Earlier this week, Engadget provided a sneak peak at Firefox OS, Mozilla’s effort to claw back into the mobile game. The report features apparently as-yet-unseen screenshots of Firefox OS’ new app store. One images reveals a marketplace with access to a variety of apps and app categories, while the other shows a page that details a Solitaire app. It’s not a lot, but that’s what you get from a leaked first look. 

As you might remember, way back in July 2006, we reported that Mozilla was planning on releasing its very own mobile operating system, Boot to Gecko. The idea was that it would build a completely free and open operating system platform for mobile devices that would compete against iOS, Windows Phone, and most directly, Google’s Android. Android is also “free and open,” although there is nuance to that title for the platform. Boot to Gecko is now being called Firefox OS, although the premise of building a free and open-source operating system is still the same.

The OS has been made available to developers on Mozilla’s FTP site, and the images brings us a more complete picture of the user experience Mozilla plans to deliver.

You might ask what the purpose of building a free operating system is, and the answer to that is the reason these photos are so interesting. Wide adoption of a free mobile OS by handset makers and service providers means more people will be accessing that OS’ app store and, presumably, paying for apps, sending a cut back to the app store proprietor (read: operating system developer). It also means that the developer’s other products (e.g. Firefox mobile browser) are front and center for a user of the OS.

If Mozilla’s significance on the desktop is any indication, their play for a chunk of the mobile market with a widely adoptable OS could potentially make an impact, particularly in low-cost handsets and emerging markets for mobile devices that connect to the internet. But as Windows Phone — a viable, well-funded, and downright good-looking competitor — has seen, competing with Android and iOS is a uphill battle. 

Nokia has revealed the Lumia 920, complete with Windows Phone 8 and PureView camera technology, at a special event in New York.

Nokia has announced the Lumia 920, its first Windows Phone 8 smartphones, and the second set to be revealed following the Samsung Ativ S last week.

CEO Stephen Elop took to the stage at 10am, blissfully unaware that the livestream webcast had broken, and talked about Windows Phone. He said Nokia shared a vision with Microsoft, and that together they would create “a new smartphone experience,” and something “very unique in the market.”

With several Lumia devices already on sale, he introduced Jo Harlow to tell us all about the latest additions to the family — first, the Lumia 920.

The Lumia 920 was described as the “most innovative smartphone in the world,” and boasts a camera with PureView technology, just like the Symbian-based PureView 808. It also uses Nokia’s City Lens to provide an improved mapping experience and built-in wireless charging.

Nokia’s event is ongoing, and more details will be added as they come through.

Just a bit over a week away from the official iPhone 5 announcement, photos of cases accompanying the device are already appearing on AT&T.

Ahead of the September 12 announcement of the Apple’s iPhone 5, Boy Genius Report has posted a few photos of what looks to be the latest cases for the upcoming device. Jonathan S. Gelle writes that the site’s AT&T source sent over images that were found in AT&T’s internal system — showing off an approximate dimension of the new iPhone and its accompanying screen protector.

If the images are an accurate depiction of the iPhone 5, then all the rumored reports and leaked images of the new device are relatively point-on: The phone features a slimmer, longer body and in comparison to a mock-up credit card, the screen is just a tad wider than the plastic. The front-facing camera is also located dead center of the device rather than the iPhone 4′s slight shift to the side.

There have been a few rumored iPhone 5 cases spotted in the past, but coming from AT&T internal system seems more credible than previous photos. While this is no confirmation for the specs that we’ve previously reported, it’s a good indication of what’s to come in the physical sense — and as a case reviewer myself, I’m already liking the wallet-like design available for the iPhone 5. Check out these photos below, thanks to BGR.

A new raft of Java vulnerabilities raise the question: Should everyday computer users to ditch Java?

Java is a nearly-ubiquitous technology that has played an important role in the development of the Internet and cross-platform applications. It has offered a mature, net-savvy development framework for everything from high-end server applications and desktop applications (like OpenOffice) to mobile phones and interactive applications embedded in Web pages.

However, in recent months Java has come under fire. Java was once a fundamental technology included with almost every computer; however, Apple stopped shipping Java by default on new Macs almost two years ago, most Linux distributions don’t include Java by default, and even the latest versions of Windows don’t come with a stock Java installation. Why? Because, despite being a mature cross-platform technology, Java never really took off for desktop applications.

Worse, Java’s stature has been further cut down by a series of high-profile security exploits: the Mac-specific Flashback trojan relied on Java to spread itself, and (after months of apparent foot-dragging) database giant Oracle has just released a new Java update to patch multiple vulnerabilities currently being exploited by cybercriminals. Most recently, Java may also have been an attack vector in the 12 million iPhone and iPad device identifiers allegedly stolen from an FBI agent’s notebook earlier this year.

Is it time for everyday computer users to finally say goodbye to Java on their systems? How is that done? And what about people who have a legitimate need to use Java?

Nature of the beast

The Java situation is complicated — and is made more complicated by terminology. The security issues making headlines this week concern only a small part of the broader Java universe: It’s important not to paint with broad strokes and label everything related to Java as a massive security risk.

First, there’s confusion about what exactly is Java. Java is a programming language, like BASIC, Pascal, C, and C# (originally from Microsoft, now an open standard) and Apple’s Objective C. Programmers use Java to write programs, just like they’d use any other language. Java has actually been around more than 20 years, although it first started getting a lot of attention in 1995 when Sun released its first Java platform. Java is hardly a new kid on the block.

