• On MovieTome: The next Spider-Man villain?

The Download Blog

advertisement
November 10, 2009 5:30 AM PST

First introduced in beta in April, Panda Cloud Antivirus graduates to a stable, public release and signifies a major security vendor taking aim at the freeware competition--instead of the other way around. Cloud Antivirus was notable on its beta release for being one of the few security options available to users that contained most of its protections in the cloud. This allowed it to protect users while consuming significantly fewer resources than many competing programs.

Panda Cloud Antivirus 1.0 is notable as a free security solution for two reasons: Panda is a reputable security vendor, and the program achieves its goal of freeing up system resources. In a press release, Panda Security CEO Juan Santana described Cloud Antivirus as a game-changer. It's not clear quite yet that that's the case, but at the very least the program looks to fill a niche created by resource-conscious netbooks.

As light on resources as advertised, Cloud Antivirus offers strong reputation-based protection for those who want their security program out of sight and out of mind. A third-party efficacy evaluation wasn't available at the time of writing, but in empirical testing the program only used 9 MB of RAM while idle, and only 56 MB of RAM when scanning. Many other security programs will run scans at 150 MB of RAM or more.

Despite keeping most of its database in the cloud, Panda Security's Senior Research Advisor, Pedro Bustamante, noted during an interview in October that Cloud Antivirus isn't disabled just because the host computer is disconnected from the Internet. "Panda has an offline mode that uses a small cached copy of Collective Intelligence on your local drive, it's only the most recent threats on a real time wild list." Collective Intelligence is the name that Panda gave its cloud system when it was introduced in 2007.

When you open Cloud Antivirus, the main window lets you know whether you're safe or not with a big red or green icon. Cloud Antivirus works as other antivirus solutions do, offering a Quick Scan and a Custom scan for specific folder, files, and drives, but its ancillary features are exceptionally light. The Quick Scan took 13 minutes on my Windows 7 Lenovo T400 laptop.

Dragging an active Cloud Antivirus window, in Windows 7 at least, will turn it translucent.

(Credit: Screenshot by Seth Rosenblatt/CNET)

You can opt out of contributing anonymous data to the cloud, but that also opts you out of automatic threat management. There's a network connection proxy option should you need it, and a reporting feature that will show you what kind of threats have been detected and removed from your computer. You can filter the report by All, Last 24 hours, Last Week, or Last Month, and there's a Recycle Bin pane from which you can recover a false positive, should you need it. Unfortunately, the Recycle Bin is hidden behind an obnoxious "flipping" screen that cheesily rotates when you need to access it.

If you're familiar with the minimalist Microsoft Security Essentials, Cloud Antivirus is even simpler. I did notice some odd interface rendering around the minimize and close buttons in Windows XP, but not in Windows 7. There are other more serious concerns about the program. Most notably, it lacks a scheduler, and it removes user input from update functions. Scans are also limited: you can tell the program what to scan, but not what to look for, so forget about toggling heuristics or rootkits. Then again, the point of this kind of security is that it's all wrapped into one.

Keeping in mind its limited feature set, and that we don't have efficacy numbers at the time of reviewing, Panda Cloud Antivirus makes good security choice for those willing to take the plunge.

November 9, 2009 5:08 PM PST
Xobni on BlackBerry (Credit: Xobni)

A few months ago, e-mail search app Xobni told us they were creating a version for BlackBerry. At the BlackBerry Developer Conference in San Francisco on Monday, we got a look at it.

Xobni on the Windows PC is an Outlook add-on that quickly finds e-mail messages and attachments. On BlackBerry, Xobni will integrate with your e-mail account, where it will extract addresses, phone numbers, and social networking details to automatically create a secondary address book for your phone. You'll be able to use Xobni for BlackBerry to quickly find contacts--including those you have not physically added to the native address book yourself. That expanded address book goes for everyone who has ever sent you an e-mail, been cc'd in an e-mail, or even mentioned in a message.

