SECURITY WARNINGS & Notices - Please post them here

[polonus]

Did you read this: http://dontbubble.us/?kad=en_US
When you visit the page and you see what my fingerprinting detection extension has to report;
 CanvasFingerprintBlock
Blocked 800 potential HTML canvas fingerprinting attempts on this page
Prevented a script on http://dontbubble.us from capturing the point (1, on the following 35px × 35px canvas:
Prevented a script on http://dontbubble.us from capturing the point (2, on the following 35px × 35px canvas:
Prevented a script on http://dontbubble.us from capturing the point (3, on the following 35px × 35px canvas:

Why the fingerprinting there?

polonus

[polonus]

Already asked attention for this on many occasions in the past, but many, many websites are insecure because of outdated and unpatched CMS like Word Press )plug-ins and themes, especially free versions). The situation for JQuery scripts might even be worse, many online website versions have not been altered or updated from the word go = instalation date. Here we see sheer incompetence of web admins and hosters alike and this is putting the average user at risk. How long polonus will still be a voice crying in the wilderness?

Example: https://forum.avast.com/index.php?topic=172901.0

polonus (volunteer website security analyst and website error-hunter)

[ehmen]

New Exploitkit "Sundown" aims at user that has not updated Adobe Flash Player!
Adobe "the new Java" of our time!
Read: http://malware.dontneedcoffee.com/2015/06/fast-look-at-sundown-ek.html
Analysis: https://www.virusbtn.com/virusbulletin/archive/2015/06/vb201506-Beta-BEP
Info credits go to:  Aditya Sood en Rohit Bansal

polonus

When I clicked on the "Don't need coffee" website, my Avast piped up that it blocked a infection on that page.

[polonus]

Maybe the page exposed some of that code and Avast alerted that. There is no payload, so you are safe.

polonus

[mchain]

I'm suspecting code get exposed because a user like myself, does not run NoScript in their browser.  Correct?

[Staticguy]

Arguably the best Anti-Virus for Windows is giving pirates a chance to turn into legit users for free

http://betanews.com/2015/06/28/arguably-the-best-anti-virus-for-windows-is-giving-pirates-a-chance-to-turn-into-legit-users-for-free/

http://venturebeat.com/2015/06/28/malwarebytes-offers-pirates-and-duped-customers-12-months-of-its-premium-antimalware-product-for-free/

[SpeedyPC]

Arguably the best Anti-Virus for Windows is giving pirates a chance to turn into legit users for free

http://betanews.com/2015/06/28/arguably-the-best-anti-virus-for-windows-is-giving-pirates-a-chance-to-turn-into-legit-users-for-free/

http://venturebeat.com/2015/06/28/malwarebytes-offers-pirates-and-duped-customers-12-months-of-its-premium-antimalware-product-for-free/

So this link post by Charyb is a bloody scam https://forum.avast.com/index.php?topic=172326.0

Which I've already bought 1 license via PayPal for my father laptop which I've kept every record of my order, MAN! I'm bloody PI$$ED OFF and real MAD!

CHARYB Please EXPLAIN WHY!

[Staticguy]

Arguably the best Anti-Virus for Windows is giving pirates a chance to turn into legit users for free

http://betanews.com/2015/06/28/arguably-the-best-anti-virus-for-windows-is-giving-pirates-a-chance-to-turn-into-legit-users-for-free/

http://venturebeat.com/2015/06/28/malwarebytes-offers-pirates-and-duped-customers-12-months-of-its-premium-antimalware-product-for-free/

So this link post by Charyb is a bloody scam https://forum.avast.com/index.php?topic=172326.0

Which I've already bought 1 license via PayPal for my father laptop which I've kept every record of my order, MAN! I'm bloody PI$$ED OFF and real MAD!

CHARYB Please EXPLAIN WHY!

Oh shit sorry about your loss. Sorry mate, I have no idea about that link you posted. What I can do for you is that I can go to Malwarebytes antimalware forum and mention that link that you have posted along with the 2 links that I have mentioned in my previous post and will check with them which ones is true and false.

[bob3160]

@ Staticguy
You don't have to do anything. Malware Bytes is ware of this.

[SpeedyPC]

@ Staticguy
You don't have to do anything. Malware Bytes is ware of this.

@ Staticguy thanks I'm dealing with these issue at MBAM forum as I have to sit tight and wait until they fully investigate, this is my very first mistake for nearly 20 years behind a computer and I am totally a shame

[polonus]

SSLv3 now dead: http://www.theregister.co.uk/2015/06/26/that_shot_you_heard_sslv3_is_now_dead/
link article author =  Richard Chirgwin

polonus

[Para-Noid]

Recent Flash Player 0-day Exploit Goes Mainstream

https://blog.malwarebytes.org/exploits-2/2015/06/recent-flash-player-0-day-exploit-goes-mainstream/?utm_source=Gplus&utm_medium=social

[ehmen]

SSLv3 now dead: http://www.theregister.co.uk/2015/06/26/that_shot_you_heard_sslv3_is_now_dead/
link article author =  Richard Chirgwin

polonus

Good thing SSL doesn't exist in Chrome.

[Staticguy]

@ Staticguy
You don't have to do anything. Malware Bytes is ware of this.

@ Staticguy thanks I'm dealing with these issue at MBAM forum as I have to sit tight and wait until they fully investigate, this is my very first mistake for nearly 20 years behind a computer and I am totally a shame

Your welcome for helping you point to the right direction  . Everyone make mistakes mate even though they are a beginner or expert. Nobody is perfect. I too been there done that and lessons are learned. Hope now everything is ok at your end?

[polonus]

Hacked routers are spreading Dyre aka Dyreza banker trojan  malware:
http://www.brycampbell.co.uk/new-blog/2015/6/24/compromised-airos-routers-being-used-by-dyre
link alert by author Bryan campbell.
An in-depth analysis of this malcode: http://christophe.rieunier.name/securite/Dridex/20150608_dropper/Dridex_dropper_analysis.php
link article author = christophe rieunier

polonus