SECURITY WARNINGS & Notices - Please post them here

[marc-d-l]

Java needed to get on the Link to SurveyMonkey survey.

[polonus]

Howdy bob3160,

Checked this:
Universal Plug and Play
Router Security Check
 
 
Scan Results

Congratulations! Your router did not respond to a UPnP discovery request.

Nice to know! Thanks, bob3160...

pol

[polonus]

Wait to use VLC Media Player until a new patch for a serious hole via a specially crafted ASF-file
has become available: http://www.videolan.org/security/sa1302.html
Credit for reporting the unpatched vulnerability in the ASF demuxer (libasf_plugin)  goes to Debasish Mandal,

polonus

[DavidR]

Java needed to get on the Link to SurveyMonkey survey.

No it requires Javascript which is completely different from JAVA.

[Asyn]

Wait to use VLC Media Player until a new patch for a serious hole via a specially crafted ASF-file
has become available: http://www.videolan.org/security/sa1302.html

Already posted it. See: http://forum.avast.com/index.php?msg=889517

[polonus]

Hi Asyn,

You have beaten me to it. At least now there is no excuse anymore for those that did not temporarily manually disabled that libasf_plugin in VLC.
The nightly built already has the patch for this: http://nightlies.videolan.org/

polonus

[SpeedyPC]

Apple's block on Java blocks ad flow
http://www.theage.com.au/it-pro/security-it/apples-block-on-java-blocks-ad-flow-20130201-2dpix.html

[polonus]

Alarming Kaspersky Lab Report: http://www.securelist.com/en/analysis/204792278/Kaspersky_Lab_report_Evaluating_the_threat_level_of_software_vulnerabilities
The situation regarding users with outdated vulnerable Java is really alarming...

polonus

[bob3160]

Alarming Kaspersky Lab Report: http://www.securelist.com/en/analysis/204792278/Kaspersky_Lab_report_Evaluating_the_threat_level_of_software_vulnerabilities
The situation regarding users with outdated vulnerable Java is really alarming...

polonus

No really alarming considering the number of people I meet who still have either no or expired AV protection on their system. 
What makes us think that these people worry about updating even if they receive a notice.

[Ddm5]

Alarming Kaspersky Lab Report: http://www.securelist.com/en/analysis/204792278/Kaspersky_Lab_report_Evaluating_the_threat_level_of_software_vulnerabilities
The situation regarding users with outdated vulnerable Java is really alarming...

polonus

No really alarming considering the number of people I meet who still have either no or expired AV protection on their system. 
What makes us think that these people worry about updating even if they receive a notice.

That used to be me, to be quite honest, running no av, nothing up to date, suprising that during that time I only had 1 virus. :L

[polonus]

Hi bob3160,

Completely agree with your analysis. We here became aware why we should update and patch, but the majority of users never ever consider to...totally ignorant bunch. Sounds dramatic and alarming to us, but we are a tiny minority and these are the facts...
Hopefully we converted Ddm5 now while he visited these here forums... 

polonus

[DavidR]

Most people don't get religion until they find they are mortal, e.g. the don't worry about security until they have a serious virus/malware infection that deprives them of their computer for a few days and or costs them money to have fixed.

[bob3160]

Most people don't get religion until they find they are mortal, e.g. the don't worry about security until they have a serious virus/malware infection that deprives them of their computer for a few days and or costs them money to have fixed.

Many of the people that have seen my presentation, have also learned the importance of always staying up to date.
Some people you will never convince and they're usually the ones who spread the infections onto their unsuspecting
and uneducated "friends".

[Asyn]

Android malware carries Windows snooping app
http://www.h-online.com/security/news/item/Android-malware-carries-Windows-snooping-app-1797241.html
http://www.securelist.com/en/blog/805/Mobile_attacks

[SpeedyPC]

Exclusive: Microsoft and Symantec disrupt cyber crime ring
http://news.yahoo.com/exclusive-software-makers-disrupt-cyber-ring-halt-searches-201207523--finance.html