With the premium Xobni Plus Outlook add-on, you can access this secondary address book by typing into the Compose field. Integration isn't quite so tight in BlackBerry. On the Bold, Tour, and new Curve 8900s, you'll access contacts by flicking up on the track pad to get to to the stylized Xobni address book.

Then search by a contact's name, domain name, or by a keyword to speedily find the person you're looking for. As with Xobni on the desktop, you'll be able to send your calendar availability to a contact, get Facebook to supply contacts' Xobni profile picture, and view Twitter feeds and LinkedIn and Hoovers information from the BlackBerry.

In creating its own address book--instead of adding contacts to the native address book--Xobni makes a statement. Unlike Gwabbit, which adds the information from a signature block into a new record, Xobni finds e-mails and phone numbers anywhere in the message. Besides that, Xobni CEO Jeff Bonforte believes that inserting contacts into your native address book means "you've already lost the battle." Instead of adding contacts one-by-one, Xobni builds you a social roster behind-the-scenes, and adds social networking plug-ins in the process.

As far as time lines go, Xobni is looking at a closed alpha release sometime in December. Bonforte expects a beta early next year, and the final release a few months after that. The pricing model is still undecided.

Xobni for BlackBerry will first be available on the Bold, Tour, and Curve 8900. Storm users will have to wait a little longer.

November 9, 2009 3:35 PM PST

The woefully incomplete Louvre app for iPhone offers little to smile about.

J'adore France and the French people. But I'm pretty disappointed with Musee du Louvre, a free but painfully brief virtual tour of the famous museum.

The app consists of four main sections. In Louvre: The Visit, you get a video tour of seven well-known areas of the museum, including The Venus de Milo and Mona Lisa.

However, each "tour" lasts less than 20 seconds, and the default language is French. If you tap the screen to bring up the controls and then tap the language icon, you can select English (or German or Japanese), but there's no way to make it the default. You have to perform this step for each video, each time you watch it.

In Artworks, you get a Cover Flow-style selection of famous paintings--but only 20 of them. Tap one to get information about the work, a zoom-and-pan-able full-screen view, and a map showing its location within the museum.

The Palace follows the same format, but focuses on areas of the Louvre itself rather than individual artworks.

Finally, there's the prerequisite visitor information, including hours and admission fees--but no maps to or of the museum (save for the aforementioned few).

Musee du Louvre does let you bookmark any item for easy reference, but with so little content, this seems rather pointless. Hopefully the curators developers will turn this incomplete tease of an app into the rich, arts-friendly resource it should be.

In the meantime, anyone planning a visit to the actual museum would be much better served by Rick Steves' Louvre Tour ($4.99).

Originally posted at iPhone Atlas
Rick Broida, a technology writer for nearly 20 years, is the author of more than a dozen books. In addition to writing CNET's The Cheapskate blog, he oversees BNET's Business Hacks. Rick is a member of the CNET Blog Network and is not an employee of CBS Interactive. Disclosure. Deals found on The Cheapskate are subject to availability, expiration, and other terms determined by sellers. Follow Rick on Twitter at cheapskateblog.
November 9, 2009 2:43 PM PST

Apple on Monday released a large security update for Mac OS X that fixes dozens of vulnerabilities and provides protection against potential attacks exploiting a weakness in the protocol used to verify that a domain is legitimate.

There are 43 specific issues addressed in the 2009-006 update, released the same day as Mac OS X v.10.6.2.

It plugs a variety of holes for the Mac OS X v10.5.8, 10.6, 10.6.1, and Mac OS X Server v10.6 and 10.6.1, many of which could lead to arbitrary code execution and allow an attacker to take control of a computer.

Several updates affect Apache and QuickTime. Others target AFP Client, Apple Type Services, Core Graphics, CoreMedia, Dictionary, Disk Images, Dovecot, Directory Service, fetch mail, FTP Server, Help Viewer, Kernel, PHP, QuickDraw Manager and Spotlight.

