Rabu, 17 Desember 2008

Microsoft plans quick fix for IE

Microsoft is due to issue a patch to fix a security flaw believed to have affected as many as 10,000 websites.

The emergency patch should be available from 1800 GMT on 17 December, Microsoft has said.

The flaw in Microsoft's Internet Explorer browser could allow criminals to take control of people's computers and steal passwords.

Microsoft Internet Explorer logo, file pic from 2004
Internet Explorer is used by vast majority of world's computer users

Internet Explorer is used by the vast majority of computer users and the flaw could affect all versions of it.

So far the vulnerability has affected only machines running Internet Explorer 7.

"Microsoft teams worldwide have been working around the clock to develop a security update to help protect our customers," the software firm said in a statement.

"Until the update is available, Microsoft strongly encourages customers to follow the Protect Your Computer Guidance at www.microsoft.com/protect, which includes activating the Automatic Update setting in Windows to ensure that they receive the update as soon as it is available," the statement read.

Potential danger

According to Rick Ferguson, a senior security adviser at security firm Trend Micro, the flaw has so far been used to steal gaming passwords but more sensitive data could be at risk until the security update is installed.

MICROSOFT SECURITY ADVICE
Change IE security settings to high (Look under Tools/Internet Options)
Switch to a Windows user account with limited rights to change a PC's settings
With IE7 or 8 on Vista turn on Protected Mode
Ensure your PC is updated
Keep anti-virus and anti-spyware software up to date

"It is inevitable that it will be adapted by criminals. It's just a question of modifying the payload the trojan installs," he said.

It is relatively unusual for Microsoft to issue what it calls an "out-of-band" security bulletin and experts are reading the decision to rush out a patch as evidence of the potential danger of the flaw.

Some experts have suggested that users switch browsers until the flaw is fixed.

Firefox, Opera, Chrome and Apple's Safari system are not vulnerable to this current flaw.

But Graham Cluley, senior consultant with security firm Sophos, said no browser is exempt from problems.

"Firefox has issued patches and Apple has too. Whichever browser you are using you have to keep it up to date," he said.

"People have to be prepared and willing to install security updates. That nagging screen asking if you want to update should not be ignored," he said.

Selasa, 16 Desember 2008

Party launched for 'all S Africa'

The leader of a new political party in South Africa has said at the movement's formal launch that it will offer a home to all of the country's racial groups.

Former Defence Minister Mosiuoa Lekota said the Congress of the People, or Cope, was the "party of the future".

Cope supporters in Bloemfontein, 16 December 2008
Cope supporters were in high spirits at the party launch

Correspondents say the party could present real opposition to the African National Congress for the first time.

It is made up largely of ANC defectors, and will challenge the governing party in national elections next year.

Mr Lekota was speaking in Bloemfontein, where he was named as Cope's president.

"The history of South Africa will never be the same again," he said to a cheering crowd of some 4,000 delegates.

"Ours shall be a truly non-racial party that will provide a true home to all South Africans irrespective of race, class or gender."

The ANC has ruled South Africa since the end of white minority rule 14 years ago.

Mosiuoa Lekota in Bloemfontein 15 December
We need to fight joblessness and grow our economy
Cope leader Mosiuoa Lekota

South Africa's main opposition party until now, the Democratic Alliance, draws most of its support from white and mixed-race voters.

Cope emerged after Thabo Mbeki resigned as president in September after a power struggle with ANC leader Jacob Zuma.

Many supporters of the new party were unhappy at the way in which Mr Mbeki was forced to step down.

The BBC's Peter Biles reports from Bloemfontein that delegates have been locked in feverish political debates.

They see the launch as a key moment that signals the growth and development of South Africa's young democracy, he says.

Mr Zuma is also in Bloemfontein on Tuesday for a party rally widely seen as an attempt to divert attention from the launch of Cope.

"It is a call to us, as former soldiers of [ANC's now-defunct military wing Umkhonto weSizwe] MK, to participate in today's battles, the battles that are more important, the battles of building a new nation, of developing South Africa," he said.

As it confirmed Mr Lekota as its leader, Cope named the former premier of Gauteng province, Mbhazima Shilowa, as its first deputy president.

The party also unveiled its latest high profile supporter, the anti-apartheid activist and cleric Allan Boesak.

Mr Boesak was given a rapturous welcome by Cope supporters, before telling them that the tide had turned against the ANC.

Mr Lekota, who has ruled out any reconciliation with the ANC, said that expanding the economy would be the linchpin of Cope's electoral campaign.

"We need to fight joblessness and grow our economy," he said.

"Our approach is stability, hard work and growth."

Electoral test

South African analyst William Mervin Gumede told the BBC's Focus on Africa programme that Cope is already starting to change the country's politics.

