Security researcher Nitesh Dhanjani has unveiled an interesting security hole in the Safari Web browser. Perhaps even more interesting is Apple's somewhat nonchalant response to the issue. According to Dhanjani, the problem stems from the fact that Safari downloads and saves resources to the local file system without asking the user's permission. He believes this could be exploited by a malicious site, resulting in malware downloaded to the user's computer without their consent.

Dhanjani, who first revealed the issue to Apple privately, suggested that that the company incorporate an option in the browser that would prompt the user before downloading anything at all to their hard drive. Although they were in agreement that his suggestion was a good one, Apple does not seem to be in a hurry to implement it. "We can file that as an enhancement request for the Safari team," the Apple security team told Dhanjani. "Please note that we are not treating this as a security issue, but a further measure to raise the bar against unwanted downloads. This will require a review with the Human Interface team. We want to set your expectations that this could take quite a while, if it ever gets incorporated." These are disturbing words considering that anyone possessing basic HTML and CGI programming skills coupled with bad intentions could easily use this flaw to their advantage.

Another vulnerability Dhanjani reported to Apple was taken a bit more seriously. He claims to have the ability to exploit Safari to remotely steal local files from a user's computer. Scary stuff indeed. Details of this one were kept private and Apple is actively working on a patch. Both of these issues affect Safari versions for OS X as well as Windows.

Opera has released a new version of its popular mobile browser, containing some interesting additions as well as a significant boost to its page load speed. Mini 4.1, which entered public beta back in early April, takes advantage of server upgrades by accessing Web sites with a quickness normally reserved for desktop browsers.

Acceleration in Opera Mini 4.1 isn't only limited to Web page requests, either. Included in this latest version is the ability to upload and download files directly. In the past, activities such as adding photos to your MySpace page or posting to your blog forced you to be re-routed through your phone's native browser. This slowed things down tremendously, and the positive difference in Mini 4.1 is definitely noticeable. Another worthwhile upgrade allows you to save Web pages for offline viewing, making it possible to peruse content even when you're stuck without network access. This can come in handy on the train, the plane, or just about anywhere else a signal is unavailable. Finally, Mini 4.1 boasts a URL auto-complete feature which takes its cue from your Bookmarks as well as your past browsing history.

Opera Mini 4.1 can be downloaded by visiting operamini.com via your mobile device's existing browser.

In related mobile browser news... Skyfire Labs, which unveiled details back in January about a powerful mobile browser that mimics a desktop experience, has finally released a beta version that is creating quite a buzz.

Approximately eight months after the release of its first beta version, ZoneAlarm ForceField has finally gone gold. Available by itself for $29.95 or as part of the company's Internet Security Suite for $69.95, ForceField runs your browser in an isolated environment which keeps you safe from a number of malicious content types found throughout the Web. This virtualization engine also protects you from phishing attempts as well as keyloggers. In addition to its multiple safety features, ForceField also provides an element of privacy by erasing your tracks as you go ensuring that others will never see where you've been. ForceField requires Windows XP or Vista and runs in both the Internet Explorer and Firefox browsers.

The latest service pack for Microsoft's Windows XP operating system was released yesterday, and users of the Internet Explorer browser should take heed to some new restrictions prior to upgrading. Jane Maliouta, IE8's Deployment PM, explained these rules in detail on the company's IEBlog. Here are the main points that you need to know...

• Users currently running IE6: You can upgrade to SP3 with no issues whatsoever. The service pack contains the latest security updates for your browser.


• Users currently running IE7: You can upgrade to SP3 and retain your browser preferences. However, you will not be able to uninstall IE7 in the future without first uninstalling the entire service pack and reverting back to SP2. If you feel that you may want to uninstall IE7 at some point in the future, perhaps to revert back to IE6, then you should probably uninstall the browser prior to upgrading to SP3. You can then reinstall IE7 with no limitations attached.


• Users currently running IE8 Beta 1: You can also upgrade to SP3 and retain your settings. Be careful here, as you will not be able to uninstall this version once you have upgraded your OS. Since you are running a beta version of the browser, it is highly recommended that you remove Beta 1 from your PC before you begin the service pack upgrade. You can then reinstall a removable version of the browser.

I recommend paying close attention to these restrictions prior to making this very important OS update, or you may find yourself dealing with some less than pleasant situations down the road.

The evolution of browser-based games has seen us advance from simple Tetris clones to full-fledged fantasy worlds. The growth of the MMO genre in particular has really reshaped the world of gaming in general, with most popular titles such as World of Warcraft and EverQuest requiring large client applications in order to play. However, these massive games have also made their presence known in the browser realm. One example of a browser-based MMO that has made a large impact is Runescape, which boasts an active member base of several million players.