One update fixes a hole in Adaptive Firewall that could allow a brute force or dictionary attack to guess an SSH log-in password, and another update addresses a vulnerability in Login Window that could allow a user to log in to any account without supplying a password.

Several updates address holes that could allow domain spoofing or man-in-the-middle attacks involving SSL (Secure Sockets Layer) used for encrypting data in transit, including a significant weakness in the X.509 protocol for generating SSL connections.

One of the updates affects the libsecurity feature and is billed as a "proactive change to protect users in advance of improved attacks against the MD2 hash algorithm" that could expose users to spoofing and information disclosure.

"There are known cryptographic weaknesses in the MD2 hash algorithm. Further research could allow the creation of X.509 certificates with attacker controlled values that are trusted by the system," the update says. "This could expose X.509 based protocols to spoofing, man in the middle attacks, and information disclosure. While it is not yet considered computationally feasible to mount an attack using these weaknesses, this update disables support for an X.509 certificate with an MD2 hash for any use other than as trusted root certificate."

That major weakness was revealed by security researcher Dan Kaminsky at the Defcon hacker conference in July. Kaminsky was able to trick a Certificate Authority into providing a certificate verifying authenticity for a domain that belonged to someone else.

The updates can be downloaded from Apple's site.

Originally posted at InSecurity Complex
November 9, 2009 1:58 PM PST

Far more robust than Microsoft Paint, but nowhere near as loaded with features as Photoshop, Paint.NET occupies a niche perfect for users who want a free image editor that has more than resizing and inverting. Version 3.5 includes an enormous number of stability tweaks and menu adjustments, as well as a couple of new minor features and some Windows 7 love, too.

Paint.NET 3.5 includes better Aero-theme integration and a new Utilities menu.

(Credit: Screenshot by Seth Rosenblatt/CNET)

One of the biggest changes makes the program's installation far less obvious. The new version automatically downloads and installs the program's prerequisites, including the latest Microsoft .Net version and Windows Installer. It will update in the background now, too, so that you can continue to use the program until it's ready to restart. Longtime users should notice that the program starts up about 20 percent faster, according to the publisher.

The program has been visually tweaked to look better on Aero for both Vista and Windows 7. Mostly, this means that the menu bar appears offset from the Aero pane border, and it looks good. The Selection tool will no longer use the "dancing ants" that most other image editors use. Instead, a context-sensitive gray overlay appears as you make your selection. This works fine when using the lasso tool, but was hard to discern when used with the magic wand. According to the publisher, this change was made to reduce CPU consumption. There are three new effects, as well, for Surface blurs, Dents, and Crystalize.

The new Utilities option on the menu bar now hosts the Language submenu, Manage Fonts, which loads the Windows font control panel, and the manual Check for Updates tool. The full list of program changes can be found here.


November 9, 2009 10:44 AM PST

To make it easier to see what an application looks like before going to the trouble of downloading and installing it, we've made a number of improvements to the way we show screenshots on Download.

First, we took every screenshot we've ever received from a software publisher over the past 13 years (anyone remember Doom 95?) and reprocessed it for improved clarity. Then we created a larger preview version of each screenshot and moved it to the top of the product page.

Finally, we no longer send you to a new page when you want to view a screenshot at full size. Instead, clicking the preview image opens a light box where you can cycle through all the screenshots at once. It's particularly nice for games where there are typically a number of high-res preview images available.

November 9, 2009 9:15 AM PST

Although VMware got its start with a desktop virtualization product aimed at developers, the company today is best known for bringing server virtualization to the mainstream.

Creating multiple virtual servers on a single physical system lets IT departments consolidate applications onto fewer computers and thereby cut costs. Over time, server virtualization has also enabled a variety of products and approaches that can simplify IT operations and generally make data centers more flexible.

VMware has continued to invest in virtualization aimed at the client. This includes client-side hypervisors such as its original VMware Workstation product. However, products and technologies associated with delivering applications and user desktops to the client are really the main focus.

