Category: security

  • Zero-Day IE Exploit Takes Control of PCs

    Yikes, all you have to do is browse to the affected page. Glad I have Firefox!

    Firefox tops IE on security.  Update IE early and often.  Make sure you lock IE down or simply disable it and use Firefox.  But be aware that Firefox still has some limitations.

    IE is swiss Cheese!!

    read more | digg story

  • Are you getting email from the FBI or CIA? (new malicious code)

    Dear Sir/Madam, We have logged your IP-address on more than 30 illegal Websites.

    Sober worm pretends to be an email from the FBI or CIA. 

    read more | digg story

  • SANS Top 20 Internet Security Vulnerabilities for 2005

    Announced this morning is the 2005 SANS Top 20 Internet Security Vulnerabilities:
    Top Vulnerabilities in Windows Systems
    Top Vulnerabilities in Cross-Platform Applications
    Top Vulnerabilities in UNIX Systems
    Top Vulnerabilities in Networking Products

    read more | digg story

  • Limewire File sharing program exposes hard drives

    The “default” installation of Limewire software allegedly exposes confidential files. Limewire says there is no security flaw, but the guy making the claim offers to charge $79 to uninstall Limewire for you. This is omitted from the story.

    True or false, you be the judge.

    read more | digg story

  • PGP Encryption for VoIP

    PGP Encryption is being developed for VoIP in order to help keep voice communication over the internet secure.

    read more | digg story

  • U.S. Government Wants to Spy on Internet Use

    The federal government wants to peer into your computer communications, forcing companies to design, or redesign, their networks to accommodate surveillance. The FCC gave broadband Internet service and voice-over-Internet Protocol services, or VoIP, 18 months to ensure that their networks are wiretap-ready.

    Is this the Patriot Act at work?  Actually its a different act called Communications Assistance for Law Enforcement Act (CALEA)in 1994, requiring telephone companies to build surveillance capability into their networks.

    I agree with EFF:

    Lee Tien, senior staff attorney for the Electronic Frontier Foundation, a civil liberties group focusing on technology issues, said: “It doesn't authorize wiretaps. It does something much more intrusive: It dictates the design of technologies from law enforcement's standpoint.”

    read more | digg story

  • Schools Crack Down on Students' Blogs

    “Some schools are punishing students for things written on their personal Web pages, raising questions about how far a principal's oversight should reach.”

    This sounds like a privacy issue. 

    “It's inappropriate that they're telling my daughter how to behave when she's not at school,” said Joseph Iacovacci, Ms. Iacovacci's father, of the Web posting. “It was such a violation of the First Amendment.” 

    I must agree with the parent.  I do believe that there has to be some kind of control.  But that control should be done through the parent.

    read more | digg story

  • Security Testing on my Window 2000 system

    I've surfing on my Windows 2000 system while completely exposed to the Internet on my DMZ.  No firewalls, no anti-virus, not even a pop-up blocker.  The box is exploited immediately. 

    Many of the default configuration on a fresh Windows 2000 box are just plain ridiculous.  For example, the C$, and parts of the root are shared out on earlier versions of Windows 2000.  Message services, port 139 and other very easy to exploit applications and services are turned on by default on Windows 2000. 

    It is no wonder Windows systems are always getting taken down.  Just turning off some of those services do quite a bit to close some of the holes on Windows boxes.  With broadband getting more popular, the combination of unprotected systems and the viral marketing of malicious code are creating a storm on the Internet.  An unprotected system is rendered completely useless in a matter of weeks (days and hours if you surf porn or serial sites).

    Here are some of the vulnerabilities on Windows systems at SANS.org.

    In all honesty, if you have a good firewall, virus protection, maybe a pop-up stopper and a good security configuration you could have a Windows 98 machine and NEVER get a virus.  

  • Advantage America benefits (social engineering for the holidays)

    Advantage America Benefits Called and
    offered me a grant for $12,500 and wanted my personal information.
    ripoff Winter Park Florida… is it real?!

    I got a call the other day from an organization calling itself Advantage America Benefits (AdvantageAmericaBenifits.com). 

    While he spoke decent English, the man I talked to had an accent that
    sounded either East Indian or Philipino.  He said his name was
    “Mark Anderson” that he was working with the Resurgence Department of
    the U.S. Government (which does not exist) and he wanted to give me a
    $12,500 grant because my family had been selected among of 6,000
    families who fit certain criteria.  I was, of course immediately
    suspicious.  While I know the U.S. government does in fact give
    grants to qualifying families, I also know that the government is does
    not  advertise these grants for fear of social indignation. 

    I asked him lots of questions.  All of which he did a great job of
    answering.  The rudeness was was what kept me on the phone. 
    In my experience government employees are rude and fed up with life.
      I was also impressed that he was able to give a website:
     http://advantageamericabenefits.com
    Address:
    1900 Howell Branch Road
    Suite #4-7
    Winter Park, FL 32792
    Phone:
    866-503-7345

    I must admit they almost had me until I decided to do a Google search on Advantage American Benefits and stumbled across the Rip Off Report.coms take on Advantage America Benefits.

    I've read on the Rip Off Report that these guys are from Bali or India, but they maybe in Canada because the IP address is in Canada:  

    OrgName:    Groupe iWeb Technologies inc. 
    OrgID: GIT-20
    Address: 3185, rue Hochelaga
    City: Montreal
    StateProv: QC
    PostalCode: H1W-1G4
    Country: CA


    http://ws.arin.net/whois/?queryinput=209.172.34.215

    More on Advantage America Benefits grant fraud here.

  • An Huge List of Free Proxy Bypassers

    The majority of the users are people trying to bypass their school or business's filters. Also used to surf the web anonymously.

    read more | digg story