|
Hacker creates plugin that crashes Chromes security
Reported by The Next Web, a developer created a plugin for the Google Chrome browser that can watch users’ login information and send that information to him via email. The programmer who created the attack, Andreas Grech, coded the plugin in jQuery. Grech is only demonstrating the attack and isn’t using it maliciously but it is more than a proof of concept, it’s real and in the wild. He details the attack on his blog and reveals the code behind the exploit. He says that he has tested it and it has been successful against major sites like Facebook, Gmail, and Twitter.
Grech’s explanation from his blog of how the attack works:The Google Chrome browser allows the installation of third-party extensions that are used to extend the browser to add new features. The extensions are written in JavaScript and HTML and allow manipulation of the DOM, amongst other features.By allowing access to the DOM, an attacker can thus read form fields…including username and password fields. This is what sparked my idea of creating this PoC.The extension I present here is very simple. Whenever a user submits a form, it tries to capture the username and password fields, sends me an email via an Ajax call to a script with these login details along with the url and then proceeds to submit the form normally as to avoid detection.Grech also mentions that while he used this attack to steal login information, it could also be used to steal cookies or hijack browsing sessions. This attack is a good reminder that IE isn’t the only vulnerable browser around and to be cautious when installing 3rd-party extensions. Until Google patches this hole, right now it is a good idea to be extra careful about checking whether a plugin comes from a reputable source.
Serious Laptop Security
I have found a very nice security program for all you whom are interested in having a Lojack type program in case your computer is lost/stole. http://www.absolute.com/products/lojackforlaptops Take a good look around at the site for 40 dollars you get a one thousand dollar guarantee also. I highly recommend this product if you have files you don't want in anyones hands or just want to bust that dirt bag who stole your laptop.......
One last note there are my products out there like laptop locks and such that can really deter that dirt bag, its a tiny investment so I advise getting at least a laptop lock.
Windows 7 RAM Issue
Microsoft's Windows 7 operating system does not use RAM effectively according to various tech sites. "The vast majority of Windows 7 machines over the last several months are very heavily-memory saturated" said Craig Barth of XPnet. "For the OS to be pushing the hardware limits this quickly is amazing. Windows 7 is not the lean, mean version of Vista that you may think it is," he added. Comparing it with the two previous OSs, its sport an average of 3.3GB of RAM which is 0.6GB higher than Vista and 1.6GB higher than XP.
Source: Toms Hardware
Anti Virus Comments
So you just bought a new computer and have used up your 90 day anti virus software trial and don't want to spend any more money on it so you have decided to put a free one on your machine. Be forewarned your mileage will vary on what you decide to put on. What I am seeing out in the public is for the most part people are using AVG Free, which I cannot recommend for the following reasons. Back when it was in the 7.0 and 7.5 versions it was decent I will say that but the newer version has brought on issues with your computer slowing down and not being able to really remove maleware very well. Sure it will detect them all day long but you can never remove them. Also from a technician point of view I have to use a special program to actually remove avg from your computer because the standard un-install if it works at all never removes the whole thing. So what do I suggest in the free arena? I can and do push two programs Avast Home Edition and Avira. Both run without 99 pop ups and in this IT mans opinion are much better than some of the pay for versions ( Norton especially). Both programs use little resources in the background so your computer does not bog down when running your normal everyday applications. They both detect/block and remove all the nasty bugs and the virus definitions are updated often.
But if you are more of the I want the best out there and do not trust the "free" software on the net I can suggest a few that really stand up and are rated tops. 1) Kaspersky Internet Security, and 2) Bit Defender are the best of the best. One word of caution when "doing your homework" looking around for reviews on anti virus products or things of this nature. Many of the so called reviews sites are actually in bed with a certain company and do not give you the real scoops on products. Even some of the big computer magazines fall into this realm. So really take things with a grain of salt do a ton of asking around and read the user reviews which really can tell you more about the product than some writer that works for a magazine. Good Luck and remember you must have some sort of protection on your computer thats up to date or you are just inviting bad things to happen. And just because you have a good anti virus program does not mean you are bullet proof on the net. No one is......
What Browser does Candid Recommend?
