Microsoft Improves Edge Browser In Windows 10

Microsoft has its Edge browser in Windows 10 safer. The browser is also resistant to unwanted DLL injections. The new version of Edge to Edge HTML rendering engine 13 that is built into Windows 10, no longer used by ActiveX and Browser Helper Objects. Allows the user is better protected against so-called binary injection attacks.

Browser hackers are a favorite target. If someone succeeds in an advertisement that the user sees, modify or add to it one, that person may earn a lot of money, Microsoft said. But hackers are increasingly using browser injections. The user notices this if, for example once a toolbar in the web browser has been added or if the browser home page surreptitiously changed.

Microsoft Edge that will not happen, writes Microsoft itself. The browser blocks unauthorized DLL injections, except as they are part of a Windows-based component, or in the case of a signed driver for a device. "Only DLLs that are labeled" Microsoft signed "have or Windows Hardware Quality Lab (WHQL) are signed, are allowed." According to Microsoft, the new enhancements make browsing with Windows faster, safer and more stable.

Critical Vulnerabilities In Adobe Flash Player Poem

There is a new version of Adobe Flash Player that appeared in a total of 17 vulnerabilities were fixed, allowing an attacker in the worst case, the computer could take over completely. Through 16 of the leak, it was possible for an attacker to execute arbitrary code on the computer.

An example is to install malware. Only was visiting a hacked or malicious website is adequately, or viewing an infected ad.The remaining vulnerability allowed an attacker to bypass the security of Flash Player, which made it possible to attribute any data to the file system with the rights of the logged in user.

A researcher named Bilou discovered 11 of the 17 vulnerabilities and sold to HP's Zero Day Initiative, which then briefed Adobe. Users are advised to update within 72 hours to Flash Player version 19.0.0.245. This can be done via the automatic update feature or Adobe.com. In the case of Google Chrome, Internet Explorer 10 and 11 on Windows 8 and 8.1 and Internet Explorer 11 on Windows 10 and Microsoft Edge Embedded Flash Player will be updated via the browser. Through this page Adobe can check which version is installed on the system.

South Korea Seems To Wrest IE And ActiveX

By a legal obligation from the end of the last century, most South Koreans still use Internet Explorer, but the country seems slowly to Microsoft's browser and ActiveX technology to emerge. This week launched the Korea Trade Network (KTN), part of the Korea International Trade Organization, new authentication services in addition to IE also work in other browsers.

The KTN late announcement specifically that the new services are free and ActiveX standard Microsoft Edge, Chrome and Firefox work. ActiveX is an extension dating from 1996 model, making it possible to add extensions to Internet Explorer.Decided because of all kinds of stability and security vulnerabilities in Microsoft ActiveX Edge no longer support.

In South Korea ActiveX still plays an important role. To encourage online shopping and Internet banking and fears about insecurity to take away the Internet, the South Korean government developed its own system to authenticate the identity of online buyers. To order online buyers had their name and Social Security number to apply for a digital certificate from the government. This certificate could show people as a kind of identity card to the retailer. The whole process was designed so that it occupied just a few clicks.

The technology for these online identity was based on Microsoft's ActiveX technology, which works only in Internet Explorer. When the system was introduced in 1999, the South Korean government stated that it was mandatory for online purchases above 210 euros. For smaller purchases by South Korean retailers, however, applies a similar certification system developed by webshops and credit card companies. However, the law does not apply to foreign retailers.

Many South Koreans also use IE. In recent years, received the browser, as ActiveX, having to make many security problems. Nevertheless, the browser according to StatCounter in South Korea still has a market share of 67.8%. The announcement of the KTN is also noteworthy. In August it was announced that the Korean financial authorities want the authentication certificates within two to three years phasing.

Adobe Fixes Numerous Flash Player Vulnerabilities

Adobe today released a new version of Flash Player that 23 vulnerabilities are fixed. Through the vulnerabilities an attacker would at worst systems can take over completely. Eighteen of the vulnerabilities allow an attacker to execute arbitrary code on the computer, such as installing malware.

Simply select visiting a hacked or malicious Web site or see getting an infected ad. Through the remaining vulnerabilities were able to retrieve information. In addition, protection against so-called "vector length corruptions" improved. Adobe recommends because of attacks from the past that both Mac and Windows users the update within 72 hours of installation.

It is common for cyber criminals following the appearance of Adobe Updates develop exploits to attack users who have installed the updates yet. In the case of Google Chrome and Internet Explorer 10 and Edge 11 and Microsoft Windows 8, 8.1 and Windows 10 the embedded Flash Player will be updated automatically via the browser. The vulnerabilities have been fixed in Adobe Flash Player version 18.0.0.241 (Extended Support Release) and 19.0.0.185. Through this page,see what version is installed on the computer.

Mozilla's Chrome Extensions Support In Firefox

Mozilla has announced major changes to the operation of add-ons in Firefox, including the possibility of later extensions for Google Chrome and Opera and possibly Microsoft Edge will work in the browser. In addition, measures are being taken against spyware, adware and other malicious add-ons.

According to Mozilla developers have much of a Firefox add-on also similar extensions for Chrome, Safari, Opera or developed. "We want the development of add-ons is more like web development, that same code using a set of standards across multiple browsers running," said Mozilla's Kev Needham. That is why Mozilla is working on a new API called Firefox WebExtensions.

Extensions for Chrome, Opera and possibly in the future, Microsoft Edge will therefore run in Firefox as Webex Tension.According to Needham, the API a number of advantages, such as supporting multiple processes and reducing the risk of malicious add-ons and malware. WebExtensions will like other Firefox add-ons work with Mozilla are signed and via addons.mozilla.org to find. A test version of WebExtensions is already available in the test version of Firefox 42.

Signings

To protect users from malicious add-ons from Firefox 42 will all extensions must be checked by Mozilla and signed. Unsigned extensions will not work in Firefox. From 41 unsigned Firefox extensions will be automatically disabled, but users still have the ability to turn back.

According to Needham, the strategy of Mozilla advantages and disadvantages. Developers who already support Chrome extension will benefit from it, because they now have only one code base support instead of two. For developers who develop only Firefox add-ons adjustment will be greater. "But we think that the end result for both users and developers of Firefox it will be worth it," said Needham.

Microsoft Launches Free Virtual Machines With Windows 10

Following the launch of Windows 10, Microsoft now several free virtual machines with the operating system launched. Through the virtual machine developers to their Web sites and applications with the latest version of Microsoft Edge test, the default browser in Windows 10.

With this release, Microsoft has also the process that is used to make automated virtual machines. Therefore future updates will be available earlier if the platform is updated. Furthermore, now new formats for virtual machines supported, starting with Vagrant boxes (with VirtualBox) and QEMU. As a platform, users can choose from HyperV_2012, VirtualBox, Parallels and VMware.