SECURITY WARNINGS & Notices - Please post them here

[DavidR]

Read: http://www.cio.com.au/article/581435/google-puts-screws-sneaky-chrome-add-on-installs/?utm_medium=rss&utm_source=taxonomyfeed

polonus

Bad Google at it again.

Umm, what about sneaky Chrome installs, like pre-checked opt-in options. I wonder who that is, just had an offer again for Chrome and its a free download. Strange when it is free already.

[bob3160]

Read: http://www.cio.com.au/article/581435/google-puts-screws-sneaky-chrome-add-on-installs/?utm_medium=rss&utm_source=taxonomyfeed

polonus

Bad Google at it again.

Umm, what about sneaky Chrome installs, like pre-checked opt-in options. I wonder who that is, just had an offer again for Chrome and its a free download. Strange when it is free already.

Doesn't look like that message is coming from Google

[DavidR]

Read: http://www.cio.com.au/article/581435/google-puts-screws-sneaky-chrome-add-on-installs/?utm_medium=rss&utm_source=taxonomyfeed

polonus

Bad Google at it again.

Umm, what about sneaky Chrome installs, like pre-checked opt-in options. I wonder who that is, just had an offer again for Chrome and its a free download. Strange when it is free already.

Doesn't look like that message is coming from Google

I know it was a back handed reference to avast installing it (default opt-in) for the unwary.

Followed with avast pushing it hard in the popup ads, even though in my settings I have the 'Do not use Chrome as Avast default browser.' I though they would get the message that way.

[bob3160]

@David,
Some of us do use Chrome as our default browser.
When I upgraded one of the systems to Windows 10, I was actually happy to see the Chrome recommendation.

[DavidR]

@David,
Some of us do use Chrome as our default browser.
When I upgraded one of the systems to Windows 10, I was actually happy to see the Chrome recommendation.

Yes they do and that is their choice, but I tire of having it rammed down my throat at every opportunity.

[bob3160]

If you're using Firefox make sure you're using version 39 or later.
If you haven't updated, this is waiting for you:
https://billmullins.wordpress.com/2015/08/07/tech-thoughts-net-news-friday-edition-august-7-2015/

[DavidR]

If you're using Firefox make sure you're using version 39 or later.
If you haven't updated, this is waiting for you:
https://billmullins.wordpress.com/2015/08/07/tech-thoughts-net-news-friday-edition-august-7-2015/

According to another link on that page it should be Firefox version 39.0.3 (released through FF auto update if you haven't disabled it) that fixes this vulnerability not just 39.0.

[Para-Noid]

Who’s Behind Your Proxy? Uncovering Bunitu’s Secrets

https://blog.malwarebytes.org/botnets/2015/08/whos-behind-your-proxy-uncovering-bunitus-secrets/?utm_source=Gplus&utm_medium=social

Chinese Actors Copy and Paste HackingTeam Zero-Days in Site Hack

https://blog.malwarebytes.org/exploits-2/2015/08/chinese-actors-copy-and-paste-hackingteam-zero-days-in-site-hack/?utm_source=Gplus&utm_medium=social

Fake jQuery Scripts in Nulled WordPress Plugins

https://blog.sucuri.net/2015/05/fake-jquery-scripts-in-nulled-wordpress-pugins.html?utm_campaign=Fake%20jQuery%20Scripts%20in%20Nulled%20WordPress%20Plugins%20Blogpost&utm_medium=social&utm_source=googleplus

“Payment Confirmation Slip” Spam Offers Up Malware

https://blog.malwarebytes.org/online-security/2015/08/payment-confirmation-slip-spam-offers-up-malware/

The Dynamics of Passwords  (This one is one everyone should read)

https://blog.sucuri.net/2015/02/the-history-of-passwords.html?utm_campaign=The%20Dynamics%20of%20Passwords%20Blogpost&utm_medium=social&utm_source=googleplus

One good password checker is... How Secure Is my Password


Ask Sucuri: How did my WordPress Website get Hacked? – A Tutorial

https://blog.sucuri.net/2015/08/ask-sucuri-how-did-my-wordpress-website-get-hacked-a-tutorial.html?utm_campaign=Ask%20Sucuri%3A%20How%20did%20my%20WordPress%20Website%20get%20Hacked%3F%20%E2%80%93%20A%20Tutorial&utm_medium=social&utm_source=googleplus

edit: typo

[polonus]

Critical patch for firefox, please update: http://www.scmagazine.com/mozilla-issues-new-firefox-version/article/431575/?utm_source=dlvr.it&utm_medium=twitter
Patch repaired unauthorized access to device data through the USB interface.

Shadow IT worse than ever thought -

the best approach is the “Five D’s”: Discover, Defend, Destroy, Develop and Discuss

quote taken from XO Communications’ John Grady - read: http://www.itbusinessedge.com/blogs/infrastructure/shadow-it-worse-than-we-thought.html

polonus

[bob3160]

Critical patch for firefox, please update: http://www.scmagazine.com/mozilla-issues-new-firefox-version/article/431575/?utm_source=dlvr.it&utm_medium=twitter
Patch repaired unauthorized access to device data through the USB interface.

Shadow IT worse than ever thought -

the best approach is the “Five D’s”: Discover, Defend, Destroy, Develop and Discuss

quote taken from XO Communications’ John Grady - read: http://www.itbusinessedge.com/blogs/infrastructure/shadow-it-worse-than-we-thought.html

polonus

https://forum.avast.com/index.php?topic=52252.msg1241022#msg1241022

[polonus]

Hi bob3160,

Sorry for the doublure on the firefox update, now no-one can say they haven't seen it. The second one is new here.

Damian

[Dwarden]

http://www.bit-tech.net/news/hardware/2015/08/07/x86-security-flaw/1
https://www.blackhat.com/docs/us-15/materials/us-15-Domas-The-Memory-Sinkhole-Unleashing-An-x86-Design-Flaw-Allowing-Universal-Privilege-Escalation-wp.pdf
https://www.blackhat.com/docs/us-15/materials/us-15-Domas-The-Memory-Sinkhole-Unleashing-An-x86-Design-Flaw-Allowing-Universal-Privilege-Escalation.pdf
https://github.com/xoreaxeaxeax/sinkhole

 

0day in hardware for 20 years

[polonus]

Hi Dwarden,

And who would profit from a 20 year existing zero day?
Answer the questions and you know why they sit on most backdoors that long
and why lots of protocols stay holed, flawed, degraded in many ways for years
and even come under export restrictions?

polonus

[Pondus]

Stagefright Detector Detects if Your Phone Is Vulnerable to Stagefright
http://lifehacker.com/stagefright-detector-detects-if-your-phone-is-vulnerabl-1722662061

[Pondus]

Google Is Now Alphabet. Here’s Why It Had to Evolve.
http://www.slate.com/blogs/future_tense/2015/08/10/google_becomes_alphabet_page_brin_form_new_company_pichai_new_google_ceo.html