Author Topic: SECURITY WARNINGS & Notices - Please post them here (Read 2904495 times)

Asyn · « **Reply #1665 on:** November 15, 2011, 02:25:22 PM »

Quote from: SpeedyPC on November 15, 2011, 02:17:29 PM

Quote from: Asyn on November 14, 2011, 12:12:27 PM
Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

Thanks for the warning as I used Steam for all my Call of Duty Modern Warfare games

NP pal.

Asyn · « **Reply #1666 on:** November 15, 2011, 02:43:39 PM »

Apple OS X Sandbox Predefined Profiles Bypass
http://www.coresecurity.com/content/apple-osx-sandbox-bypass

Dch48 · « **Reply #1667 on:** November 15, 2011, 06:45:14 PM »

Quote from: Asyn on November 14, 2011, 12:12:27 PM

Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

It was really only the forums that were affected and that has been resolved.

Dwarden · « **Reply #1668 on:** November 16, 2011, 03:40:19 PM »

not true, both STEAM forum and STEAM user database were leaked,
it's unknown what type of encryption was used for STEAM account passwords
only that the part with CreditCards info was by AES256

Dch48 · « **Reply #1669 on:** November 16, 2011, 09:26:39 PM »

Quote from: Dwarden on November 16, 2011, 03:40:19 PM

not true, both STEAM forum and STEAM user database were leaked,
it's unknown what type of encryption was used for STEAM account passwords
only that the part with CreditCards info was by AES256

That's what they thought at first but there is no evidence of any compromise or illegal usage of customer data. The only impact was on the forums which had to taken down temporarily. It's nothing like the fiasco with Sony. They may have gotten in but anything they got seems to have been unusable to them.

Left123 · « **Reply #1670 on:** November 16, 2011, 09:38:30 PM »

New facebook virus,here we go again :
http://www.zdnet.com/blog/facebook/facebook-confirms-images-of-porn-and-violence-is-investigating/5330?tag=content;siu-container
Facebook says it is aware of users reporting a huge flood of unwanted content. This includes links, videos, and images depicting pornography, acts of violence, self-mutilation, and bestiality.

Asyn · « **Reply #1671 on:** November 18, 2011, 12:05:13 PM »

Unknown network event causing BIND 9 DNS server crashes
http://www.h-online.com/open/news/item/Unknown-network-event-causing-BIND-9-DNS-server-crashes-1380518.html
https://www.isc.org/software/bind/advisories/cve-2011-4313

Asyn · « **Reply #1672 on:** November 18, 2011, 03:24:22 PM »

XSS vulnerability in the translate helper method in Ruby on Rails
http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5

Pondus · « **Reply #1673 on:** November 18, 2011, 06:56:35 PM »

Spam Gets a Touch of Facebook Camouflage
http://blogs.norman.com/2011/for-consumption/spam-gets-a-touch-of-facebook-camouflage

Recycling – Not Always A Good Idea
http://blogs.norman.com/2011/for-consumption/recycling-not-always-a-good-idea

Invisible YNK, a Code Signing Conundrum
http://blogs.norman.com/2011/malware-detection-team/invisible-ynk-a-code-signing-conundrum

Quote

Back to the trojans. The one above is signed in June, and it’s now November, so this trojan has lived an undisturbed and validated life for about 4.5 months.