SECURITY WARNINGS & Notices - Please post them here

[Para-Noid]

Some free software does not always come free!
Why one should shun and avoid bloatware: http://www.cert.org/blogs/certcc/post.cfm?EntryID=199
link arfticle author = Will Dormann

polonus

Just to clarify.
When ever Download.com Offers their big and prominent Downloader which includes the unwanted
the unwanted software, they also offer a "Direct Download" button usually in much smaller letters directly under the unwanted Downloader.
Always choose the "Direct Download" option.

As does filehippo. As always it's generally best to do a custom install.

[polonus]

Hi Para-Noid,

Then you always should have this last-resort tool, the Junkware renoval tool : http://thisisudax.org/download
but that is to put the cart before the horse, better do a custom install yo avoid bloatware, junk and crap.

Damian

Junkware Removal Tool is a security utility that searches for and removes common adware, toolbars, and potentially unwanted programs (PUPs) from your computer. A common tactics among freeware publishers is to offer their products for free, but bundle them with PUPs in order to earn revenue. This tool will help you remove these types of programs.

Junkware Removal Tool has the ability to remove the following types of programs:
• Ask Toolbar
• Babylon
• Browser Manager
• Claro / iSearch
• Conduit
• Coupon Printer for Windows
• Crossrider
• Facemoods / Funmoods
• iLivid
• IncrediBar
• MyWebSearch
• Searchqu
• Web Assistant

D

[bob3160]

Hi Para-Noid,

Then you always should have this last-resort tool, the Junkware renoval tool : http://thisisudax.org/download
but that is to put the cart before the horse, better do a custom install yo avoid bloatware, junk and crap.

Damian

Something I recommended over a year ago.
https://forum.avast.com/index.php?topic=19387.msg968367#msg968367

[Asyn]

Microsoft Security Advisory 2982792
Improperly Issued Digital Certificates Could Allow Spoofing
https://technet.microsoft.com/en-us/library/security/2982792

[polonus]

Quote from bob3160:

Something I recommended over a year ago.
https://forum.avast.com/index.php?topic=19387.msg968367#msg968367

Thanks for confirming this is a good advice/choice.
Good we give likewise advice independantly,
because we must have something in common being here on these forums that long 

Damian

[!Donovan]

jQuery Bad Behavior - about jQuery Selector Injection, one of the deadliest Web Attacks. Front-end developers and coders should listen to Mike Shema and take their precautions. Read here: http://deadliestwebattacks.com/tag/jquery/

polonus

Interesting read. Thanks for the link polonus.

~!Donovan

[polonus]

Gameover Zeus botnet immortal, like the greek god: http://blog.malcovery.com/blog/breaking-gameover-zeus-returns
link article authors: Brendan Griffin and Gary Warner
Using dynamic IP and FastFlux C&C, techniques learnt from spammers, and domain generation on the fly is why botnets will win the race over security forces trying to take them down.

polonus

[polonus]

Digital First Aid: https://digitaldefenders.org/digitalfirstaid/ 
link source DigiDefenders

polonus

[polonus]

As forum friends here may have noticed from my constant reporting in the "virus and worms sector"
a lot of so-called SE redirects are often going under the detection radar.
See an example here: https://forum.avast.com/index.php?topic=151778.msg1104900#msg1104900

Fort he only scanner to detect this, see this malware scanner report at killmalware: http://killmalware.com/ffinlo.com/#
Sometimes this SE redirect spam or click fraud lives only for a couple of hours or days. Sometimes it is more persistent.

Here is a handy tool to work on your site to detect SE Spam: http://tool.motoricerca.info/spam-detector/

polonus

[bob3160]

It's always nice to get a clean bill of health.
http://evuln.com/tools/malware-scanner/bob3160.blogspot.com/
http://killmalware.com/mlpaa.org/

[polonus]

Hi bob3160,

All OK on the spam detector for http://bob3160.blogspot.com/ , see attached image.

Damian

[polonus]

SSL Blacklist: https://sslbl.abuse.ch/
List author = Roman Huessy, introducing the list here: http://www.abuse.ch/?p=8180

polonus

[Pondus]

yepp.... i still trust my memory.   

Popular password protection programs p0wnable
http://www.theregister.co.uk/2014/07/14/popular_web_password_vaults_blurting_codes/

The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers
pdf.doc   http://devd.me/papers/pwdmgr-usenix14.pdf

[Pondus]

Beware Keyloggers at Hotel Business Centers
http://krebsonsecurity.com/2014/07/beware-keyloggers-at-hotel-business-centers/

[Asyn]

CNET attacked by Russian hacker group
http://www.cnet.com/news/cnet-attacked-by-russian-hacker-group/