SECURITY WARNINGS & Notices - Please post them here

[YoKenny]

Try with Firefox... mine is working...

I won't install Firefox just for that site! 

I would rather be sent to Siberia

[Altarir.]

Try with Firefox... mine is working...

this shows yet again how much IE sucks compared to FF

[bob3160]

Try with Firefox... mine is working...

this shows yet again how much IE sucks compared to FF

Works just fine in IE9 even if it doesn't make Altarir happy 

[nmb]

Asyn, Please don't post the link to exploit code.

[Pondus]

Update: http://www.microsoft.com/technet/security/advisory/2488013.mspx

Key comment

Currently, Microsoft is unaware of any active exploitation of this vulnerability.

https://www.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ms11_xxx_ie_css_import.rb

VirusTotal
http://www.virustotal.com/file-scan/report.html?id=bd656ad91978de9fa2c59aabb81a6693ea9c1294492693d8b8904e3989c87f95-1293126802

sample sendt avast!   

[iRonzel]

Update: http://www.microsoft.com/technet/security/advisory/2488013.mspx

Key comment

Currently, Microsoft is unaware of any active exploitation of this vulnerability.

https://www.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ms11_xxx_ie_css_import.rb

VirusTotal
http://www.virustotal.com/file-scan/report.html?id=bd656ad91978de9fa2c59aabb81a6693ea9c1294492693d8b8904e3989c87f95-1293126802

sample sendt avast!   

And what about Firewalls?

They can't stop this exploits attacks?

[YoKenny]

Try with Firefox... mine is working...

this shows yet again how much IE sucks compared to FF

Works just fine in IE9 even if it doesn't make Altarir happy  

I guess Altarir is familiar with Siberia but not using Windows 7 and using WOT leaves him out in the cold

[Asyn]

addons.mozilla.org disclosure
http://blog.mozilla.com/security/2010/12/27/addons-mozilla-org-disclosure/

[DavidR]

addons.mozilla.org disclosure
http://blog.mozilla.com/security/2010/12/27/addons-mozilla-org-disclosure/

I received an email about this directly. This email caused me more concern than the potential issue in the blog article as it looked like the classic phishing email to try and obtain user info. But the IP addresses in the email proved it did com from Mozilla.

It is so long ago that I signed up to the addons section as normally you don't need to unless the addon was experimental. So for me the info was already redundant.

[Lisandro]

addons.mozilla.org disclosure
http://blog.mozilla.com/security/2010/12/27/addons-mozilla-org-disclosure/

The problem is that if you use the same password there than in other forums... They could cross-link the email with the password.

[CharleyO]

***

A misplaced security notice by malcontent from this link:
http://forum.avast.com/index.php?topic=68471.msg575448#msg575448

http://news.softpedia.com/news/Trojan-Distributed-in-New-Mass-Injection-Attack-via-Java-Downloader-174971.shtml

Security researchers warn that a new mass injection attack is underway directing the visitors of hundreds of websites to a malicious Java applet which downloads a trojan.

According to Denis Sinegubko, the creator of the Unmask Parasites Web scanner, the malicious code is added at the end of HTML pages on compromised websites and takes the form of an obfuscated JavaScript function.

When parsed by the browser, this function adds a rogue IFrame to the HTML document, which loads a new.htm page from aubreyserr.com, medien-verlag.de or yennicq.be.

According to statistics from Google's Safe Browsing service, around 2,000 websites link to these domains, giving a rough estimation of the attack's impact so far.

The page called by the IFrame loads a Hidden.jar applet deceptively titled "Java Update." This is a Java OpenConnection-type downloader whose only purpose is to download and execute a file called host.exe.

The three domains serving the malware are actually legitimate, but their corresponding websites have been compromised.

***

[malcontent]

http://news.softpedia.com/news/Trojan-Distributed-in-New-Mass-Injection-Attack-via-Java-Downloader-174971.shtml

Security researchers warn that a new mass injection attack is underway directing the visitors of hundreds of websites to a malicious Java applet which downloads a trojan.

Avast seem to detect this according to a 3 day old Virsustotal scan. It detects it as: Other:Malware-gen

http://www.virustotal.com/file-scan/report.html?id=b3aa7d92b97cbbc57b563bfb92204931efc3264612b20c754d948edb1f310b51-1293443980

[Hermite15]

Comodo DACS (Distributed and Collaborative Scanning)

I thought it would be a good idea to put this in the security warnings and notices section, hoping that Avast will put it as soon as possible in the PUP list (I'm serious), and may be add all Comodo links (forum, blog etc...) to the Network Shield black list. thanks.

[SpeedyPC]

Comodo DACS (Distributed and Collaborative Scanning)

I thought it would be a good idea to put this in the security warnings and notices section, hoping that Avast will put it as soon as possible in the PUP list (I'm serious), and may be add all Comodo links (forum, blog etc...) to the Network Shield black list. thanks.

Logos care to explain why?...............or are you scare of Comodo DACS features

[Silk0]

Android mobile malware has botnet-like traits
http://www.pcadvisor.co.uk/news/index.cfm?newsid=3254754

Internet Explorer security flaw that allows hackers to take control of computers
http://www.dailymail.co.uk/sciencetech/article-1341402/Microsoft-warns-Internet-Explorer-bug.html