SECURITY WARNINGS & Notices - Please post them here

system · 2011-11-29T17:27:56.000Z

gautam7 post:1680:

Google account are now more secure with two step verification.
http://lifehacker.com/5756977/set-up-googles-two+step-verification-now-for-seriously-enhanced-security-for-your-google-account

That’s seriously old news as that was published By Adam Pash, Feb 10, 2011 8:30 AM

gautam7 · 2011-11-29T19:12:24.000Z

Sorry people this two way verification notification just come up in my gmail, looking for more info i stumbled upon that article after reading it looked cool but i totally missed the date. Sorry again for that old post :-[. Next time i will be carefull

bob3160 · 2011-11-29T22:08:23.000Z

Facebook ‘Deceived’ Users, FTC Finds

MikeBCda · 2011-11-29T22:42:40.000Z

Interesting read, Bob, thanks – I think we’ll agree we’ve seen it coming for a long, long time. Too bad charges can’t be laid for actions prior to this new agreement.

Asyn · 2011-11-30T16:12:28.000Z

Millions of printers open to devastating hack attack
http://redtape.msnbc.msn.com/_news/2011/11/29/9076395-exclusive-millions-of-printers-open-to-devastating-hack-attack-researchers-say
http://www.hp.com/hpinfo/newsroom/press/2011/111129b.html

system · 2011-11-30T23:02:16.000Z

bob3160 post:1683:

Facebook ‘Deceived’ Users, FTC Finds

Facebook settles FTC privacy complaint, agrees to ask users’ permission for changes
http://www.washingtonpost.com/business/technology/facebook-settles-ftc-privacy-complaint-agrees-to-ask-users-permission-for-changes/2011/11/29/gIQAqyJC9N_story.html?wpisrc=nl_tech

Asyn · 2011-12-09T09:19:10.000Z

Security Advisory for Adobe Reader and Acrobat
http://www.adobe.com/support/security/advisories/apsa11-04.html

Asyn · 2011-12-09T15:52:17.000Z

Microsoft Security Bulletin Advance Notification for December 2011
http://technet.microsoft.com/en-us/security/bulletin/ms11-dec

Asyn · 2011-12-17T15:54:43.000Z

Asyn post:1687:

Security Advisory for Adobe Reader and Acrobat
http://www.adobe.com/support/security/advisories/apsa11-04.html

Security updates available for Adobe Reader and Acrobat 9.x for Windows
http://www.adobe.com/support/security/bulletins/apsb11-30.html

Asyn · 2011-12-20T11:13:48.000Z

Microsoft Windows win32k.sys Memory Corruption Vulnerability
http://secunia.com/advisories/47237/

system · 2011-12-20T16:35:01.000Z

Asyn post:1690:

Microsoft Windows win32k.sys Memory Corruption Vulnerability
http://secunia.com/advisories/47237/

Looks like it’s only a problem if you use the Safari browser in Windows 7.

DavidR · 2011-12-20T17:31:01.000Z

That would be my view of it as well, but the secunia report isn’t very clear.

Solution No effective solution is currently available.

If it only effects Safari, then the solution would be to use a different browser until Apple patch the Safari browser.

They also said it might effect other OS versions, but confirmed on win7 64bit fully patched.

Asyn · 2011-12-21T06:05:08.000Z

DavidR post:1692:

That would be my view of it as well, but the secunia report isn’t very clear.

Here’s a little bit more info…
http://www.h-online.com/security/news/item/Highly-critical-zero-day-vulnerability-in-Windows-discovered-1398625.html

DavidR · 2011-12-21T12:10:09.000Z

Interesting only in win7 64bit not win7 32bit and not confirming if this has been found in any other browser, so the assumption is that other browsers aren’t effected ???

polonus · 2011-12-23T15:22:08.000Z

Second time around that the British Amnesty site has been infected with java malware. Good thing, avast detects. Read: http://www.barracudalabs.com/wordpress/index.php/2011/12/22/authoritarian-regime-uses-human-rights-group-to-spy-on-activists/
link article author = Paul Royal, Research Consultant

polonus

system · 2011-12-23T15:49:21.000Z

TDL3 infection paired with rougues i have seen today a pair of computers at my workstation that are paired with rootkit…hopefully they are fairly easy to remove so dont forget to run TDSSKiller after taking care of a FakeAV.

CraigB · 2011-12-23T16:16:37.000Z

true indian post:1696:

TDL3 infection paired with rougues i have seen today a pair of computers at my workstation that are paired with rootkit…hopefully they are fairly easy to remove so dont forget to run TDSSKiller after taking care of a FakeAV.

And where is this workstation ? your study desk in your bedroom.

Asyn · 2011-12-23T20:34:46.000Z

DavidR post:1694:

Interesting only in win7 64bit not win7 32bit and not confirming if this has been found in any other browser, so the assumption is that other browsers aren’t effected ???

MS confirmed that IE prior to version 9 is also affected.

DavidR · 2011-12-23T22:53:45.000Z

I suspected this was going to extend to other browsers, though is that still related to IE browsers win7 x64 though.

Asyn · 2011-12-23T23:09:26.000Z

DavidR post:1699:

I suspected this was going to extend to other browsers, though is that still related to IE browsers win7 x64 though.

Yes, x64 only atm, but they also admit that it could be misused without any browser as well.
They changed the info (Chief Security Advisor Blog) quite frequently lately.

Announcements