« January 2005 | Main | March 2005 »

Monday, February 28, 2005

Multiple Browsers IDN Spoofing Test

This vulnerability shows a different URL in the address window then where you actually are so while the address window may say "http://www.microsoft.com" your browser could be at "http://www.badguy.com".

Firefox 1.0 with the "SpoofStick" extension installed shows a problem for those paying attention - the indicator goes blank.

IE 6.0 with the "SpoofStick" bar installed shows a "C" which as above may clue in those paying attention.

Opera 8.0 offers no clues at all and this malicious attack would likely catch users completely off guard.

The Opera 8 (Beta 2) version found here fixes this problem.

K-Meleon shows the address window as "http://www.payp?l.com/"
which should make even the dullest user take note.

So, always be aware when surfing and when in doubt don't do it. Install SpoofStick for Mozilla and IE.

Posted by at 4:49.14 PM EST | Permanent Link

| Categories:

Opera 8 (Beta 2) Fixes IDN Spoofing

And it has the cool speech built right in!
>
>Download here.

Posted by Matthew Carrick at 4:36.23 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:39.40 PM EDT

| Categories: Opera, Security Alerts

Saturday, February 26, 2005

Trend Micro Archive Bug

Trend Micro, makers of anti-virus software, is urging users of its anti-virus products to apply the latest security patches.

A vulnerability in 29 of its products prompted the fix.

The details are here.

The moral of the story? Register your products so you may be swiftly informed of issues such as this, keep a grip on issues regarding critical components in your PC and always check this blog !

Posted by at 2:29.46 PM EST | Permanent Link

| Categories:

Saturday, February 19, 2005

Cabir Mobile Phone Virus Found in US

First it was in the far east now the United States so we can assume it is only going to be a short time before it appears in a Canadian city near you. If your cell phone has Bluetooth then disable it if not using it and if you enable it ensure the setting is in the hidden or un-discovered mode.

Posted by Matthew Carrick at 11:38.43 AM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:41.45 PM EDT

| Categories: Mobile, Viruses-Trojans-Worms

359 foods in cancer alert issued by Food Standards Agency

The known cancer causing agent Sudan I has been found in 395 popular food products. The list is here.

Posted by at 11:10.51 AM EST | Permanent Link

| Categories:

Saturday, February 12, 2005

Microsoft Instructions re: MSN Messenger

To head off an Internet wide attack Microsoft has locking out all MSN Messenger accounts making updates mandatory for users.

Visit Microsoft here and click the Download Now button.

Kudos to Bill for taking such drastic, but warranted, action.

Posted by at 12:57.58 PM EST | Permanent Link

| Categories:

Thursday, February 10, 2005

Future Threats

"I won't be in to work today . . . my pacemaker caught a virus from my Bluetooth headphones in my car and when I talk I sound like Ethel Merman on steriods so I, ah . . . gotta reboot."

Ack.

Posted by Matthew Carrick at 5:31.58 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:43.49 PM EDT

| Categories: Adware/Spyware, Best Practices, Bluetooth, Mobile, Security Alerts, Technology, Viruses-Trojans-Worms

Symantec Flaw Executes Viruses

Virtually all of Symantec's products require an immediate patch to stop them from possibly executing as opposed to quarantining or fixing viruses. Go here.

Posted by Matthew Carrick at 11:20.58 AM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:52.36 PM EDT

| Categories: Security Alerts

Wednesday, February 09, 2005

Firefox IDN Spoofing Flaw Fix

The fix is in - for Firefox at least.

If you have the preferential.xpi extension installed then search for network.enableIDN and ensure the value is FALSE.

Posted by Matthew Carrick at 10:56.21 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:53.12 PM EDT

| Categories: Mozilla Firefox, Security Alerts

Thursday, February 03, 2005

Eudora Email Client Vulnerability

The user would have to click through two warnings before being in danger but the chance does exist if you are still insistent on clicking attachments from people you don't know. Sigh .

The vulnerabilities have been reported in versions 6.2.0 and prior for Windows. Thew solution is to upgrade to version 6.2.1.

Posted by Matthew Carrick at 11:27.42 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:53.43 PM EDT

| Categories: Eudora Email, Security Alerts

Bropia Worm Spread Through MSN Instant Messenger

Remember, if you are using MSN Messenger then you are using Internet Explorer. Before you use any Instant Messaging Client you might consider first installing IMsecure.

Posted by Matthew Carrick at 11:20.31 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:54.16 PM EDT

| Categories: Alternative Apps, Security Alerts, Viruses-Trojans-Worms

Tuesday, February 01, 2005

MSN Search

Microsoft rolls out the first non-BETA version of its long awaited search engine - give it a try. It can only get better if folks give feedback to the designers. If you are want a more Canada-centric version try MSN Search Canada.

Posted by Matthew Carrick at 2:26.12 PM EST | Permanent Link
Edited on: Wednesday, July 20, 2005 5:54.47 PM EDT

| Categories: Software Tools
Archives

Archive Index
Categories
Adobe
Adware/Spyware
All Things Mac
Alternative Apps
Best Practices
Bluetooth
Concepts
Eudora Email
Firefox Extensions
Google Chrome
Hardware Innovations
Hardware Recalls
Headlines
Instant Messaging
Internet Explorer
Mac Safari Browser
Mobile
Mozilla Firefox
Mozilla Thunderbird
Online Apps
Openoffice.org
Open Source
Opera
Penelope Email
Physical Security
Privacy Issues
RSS Applications
Security Alerts
Software Tools
Technology
TPDBP
Viruses-Trojans-Worms