Amazon Kindle Cloud Reader

Apple does not want to support Flash on iOS platform (yes, iPhone, iPad and iPod touch cannot playback Flash media) as it argues that the emerging web standards, HTML5, which can do everything Flash offered will eventually replace Flash technology. And now who needs a tightly controlled App Store when a similar web app built on HTML5 can do the job?

Many eBook stores has gone the way of HTML5 web app to response and circumvent Apple’s new in-app purchase or in-app subscription rules which disallow any links to external mechanisms or stores for purchasng digital books or magazine subscriptions. As the result, most publishers altered to apps to strip the links or stores inside the app, and goes on to introduce HTML5 web app, where it’s not required to be submitted to iTunes App Store to be approved, allowing more controls – such as a store or buy button.

Amazon has also launched its Kindle Cloud Reader, a web app that lets user to browser and read the Kindle books instantly, plus make purchases from Amazon from within the app. Kindle Cloud Reader was optimized to be used on Google Chrome web browser running on Mac, PC, Linux or Chromebook, Safari web browser running on Mac or PC, and Mobile Safari on iPad (iOS 4

View the Original article

Huge Adobe Reader Patch Released A Week Early

Adobe patched an impressive 23 vulnerabilities in Reader and Acrobat today, setting a record for this year. Computer World reports that the patches are mostly critical and include one for a flaw that has been actively exploited for a month or more. This update comes to us a week ahead of schedule after Adobe promised to move the date up for this patch to address a new vulnerability in font parsing that is seeing attacks.

Recently Adobe has had to put out quite a few zero-day patches, with an attack on Flash in September that required an out-of-band patch and now this new font bug. The patch put out today includes the Flash patch as well because Reader and Acrobat include code to run Flash embedded in pdfs.

The most notable patch is for the exploit found in early September by Mila Parkour. This exploit was lauded as “scary” and “clever” because it bypassed built-in Windows protections with ease and used a stolen signed digital certificate. The exploit was later named after David Letterbeater who was the subject of many rigged emails as part of the attack.

Adobe notes that 20 of the vulnerabilities being patched could lead to code execution where hackers could hijack the computer. Unlike Microsoft, Adobe does not assign official threat ratings to patches. Two of the remaining bugs could be used to crash Reader or Acrobat and the last is a bug just for the Linux version of Reader. To update your copy of Reader or Acrobat fire up the auto-updater or grab the link from the official Adobe advisory.

Join 16,500

View the Original article

Google Desktop RSS Reader with EspressoReader

by Srivathsan G.K on September 30, 2010

in Computers,Freeware

We had already talked enough about Google rss reader for desktop, also we had seen Feedsquare extension for chrome which turns your regular rss reading experience into a visually stunning rss feed walls. If you’re not a fan of RSS reader, then you might check the best 5 alternatives for RSS feed reader. Today, another Rss desktop reader with visually stunning looks and cool adobe air application.

View the Original article

Adobe Reader Suffers From Yet Another Exploit

Last week saw the addition of another chapter to the never-ending malware saga that is Adobe Reader. A clever exploit for a vulnerability was uncovered by researcher Mila Parkour and Reader as well as Acrobat currently remain unpatched. PC World reports that the expoit uses rigged PDF files that include code to exploit the zero-day flaw.

It has been called impressive and clever because it first gets around 2 Microsoft-created protections,

The sophisticated exploit bypasses two important defenses that Microsoft erected to protect Windows, ASLR (address space layout randomization) and DEP (date execution prevention), researchers have confirmed.

Second, the attack also boasts a valid digital signature by Vantage Credit Union. Verisign has revoked the signature to prevent further usage but the malware that’s already out there will still be carrying what looks like a valid signature. The attacks have been targeted to specific corporations and individuals but now that the word is out the hackers will probably expand its target range.

Adobe has not offered any word on how to avoid the attacks or when they will have a patch ready. They did warn users on Tuesday about the malware. To get infected the bad PDF needs to be viewed so it does require some interaction and disabling JavaScript will block the attack.

This is the latest attack to use digital signatures to fool defense systems, it bears a resemblance to the Stuxnet worm which was a problem for some companies over the summer. It wouldn’t be surprising if in the future more malware uses these sophisticated techniques with digital signatures since they have been effective.

Join 16,500

View the Original article