Oriol Morell

Una navalla suïssa normalment ve dotada amb unes tisores, una fulla per tallar, la típica llima… i ara amb 64MB de Flash Drive USB!!

Des de dimarts ja ens podem descarregar el PHP 5.0.0, la darrera versió del conegudíssim llenguatge de programació orientat a la creació de pàgines web.

Novetats de la versió:

• The Zend Engine II with a new object model and dozens of new features.
• XML support has been completely redone in PHP 5, all extensions are now focused around the excellent libxml2 library (http://www.xmlsoft.org/).
• A new SimpleXML extension for easily accessing and manipulating XML as PHP objects. It can also interface with the DOM extension and vice-versa.
• A brand new built-in SOAP extension for interoperability with Web Services.
• A new MySQL extension named MySQLi for developers using MySQL 4.1 and later. This new extension includes an object-oriented interface in addition to a traditional interface; as well as support for many of MySQL’s new features, such as prepared statements.
• SQLite has been bundled with PHP. For more information on SQLite, please visit their website.
• Streams have been greatly improved, including the ability to access low-level socket operations on streams.
• And lots more…

Els usuaris de Internet Explorer s’han llevat amb 4 noves vulnerabilitats crítiques per al seu navegador:

1. It is possible to redirect a function to another function with the same name, which allows a malicious website to access the function without the normal security restrictions.
2. Malicious sites can trick users into performing actions like drag’n’drop or click on a resource without their knowledge.
3. It is possible to inject arbitrary script code into Channel links in Favorites, which will be executed when the Channel is added. The script code is executed in Local Security Zone context.
4. It is possible to place arbitrary content above any other window and dialog box using the “Window.createPopup()” function. This can be exploited to “alter” the appearance of dialog boxes and other windows.

El que més m’ha agradat de l’anunci de Secunia és la solució a les vulnerabilitats:

Solution:
Disable Active Scripting.

Use another product.

Personalment ja fa temps que tinc aquests forats solventats, he triat Use another product

La UOC ha fet públics tres nous documents del seu Màster Internacional de Programari Lliure.

Ara mateix ja hi ha disponible:

• Introducció al software lliure (PDF – TGZ)
• Sistema operatiu GNU/Linux bàsic (PDF – TGZ)
• Administració avançada del sistema operatiu GNU/Linux (PDF – TGZ)
• Desenvolupament d’aplicacions web (PDF – ZIP)
• Utilitats i eines (PDF – ZIP)