Drupal Shared Sign On Module Cross-Site Request Forgery and Session Fixation Vulnerabilities
.::anti-abuse.com::.
Security Revealed
Archive for September, 2009
StickK Raises More Funding For Self-Commitment Service, Eyes B2B Play
Posted in September 30th, 2009
We haven’t written about StickK, the company that allows you to put a contract on yourself in order to help you commit to improving your lifestyle, since the service was launched back in February 2008. Good thing the company got in touch with us and pointed out they’re doing quite nicely, which gives us a good excuse for an update on them.
StickK was founded by three Yale economists (two professors and a graduate student) and basically allows you to accomplish a goal by setting up a contract against yourself, whether it’s about losing weight, stop biting your nails, writing a novel or whatever else you feel you need to achieve in life. The site takes credit card information up front and charges it on a weekly basis should you fail to meet your self-submitted goal(s). You can designate someone to be your referee — a friend, co-worker or spouse, for example — but in the end, if they fail to do their jobs, StickK.com will take your word for it.
TechCrunch50 Conference 2009: September 14-15, 2009, San Francisco
Comments Off
Facebook Spreads Its Crowdsourced Translations Across the Web, And The World
Posted in September 30th, 2009
Facebook has long relied on its own users to help translate the site into more than 65 different languages. Now, Facebook wants to unleash its army of volunteer translators on other sites and apps across the Web. Any site or app that use Facebook Connect can now tap into the Facebook community to get help translating their site into any language that Facebook Translations supports.
As Facebook strives to cement itself as the social glue of the Web, offering free translation tools gives developers yet one more reason to choose Facebook Connect over Google Friend Connect or other competing platforms. It gives them access to new markets extremely quickly. Facebook thinks its crowdsourced translation tools are so good that it’s patented them.
TechCrunch50 Conference 2009: September 14-15, 2009, San Francisco
Comments Off
New blood rejuvenates botnet ranks
Posted in September 30th, 2009
Shaun Nichols in San Francisco, V3.co.uk, Wednesday 30 September 2009 at 01:36:00
Emergence of new networks help boost malware numbers
The growth of new botnets combined with the resurgence of existing networks
has helped to push infection numbers higher, according to researchers.
According to the latest report from Symantec’s MessageLabs branch, the
swelling ranks of malware-controlled computer networks are now responsible for
some 87.9 per cent of all spam worldwide.
Much of that activity was credited to a resurgence from the
Rustock
botnet. MessageLabs estimated that the network accounted for ten per cent of
all spam activity. The total number of machines in the botnet is pegged as high
as 1.9mil systems.
Researchers also noted that Rustock has adopted a regular schedule for
sending out spam. The spam runs are found to begin each day around 8:00 AM GMT
with the first four hours of activity being the busiest. The spam flow continues
until roughly 8:00 PM each evening.
Joining Rustock atop the botnet ranks was a new infection known as Maazben.
Dealing mainly in Casino-related spam messages, Maazben is believed to be just
five months old. Despite its recent debut, the Maazben network is said to be
serving 1.4 per cent of total spam loads.
MessageLabs senior intelligence analyst Paul Wood suggested that the
closure
of ISP’s known for harbouring botnet operators has helped takedown older
networks, leaving a void in the botnet industry.
“This has undermined the power of the more dominant botnets like Cutwail and
cleared the way for new botnets like Maazben to emerge,” said Wood.
“However, this won’t always be the case as botnet technology has also evolved
since the end of 2008 and the most recent ISP closures now have less of an
impact on resulting activity as downtime now only lasts a few hours rather than
weeks or months as before.”
Comments Off
New tax scam raises security warnings
Posted in September 30th, 2009
Shaun Nichols in San Francisco, V3.co.uk, Wednesday 30 September 2009 at 01:31:00
Fake IRS form hides malicious Trojan
Security experts have warned of a new malware attack that masquerades as a
tax document.
The US Computer Emergency Response Team (US-Cert) said that it had received
numerous reports of malicious spam messages claiming to be from the US Internal
Revenue Service (IRS).
The messages claim that the IRS has discovered unreported income from the
recipient’s tax forms, and instructs them to open additional material attached
to the email.
Rather than receiving tax forms, however, the victim becomes infected with a
Trojan downloader which attempts to compromise the system with further malware
installations.
The use of phoney tax forms and other
seemingly
official documents has become a popular method for infecting users with
malware. Security experts noted that such attacks often increase in size and
scope during the tax season.
US-Cert is advising people who receive the emails to avoid opening any
attachments, and to contact the IRS through its
scam
reporting site.
The agency pointed out that it does not send notice of fees or other official
documents via email.
Comments Off
Batcave-style entrance (on a budget)
Posted in September 30th, 2009
Want to enter your hidden lair in style? Well [Jimmy] simply wanted to create a cool prop for his school’s homecoming dance. This project includes some obvious inspiration from Wayne Manor. [Jimmy] wired up the automated entrance with a 12VDC motor. In order for it to be able to push the door , the motor had to be attached to [...]
Comments Off
Advertisments
Popular Tags
Recent Entries
- Mandriva Linux released to Community
- Infocon: green
- Mandriva Becomes A Community Distribution
- ISC StormCast for Monday, May 21st 2012 http://isc.sans.edu/podcastdetail.html?id=2548, (Mon, May 21st)
- Ubuntu more “commercial”, but always free …
- The Story Behind Payment Disruptor Stripe.com And Its Founder Patrick Collison
- Lightspark For Open Flash Inches Forward
- Silicon Valley Can Do Better Than Facebook
- The pi pad
- Labor Struggles, Then and Now: Workers in One Iowa Town Epitomize the Past and Present of the Labor Movement
Recent Comments
- Keine Kommentare vorhanden.
Social Network
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Aug | Oct » | |||||
| 1 | 2 | 3 | 4 | 5 | 6 | |
| 7 | 8 | 9 | 10 | 11 | 12 | 13 |
| 14 | 15 | 16 | 17 | 18 | 19 | 20 |
| 21 | 22 | 23 | 24 | 25 | 26 | 27 |
| 28 | 29 | 30 | ||||