Alexa's Blog

A few weeks ago some friends from US have send to us an iPhone for testing purposes.We did not played too much with it because of AT&T network lock.As a result we have sent it back. Today I just notice a post about a new hack that unlocks the phone and make it open in other networks also.The techcrunch.com has an article on this subject and some interesting comments there.

The big questions is if Apple will do something on this matter. Personally I think they will do for the new manufactured phones, but aside of this I don´t think they can do too much for the ones already sold.This mean that if you buy the hack from iphonesimfree.com guys, bang! You can use it worldwide in any compatible GSM network.

I am sure that in a very short while the actual lot will be sold, but another big question is the legality of selling the hack. Copyright laws cover such things and I am really curious how Apple and AT&T will fight in this field.

The future will show us for sure.Until then get your iPhone quick:)

Well, this is not something new for many of you, but our multimedia team has signed their participation in this contest with a great video.

Have a look at it and give us your vote ! Will gonna need it

And see the full team here.They are great guys.

VMware is a great virtual machine able to run on almost any OS and host also almost any OS.The applications are many and the contest is about how the use of virtualization can improve our daily life.The limit is jut your… imagination. Let ´it free and let´s see who will be the winner.

I really hope our guys will do it, with a bit of your help, of course

Thanks and I´m sure you will enjoy the video.

As stated by Ryan Singel on his post on Wired Blogs, the Firefox extensions provided by those companies (and probable others too) have a serious flaw in the update routines.

When starting the browser, those extensions check for new version on the provider servers.The point is that the check should be done over a Secure Connection Layer (SSL) which encrypt all the data sent over the network and stop any sniffer to catch the request.

Those extensions made the check using a standard unencrypted connection, which allow a possible attacker to intercept the request and send back a malicious update, which once installed in your browser can monitor and steal any information you enter into your browser.This include any url you type and any value entered by you in the forms of html pages INCLUDING ones opened over an SSL connection.Remember that the encryption is used only in the communication protocol and that happen after you have completed a payment form for example and the browser send the collected data to the server.

Well, this was a matter of time. What upset me most is the fact that almost all the time the bigger treats are coming from big software providers which don´t bother to check the most basics tutorials about how to handle the updates in a secure way.

Millions of users are using those extensions from a very long time and they where exposed all the time to this treat.Worse is that there is the posibility to be already hijacked even if the hole was made public right now.Those are the exploits used by spammers and other bad guys to stole your private data.

Be very careful when choosing your Firefox extensions and look first what other people are saying about them.Having all kind of toolbars and buttons in Firefox might help you for your daily tasks, but can be a serious problem when you do private tasks or working with very sensitive data.

If you need more, read the Ryan´s story on Wired Blogs.

Take Care and Watch Yourself!