Security Advisories Fixed in Firefox 3.6.8:

MFSA 2010-48 Dangling pointer crash regression from plugin parameter array fix

From http://www.mozilla.org/security/known-vulnerabilities/firefox36.html

We’re pleased to announce the release of version 1.9.0 of the agent software. This has been deployed onto our Cloud Testing servers, and is available to Private Agent subscribers in the download area.

New features include:

• Extra commands – see recent posting.
• Improved timeout handling (there is a 15 minute maximum run time for a script).

Features for the Website Archiving service include:

• Security MD5 hash on images
• Watermark with capture information

We will soon be releasing a new version of the customer portal.

Following a request from a customer (Andrew from AMEE), we’ve added a number of new commands to our Functional and Cross Browser testing service. Our standard service always captures a screenshot after the following Selenium commands:

• Open
• Click and Wait
• Open Window
• Refresh
• Refresh and Wait
• Submit
• Submit and Wait
• Go Back
• Go Back and Wait

The new commands do exactly the same as the above Selenium commands, but don’t do an automatic screenshot. They are

• Open – No Screenshot
• Click and Wait – No Screenshot
• Open Window – No Screenshot
• Refresh – No Screenshot
• Refresh and Wait – No Screenshot
• Submit – No Screenshot
• Submit and Wait – No Screenshot
• Go Back – No Screenshot
• Go Back and Wait – No Screenshot

The new commands were added into the 1.9.0 release of the agent software. More details of the commands can be found in the support area of the customer portal – http://portal.cloudtesting.com/.

For more details of the Functional and Cross Browser testing service, please see our website at http://www.cloudtesting.com/.

LINX (London Internet Exchange) http://www.linx.net/ appears to be currently suffering from network issues.

We have rerouted traffic around LINX and will do so until LINX engineers have resolved the problem.

This is what Firefox 4.0 beta 1 describes itself as:

“Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:2.0b1) Gecko/20100630 Firefox/4.0b1″

Firefox 4 Beta 1 includes an updated Windows interface that’s sleeker and easier to use. (Mac & Linux are coming soon!)

• New Tab Location
• Switch to Tab
• Firefox Button

Under the Hood WebSockets

Developers will be able to build real-time online interactions like gaming and chatting.

Stylin’ Pages with CSS3

With support for new CSS3 features, web designers can make their pages both look prettier and display faster.

HTML5 Support

A new HTML5 parser and full support for web video, audio, drag & drop, and file handling means Firefox 4 is ready to run the best web apps of both today and tomorrow.

Web Console

With this experimental analysis tool for modern sites, Firefox allows you to peek under the hood of dynamic web pages.

JetPack SDK (Making Add-On Development Easier)

Add-Ons can be installed without restarting the browser, and can be developed more easily using the new JetPack SDK and js-ctypes.

Indexed DB

Developers will be able to store application data locally, making cloud applications like Gmail or GDocs work more quickly and reliably, even when not connected to a network.

Crash Protection

Firefox provides uninterrupted browsing for Windows, Linux, and now Mac when there is a crash in the Adobe Flash, Apple Quicktime or Microsoft Silverlight plugins. If one of these commonly-used plugins crashes or freezes, it won’t affect the rest of Firefox. Instead, you can simply reload the page to restart the plugin and try again.

The Federal Rules of Civil Procedure FRCP govern civil procedure (i.e. for civil lawsuits) in United States district (federal) courts.

The two applicable rules are:

• Rule 26 – Duty to Disclose; General Provisions Governing Discovery
• Rule 37 – Failure to Make Disclosure or Cooperate in Discovery

For more detail see:

• http://www.frcp-compliance.com
• http://www.frcp-compliance.us

FINRA (Financial Industry Regulatory Authority) was created in July 2007 with the consolidation of the regulation enforcement and arbitration functions of the New York Stock Exchange with the National Association Of Securities Dealers (NASD).

FINRA in conjunction with the Securities and Exchange Commission (SEC) are regulatory agencies for the financial services industry in the United States.

To be compliant with the guidelines, storage, retrieval and surveillance solutions need to be in place. Some of the guidelines include: SEC 17a-3 and 17a-4, NASD 3010 and 3110, NYSE 342, 440 & 442 and SEC RIA 204-2 and 206(4)-7.

