main

Google patches one security hole, but another surfaces

malebolgia   on 21 October 2004 - 21:15 · 9 comments & 836 views

Advertisement (Why?)
Search engine darling Google Inc. has patched a hole in its search engine the could have allowed malicious hackers to modify the content of the Google search results page or silently modify search results, but a new hole may have already appeared. The vulnerability concerns the Google Custom WebSearch service, which allows third-party Web portals and other Web sites to use Google's servers to search content on their Web site. A flaw in Google's Web servers allowed malicious hackers to insert javascript instead of links to image files, allowing them to alter the appearance of the Google search results page or steal search data. After being alerted to the hole, Google fixed the vulnerability, said Nathan Tyler, a Google spokesman.

News source: InfoWorld


Whats New:

- Zoom Player now includes an integrated key editor allowing you to assign Zoom Player functions to any key or compatible Multimedia device (such as Multimedia keyboards and 4-Button Mice).
You can edit the keys separately for either DVD or Media modes through the Advanced Options Key dialog by pressing the "Edit" button next to the custom key file selection.
Pressing Edit with no key file specified will allow you to select a new file in which to save the updated key map.
- New Station Navigator allowing you to navigator through Radio Stations.
- New Setting (Advanced Options / Settings / Interface) allowing you to have a hint box pop when the mouse cursor is over the timeline indicating where the seek would go when clicked (enabled by default).
- New Setting (Advanced Options / Settings / Interface) allowing automatic switching to Audio Mode when a media file containing no video stream is loaded.
- New Setting (Advanced Options / Settings / Interface) allowing automatic switching to Media Mode when a media file containing a video stream is loaded (and you are currently in Audio Mode).
- New Setting (Advanced Options / Filter Control / Settings) allowing you to enable YUV Mixing mode on the VMR Video Renderers (VMR7/VMR9). This mode may reduce CPU use on some systems.
- New Value (Advanced Options / Values / Interface) allowing you to specify the distance (in pixels) the mouse cursor needs to move to be shown once it was automatically hidden.
- New Value (Advanced Options / Values / Interface) allowing you to specify a delay after closing a media file. This can be useful with some filters that may not close themselves properly if not given such a delay.
- New OSD Value (Options / OSD / Actions) allowing you to have a hint box pop when the mouse cursor is over the timeline indicating where the seek would go when clicked (enabled by default).
- New "/DVDBM" Command Line Parameter allowing you to specify a DVD bookmark file from command line. For example: "/dvdbm:c:zplayerDVD-BookmarksDVDVOLUME.2E662BB6D20F0ECFstart.chp"
- New Customized Media Profiles for the new OpenSource DScaler decoders (MPEG/AC3/DTS Audio and MPEG-2 Video).
- Radio Stations are now based on user defined names instead of just the URL. You can also rename stations now.
- New Button on the "Advanced Options / Association" page allowing you to set the Zoom Player icon to all associated file extensions.

Thanks to Matrics of the Forums for this submission!

Post a comment · Send to friend Comments · There are 9 additional comments
(4 replies) #1 Xero_Cool on 21 Oct 2004 - 21:29
LOL, I know what the hole was. Not .
#1.1 todd` on 22 Oct 2004 - 00:24
the article says what the hole was..
#1.2 Geo on 22 Oct 2004 - 09:16
Some people only read the article title.
#1.3 lare2 on 22 Oct 2004 - 12:21
^^ True
#1.4 sebastian_insua on 22 Oct 2004 - 14:50
Hmm.. so thats how people reply so quickly to news posts....

Anyway at least he didn't just post "First Post" that really sucks...
(1 reply) #2 todd` on 22 Oct 2004 - 00:25
I wouldnt call someone a hacker for using javascript instead of links to image files..
#2.1 sebastian_insua on 22 Oct 2004 - 14:49
I would if they were able to gain additional unwanted acess to google by doing so...
(1 reply) #3 fsckwin on 22 Oct 2004 - 07:56
And when will they fix their multiuser aberration in the Google Desktop?
#3.1 Jugalator on 22 Oct 2004 - 09:22
Wasn't that a problem in the Windows multiuser implementation, and not really GDS?

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)