http://securitywatch.eweek.com/trojan_targeting_ebay_motor_buyers.html
One of the more advanced trojans to hit is in the wild now. If you click slideshow attachments in infected emails, it drops a program that sets up a man in the middle attack between you and ebay motors. You send money, the crook gets it, the seller never knows you exist.
"How to avoid being victimized? As always, never click on e-mail attachments from sources you don't trust."
Friday, March 9, 2007
Thursday, March 8, 2007
Palm PDA DST Update info
Thanks to for the Palm PDA DST update link at http://www.palm.com/us/support/downloads/dst_palmos.html
DST updates for Apple and Linux
A big thank you to for DST info on Apple and Linux systems.
For most Linux distributions, you can find background info and links to update your system for the upcoming Daylight Saving Time changes at http://www.linux-watch.com/news/NS6300294422.html. For those of you with Gentoo, just an "emerge sys-libs/timezone-data" should do the trick.
Apple users should refer to http://docs.info.apple.com/article.html?artnum=305056 to find patches or instructions to fix the DST changes manually, depending on your OS version. You will also find links on that page containing special instructions to update your Java and WebObjects environments.
For everyone, Sun has posted DST instructions for Java at http://java.com/en/download/faq/dst.xml. In certain cases (but not all) you may wish to remove older versions of Java if you update to the latest and greatest. Directions for that process may be found at http://www.java.com/en/download/faq/5000070400.xml.
For those just joining in, the original post concerning DST updates for Windows, Windows Mobile, Outlook etc may be found at http://netdef.livejournal.com/20027.html.
Deadline for doing these updates is this coming Saturday, March 10th. If you miss the deadline, don't panic. You can still do the updates at any time, but your calendars and clocks may not show the correct time until you complete the task.
.
For most Linux distributions, you can find background info and links to update your system for the upcoming Daylight Saving Time changes at http://www.linux-watch.com/news/NS6300294422.html. For those of you with Gentoo, just an "emerge sys-libs/timezone-data" should do the trick.
Apple users should refer to http://docs.info.apple.com/article.html?artnum=305056 to find patches or instructions to fix the DST changes manually, depending on your OS version. You will also find links on that page containing special instructions to update your Java and WebObjects environments.
For everyone, Sun has posted DST instructions for Java at http://java.com/en/download/faq/dst.xml. In certain cases (but not all) you may wish to remove older versions of Java if you update to the latest and greatest. Directions for that process may be found at http://www.java.com/en/download/faq/5000070400.xml.
For those just joining in, the original post concerning DST updates for Windows, Windows Mobile, Outlook etc may be found at http://netdef.livejournal.com/20027.html.
Deadline for doing these updates is this coming Saturday, March 10th. If you miss the deadline, don't panic. You can still do the updates at any time, but your calendars and clocks may not show the correct time until you complete the task.
.
Wednesday, March 7, 2007
Windows Live One Care is destroying entire local email storage files
It appears that a very serious bug in Microsoft Live One Care Anti Virus is causing much grief among users. If it detects a virus on an incoming email, the next time it does a system scan it may in fact delete the entire PST file for Outlook (all versions) or the entire folder store where that accounts email is cached in Outlook Express. And we are talking hard delete, not recycle bin. The only way to recover all your email is via a file recovery utility that scans the hard drive for deleted files, and that assumes that you have not overwritten the file with cached browser files while searching for a solution . . .
Live One Care has not yet fixed this problem - and in fact it may not get fixed until they go to the beta for version 2.x.
AppScout has a full summary of the problem as well as a work around posted. Look near the bottom of that page to find the workaround.
To add insult to injury, Microsofts Live One Care recently came in dead last in a third party comparison test conducted by AV Comparatives.org.
(All links open in a new tab or window.)
Edit: It appears that some, but not all, users were able to retrieve their lost PST file from Live One Care's quarantine. Not clear on details on why the difference, your mileage may vary.
.
Live One Care has not yet fixed this problem - and in fact it may not get fixed until they go to the beta for version 2.x.
AppScout has a full summary of the problem as well as a work around posted. Look near the bottom of that page to find the workaround.
To add insult to injury, Microsofts Live One Care recently came in dead last in a third party comparison test conducted by AV Comparatives.org.
(All links open in a new tab or window.)
Edit: It appears that some, but not all, users were able to retrieve their lost PST file from Live One Care's quarantine. Not clear on details on why the difference, your mileage may vary.
.
Tuesday, March 6, 2007
Final countdown to DST change
See my previous article at http://netdef.livejournal.com/20027.html . . .
Updated to include Windows 2000 Professional and Server.
Updated to include Windows 2000 Professional and Server.
Sunday, March 4, 2007
Programmers personality quiz
Your programmer personality type is:
DLSC
You're a Doer.
You are very quick at getting tasks done. You believe the outcome is the most
important part of a task and the faster you can reach that outcome the better.
After all, time is money.
You like coding at a Low level.
You're from the old school of programming and believe that you should have an
intimate relationship with the computer. You don't mind juggling registers
around and spending hours getting a 5% performance increase in an algorithm.
You work best in a Solo situation.
The best way to program is by yourself. There's no communication problems, you
know every part of the code allowing you to write the best programs possible.
You are a Conservative programmer.
The less code you write, the less chance there is of it containing a bug. You
write short and to the point code that gets the job done efficiently.
Take the test.
Urgent for WordPress blog users!
WordPress 2.1.1 compromised, upgrade to 2.1.2 ASAP
If any of you administer a blog based on WordPress and you recently upgraded to version 2.1.1 then you should immediately upgrade to 2.1.2 before your site is 0wn3d. Earlier versions of the 2.x release series are safer, although 2.1.x has numerous bug fixes and minor security fixes.
(Links open in a new tab or window.)
"It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution."
If you are a shared WordPress blog user - you might want to ping your site admin about this today.
.
If any of you administer a blog based on WordPress and you recently upgraded to version 2.1.1 then you should immediately upgrade to 2.1.2 before your site is 0wn3d. Earlier versions of the 2.x release series are safer, although 2.1.x has numerous bug fixes and minor security fixes.
(Links open in a new tab or window.)
"It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution."
If you are a shared WordPress blog user - you might want to ping your site admin about this today.
.
Friday, March 2, 2007
Meme ganked from <lj user="altamira16">
Thanks to
Search YouTube with the year of your birth and post one of the results.
Ring of Fire
RFID questions
I'm researching for a soon to appear article about RFID. One interesting sidebar is about disabling RFID tags in passports or credit cards. Devices for such exist, but I can't find any information about the legalities of such an action. Has anyone spotted some good sources online?
BTW, whatever you do, don't use a microwave to kill embedded RFID tags. Yes - it will destroy the tag - along with the material in which it's installed. It may also damage your microwave.
BTW, whatever you do, don't use a microwave to kill embedded RFID tags. Yes - it will destroy the tag - along with the material in which it's installed. It may also damage your microwave.
Subscribe to:
Posts (Atom)