One company aiming to create full-scale MMOs that can be played within your browser is Gameforge, who is looking to make a push into the U.S. market. The German-based game developer has recently opened a new office in San Francisco, and they appear to be creating browser-based games tailored towards the more hardcore gamer. Gamasutra recently spoke with company president Lars Koschin about the future of MMOs in the browser.

Has your Web browser become cluttered with old bookmarks that you never visit? Do you have add-ons installed and forgotten what it is they actually do? Are your toolbars dominated by buttons and links that you no longer use? Does your browser need the latest security updates? If you answered yes to any of these questions then it's time to do a little spring cleaning.

About Web Browsers offers all the resources you'll need to get your browser into tip-top shape, whether you use Firefox, Internet Explorer, Opera, or Safari. If you find yourself needing help on anything else browser-related be sure to visit the forums.

The latest usage statistics released by Net Applications show rapid growth for Safari 3.1 in the Windows browser market. 0.21% for the month of April may seem like a small number, but it dwarfs the 0.07% peak that version 3.0 had reached despite being on the market for almost a full calendar year. 3.1, which was made available to Windows users less than 2 months ago, has been a source of controversy since its release. Apple's questionable practice of including a new installation of Safari 3.1 for Windows as part of its Software Update mechanism apparently fooled a lot of folks into installing the browser without actually realizing it. Couldn't it be possible that Windows users have all of a sudden caught on to how great Safari is? Perhaps, but to triple its previous market share high in such a short period seems a bit far-fetched. It looks like Apple's "forceful push" of the browser did the trick. It will be interesting to see which way the numbers head over the next few months. Stay tuned...

Imagine a world where you can easily connect to files, applications, and other information on any of your devices no matter where you are. Remote access software has allowed such aspirations to become a reality, albeit to a limited capacity. Now Microsoft is looking to take this idea to another level altogether with Live Mesh, a service that will let you manage all of your devices from the open Web. Basically, anything that you add to your password-protected "mesh" becomes available anywhere. This includes not only data and programs but actual devices such as desktops, laptops, and mobile phones. Live Mesh also gives you the ability to share files by inviting other users to specific folders in your mesh. In addition, since data can automatically be synchronized between devices, you can always be sure that you have access to the latest version of a document or application. The Mesh Operating Environment (MOE), a mere 2 MB in size, needs to be installed on each device wishing to be a part of your personal mesh. The service's Live Desktop will run in the Firefox, Internet Explorer, and Safari Web browsers.

The service currently works with Windows XP and Vista only, but plans for Macintosh and mobile device support are in the works. At the moment, Live Mesh's tech preview program is full. However, the company will allow you to sign up for their waiting list where you will receive an email whenever a spot becomes available. The introduction of Live Mesh by an operating system giant such as Microsoft is definitely a sign of the times, with the Web and the browsers we use to access it rapidly becoming the focal point of our overall computing lives.

It truly is a great time of year to be a sports fan. The battle for the NHL's Stanley Cup is in full swing, with some marquee matchups highlighting the second round. Meanwhile, over on the hardwood, early action in the NBA Playoffs has already provided a few nail-biters and some interesting storylines. Out on the diamond, the MLB season is only a month old yet tales of underachieving superstars and wild marathon contests have already piqued the public's interest. Oh yeah, and let's not forget the thoroughbreds! The 134th running of the Kentucky Derby takes place next weekend at Churchill Downs and, as my buddy Phil who will be in attendance sipping a mint julep exclaimed this morning, "I don't know which buzz will be better, the one from the drink or the one from the roaring crowd!"

One fact that you may not be aware of is that the Web browser can be a sports junkie's best friend. Stay on top of exciting games as they occur with the community-oriented RUWT? Toolbar which alerts you when the action reaches a fever pitch, and allows you to have a banter with other fans. For fast scores, matchup information, statistics, and news, the SportsFox add-on for Firefox is all you need. If hoop dreams are what you crave, NBA Scoreboard will bring LeBron and Kobe right to your computer. Stay in the game with these great browser additions!

Earlier this week chip giant Intel released a beta version if its new browser extension, Mash Maker. This powerful tool gives you the ability to combine content from multiple sources such as RSS feeds, videos, maps, and more for the purpose of viewing them all in one place. You can create your own mashups or let the extension provide you with personalized mashups of its own.

The possibilities are literally endless with Mash Maker. For example, you may want to combine local restaurant reviews, a calorie calculator, and driving directions to these eateries all in one location. This is a possibility, and all you'll need is this extension along with either the Firefox or Internet Explorer browser. The ability to create your own Widgets within Mash Maker expands its functionality even further, and the best part is you don't have to be an expert to understand the extension's API. Hundreds of mashups made by other users are already available free of charge. Although Intel may appear to be an unlikely source for a browser extension of this magntitude, they've really hit a home run here. Download Mash Maker Beta today and take control over how you view the Web!