Breaking News: Firefox 3.5 vulnerable to JavaScript exploit

This is not good. 😯

A zero-day exploit affecting Firefox 3.5 is on the loose and Mozilla doesn’t have a fix. To make matters worse, the exploit is leveraging a JavaScript vulnerability. Simon Berry-Byrne of Secunia explains:

The vulnerability is caused due to an error when processing JavaScript code handling e.g. “font” HTML tags and can be exploited to cause a memory corruption.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 3.5. Other versions may also be affected.

Experts recommend

In situations like this, security experts recommend that JavaScript be disabled until Mozilla comes up with a patch. That works, but then almost every Web site visited will be broken as most of Web sites use JavaScript.

My fix

I’d like to suggest a different approach, it’s a simple lightweight application that allows you to decide whether you want JavaScript to run or not. The application is called NoScript. I explain NoScript and other security add-ons in the article Firefox: Some security tips.

Final thoughts

It appears (unconfirmed) that the exploit is a variant of Milw0rm and could be serious. Be especially careful when you visit unfamiliar Web sites.

via Firefox 3.5 vulnerable to JavaScript exploit – Examiner.

I will be running Google chrome until it is fixed. Hopefully something comes up soon.

The President talks Baseball

Here’s the President talking baseball. A few observations:

  1. The President has a horrible memory; of which I can relate. As I have the same problem. Uh, What was I saying?  😉 :laugh: 😀
  2. He makes a cringe inducing crack about the CIA tapping into a sport network.   😯 It was a joke, but I bet his staff went “Ugh!” when he made it. :hypnotized:

One of the reasons why I do not use WorldNetDaily as a news source

WorldNetDaily, I have always felt; is the National Enquirer of Conservative News. Well, they have given me another reason to feel that way. They are reporting on an American Solider, who is refusing to reporting for duty, because he does not believe that President Obama is an American citizen.

Quote:

His attorney, Orly Taitz, confirmed to WND the military has rescinded his impending deployment orders.

“We won! We won before we even arrived,” she said with excitement. “It means that the military has nothing to show for Obama. It means that the military has directly responded by saying Obama is illegitimate – and they cannot fight it. Therefore, they are revoking the order!”

She continued, “They just said, ‘Order revoked.’ No explanation. No reasons – just revoked.”

Confederate Yankee is baffled:

I have no ready explanation for why the military would rescind his deployment orders, unless they plan to keep him stateside to begin a disciplinary investigation against him. Frankly, for the sake of our nation, I hope this is the case.

Because if the Pentagon allows soldiers to simply declare Obama an an illegitimate Command in Chief—as the article would have you believe—it would seem to set a precedent that would lead to chaos in the military, allowing service members to question all orders for the executive branch. It would be anarchy.

WorldNet Daily simply must have this wrong. The larger ramifications of the case being dismissed for the reasons alleged by the attorney are too terrible to consider.

John Cole, A blogger on the left, that I happen to respect; is a bit more direct:

This guy is going to get court-martial-ed so quickly, brutally, and publicly that it isn’t even funny, and his lunatic lawyer thinks they have won something. It hasn’t even occurred to them that the order to deploy was rescinded because they are about to hammer him with disciplinary action.

I think I tend to agree with John here. That this ol’ boy is about get put through the meat grinder with the Military. 😯 :hypnotized: 😮

Congress Delivers a Healthcare Bill

You can read about it here.

You can read the details here. (Adobe Reader Required)

Commentary up the wazoo here.

A couple of rubs:

The proposal would also impose a “play-or-pay” requirement on employers, who would either have to offer qualifying insurance to their employees and contribute  a substantial share toward the premiums, or pay a fee to the federal government that would generally equal 8 percent of their payroll. Small employers (those with an annual payroll of less than $250,000) would be exempt from those requirements. As a rule, full-time employees with a qualifying offer of coverage from their employer would not be eligible to obtain subsidies via the exchanges, but an exception to that “firewall” would be allowed for workers who had to pay more than 11 percent of their income for their employer’s insurance. In that case, the employers would have to pay an amount equal to the per-worker fee due for firms subject to the “play-or-pay” penalty. Firms with relatively few employees and relatively low average wages would also be eligible for tax credits to cover up  to half of their contributions toward health insurance premiums.

Comment on the underlined part: Which would of course, run some Businesses out of business. Either you play along or pay taxes out the nose. The small Employers part is nice. But this would put the squeeze on the Medium to large businesses.