"Cope has changed the ANC already - the ANC is trying to be more accountable, the ANC is trying to be more consultative and is going to the electorate to explain its decisions - something it hasn't done in the past."

The breakaway party's formation has been marked by a lengthy and problematic search for a name.

The ANC has laid claim to the Congress of the People, since it was the name used for a historic, ANC-sponsored event in 1955.

But the High Court ruled earlier this month that the new party could use the name.

CONTESTED NAMES
1: South African National Congress, challenged by ANC as too similar to its name
2: South African Democratic Congress, already registered by another party
3: Congress of the People, refers to an event when the ANC's Freedom Charter was signed

Cope was already the party's third choice.

Its first choice - South African National Congress - was challenged by the ANC, which said it was too similar to its own name.

Their second choice - South African Democratic Congress - was already registered as a party.

In its first electoral test earlier this month, the ANC dissidents won 10 of 27 wards in the Western Cape - the province where the ANC has always been least popular.

The Cope members had to stand as independent candidates because of the dispute over the party's name.

Our correspondent says the challenge for the new party is to distance itself from Mr Mbeki, and not appear like a group of embittered losers from last year's ANC national conference in Polokwane, where Mr Zuma defeated Mr Mbeki in a leadership contest.

But he also says that Cope, which says it has more than 400,000 members, is in a position to make serious inroads into ANC dominance.

The ANC has around 650,000 paid-up members.

Zimbabwe's air force chief 'shot'

The commander of Zimbabwe's air force has been wounded in what officials are calling an assassination attempt.

Perence Shiri, 53, a close ally of President Mugabe, seen as one of the most feared military leaders, was shot in the arm and is said to be stable.

The opposition MDC says he was one of the masterminds of violence against its supporters during this year's election.

Its spokesman said the attack was aimed at justifying a military crackdown and eventual declaration of an emergency.

Perence Shiri
Air Marshal Shiri is the first senior figure to be targeted for many years

The incident comes as pressure grows on Zimbabwe to allow international mediation in its political crisis.

The crisis is compounded by a cholera epidemic which has left hundreds dead.

On Monday, at the UN Security Council's first discussions on Zimbabwe since July, Secretary General Ban Ki-Moon said the world was witnessing a failure of the leadership in Zimbabwe to address the crisis.

After disputed presidential elections in March, President Robert Mugabe's Zanu-PF party and the opposition Movement for Democratic Change (MDC) agreed to form a power-sharing government.

But implementation of that agreement, reached in September, has been dogged by disagreements over whose supporters would get key ministries.

'Terror attacks'

Correspondents say this is the first time such a senior government figure has been the target of a violent attack for many years.

PERENCE SHIRI
Accused of masterminding attacks on opposition in 2008
Member of Joint Operations Command - top military body
Accused of leading farm invasions in 2000
Led brutal campaign against "dissidents" in 1980s, which left 20,000 dead
Called himself "Black Jesus" - as he had the power of life or death
Cousin of Robert Mugabe
On sanctions list of US, EU
Age: 53

"This is a very, very unusual incident, because Zimbabwe does not have a history of assassinations," the assistant editor of the state-run Herald newspaper, Caesar Zaye, told the BBC World Service's World Today programme.

Air Marshal Shiri was ambushed on Saturday evening while driving to his farm, state media said.

Police said he was accosted by unknown people who shot at his car.

When he heard the gunshots, he got out thinking it was a puncture and was shot. He is now said to be recovering in hospital.

Officials said the incident was one of a series of attacks aimed at destabilising the country.

"The attack on Air Marshal Shiri appears to be a build-up of terror attacks targeting high-profile persons, government officials, government establishments and public transportation systems," the Chronicle newspaper quoted Home Affairs Minister Kembo Mohadi as saying.

There were several bomb blasts around Harare last year which caused little damage. The courts have acquitted several opposition activists accused of staging the attacks.

Mr Zaye said the alleged assassination attempt was "an attempt to bring a security angle into the crisis".

However, other sources suggest the cause was either a feud within the ruling Zanu-PF party or an attempted robbery.

Crackdown fear

On Monday, Zimbabwe's government said it had "compelling evidence" that neighbouring Botswana was hosting military training camps for opposition groups intent on bringing about regime change.

Botswana denied the charges, and said Harare had failed to provide any tangible evidence to back up its allegations.

Air Marshal Shiri, who is also Mr Mugabe's cousin and a loyal supporter since he came to power, sits on the Joint Operations Command which advises the president on military matters.

The opposition Movement for Democratic Change said the JOC was behind the violent attacks on its supporters ahead of June's presidential run-off - allegations the military strongly denied.

Air Marshal Shiri was commander of the Fifth Brigade, blamed for the killing of 20,000 people in Zimbabwe's south-western Matabeleland region during the 1980s.