Application and desktop delivery sometimes makes use of client hypervisors but it's a largely separate category of technology that's fundamentally about centrally managing user applications and/or operating-system images. In VMware's case, virtualized desktops fall under the VMware View name.

On Monday, VMware announced VMware View 4, the latest version of its virtual desktop portfolio.

Much of VMware's development focus with View 4 was in the area of the user experience--that is, making applications and desktops delivered from a central location perform with the same responsiveness and fidelity as if they were installed on a local PC, in the usual way.

Historically, this user experience has been one of the stumbling blocks for desktop virtualization in general. Older forms of Citrix Presentation Server (now rebadged and modernized under the XenApp label) and initial virtual desktop infrastructure (VDI) implementations very much tried to simplify management and otherwise deliver direct benefits for IT operations. Whether users liked using the products was secondary.

As a result, desktop virtualization has been mostly something used by what are often called "task workers." Think call centers and other groups of users with specific jobs to do and not much say about the tools they use to do it. In general, desktop virtualization promoters have focused too much on delivering benefits to IT and not enough on delivering benefits to users. (They've also arguably paid too little attention to keeping up-front costs down and relied too much on promises of soft cost savings down the road.)

One of the technology pieces that VMware is leaning on to improve user experience is the PC over Internet Protocol (PCoIP). PCoIP was originally developed by Teradici to improve the responsiveness and display quality of virtual desktops. However, in Teradici's initial implementation, specialized hardware was needed on both ends of the wire. This effectively made it a premium solution for situations in which cost wasn't a factor, such as for financial traders and government agencies for which security considerations are paramount.

VMware has worked with Teradici to create a software-only version of the protocol. Desktop virtualization Chief Technology Officer Scott Davis goes into a lot of the details on his blog.

It's a User Datagram Protocol-based server-side protocol that transmits compressed bitmaps or frames to the remote client. This has the advantage of being able to make real-time adjustments to account for the available bandwidth and latency of the communications channel; the display quality degrades, if there isn't enough bandwidth but things still "work."

Although details differ, there are similarities to Sun's Appliance Link Protocol--which is well-regarded for its ability to deal with poor-quality connections. (A downside of server-side protocols is that they consume processing horsepower on the server, where it tends to be more expensive, rather than on the client.)

VMware will continue to support other remote display protocols, most notably Microsoft's Remote Desktop Protocol. However, VMware is clearly positioning PCoIP as its favored technology and a point of competitive differentiation for VMware View in general.

Also in the graphics area, View 4 adds "multimonitor, adaptive display support--resolution optimization for each monitor, with an option to pivot and rotate the display output, supporting rich audio and video content with increased performance."

Other user experience enhancements generally relate to better integration with the overall desktop environment. For example, View Printing automatically discovers local printers without the need to install print drivers. View Limited Access provides a single point of authentication across VMware View environments, Windows Terminal Servers, Blade PCs, and remote physical PCs.

VMware View 4 comes in two editions. The Enterprise Edition includes the basics: VSphere 4 (the back-end server virtualization product), VCenter 4 (management), and View Manager 4 (for provisioning user access). It's priced at $150 per concurrent connection.

The $250-per-concurrent-user Premier Edition adds ThinApp 4 (for delivering ad hoc applications that aren't part of a master image) and View Composer (for managing images), both capabilities that would typically be desired in a large or sophisticated deployment.

VMware as a whole approaches the world from the perspective of the enterprise data center. Delivering desktops from that data center was somewhat of a sideshow. Is it now as focused on application delivery as, say, Citrix? Not really. But that said, desktop virtualization has moved beyond the sideshow stage at VMware.

Originally posted at The Pervasive Data Center
Gordon Haff is a principal IT adviser at Illuminata and has more than 20 years of IT industry experience. He writes about what's happening with enterprise servers and data centers, "Yotta-scale" computing, and related software and device trends as part of the CNET Blog Network. Disclosure.
November 9, 2009 4:00 AM PST

Five years ago, Mozilla made it clear that the browser wars weren't over after all.

