Unlike with previously revealed vulnerabilities, computers can be infected simply by visiting one of the Web sites or viewing an infected image in an e-mail through the preview pane in older versions of Microsoft Outlook, even if users did not click on anything or open any files. Operating system versions ranging from the current Windows XP to Windows 98 are affected.

Source:

This flaw exploits the Windows Graphics Rendering Engine and is reported to affect Internet Explorer, Outlook, and Outlook Express, as well as Firefox and Opera.

editorial aside: Since it is has suggested by an e-peep or two that the "Lib" media can not be trusted, I'm certain that all you Windows users have nothing to worry about since the Washington Post is reporting this. ;-)

Another source of information about this flaw is that purveyor of "Trustworthy Computing" -- Microsoft.

Based on our investigation, this exploit code could allow an attacker to execute arbitrary code on the user's system by hosting a specially crafted Windows Metafile (WMF) image on a malicious Web site. Microsoft is aware that this vulnerability is being actively exploited.

Microsoft has determined that an attacker using this exploit would have no way to force users to visit a malicious Web site. Instead, an attacker would have to persuade them to visit the Web site, typically by getting them to click a link that takes them to the attacker's Web site. In an e-mail based attack, customers would have to be persuaded to click on a link within a malicious e-mail or open an attachment that exploited the vulnerability. In both the web and email based attacks, the code would execute in the security context of the logged-on user.

A possible workaround has been reported a word of warning: improperly changing the .dll settings of a computer can cause serious problems.

* Click on Start > Run.
* Type:
regsvr32 /u shimgvw.dll
* Click OK
* Click OK again when the dialog appears.

Note that this can have an effect on the display of some thumbnails in Windows.

Addendum: to reregister (undo the workaround) the .dll use this command: regsvr32 shimgvw.dll

Windows-based Instant Messaging users beware:

A Santa Claus worm is attempting to trick America Online, Microsoft MSN and Yahoo instant-messaging users into clicking on a file that delivers unwanted software to a victim's computer.

The IM.GiftCom.All worm attempts to dupe IM users into thinking an acquaintance has sent them a link to a harmless Santa Claus file, according to a security advisory issued Tuesday by IMlogic.

People who click on the file will see an image of Santa, but what they are less likely to notice is a so-called rootkit being installed onto their system. A rootkit is a tool designed to go undetected by the security software used to lock down control of a computer after an initial hack. The malicious attacker can then distribute messages to the user's IM contacts, using a similar technique to lure the unsuspecting acquaintance to click on the link.

Since some of the (e:peeps) love sushi and are computer geeks, this might be the perfect xmas gift . . .



On the other hand for the (e:peeps) in touch with their feminine side (no not you (e:jason)), there is always . . .





If you find this interesting, check out the rest of the top 10 weirdest USB drives at

--walt

Firefox 1.5 is availalble now right here

And of course, you need some extensions to go with your FireFox. There are so many great ones: ForcastFox, Google Toolbar, TabFX, Web Developer. To install some of these old standards, go to Tools>Extensions and click to link at the bottom of the extensions window to "Find new extensions."

A new version of Firefox often leads to some issues with extension compatability. (E:Paul)'s fave, Live Headers is no longer available, but I'm sure it will be soon.

And with a major upgrade like 1.5, new plugins are available.

First up: Foxpose
Fans of the Mac OSX Expose feature will know what to expect here. Foxpoxe puts a button in your status bar that wil display all of your open tabs in a visual grid.

And Also Hotness: Tab Preview
This extension makes it so that thumbnail previews of each page pop up when you hover the mouse over the tabs. It's a super fast way to scan through a set of open tabs. Tab browsing addicts will love it.

Happy browsing, Buffalo!

What it is:
An automatically self-updating PC health service that runs quietly in the background. It helps give you persistent protection against viruses, hackers, and other threats, and helps keep your PC tuned up and your important documents backed up.

For more information on the anti-virus beta check out

for more information on the Windows Live concept check out

--walt

Each time you send and receive attachments, Gmail automatically scans them for viruses.

If a virus is found in an attachment you've received, our system will attempt to remove it, or clean the file, so you can still access the information it contains. If the virus can't be removed from the file, you won't be able to download it.

If a virus is found in an attachment you're trying to send, you won't be able to send the message until you remove the attachment.

Gmail anti-virus faq's can be found here:

--walt

Mozilla Firefox 1.5 for Windows, Linux, and osX is available for download

Notable improvements:

* Automated updates
* Faster back and forward button navigation
* Drag and drop reordering of tabs
* Improvements to popup blocking
* Clear Private Data feature (easily clear cache, cookies, saved forms, passwords & download history)
* Various improvements to the user interface
* Report a broken web site wizard (report web sites that don't work correctly in Firefox)
* Better support for Mac OS X (10.2 and greater) including profile migration from Safari and Mac Internet Explorer.
* New support for Web Standards including SVG, CSS 2 and CSS 3, and JavaScript 1.6.
* Many security enhancements

You can get more info information at

--walt

For any of you flash developers out there, this site is so cool. It is a whole site dedicated to opensource flash stuff including a command line video encoder. Watch out for updates soon.

This makes firefox really freaking fast.

Please Note: you need to enter "about:config" without the quotes in the location/address box first

1. Find browser.tabs.showSingleWindowModePrefs and double click on it so it = true
2. Find network.http.pipelining and double click on it so it = true
3. Find network.http.pipelining.maxrequests double click on it and change it from 4 to 100

What do these changes do?
1. Then enables advanced tab options in your Tools/Options page
2. This enables option #3.
3. This makes FF use 8 threads to each page.. Bascially, if you thought FF was fast before, try it after this.

Quoted from: I-Hacked.com Taking Advantage Of Technology - Firefox Browser Hacking

I think this the perfect Christmas present for (e:paul) - a microsatellite that runs on Linux that he can control from his laptop.

SpaceDev has announced a new high performance microsatellite product program named the SpaceDev Modular Microsat Bus™. The SpaceDev MMB-100 microsat is a highly capable modular 100 kg (220 pound) microsatellite based on industry standard "Plug-n-Play" interfaces. In addition to standard Ethernet and USB interfaces, the SpaceDev MMB-100 uses a real-time Linux operating system, and uses CORBA-based object oriented interfaces for subsystems as well as commanding from the ground via the Internet. The basic SpaceDev MMB-100 Bus is expected to price at less than $10 million, not including the payload and payload integration.

For more information about SpaceDev visit

Now, the only question is where do we (e:strip)pers find 10 million dollars to buy this for (e:paul)?

Or maybe someone could write a grant proposal or something and turn it into an art project.