The idea behind Java was to create a high-level language with no platform-specific implementation dependencies. Rather than compiling to native code (say, for Windows, Mac OS or Unix) Java compiles to “bytecode” that runs on virtual machines. All JVMs are designed to run the same Java bytecode the same way, regardless of platform. That means a programmer can write a Java application that program should run on any platform with a compatible Java virtual machine. Voilà The Holy Grail of modern computing: a program that runs the same on every platform.

To put a Java application (or applet, as they’re called) into a Web browser, you need a third item: a Java browser plug-in. Like other plug-ins, a Java browser plug-in executes within a Web browser application and generally acts like an intermediary between the Java virtual machine available on the computer and the Java code on a website. Java plug-ins run applets in a security “sandbox” that’s supposed to prevent applets from doing anything harmful on a user’s system. However, the Java VM is a complicated system, plug-ins can be complicated, and Web browsers are enormously complicated. The interaction of these three Java components plus Web browser applications can have security implications — and that’s where we’re seeing the current spate of problems.

Notice what’s not a part of Java? JavaScript. Despite the unfortunate name similarity, the JavaScript client-side scripting engines built into modern Web browsers have nothing to do with Java. JavaScript has had its own share of security gaffes over the years, but turning off JavaScript will do nothing to protect users from security issues in Java — and vice versa.

Unplugging versus uninstalling

Complex modern software applications can have security issues at any step along the way. Java applications aren’t immune to security problems any more than applications written in other languages. No matter what language an application was written in, you need to hope that the developer updates its software promptly to close off security holes when they’re found. As development platforms and frameworks go, Java is actually in relatively good shape on the security front: After all, it’s had the better part of two decades to get its act together.

However, the so-called “drive-by” exploits involving Java that can compromise a person’s computer just by automatically loading a Java applet on a website rely on the Java plug-in. Plug-ins have long been popular targets of malware authors: Adobe’s Flash and Acrobat Reader plug-ins are also very common sources of security issues.

The good news is that these drive-by exploits can all be foiled by disabling the Java plug-in in your browser — no need to uninstall the Java runtime (or virtual machine). That’s handy if you do Java development or use one of the mainstream applications that do rely on the Java runtime:

• Adobe Creative Suite 5.5 and 6
• OpenOffice (and descendants like LibreOffice)
• CrashPlan Pro
• Wuala
• Vuze (a BitTorrent client)
• Runescape
• Minecraft

That’s not counting specialized applications used by banks, universities, and corporations that rely on Java. For instance, anyone who runs software from Oracle probably needs Java.

Disabling the Java plug-in in browsers

You can disable the Java plug-in in every major Web browser without removing Java from your system.

Internet Explorer

Disabling Java in Internet Explorer is unnecessarily difficult. The United States Computer Emergency Readiness Team (US-CERT) offers detailed instructions for (mostly) disabling Java in Internet Explorer; however, they are not for the non-technical or faint of heart. A safer recommendation is to remove Java entirely (if you don’t need it) or switch to a different browser (like Chrome or Firefox) if you do.

To remove Java from Windows, go to Control Panel then Programs, find “Java” in the program list, and click Uninstall.

Firefox

1. Choose Tools > Add-ons (or, in Windows 7 and Vista, click the Firefox button and choose Add-ons).
2. Select the Plug-ins tab
3. Find the Java plug-in in the list (it’ll have a name like Java(tm) Platform SE with version numbers).
4. Click Disable.

Google Chrome

1. Type chrome://plug-ins into the location bar and press Enter
2. Locate the Java plug-in
3. Click the Disable link

Safari (Mac OS X and Windows)

1. In Safari, go to Preferences > Security
2. Uncheck the Enable Java checkbox

Opera

1. Type opera:plug-ins into the location bar and press Enter
2. Locate the Java plug-in and click Disable.

Other options

This is all fine and dandy for folks who don’t need Java on their systems, or who never need to use a Java applet on a Web page. However, if your situation or job makes Java impossible to avoid, here are some other options:

Use a second browser solely for Java

If you absolutely must use Java in a browser, consider dedicating a browser specifically to that task, and use another browser for all your other Web tasks. If you’re on Windows, you could use Internet Explorer for your Java-specific site(s) or pages (since Java is so fiendishly difficult to disable in IE), but install and use something like Firefox or Chrome (with Java disabled) as your primary browser for everything else. Similarly, there’s no reason you can’t run (say) Safari and Chrome side-by-side, one just for your Java needs, and the other for everything else. Be sure to set the browser with Java disabled as your primary browser, so it’s what opens when you click a link in email or a friend’s Facebook page. This setup isn’t ideal, but with a little care it can insulate you from risk without ripping Java out of your system.

Mac OS X

In Mac OS X, you can prevent Java applets from loading in all your Web browsers. Go to Applications > Utilities > Java Preferences, select the General tab, and uncheck “Enable applet plug-in and Web Start applications.” (Note: if you don’t have Java installed on your Mac, opening Java Preferences will prompt you to install it. Click “Not Now” to exit.)

Mac OS X is unique in that it will automatically disable Java applets in all browsers if users go 35 days without loading one. It’s a security measure Apple introduced for Mac OS X 10.6.8 and later in the wake of the Flashback trojan.

Is Java’s time done?

Java isn’t going to be going away anytime soon. It’s still used by some mainstream desktop applications, as well as a number of specialized apps, particularly in science and medicine. Moreover, Java is very much a leading technology for server software and mobile phones. Although Apple’s iOS doesn’t rely on Java, Google’s Android certainly does, and there are even hundreds of millions of feature phones in the world running it.

However, Java’s days as a de facto part of every major operating system seem to be over. Mainstream operating systems have stopped including Java by default, offering it only as an optional add-on for folks who need it.

Perhaps the saddest thing is that, for all of Java’s potential, few mainstream computer users will notice when it’s gone.