Ubuntu users: You need to update your SSH keys

A bug was discovered that made the random number generator that helped create your .ssh/id_rsa key less random than it should have been. What does this mean in plain English? It means that if you created an SSH key with Ubuntu Feisty, Ubuntu Gutsy, Ubuntu Hardy or Debian Etch you need to update an important OpenSSL file and regenerate your key ASAP.

Mozilla rolls out Firefox 2.0.0.14

There’s a new security and stability upgrade for Firefox 2. The biggest change is that a JavaScript scurity issue has been fixed, but you should definitely take the update if you’re running Firefox 2.

Linspire preps CNR for more Linux distros

In December I wrote that Linspire was opening their Click ‘N’ Run (CNR) repository to users of Linux distributions other than their own Linspire and Freespire. They are now saying that they are officially closing the CNR Warehouse at midnight on 10 March 2008 as they roll out a version of CNR at CNR.com that will support repos other than their own.

Mozilla releases Thunderbird 2.0.0.12

[Corrected the program name in the post title. D'oh! - Peng]

Yesterday Mozilla released another security and stability update for their email client, making Thunderbird 2.0.0.12 now available. Due to some security fixes, this upgrade is strongly recommended for all Thunderbird users.

Linspire’s CNR finally hits other distros, but do you want to use it?

Back when I was running my old blog I had posted about an announcement that Linspire’s Click’N'Run (CNR) software repository would be coming to other Linux distributions, including Ubuntu. The beta is finally here, but now that it is, do you want to use it?

SecondLife begins adding Age Verification

Today SecondLife released a Release Candidate client that begins to use the Age Verification system that we’ve heard quite a bit about in the past (but actually nothing at all about in the last several months). However there are technical and legal issues that prevent me from passing my personal information to Linden Labs at this point, and I have to recommend nobody else does either.

Hackers can use QuickTime flaw to pick SecondLife pockets

Yesterday SecondLife posted an alert to both their blog and their Terms of Service notifying users of a flaw in QuickTime that can be used to “crash or exploit the Second Life viewer.” But it seems this isn’t the whole story and an avatar’s wallet is also at risk.