SECURITY WARNINGS & Notices - Please post them here

[bob3160]

New PCs with crapware (added trial software etc.) with an average of 20 additional programs slows down your new computer big time.
(Spotify, dropbox etc.). Computers that are so-called signature PCs will start 104% faster. Read: http://www.microsoftstore.com/store/msusa/en_US/cat/categoryID.69916600

polonus

Nice but at a price. If you're willing to spend the time and effort, order direct from the Manufacturer and insist on a "clean" computer.
It isn't easy but it can be done and the price will be cheaper. Or,
clean up the computer after you buy it before you start to add anything else.
Slim Computers can help in the cleanup.

[polonus]

Thanks, bob3160, for that cleansing tip. I sure gonna do that on a lenovo laptop now right after install.
As long as it isn't a permanent problem, it isn't that bad really.
Know some wrestle with slow computers and do not know what to fasten them up a bit,
but that aside, I hope those that go a laptop as a present before going to school recently know what to do now,
well that is for the responsible lot among them, the others only will slow them up further. 

Damian

[bob3160]

Another topic that's a part of my current presentation.
There's a lot more to the presentation than converting folks to Avast.

https://docs.google.com/document/d/1kCzvKHaOiOgfAk1NuDnko-w0uqpgzj7Yx_LOIet23_Y/edit?usp=sharing

[DavidR]

Thanks, bob3160, for that cleansing tip. I sure gonna do that on a lenovo laptop now right after install.
As long as it isn't a permanent problem, it isn't that bad really.
<snip>

Well Lenovo are on their second strike with crapware that has a security implication.

They now have shot themselves in both feet and haven't got a leg to stand on.

I had been looking at a new laptop and Lenovo were generally good value for money, but just the first security nightmare was enough for me to rule out Lenovo in my plans. Trust is something that is hard to build up and so easy to lose.

[bob3160]

I'm still happy with my Lenovo but I got rid of the crap before it ever got exposed to the net.

[Para-Noid]

Steer Clear of this Skype Spam

https://blog.malwarebytes.org/fraud-scam/2015/09/steer-clear-of-this-skype-spam/?utm_source=Gplus&utm_medium=social  (This is what happens when you use the most famous VoIP)

“Free Games” App Needs a Power Up

https://blog.malwarebytes.org/online-security/2015/09/free-games-app-needs-a-power-up/?utm_source=Gplus&utm_medium=social

[polonus]

Millions of WordPress websites vulnerable to hackers.
Heimdahl warns: https://heimdalsecurity.com/blog/security-alert-ransomware-legitimate-websites-compromised-script-injection/
article author = Anra Zaharia.

pol

[polonus]

Norse Pirate Party starts new DNS-service: https://www.piratpartiet.no/2015/09/piratpartiet-setter-opp-apen-dns-server-ny-gratistjeneste-mot-nettsensur/  &  https://www.piratpartiet.no/dns/
Re: http://toolbar.netcraft.com/site_report?url=http://185.56.187.149
Netcraft Risk Rating 5:10 facilitated via Zetta I.O. Big Norwegion Cloud-data Player.
http://toolbar.netcraft.com/site_report?url=http://149-187-56.185.c.no-osl1.zetta.io (:53)

polonus

[Para-Noid]

Gozi Trojan financial web injection hacker pleads guilty

http://www.scmagazineuk.com/gozi-trojan-financial-web-injection-hacker-pleads-guilty/article/437201/

Avoid this BSoD Tech Support Scam

https://blog.malwarebytes.org/fraud-scam/2015/09/avoid-this-bsod-tech-support-scam/?utm_source=Gplus&utm_medium=social

Malicious Google Search Console Verifications

https://blog.sucuri.net/2015/09/malicious-google-search-console-verifications.html?utm_campaign=Malicious%20Google%20Search%20Console%20Verifications%20Blogpost&utm_medium=social&utm_source=googleplus

Com[dot]com Site Leads to Fake Daily Mail Article, Other Dodgy Sites

https://blog.malwarebytes.org/fraud-scam/2015/09/comdotcom-site-leads-to-fake-daily-mail-article-other-dodgy-sites/?utm_source=Gplus&utm_medium=social

Ashley Madison's Leaked Top 20 Passwords Are All Really, Really Stupid  
(News alert: always use your brain when creating passwords.) (Check strength of passwords here https://howsecureismypassword.net/)

https://www.distractify.com/mykafox-everyone-out-of-the-monkey-house-1337355706.html

MGS V: The Phantom Game Downloader

https://blog.malwarebytes.org/online-security/2015/09/mgs-v-the-phantom-game-downloader/?utm_source=facebook&utm_medium=social

Thousands of Hacked Sites Lead to Offer of Famous Spy Software

https://blog.malwarebytes.org/online-security/2015/09/thousands-of-hacked-sites-lead-to-offer-of-famous-spy-software/?utm_source=Gplus&utm_medium=social

[polonus]

Google already had 300.000 complaints about Ad Injection, a growing problem;
read: http://research.google.com/pubs/pub43346.html

That is why polonus thinks a decent adblocker like uBlock or Adguard
or surfing via an adblocking Android browser app is a must
for every user that has online security at heart.

Ad Injection could off-course also mean Malware Injection!

Google Safebrowsing is only a last line of defense here.

polonus

[polonus]

Anonymous browsing effort is not appreciated by DHS authorities  to say the least:
https://www.propublica.org/article/library-support-anonymous-internet-browsing-effort-stops-after-dhs-email
Where people would stronly protest just a generation ago we now get general  ignorance
and an empty gaze as reaction  where privacy is concerned.
Re: https://www.reddit.com/r/TOR/comments/3kf0ss/first_library_to_support_anonymous_internet/

polonus

[abruptum]

Mozilla postpones Firefox add-on signing enforcement

  http://www.ghacks.net/2015/09/11/mozilla-postpones-firefox-add-on-signing-enforcement/

[bob3160]

Mozilla postpones Firefox add-on signing enforcement

  http://www.ghacks.net/2015/09/11/mozilla-postpones-firefox-add-on-signing-enforcement/

It probably cost them too many users....

[Para-Noid]

Obfuscated URLs, where is that link taking you?

https://blog.malwarebytes.org/fraud-scam/2015/09/obfuscated-urls-where-is-that-link-taking-you/?utm_source=Gplus&utm_medium=social

[DavidR]

Mozilla postpones Firefox add-on signing enforcement

  http://www.ghacks.net/2015/09/11/mozilla-postpones-firefox-add-on-signing-enforcement/

It probably cost them too many users....

I honestly couldn't believe they could be that stupid surely their alpha and nightly users would have let them know this was a huge error.

Thankfully they have seen the error of their ways.