Microsoft is Innocent – The German government recommends using browsers other than Internet Explorer until Microsoft Corp. (MSFT) provides a patch to fix a critical security flaw that allowed a cyber attack against Google Inc. In a statement posted on its website, Germany’s Federal Office for Information Security warned that attacks by hackers “cannot be fully prevented,” even if users run Microsoft’s browser in safe mode. Microsoft rejected the warning, saying that the risk to users was low and that the IE’s higher security settings would prevent any serious risk. “These were not attacks against general users or consumers,” a spokesperson for Microsoft said. If the Germans won’t use it, we shouldn’t either… has anyone ever mentioned Mozilla Firefox to you?
Microsoft is Guilty – Software giant Microsoft has said a vulnerability in its Internet Explorer
browsing software allowed hackers to attack human rights organizations, prompting Google to abandon its Chinese operations. “Internet Explorer was one of the vectors used in targeted and sophisticated attacks targeted against Google and other corporate networks,” Mike Reavey, the director of Microsoft’s Security Response Center, said in a blog post. “Microsoft continues to work with Google, other industry partners and authorities to actively investigate this issue.” Obviously Microsoft cannot make up their mind… or else it depends on who you talk to. If only I were not a gamer… sigh.
Hackers Drive In – An enormous television screen showing a pornographic film caused a midnight traffic jam along Moscow’s Garden Ring Road as stunned motorists slammed on the brakes to gawk at the writhing naked bodies. The owner of the 9-by-6-meter advertising screen said hackers had broken into the screen’s computer system and turned on the porn. “They were either acting out of hooliganism or were from a rival company,” stated Viktor Laptev, commercial director of advertising firm Panno.ru. Wow, my kind of hackers… any chance we can get this ported directly into my Internet Explorer browser vulnerabilities?
Lesbian Sues Netflix – An in-the-closet lesbian mother has sued Netflix for publishing data that she believes could be used to out her.
The unnamed Ohio woman claims her privacy was invaded when the movie rental company disclosed insufficiently anonymous information on the viewing habits of 480,000 customers as part of a $1 million dollar contest to improve its recommendation system. By connecting a series of digital dots, it’s possible for anyone with access to the data to identify customers by name, giving the more than 50,000 contestants an intimate glimpse into data Netflix promised to keep private, the suit contends. “Although Netflix touted its privacy protections to induce consumers to become subscribers, Netflix failed to disclose that it would release the movie titles, genres, rental dates, and ratings they assigned to movies, along with other information about their rentals – without consent – as fodder for a contest to improve the predictive value of their recommendation system,” according to the complaint, which was filed last week in US District Court in San Jose, California.
Trojan porn dialers on mobile phones – After taking a long hiatus, trojan dialers which can rack up thousands of dollars in charges are back. According to researchers at CA Security’s malware analysis lab, a new wave of malicious dialers is hitting users of mobile phones. The trojans are built on the Java 2 Micro Edition programming language and cause infected handsets to send SMS messages to high-cost numbers, at great expense to the victim. “As soon as the application is loaded, this malicious software starts to send premium text messages,” CA warned on Tuesday. “The messages sent out are in the typical format to invoke premium services and land the mobile user with heavy mobile bills without the user’s knowledge and consent.”
Facebook Owns You – An interview with an anonymous Facebook employee is getting a lot of attention, but is the info discussed really anything surprising? The employee revealed that the company records everything their users post, upload and view, and that their data is kept even if they delete it. That’s not exactly a secret – Facebook uses the information for the Suggestions area, to serve relevant ads, and to provide such services as letting you know when your friends have birthdays coming up. The other revelations in the interview might be a bit more unsettling to some. The employee said that until recently a master password existed that allowed employees to log into any account. That practice was done away with in what they called a “crack down” and now any employee who logs into a user account must explain why it was necessary. The employee, who was not identified for fear of losing her job, also said all messages sent on the site are easily accessed by employees.
Hackers Homepage – Evgeny Legerov, the 30-year-old IT security researcher, founder of Intevydis, the Moscow-based IT security consultancy, has caused a quiet storm in security research circles, after saying he plans to release zero-day flaws on a range of popular applications, but without having notified the vendors concerned. In an interview with US security journalist Brian Krebs, Legerov said he plans to release flaws in a variety of packages that is likely to include Zeus and Sun’s web server software, IBM DB2, Lotus Domino and Informix’ directory server applications, including Novell, Sun and Tivoli directory. In his interview with Krebs, Legerov said that, after working with vendors long enough, “we’ve come to (the) conclusion that, to put it simply, it is a waste of time”. According to the IT security researcher, he and his team no longer intend to contact vendors about security flaws, and no longer support the industry’s ‘responsible disclosure’ policy. Oh my, this will undoubtedly turn out well…
Online Gaming Torment – Infinity Ward just can’t catch a break. They fix one major glitch in Modern Warfare 2, and then hackers go to work and
find another way to exploit the game. If you breathed a sigh of relief after IW fixed the very annoying and over-exposed ‘Javelin glitch’. Then this news may have you pulling your hair out. The new glitch is being dubbed as a server glitch. It allows games to feature players that run at break neck speeds, and then slide when they try to slow down like they are ice skating. Online gamers – online hackers… is there really a difference? As long as there are online games, there will be online game hacks. Deal with it.