SECURITY WARNINGS & Notices - Please post them here

[!Donovan]

according to Symantec report Opera and IE have the lowest number of vulnerabillities

see charts.  http://www.dinside.no/915410/faerreste-saarbarheter-i-opera

Not that many people use Opera on a regular basis. We should look for vulnerabilities in more common browsers, n'est-ce pas?

Well there are a few that use IE   

And IE isn't as flexible as Firefox and Chrome, thus IE has less vulnerabilities.

[Asyn]

U.S. gives big, secret push to Internet surveillance
http://news.cnet.com/8301-13578_3-57581161-38/u.s-gives-big-secret-push-to-internet-surveillance/
https://epic.org/2013/04/epic-foia-request-reveals-deta.html

[Asyn]

Apache Binary Backdoors on Cpanel-based servers
http://blog.sucuri.net/2013/04/apache-binary-backdoors-on-cpanel-based-servers.html

[Asyn]

Google locks down updating on Play store
http://www.h-online.com/open/news/item/Google-locks-down-updating-on-Play-store-1851695.html

[polonus]

More fake SourceForge websites being found up: http://research.zscaler.com/2013/04/more-fake-sourceforge-websites-show-up.html
link article author for Zscaler Reasearch = Julien Sobrier

polonus

[bob3160]

Watering Hole Attack Claims US Department of Labor Website

[Pondus]

Malware invades 90% of pirate computer games
http://blogs.norman.com/2013/for-consumption/malware-invades-90-of-pirate-computer-games

[polonus]

Loads of websites are buggy and pose a security threat:

# 86% of all websites had at least one serious* vulnerability.

# The average number of serious* vulnerabilities identified per website was 56, continuing the downward trend from 79 in 2011 and 230 in 2010.

# Serious* vulnerabilities were resolved in an average of 193 days from first notification.

# 61% of all serious* vulnerabilities were resolved, slightly less than the 63% during from 2011, but still up from 53% in 2010 and far better than 2007 when it was just 35%.

Quotes taken from this report review here: https://www.whitehatsec.com/resource/stats.html
Link article author: Jeremiah Grossman

polonus

[Asyn]

Microsoft Security Advisory (2847140)
Vulnerability in Internet Explorer Could Allow Remote Code Execution
http://technet.microsoft.com/en-us/security/advisory/2847140
http://blogs.technet.com/b/msrc/archive/2013/05/03/microsoft-releases-security-advisory-2847140.aspx

[MikeBCda]

Just to save an unnecessary jump to see if the vulnerability affects you, MS says in that bulletin that only IE-8 is involved in this case; 6, 7, 9 and 10 aren't affected.

[Johnny4745]

Can Facebook videos be a scam?

Q. I tried to watch a video on Facebook, but it didn't work. It made me install a new driver and then still didn't play the video. What gives?

A. I doubt that was a real video at all. This is a scam that is common on Facebook. The post looks like a really interesting or scandalous video. When you click it, it asks you to install a driver to watch it. What you actually download is usually a junk file or a virus.

http://www.foxnews.com/tech/2013/05/05/5-burning-tech-questions-answered/

[polonus]

An avi file extension is not a guarantee that the file is a video file. You could get any .exe virus and rename it to .avi and download malware...

polonus

[midnight]

Can Facebook videos be a scam?

Q. I tried to watch a video on Facebook, but it didn't work. It made me install a new driver and then still didn't play the video. What gives?

A. I doubt that was a real video at all. This is a scam that is common on Facebook. The post looks like a really interesting or scandalous video. When you click it, it asks you to install a driver to watch it. What you actually download is usually a junk file or a virus.

http://www.foxnews.com/tech/2013/05/05/5-burning-tech-questions-answered/

I watch video's on Facebook almost everyday and have never had any new driver's installed. 

[polonus]

Hi -midnight,

Well that means you only watch good vids,

polonus

[midnight]

Hi polonus

Yep! I watch only good ones.