Every time I turn around, Google’s come up with something new, cool, or innovative. It’s no wonder it has Microsoft on the run.

Here are a few Google features you might not have known about.

• Calculate This: You can use Google Calculator to crunch numbers and figure out conversions. Try entering 12*12 or 16+16+16 or even 12*12+16+16+16+8-100 and see what happens; you can also run more complex equations, like G*(6e24 kg)/(4000 miles)^2). Google Calculator handles conversions of all types, such as 3 ounces in tablespoons, 16 dollars in euros, or 19999GB to MB).
• Find That Number: You can track FedEx, UPS, and U.S. Postal Service shipments just by sticking the tracking number into Google’s search field; do the same with zip and area codes, vehicle IDs, patent numbers, airplane registration numbers, and even UPC codes.
• Make Me Special: Google has special sites just for you. There’s one for Firefox users, another for Linux users, and a spot for those of you who can’t get enough of Microsoft

Alert Me! Google sends me an e-mail every time it sees a new occurrence of “steve bass PC World,” “steve bass PC Annoyances,” or keywords about my various hobbies and interests. If you haven’t tried Google Alerts, you’re missing out on a terrific service.

(more…)

Researchers find ways to exploit outdated and vulnerable open-source image processing libraries in the Google Android software development kit.

Google’s Android software development kit is using several outdated and vulnerable open-source image processing libraries, according to an alert from Core Security, a company that specializes in penetration-testing software.

In an advisory released Mar. 4, Core Security identified several exploitable heap overflows and integer overflows haunting Android, Google’s software stack for mobile devices that includes an operating system, middleware and key applications.

In all, Core Security lists eight different vulnerabilities identified in the Android SDK, which is currently in beta.

On the Android Developers Blog, developer advocate Jason Chen confirmed “a security issue involving handling of image files” that has been fixed with the latest with the recently updated Android m5-rc15.

Although the Android project is currently in a development phase and has not yet made an official release, Core Security noted that several mobile chip vendors have released prototype phones built with early releases of Android.

“Several vulnerabilities have been found in Android’s core libraries for processing graphic content in some of the most used image formats (PNG, GIF an BMP). While some of these vulnerabilities stem from the use of outdated and vulnerable open-source image processing libraries other were introduced by native Android code that use them or that implements new functionality,” Core Security warned.

The company has released proof-of-concept code to show that the vulnerabilities can be exploited to take “complete control” of a phone running the Android platform.

The proof-of-concept has been used successfully on the emulator included in the SDK, proving the possibility of running code on Android stack (over an ARM architecture) via a binary exploit.

Core Security said Android SDK m3-rc37a and earlier are vulnerable to several bugs in components that process GIF, PNG and BMP images, and Android SDK m5-rc14 is vulnerable to a security bug in the component that process BMP images.

In a Vendor Statement section of the advisory, the Google-backed Open Handset Alliance says there will be many changes and updates to the platform before Android is ready for users. These changes are expected to include full security review.

(more…)