In the 1990s, Netscape had lost its dominance in the browser market to Microsoft's Internet Explorer, and the Netscape-spawned open-source project called Mozilla had sunk into obscurity. Even a federal antitrust suit accusing Microsoft of anticompetitive practices with its browser and Windows was not enough to turn the tide.

But on November 9, 2004, Firefox 1.0 emerged to fight back again.

The project, originally named Phoenix to symbolize rebirth from Netscape's ashes, has now clawed its way back to account for nearly a quarter of the browser usage today. Microsoft may not be on the run, but it's on the defensive, gradually building its browser development effort back up into fighting form.

... Read more
Originally posted at Deep Tech
November 9, 2009 1:00 AM PST

Shazam on iPhone (Credit: Shazam)

The popular music discovery app Shazam is about to receive an Encore on the iPhone and iPod Touch. Shazam Encore for iPhone is a premium application, first introduced to Windows Mobile users last month at CTIA Wireless. Starting Monday, Shazam Encore will also be available for iPhone.

Shazam retrieves music information about a recorded song by listening to and recording from the music's source. The app returns details, links for buying a song, and social networking features that let you share the songs you had Shazam tag on Facebook and Twitter.

The premium Encore app--which will sell for about $5--adds music recommendations, trend charts, and the capability to search music by track, or by the artist or album name. According to Shazam, Encore also has speed improvements and a "car mode" that launches when you slip the iPhone into a vehicle dock.

As with Windows phones, Shazam Encore will remain an optional upgrade on the iPhone alongside the free version. New users of Shazam's free app will be limited to five music discovery calls. Shazam Encore offers unlimited song-tagging. Shazam Encore will be available in 22 countries, and in English (U.S. and U.K. varieties), Dutch, French, German, Italian, Japanese, Portuguese, and Spanish.

Related: Shazam debuts in Windows Marketplace for Mobile

November 8, 2009 9:16 PM PST

"Come on, Flixster. We know you can do better than that."

Those are the words I wrote on Friday to sum up a review of Flixster's movie app for BlackBerry phones. The trouble is, I goofed. I was apparently a day early, reviewing the previous Flixster for BlackBerry, which did deserve the critiques I dished out, and not the Flixster update that was set to release on Saturday (we still don't see it in the BlackBerry App World as of Sunday, but keep checking the store and this post for an update). A re-review--or rather, a preview of the forthcoming Movies app, version 1.1.6--is only fair.

The updated Movies app by Flixster for BlackBerry.

The updated Movies app by Flixster for

(Credit: Flixster)

Flixster's free Movies 1.1.6 for BlackBerry is a pronounced improvement over version 1.0, which served more as a shortcut to Flixster's mobile-optimized Web site than it did a native application. The movie app's navigation looks similar to the previous version, but is now stylized and fixed in place, with only the content refreshing as you move from tab to tab, not the entire screen as before.

As with many mobile apps that sync content from a master Web site, the application's speed is still contingent on the quality of your data connection. If you have a slow connection, the showtimes and theater lists will load slowly. This is especially true when it comes to launching previews. It appears that movie previews call on the browser to initiate a download, and then play on the BlackBerry's built-in media player--at least in the case of my test phone, the BlackBerry Bold 9700. An error message that the wireless connection broke appeared after each trailer finished playing. Pressing the phone's "back" arrow key twice restored Flixster's app.

While the guts of the Flixster app are identical to the previous version, and mostly still linked to the main Web site itself, the updated visual wrapper transforms the user experience from basic Web browsing to a cohesive launchpad where you can read reviews, scour showtimes, and buy tickets by way of Movietickets.com. Flixster's Movies app is one I'd now readily, not reluctantly, use on BlackBerry when that urge to stare at the silver screen sets in.

Originally posted at Crave

Search Download Blog posts

About The Download Blog

Download.com editors cover the world of downloadable software and beyond.

Add this feed to your online news reader

The Download Blog topics

Most Discussed