoft and other service providers to prevent automated software programs from posing as humans and signing up for new accounts.

CAPTCHA protects websites from bots by presenting text that is easy for humans to read but difficult for automated programs. The first CAPTCHA was invented at the Carnegie Mellon University to be used by Yahoo. CAPTCHA is also being used to prevent comment spam in blogs and prevent dictionary attacks in password systems.

A team of Russian hackers have found a way to read the CAPTCHA with 35% accuracy. The yahoo! CAPTCHA is believed to be one of the most difficult CAPTCHA’s to crack. because it utilizes bended alpha numeric characters and other features you might expect from a strong CAPTCHA, and still it’s easy to solve by humans.

What the Russian hackers had to say about the Yahoo! CAPTCHA:

“It’s not necessary to achieve high degree of accuracy when designing automated recognition software. The accuracy of 15% is enough when attacker is able to run 100,000 tries per day, taking into the consideration the price of not automated recognition – one cent per one CAPTCHA.” - which seems a plausible conclusion.

The implementation of yahoo CAPTCHA recognition engine is here . It consists of two projects (client and server).

First project (server) needs MATLAB 2007a Compiler Runtime (MCR) installed. It waits for a connection and receives CAPTCHA, after that it sends recognized CAPTCHA text string back to client.

Client reads jpg-files in test1 directory and sends them one by one to the server located on the same machine. “

Now that hackers are able to read CAPTCHAs, is there a possibility that a “tsunami of spam” is in the offing?

Popularity: 1% [?]

Capture, edit and share multimedia directly from the mobile device! MOTO Z10 is a complete, pocket-sized, mobile filmstudio packed with next-generation 3G technology into a unique ergonomic kick-slider design.

MOTOROLA Z10 Mobile Phone media features that will definitely hit the mobile market:

• Expandable memory up to 4GB with microSD™ (32GB when available)
• Stores up to 12 full length movies and 40 hours of music by using the external memory⁶
• OMA DRM 2.0 provides access to the highest quality Media content
• OTA Downloading for instant access to new content
• Side loading of existing Media library supported via Microsoft Media Player 11
• 30 frames per second video playback
• High resolution 2.2″ 16m TFT QVGA display
• 30 frames per second video capture at Mpeg 4
• Integrated Stereo Bluetooth™ wireless technology

KEY FEATURES

• HSDPA, Symbian UIQ and 3.5G technology
• 3.2 megapixel camera, Superfast burst mode delivers 3 shots per second
• 30 frames per second video capture
• 2.2″ QVGA display for 30 frames per second video playback
• Storyboard editing allows for combination of multiple videos, addition of soundtrack¹, commentary and visual effects
• Future-proofed for up to 32GB microSD card
• Instant media download and streaming at HSDPA 3.6Mbps²
• AMR, AAC AAC+, MP3, WMA, 3GPP, H.263, H.264, Mpeg 4

SPECIFICATIONS

• Dimensions: 109×15.5 / 16.5mm
• Band: Dual mode UMTS 2100, HSDPA 3.6Mbps Quadband GSM/GPRS/EDGE Class 12
• Weight: 115g
• Battery: Li-Ion 1030mAH (up to approximately 5 hours 3G talk time3; 5 hours video playback; 12 hours music playback)
• Display: QVGA 16m color TFT

CONNECTIVITY

• Connect with Bluetooth® wireless technology⁴ or with supplied USB cable

SUPPORTED ACCESSORIES

• MOTOROKR S9 Bluetooth® Stereo Headphones
• Bluetooth® Headset H680 Midnight
• Portable Bluetooth® Hands-free Speaker T305
• Bluetooth® Automotive Music & Hands-free System T605

Popularity: 1% [?]

Developer advocate Quang Nguyen posted on Android Developers Blog that the submission deadline for the first Android Developers Challenge is extended to April 14, 2008. The main reason why they are extending the deadline is because they will be releasing an updated SDK in the coming weeks. This is to give participants extra time to take advantage of the advantage of the updated SDK aside from the extra time other developers are asking to refine their applications.

Below is the revised schedule:

• April 14, 2008: Deadline to submit applications for judging
• May 5, 2008: Announcement of the 50 first round winners, who will be eligible for the final round
• June 30, 2008: Deadline for he 50 winners of the first round to submit for the final round
• July 21, 2008: Announcement of the grand prize winner and runner-up

For more information on Android Developers Challenge, please visit their website.

Popularity: 1% [?]