14 month ago
nelson : FBI spyware - Court documents reveal new law enforcement techniques
# copy
22 month ago
Rod Begbie : Windows Defender home - MS's anti-spyware app is out of beta. Go install it on your relatives' PCs post-haste. #
# copy
29 month ago
kayodeok : BBC NEWS | Technology | BBC used to entice cyber victims - People are being warned about spam e-mails containing BBC News stories designed to trick them into visiting malicious websites
# copy
29 month ago
kayodeok : Hackers Use BBC News as IE Attack Lure - According to an alert issued by Websense Security Labs, in San Diego, excerpts from actual BBC News stories are being used to lure IE users to Web sites that launch drive-by downloads of bots, spyware, back doors and other Trojan downloaders
# copy
29 month ago
gleuschk : what is that file? - excellent resource to point family at
# copy
31 month ago
kayodeok : Pushing Spyware through Search - Indirectly, Google and other search engines make big money from spyware, through paid search advertising that infects users who don't know any better or don't understand what they're getting into
# copy
31 month ago
kayodeok : StopBadware.org: Regaining Control of Our Computers - Badware is a term we use to encompass the broad range of malicious software that is sneaking onto people's computers, including spyware and deceptive adware. It can subvert your computer for the benefit for a third party, frustrate you with unwanted adver
# copy
32 month ago
kayodeok : Mark's Sysinternals Blog: Inside the WMF Backdoor - In my opinion the backdoor is one caused by a security flaw and not one made for subterfuge. I sent my findings to both Steve and to Microsoft Monday morning, but because the issue continues to draw media attention I’ve decided to publicly document
# copy
32 month ago
Paul Hammond : blackrimglasses.com » Put the pitchforks away people! - Stats gathering and implicit personalization are not spyware
deusx : blackrimglasses.com » Put the pitchforks away people! - "You can not play on the net without at least some data that implies personal identity being transmitted with every single user action. It’s the price we pay for “hey, that’s neat!â€"
# copy
32 month ago
kayodeok : Looking at the WMF issue, how did it get there? - This was a different time in the security landscape and these metafile records were all completely trusted by the OS. To recap, when it was introduced, the SetAbortProc functionality served an important function
# copy
32 month ago
kayodeok : The Windows MetaFile Backdoor? - (The Windows MetaFile ) has the feeling of something that Microsoft deliberately designed into Windows. Given the nature of what it is, this would make it a remote code execution "backdoor."
# copy32 month ago
kayodeok : 180solutions's Misleading Installation Methods - Dollidol.com - When a user receives 180 software from Dollidol.com, a close 180 distribution partner, the user cannot reasonably be said to have consented to 180's subsequent actions
# copy
32 month ago
kayodeok : Microsoft Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919) - Patching Time!
# copy
32 month ago
kayodeok : BREAKING NEWS! Microsoft's OFFICIAL SECURITY UPDATE leaked onto the Internet early (and it works great!) - The updated GDI32.DLL file contained in this patch, was built in the evening of December 28th, LAST WEDNESDAY. It is clear that Microsoft jumped on this problem - and had it resolved - almost immediately. But the nature of the installed base of Windows sy
# copy
32 month ago
kayodeok : A Naive User's Guide to Running Windows More Securely - OSNews.com - A Naive User's Guide to Running Windows More Securely
# copy
32 month ago
kayodeok : Mark's Sysinternals Blog: The Antispyware Consipiracy - Misleading and outright malicious advertising for antispyware casts a shadow on the entire industry
# copy
32 month ago
kayodeok : Microsoft Statement Concerning Windows Meta File Vulnerability - Microsoft has completed development of a security update to fix the vulnerability and is now testing it for quality and application compatibility, with a goal of releasing the fix worldwide on Jan. 10
# copy
32 month ago
kayodeok : Jesper's Blog : Conscientious Risk Management and WMF - Conscientious Risk Management and WMF
# copy
32 month ago
kayodeok : The PC Doctor: WMF exploit - Quick Guide - WMF exploit - Quick Guide
# copy
32 month ago
kayodeok : SANS - Internet Storm Center - Updated version of Ilfak Guilfanov's patch - Ilfak Guilfanov has released an updated version of his unofficial patch for the Window's WMF issue. We have reverse engineered, reviewed, and vetted the version here
# copy
32 month ago
kayodeok : Internet Storm Center on WMF Vulnerability: Trustworthy Computing - This is a bad situation that will only get worse. The very best response that our collective wisdom can create is contained in this advice - unregister shimgvw.dll and use the unofficial patch. You need to trust us.
# copy
32 month ago
kayodeok : WMF Vulnerability Checker - However, there is no safe way to tell if your system is vulnerable. Here is a small utility to address this problem. You can download it from the following link
# copy
32 month ago
kayodeok : WMF vulnerability: It's not a bug, it's a feature - Turns out this is not really a bug, it's just bad design. Design from another era
Rod Begbie : F-Secure : News from the Lab - It's not a bug, it's a feature - The currently-circulating Windows WMF exploit "probably affects more computers than any other security vulnerability, ever." Every PC running any version of Windows since 1990 -- even if fully patched -- is vulnerable! #
deusx : F-Secure : News from the Lab - January of 2006 - ""The WMF vulnerability" probably affects more computers than any other security vulnerability, ever."
Nelson Minar : WMF hole intentional - An image format designed to run arbitrary code. (via Hot Links)
# copy
32 month ago
kayodeok : Overview of the WMF related articles at the Internet Storm Center - Since this is one of the more complex stories to follow I've made a quick overview of the WMF issues.
# copy
