SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Oracle Critical Patch Update Advisory - July 2016
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

[polonus]

Chinese authorities want to ban adblockers from September henceon:
https://adblockplus.org/blog/the-lonely-bully-china-issues-edict-to-ban-ad-blockers

polonus

[DavidR]

Chinese authorities want to ban adblockers from September henceon:
https://adblockplus.org/blog/the-lonely-bully-china-issues-edict-to-ban-ad-blockers

polonus

Irony of ironies when the country that blocks mega quantities of data would want to block a blocker

[Dwarden]

Chinese authorities want to ban adblockers from September henceon:
https://adblockplus.org/blog/the-lonely-bully-china-issues-edict-to-ban-ad-blockers

polonus

so, this is reason why Chinese company bought Opera ...

guess that new innovative feature goes bust in month

[ehmen]

so, this is reason why Chinese company bought Opera ...

http://www.reuters.com/article/us-opera-software-m-a-china-idUSKCN0ZY0CA

[Dwarden]

that was the first offer for 1.2 billion what failed
the second offer is already ongoing and it's what I'm talking about (600 millions one)
they still buying the browsers if it goes thru ...

[Be Secure]

MS-ISAC official: Ransomware top priority

http://www.scmagazine.com/gov-agencies-beware-malware-infections-peaked-at-450-per-month/article/511381/

[polonus]

New attack bypasses HTTP protection. Danger imminent on open Wifi platforms
re: http://arstechnica.com/security/2016/07/new-attack-that-cripples-https-crypto-works-on-macs-windows-and-linux/

polonus

[bob3160]

New attack bypasses HTTP protection. Danger imminent on open Wifi platforms
re: http://arstechnica.com/security/2016/07/new-attack-that-cripples-https-crypto-works-on-macs-windows-and-linux/

polonus

Open WiFi has it's own insecurities, it really doesn't need any help.

[polonus]

Hi bob3160,

That is why we have avast mobile security to warn us
for such wifi Web Proxy Auto Discovery connections, that may pose a threat.
The Open Wifi "PAC-man" cannot eat (and/or steal) our data or maliciously redirect us.

polonus

[bob3160]

Here is a reply from LastPass about the latest discovered vulnerability:
https://blog.lastpass.com/2016/07/lastpass-security-updates.html/


More about the vulnerability here:
http://www.theregister.co.uk/2016/07/27/zero_day_hole_can_pwn_millions_of_lastpass_users_who_visit_a_site/

How does Avast Password stack up

[Charyb-0]

I quit using LastPass years ago during one of their other vulnerable moments. I have stuck with KeePass locally and have limited the browser extensions I use.


I'm glad Tavis is on it.

[bob3160]

I quit using LastPass years ago during one of their other vulnerable moments. I have stuck with KeePass locally and have limited the browser extensions I use.


I'm glad Tavis is on it.

http://www.lifehacker.com.au/2016/06/keepass-vulnerability-lets-attackers-steal-passwords-but-dont-expect-it-to-be-patched/

[Charyb-0]

I quit using LastPass years ago during one of their other vulnerable moments. I have stuck with KeePass locally and have limited the browser extensions I use.


I'm glad Tavis is on it.

http://www.lifehacker.com.au/2016/06/keepass-vulnerability-lets-attackers-steal-passwords-but-dont-expect-it-to-be-patched/

Nice. I am using the portable version 1.31.0.0 which checks for updates at startup (if checked). The article states 2.0 but I am going to turn off this update check right now.


I would also think that the redirection and unsigned/unknown file should be detected by avast.


Thanks

[Dwarden]

I quit using LastPass years ago during one of their other vulnerable moments. I have stuck with KeePass locally and have limited the browser extensions I use.


I'm glad Tavis is on it.

http://www.lifehacker.com.au/2016/06/keepass-vulnerability-lets-attackers-steal-passwords-but-dont-expect-it-to-be-patched/

please stop posting this, already been debunked as non-security issue and is used only by competing password managers to showcase 'insecurity' in the other free product

http://keepass.info/help/kb/sec_issues.html#updsig
and already not an issue in new version either ...