SECURITY WARNINGS & Notices - Please post them here

[Asyn]

It sure makes you wonder about the security (department) at Yahoo.

Shocking, indeed.
More here: https://investor.yahoo.net/releasedetail.cfm?ReleaseID=1004285

[DavidR]

<snip>
DavidR,
there was another hack in 2014 where data of +/- 500 million people where stolen and it was disclosed in September this year.
This is a hack that took place in August 2013 and only was discovered last month because the hackers offered the list online.

It sure makes you wonder about the security (department) at Yahoo.

I have seen that some considerable time  ago also.

In all honesty, any company that says it hasn't been hacked is either naive, not telling (scared of the financial consequences) or they haven't been probed yet (small beer).

There is yet another young UK Autistic man fighting extradition to the UK having hacked many different US Government systems, all from his back bedroom. If it is that easy they shouldn't be extraditing people like this by employing them to shore up their lack of security.

[bob3160]

This massive hack of Yahoo is certainly good news for Verizon.
Wonder if there's any correlation ( No, I'm not really that cynical.... )

[polonus]

Hi bob3160,

In Europe we had that old saying "the one's death means the other's daily bread".
Sometimes reality in the world is that cynical, it is called "dead" real. 

Another subject. How does avast protect it's users against the new Finfisher malware
like malcoded Word, - Adobe Flash Player and  - WinRar zero-day attacks from two government hacking groups,
 that MS dubbed 'Promethium' &  'Neodymium' .

Users in the Netherlands, Belgium, Turkey and Germany were attacked. But also users in the UK and the U.S.of A.

It seems a cocktail of Wingbird-malware with some commercial spyware/phishware topping.

Good mail protection seems vitally important.
Example of such maware like described here:
https://securelist.com/blog/research/76147/on-the-strongpity-waterhole-attacks-targeting-italian-and-belgian-encryption-users/

It is not only malware and other abuse you have to evade but now also being hacked by your own
or other friendly or unfriendly  governments.

Not good for lawful and abiding citizens, they just feel like the people in the lawless town of the comics,
waiting for Lucky Luke to return.

polonus

[bob3160]

Click here for details

[polonus]

Hi bob3160,

Certainly they will back off as it will cost them dearly in customers
whenever they would continue on that road.

When the "cat isup  in the curtains" so-to-say, you'd  better have an improved secondary plan.

But I think all of these services are similar - OneNote, Evernote, Google's etc.
Do not share with them in the cloud,  what you'd not like to share with others anyway.
It is your own repeated warning, bob3160 and it is a hard truth and 100%.

But the worst things that it did not teach IT staff around the world
not to save their account and password information in the Evernote-cloud.

With all the hacking and security and data-breaches going around,
you soon could be an innocent victim and when your info is on the loose
you'd never know where it lands in the the wide, wild, web world
and it may never come around forever and a day..... 

your avast forum-friend,

Damian

[abruptum]

Chrome’s Adblock Pro is a uBlock Origin rip-off

  http://www.ghacks.net/2016/12/18/chromes-adblock-pro-is-a-ublock-origin-rip-off/

[bob3160]

Chrome’s Adblock Pro is a uBlock Origin rip-off

  http://www.ghacks.net/2016/12/18/chromes-adblock-pro-is-a-ublock-origin-rip-off/

sounds like another iobit malwarebytes fiasco

[polonus]

Hi bob3160,

If true, this is another example of where user's trust comes flying out of the window with a form of  blatant code theft.
Just like the secret scandal with selling the WoT tool user base data. Swindlers everywhere and no one who calls it to a halt.
We are in need of another continent like Australia once, where we can send all these fraudsters and swindlers.
Making money from other person's brains and code. It is a shame really. They aren't ashamed of anything anymore,
online Sodom and Gomorra of abuse.

polonus

P.S. Also important scroll down to mem consumption differences between ABP & uBlock origin:
https://github.com/gorhill/uBlock#memory

[Para-Noid]

Yahoo is not safe to use,’ former company engineer says

https://www.the-parallax.com/2016/12/16/yahoo-not-safe-former-engineer-says/

How to dump your Yahoo, Flickr, and Tumblr accounts

https://www.the-parallax.com/2016/10/12/dump-yahoo-flickr-tumblr-accounts/

[polonus]

Amsterdam Data Centre into very big ad-fraud: http://www.whiteops.com/methbot

polonus

[bob3160]

Looks like PC Matic and Malwarebytes are looked in a battle.
Malwarebytes is tagging PC Matic as a PUP and PC Matic is retaliating by blocking Malwarebytes.
Apparently Malwarebytes is refusing to talk to PC Matic and vicar versa.
To me, it looks like mutual exclusions should work. Since I don't use PC Matic, I can't guarantee that however.
http://greenarrow.pcpitstopmail.com/ss/link.php?N=21315&L=3824&S=QjZjNTM&E=cXZ4xWZyBUYylWZz1WYyRnLj9Wb&H=LgDNbrd3
https://forums.pcpitstop.com/index.php?/topic/206255-pc-matic-and-malwarebytes-pup-flags/?view=findpost&p=1808872&hl=pcmatic

[polonus]

Facebook flaw mitigated: http://www.dawgyg.com/2016/12/21/disclosing-the-primary-email-address-for-each-facebook-user/

polonus

[TrueIndian]

Looks like PC Matic and Malwarebytes are looked in a battle.
Malwarebytes is tagging PC Matic as a PUP and PC Matic is retaliating by blocking Malwarebytes.
Apparently Malwarebytes is refusing to talk to PC Matic and vicar versa.
To me, it looks like mutual exclusions should work. Since I don't use PC Matic, I can't guarantee that however.
http://greenarrow.pcpitstopmail.com/ss/link.php?N=21315&L=3824&S=QjZjNTM&E=cXZ4xWZyBUYylWZz1WYyRnLj9Wb&H=LgDNbrd3
https://forums.pcpitstop.com/index.php?/topic/206255-pc-matic-and-malwarebytes-pup-flags/?view=findpost&p=1808872&hl=pcmatic

That's actually quite a non-professional way of dealing with the issue from MBAM since they didn't respond to pcpitstop when asked.I really like their products.But locking horns seems just a distraction from the real fight against malware and ransomware.They are even blocking austologics cleaner.

Update: atleast they explained it:
https://blog.malwarebytes.com/puppum/2016/12/why-malwarebytes-detects-pc-pitstop-as-potentially-unwanted/

[Asyn]

VMware Security Advisories - VMSA-2016-0024
https://www.vmware.com/security/advisories/VMSA-2016-0024.html