Mozilla has released Firefox 6.0.2 to remove additional DigiNotar-issued SSL certificates. According to a Mozilla blog post, DigiNotar, the Dutch certificate authority that was used by an Iranian hacker to issue fraudulent SSL certificates, also issued some certificates used by the Dutch government. The Dutch government’s initial assessment indicated that those certificates were still trustworthy, so Mozilla exempted them from Firefox 6.0.1’s removal of DigiNotar root certificates. After an audit of DigiNotar, the Dutch government rescinded that initial assessment of trust, so Mozilla has now removed all DigiNotar certificates from Firefox. Google has updated Chrome (which happens automatically), and Apple has now released Security Update 2011-005 to protect Safari users (it’s also possible to excise the DigiNotar certificates from your base keychain if you’re not yet in a position to apply Apple’s update). Firefox users should update to 6.0.2 to avoid the real-world exploits based on these fraudulent certificates. (Free, 28.1 MB, release notes)
Avoid Simple Typos
If, like me, you find yourself typing 2911 in place of 2011 entirely too often, you can have Mac OS X (either Lion or Snow Leopard) fix such typos for you automatically. Just open the Language & Text pane of System Preferences, click the Text button at the top, and then add a text substitution by clicking the + button underneath the list. It won't work everywhere (for that you'll want a utility like Smile's TextExpander), but it should work in applications like Pages and TextEdit, and in Save dialog boxes.