• http://www.finra-compliance.com
• http://www.finra-web-compliance.com
• http://www.finracompliance.net
• http://www.finracompliance.org
• http://www.finracompliance.us

Firefox 3.6.6 modifies the crash protection feature to increase the amount of time that plugins are allowed to be non-responsive before being terminated.

To enable our users to test with Firefox 3.5.10, our testing agents (servers) have now been updated.

For more details see the updates section at http://www.cloudtesting.com/blog/updates/

Firefox 3.5.10 has been released – it patches nine vulnerabilities, six of them critical.

Firefox 3.6.4 has been released with crash protection for Adobe’s Flash Player, Apple ‘s QuickTime and Microsoft ‘s Silverlight plug-ins, and is available only in Firefox for Windows and Linux . Mozilla is still working on the “out of process plug-ins,” or OOPP feature, for the Mac version. The version also patches nine vulnerabilities, six of them critical.

This update contains new features including:

* Safari Reader: Click on the new Reader icon to view articles on the web in a single, clutter-free page.
* Improved Performance: Safari 5 executes JavaScript up to 25% faster than Safari 4. Better page caching and DNS prefetching speed up browsing.
* Bing Search Option: New Bing search option for Safari’s Search Field, in addition to Google and Yahoo!.
* Improved HTML5 support: Safari supports over a dozen new HTML5 features, including Geolocation, full screen for HTML5 video, closed captions for HTML5 video, new sectioning elements (article, aside, footer, header, hgroup, nav and section), HTML5 AJAX History, EventSource, WebSocket, HTML5 draggable attribute, HTML5 forms validation, and HTML5 Ruby.
* Safari Developer Tools: A new Timeline Panel in the Web Inspector shows how Safari interacts with a website and identifies areas for optimization. New keyboard shortcuts make it faster to switch between panels.

Other improvements include:

* Smarter Address Field: The Smart Address Field can now match text against the titles of webpages in History and Bookmarks, as well as any part of their URL.
* Tabs Setting: Automatically open new webpages in tabs instead of in separate windows.
* Hardware Acceleration for Windows: Use the power of the computer’s graphics processor to smoothly display media and effects on PC as well as Mac.
* Search History with Date: A new date indicator in Full History Search shows when webpages were viewed.
* Top Sites/History Button: Switch easily between Top Sites and Full History Search with a new button that appears at the top of each view.
* Private Browsing Icon: A “Private” icon appears in the Smart Address Field when Private Browsing is on. Click on the icon to turn off Private Browsing.
* DNS Prefetching: Safari looks up the addresses of links on webpages and can load those pages faster.
* Improved Page Caching: Safari can add additional types of webpages to the cache so they load quickly.
* XSS Auditor: Safari can filter potentially malicious scripts used in cross-site scripting (XSS) attacks.
* Improved JavaScript Support: Safari allows web applications that use JavaScript Object Notation (JSON) to run faster and more securely.

For more information about fixes that improve performance, stability and compatibility, please see: http://support.apple.com/kb/HT4135.

For detailed information on the security content of this update, please visit this site: http://support.apple.com/kb/HT1222.

Selenium IDE 1.0.7 has been released:

• NEW – you can now drag-and-drop command around instead of the cut-insert-paste dance that you used to have to do (Jérémy Hérault)
• NEW – same thing with tests in the test suite panel (Jérémy Hérault)
• NEW – an new optional parameter when registering you se-ide plugin to allow for command exporting. see http://adam.goucher.ca/?p=1456 for details (Adam Goucher)
• NEW – Swedish locale sv-SE now has translations (Olle Jonsson)
• BUG – Some people were reporting an annoying popup when starting se-ide without any plugins installed (Adam Goucher)

You can now view the captured screenshots of your website in either Daily, Weekly or Montly views.

The daily view is a single day with previous and next buttons for navigation:

The weekly view is a seven day at a time view, again with previous and next buttons for navigation:

The montly view is a complete month view, with previous and next buttons for navigation between months:

If you need to capture screenshots of your website and want it as a service, then please contact me for details – http://www.website-archive.com/

We’ve just launched the first in a series of new features for our Website Archiving service to allow customers to easier search and find the particular archive/screenshot they’re looking for.

The current search results look as follows:

Other search features are currently in our test environment and will be released shortly.

If you have any questions on the best way to archive your website using our service, please contact me at robin@cloudtesting.com, or visit the Website Archive website.

We’re pleased to announce our new Website Archiving Blog.

It’ll be written and maintained by our Sales Manager, Robin Storey.