Of course, you’ve got your “Let’s Cover our backsides” Caveats:

Important Caveats Regarding This Preliminary Analysis

There are several reasons why the preliminary analysis that is provided in this
letter and its attachments does not constitute a comprehensive cost estimate for
the coverage provisions of America’s Affordable Health Choices Act:

• First, our analysis was based on specifications regarding insurance coverage that were provided by the tri-committee group and that differ in important ways from the “discussion draft” version of legislative language that was
released on June 19, 2009. The specifications that we analyzed are supposed to be reflected in the draft language released by the three committees today, but we have not yet been able to analyze that language to determine whether it conforms to those specifications. Our review of that language could have a significant effect on our analysis. More generally, as our understanding of the specifications improves, that also could affect our future estimates.

• Second, some effects of the proposal have not yet been fully captured in our analysis. In particular, we have not yet estimated the administrative costs to the federal government of implementing the specified policies, nor have we
accounted for all of the proposal’s likely effects on spending for other federal programs. We expect to include those effects in the near future, but we also  expect that they will not have a sizable impact on our analysis.

• Third, the budgetary information shown in the attached table reflects many of the major cash flows that would affect the federal budget as a result of implementing the specified policies, and it provides our preliminary assessment of the proposal’s net effects on the federal budget deficit (subject  to the caveats listed above). Some additional cash flows would appear in the budget—either as outlays and offsetting receipts or outlays and revenues—but would net to zero and thus would not affect the deficit. CBO and the JCT staff have not yet estimated all of those cash flows but expect to do so in the near future.2 Those additional cash flows would include the premiums collected by the public plan and its outlays as well as risk-adjustment transfers from plans with relatively healthy enrollees to plans with relatively unhealthy enrollees.

The Requirements:

The proposal’s major provisions—including the establishment of an individual mandate to obtain insurance, an expansion of eligibility for the Medicaid program, and the creation of new insurance exchanges through which certain people could purchase subsidized coverage—would be implemented beginning in 2013.

All legal residents would be required to enroll in a health insurance plan meeting certain minimum standards or face a tax penalty (described below). Individuals not required to file a tax return would be exempt from the penalty; exemptions for hardship and other  reasons would be determined by a new and independent federal agency overseeing the health insurance exchanges (also described below).

The penalty assessed on people who would be subject to the mandate but did not obtain insurance would equal 2.5 percent of the difference between their adjusted gross income (modified to include tax-exempt interest and certain other sources of income) and the tax filing threshold. The amount of the penalty could not exceed the national average
premium for plans offered in the exchanges.

New health insurance policies sold in the individual and group insurance markets would be subject to several requirements regarding their availability and benefits. Insurers would be required to issue policies to all applicants and could not limit coverage for people with preexisting medical conditions. In addition, premiums for a given plan could not vary because of enrollees’ health but could vary because of their age by a factor of two (under a system known as adjusted community rating). Individual policies that were purchased before 2013 and maintained continuously thereafter would be “grandfathered,” meaning that they would not have to conform to the new rules but would still fulfill the individual mandate. Existing group policies would have to conform to the new rules by
2017.

In order to fulfill the individual mandate, policies that were not grandfathered would have to cover a broadly specified minimum benefit package (which was assumed to have the same scope of benefits as seen in a typical employer-sponsored plan) and would have to have a minimum actuarial value of 70 percent and a limit on out-of-pocket costs no
greater than $5,000 for individual coverage and $10,000 for family coverage. (A health insurance plan’s actuarial value reflects the share of costs for covered services paid by the plan.) After 2013, the maximum levels of those out-of-pocket caps would be indexed to general inflation.

The proposal would establish a national exchange through which certain individuals and employers could purchase health insurance; states could also opt to operate their own exchanges (either one per state or one covering several states). All insurance plans sold  through an exchange would be required to cover the “basic” benefit package described above. “Enhanced” plans would have an actuarial value of 85 percent, and “premium” plans would have an actuarial value of 95 percent.

Except as specified below, individuals and families who enroll in exchange plans and have income between 133 percent and 400 percent of the federal poverty level (FPL) would be eligible for premium subsidies and cost-sharing subsidies (see table below).

Federal premium subsidies in a given area would be tied to the average premium of the three lowest-cost plans providing basic coverage in the exchange in that area. The subsidies would limit an enrollee’s contribution to a percentage of income ranging from 1.5 percent to 11.0 percent (see table); those caps would not be indexed over time. The federal government would fully fund cost-sharing subsidies, which would increase the actuarial value of enrollees’ coverage to specified tiers based on income.