First and foremost I tell all our customers to not use Internet Explorer for the simple reason it always gets hacked and has many holes. Although Microsoft is pretty good at coming up with fixes why bother if you can have a more secure browser. So I tell everyone to go with FireFox. Its much more secure has add-ons that really work and its a much more safe way to browse the Internet. But here comes Google Chrome last year... I do find myself using it often but still end up using Firefox for my default browser. Bottom line without going into a bunch of geek speak is use Firefox. There is nothing wrong if you choose Chrome as your default but its still the new kid on the block and in my eyes not proved itself. With that being said it is a bit faster loading up pages than Firefox but if safety is an issue and you can wait those few more milliseconds stay with Firefox.
Anti Virus Products on Usb drives
It appears that antivirus companies have begun to sell their products on USB thumb drives. This is a great idea now that Netbooks are more common since many of them don’t have an optical drive. In fact, some antivirus companies such as Panda Security are making a Netbook specific versions of their antivirus products which are lighter on resources and come on a USB drive.Another great thing about antivirus products coming on a USB drive is that the installation of the antivirus product (which usually takes ages) would happen much faster, since it is usually much faster than installing something from a CD.Lastly, at the end of the day the customer is left with a USB drive which they could use for other purposes.
Windows 7 Upgrade Tips
The Washington Post’ website has an article about five things that users should know when upgrading to Windows 7 from XP.First, users need to know that XP cannot be upgraded directly to 7. Second, since users could not make a direct upgrade, they could first upgrade to Vista then to 7. By doing it this way, they would avoid a clean install of the operating system. The third thing on the list notes that users should use the Windows 7 Upgrade Advisor tool to scan for hardware and software compatibility issues. Next is about making a backup and the last thing is about the new firewall application in 7. Source: The Washington Post
Windows 7 Upgrade Hack Legality
Eric Ligman of Microsoft is sending a message this week to bloggers that although it is technically possible to install a full version of Windows 7 using a Windows 7 upgrade version, it does not mean that it is legal.“For those of you without an existing Windows license to upgrade from, you should be aware that an upgrade license by itself is not a license to install and run Windows on your computer,” he wrote in a blog post.“In order to upgrade, you need to have a qualifying license to upgrade from. Again, that’s why it is called an ‘upgrade,’” he added. Source: Channel Web
Intel Pulls SSD Firmware Upgrade
A firmware upgrade for Intel X25-M consumer solid-state drives has been pulled by the company just one day after the release due to customer complaints.An Intel spokesman said, “We have been contacted by users with issues with the 34-nanometer Intel SSD firmware upgrade and are investigating. We take all sightings and issues seriously and are working toward resolution. We have temporarily taken down the firmware link while we investigate.”No comment has been made by the spokesman on when the company will release an update. Source: PC World
Netbooks vs Apple Notebooks
A survey found that more people will purchase netbooks rather than Apple notebooks.
“Fifty-eight per cent of [students] plan on spending less than $750.00. Only 18 per cent have a budget over $1,000.00. Netbooks are affordable – some costing only $170.00. In contrast, Apple laptops start at $949.00. At a time when many people are experiencing economic hardship, having a new Apple laptop isn’t a necessity,” said Vipin Jain who is Retrevo’s chief executive.
Source: The Register
Security Features of Windows 7
Details are released for the next Windows operating system, Windows 7. According to the article at Tom’s Hardware, the five components are Multiple Active Firewall Policies, DirectAccess, BranchCache, BitLocker To Go, and AppLocker.“We’re really excited about Windows 7’s new security features. This next OS is built upon the proven security technologies in Windows Vista and provides a fundamentally secure computing platform. We not only utilized enhanced Security Development Lifecycle (SDL) process during planning, development and testing but we also have worked to make the security features more discoverable, usable and manageable,” said Paul Cooke of Microsoft.
Source: Tom’s Hardware
Windows 7 XP Mode Capability
Some computers that are capable of running Windows 7 may not be able to run in XP mode according to an article at PC World. These computers include laptops with older Intel Core 2 Duos and Pentium M processors.To be able to run in XP mode, computers need a processor with Virtualization support.The article notes that if a user’s PC can run software’s such as Parallels for Mac, VirtualBox, or Virtual PC, then it can run Windows 7 in XP mode.
Source: PC World |