Say goodbye to your freedoms folks. Because in a socialist society. You have none, at all.

Besides all that, how the hell are we going to pay for all this? Seeing our Economy is in the toilet and all. Stupid is, stupid does, I guess. :struggle: :silly:

Update: Ed Morrissey, As always, does a bang up job analyzing this new Bill and as I suspected; There’s some crap in it. :pissedoff:

Just an FYI….

You may notice some new stuff in the comments section…

1. A comment preview…

2. Smiles :evilgrin: :rotfl: :yawn:

3. The Ability to Quote text now…. Bold and other stuff!

anyhow… adds a personal touch….

Enjoy! 🙂

Oh Wonderful….: The Economy is screwed to hell, worse than originally thought!

Hope and Change……and Unemployed:

The recent unemployment numbers have undermined confidence that we might be nearing the bottom of the recession. What we can see on the surface is disconcerting enough, but the inside numbers are just as bad.

The Bureau of Labor Statistics preliminary estimate for job losses for June is 467,000, which means 7.2 million people have lost their jobs since the start of the recession. The cumulative job losses over the last six months have been greater than for any other half year period since World War II, including the military demobilization after the war. The job losses are also now equal to the net job gains over the previous nine years, making this the only recession since the Great Depression to wipe out all job growth from the previous expansion.

Here are 10 reasons we are in even more trouble than the 9.5% unemployment rate indicates:

  • – June’s total assumed 185,000 people at work who probably were not. The government could not identify them; it made an assumption about trends. But many of the mythical jobs are in industries that have absolutely no job creation, e.g., finance. When the official numbers are adjusted over the next several months, June will look worse.
  • – More companies are asking employees to take unpaid leave. These people don’t count on the unemployment roll.
  • – No fewer than 1.4 million people wanted or were available for work in the last 12 months but were not counted. Why? Because they hadn’t searched for work in the four weeks preceding the survey.
  • – The number of workers taking part-time jobs due to the slack economy, a kind of stealth underemployment, has doubled in this recession to about nine million, or 5.8% of the work force. Add those whose hours have been cut to those who cannot find a full-time job and the total unemployed rises to 16.5%, putting the number of involuntarily idle in the range of 25 million.
  • – The average work week for rank-and-file employees in the private sector, roughly 80% of the work force, slipped to 33 hours. That’s 48 minutes a week less than before the recession began, the lowest level since the government began tracking such data 45 years ago. Full-time workers are being downgraded to part time as businesses slash labor costs to remain above water, and factories are operating at only 65% of capacity. If Americans were still clocking those extra 48 minutes a week now, the same aggregate amount of work would get done with 3.3 million fewer employees, which means that if it were not for the shorter work week the jobless rate would be 11.7%, not 9.5% (which far exceeds the 8% rate projected by the Obama administration).
  • – The average length of official unemployment increased to 24.5 weeks, the longest since government began tracking this data in 1948. The number of long-term unemployed (i.e., for 27 weeks or more) has now jumped to 4.4 million, an all-time high.
  • – The average worker saw no wage gains in June, with average compensation running flat at $18.53 an hour.
  • – The goods producing sector is losing the most jobs — 223,000 in the last report alone.
  • – The prospects for job creation are equally distressing. The likelihood is that when economic activity picks up, employers will first choose to increase hours for existing workers and bring part-time workers back to full time. Many unemployed workers looking for jobs once the recovery begins will discover that jobs as good as the ones they lost are almost impossible to find because many layoffs have been permanent. Instead of shrinking operations, companies have shut down whole business units or made sweeping structural changes in the way they conduct business. General Motors and Chrysler, closed hundreds of dealerships and reduced brands. Citigroup and Bank of America cut tens of thousands of positions and exited many parts of the world of finance.

Job losses may last well into 2010 to hit an unemployment peak close to 11%. That unemployment rate may be sustained for an extended period.

via Average length of unemployment highest since 1948. – WSJ.com.

So much for “The One” fixing the economy. Oh, right; he misread it. Looks like this Blogging gig get might be my only job for a long time to come.  The Left is now spinning saying it will never recover.

Here’s ol’ Floppy ears talking about it:

Others: Hot Air, Pajamas Media, QandO, The Strata-Sphere, Stop The ACLU and Balloon Juice