And the Oscar goes to . . . Not these guys!

Sans Internet Storm is reporting on Anti-virus Scareware tactic. I'll quote from them:

[ad#ad2-right]

ISC reader Gary wrote in to let us know that searching for "oscar presenters" and "oscar winners" with Google brings up a prominently ranked result on a web server in Poland, on a subdomain of "beepl", which - surprise, surprise - includes a malicious JavaScript. The end result currently seems to reside on stabilitytracewebcom, and is yet another incarnation of the "Fake Anti-Virus Program" malware that we have covered repeatedly. Watch out, the EXE has a meager 6/39 on Virustotal.
[Via Sans]

I did my own research and it is true they are at least 3 sites with the .pl Domain that are used to send you to these fake sites. You should consider checking your system for possible viruses if you been to these sites and are worried. You should also report any site like this to Phishtank to fight this type of scare tactics. Please remember if you are worried about your system this is the best time to install software to prevent these types of scare tactics. Remember you don't always have to buy software to be safe. There are free anti-virus and Firewall solutions at your fingertips, use them well. It is also a good idea to make sure you have the latest updates from Microsoft while your at it.

Facebook: Virus Variant comes back from the dead!

In my recent post, I talked about a Virus that is circulating around on Facebook.  It is know as the Koobface virus and has been changed a little by the programers.   So I what is Techworld saying, just this:

[ad#ad2-right]

In fact, Koobface is now using one of Facebook's own features against it, Lovet said. The latest variant uses Facebook's ability to redirect web links to drive users to malicious websites, often hosted on Geocities.com, Lovet said.

[Via Techworld]

If you have been victim to this little virus, you should check out my Virus removal page and download the programs that should fix this little virus for good on your system.  You should also check out my Previous post I also have some good tips and tricks to prevent the user(YOU) from getting hit by this virus in the first place. This virus is a Good social engineered virus, so please be careful.

Some program Vulnebilities Detected!!

Just got done looking at some of my security sites and according to SecuriTeam there are are several programs that have vulnerabilities. here are the Ones that I've found:

Google chrome is vulnerable to URI Obfuscation vulnerability.
An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.

[ad#ad2-right]iPhone Configuration Web Utility for Windows Directory Traversal
iPhone Configuration Web Utility lets "you easily create, sign and distribute configuration profiles using a web browser". A vulnerability in iPhone Configuration Web Utility allows remote attackers to access files that reside outside the bounding root directory of the program's files folder.

Streamripper Multiple Buffer Overflows
Streamripper "records Shoutcast and Live365 MP3 streams to a hard disk, creating separate files for each track. Runs under Unix and Windows." Secunia Research has discovered some vulnerabilities in Streamripper, which can be exploited by malicious people to compromise a user's system.

Amaya URL Bar Stack Overflow Vulnerability
A vulnerability in Amaya browser allows remote attackers to cause it to overflow an internal buffer which in turn can be leveraged to execute arbitrary code.

These are the ones that I found and wanted to let you know about these so you can make your system even more secure.   if I find any others I'll let you know!!!

Vista has a new Vulnebility!

According to Techworld.com,  Vista has a new Vulnerability that could let a hacker infect a Vista machine with a rootkit.  The talk from them is quite intriguing.   I will quote it to better let you know what the Vulnerability is:

The vulnerability could allow a hacker to install a rootkit, a small piece of malicious software that is very difficult to detect and remove from a computer, Unterleitner said.

[ad#ad2-left]Phion notified Microsoft about the problem on 22 October. Microsoft indicated to Phion that it would issue a patch with Vista's next service pack. Microsoft released a beta version of Vista's second service pack to testers last month. Vista's Service Pack 2 is due for release by June 2009.
[via Techworld.com]

The way they could do this is through the Device IO Control which in turn could corrupt the Kernel of Windows Vista.  Now we all know that Microsoft will release a patch quicker than 6 months away.  According to this article, people are already looking for the exploit and want to know more about it.  I would be willing to bet they will have a patch out sooner than later.  Probably January or Febuary, which will be a big deal because no one will expect it.  I would also imagine hackers will start trying to figure out how they could install software as quick as possible before Microsoft pushes out the patch.   So what can you do to protect yourself, Get a firewall, a Antivirus and learn how to protect yourself to prevent yourself from getting a computer virus.

Memorex releases a cheaper Blue Ray player than a PlayStation 3.

According to there website It can do this:
* Progressive scan Blu-ray Disc player 1080p capability for higher definition video content
* Full HD 1080p, DVD up-conversion up to 1080p (480p, 720p, 1080i, 1080p), 24p, 60p video frame rate
* Multi-channel audio content (supports more advanced Dolby Digital Plus, Dolby TrueHD and DTS-HD)
* BD-ROM, DVD-ROM, DVD, DVD-R/-RW, DVD+R/+RW, DVD-R DL, DVD+R DL, CD-ROM, CD, CD-R/-RW
* 16:9 / 4:3 picture select
* On-screen graphical user interface
* Slow motion function (2x - 4x - 8x)
* RW/FF play function (2x - 4x - 8x - 16x)
* VFD display

[ad#ad2-left]The price of the unit at Memorex is 269.99$.   I think this is a great buy if all you need is a blue ray player.  Cheaper than buying a PS3.  Although if you want to buy a PlayStation 3 to play games and also watch movies on it that is still a good deal.   So why buy this player,  this will  not play games and keep your happy.

Looks like a scam to me : Personal Shopping Assistant!

[ad#ad2-left]

Good afternoon!


We found your resume at _________________ and we would like to propose you a
position of Personal Shopping Assistant.

Imagine having an exciting job with incredible salary (up to $100,000/year) that
lets you use your creativity while being paid to shop. Welcome to the world of
personal shopping!

As we know shopping is the world's favorite leisure activity, but in our busy
society an increasing number of people need to hire someone to do their
shopping. Thus personal shoppers are more in demand than ever before.

There are absolutely NO START-UP FEES and NO FEES for being employed at this
position. As long as you live in the USA, and you have a credit card or any
other line of credit, have 1 or 2 free hours during the day – you are eligible
for this job!

[ad#ad2-right]This is what you will have to do in short:
• Purchase the requested goods using your credit card.
• Send us receipts.
• Wait for us to issue a credit to your credit card in the amount of purchase
plus shipping fee plus your commission which comprises 10%.
• Ship out the goods.
• You are finished, come back for a new list of goods.

If you are interested in Personal Shopping Assistant position please fill in the
form below and send it to: Open2usa.job.dep@gmail.com
Our manager will contact you within two working days.

------------------------------------------------FORM-------------------------------------
Full name ______________________
Residence country _____________________
Age _____________________
Contact phone ______________________
Availability time _______________________
------------------------------------------------FORM-------------------------------------

This letter confirms your resume has been duly processed and your skills
completely meet our requirements for Personal Shopping Assistant Vacancy.

Thank You,
John Walker

[ad#ad2-left-1]I wanted to bring this up because of two things that I saw first off that made this look like a scam. One is they want to "CREDIT" your credit card and two they use a GMAIL account. I am going to say this is looking more and more like a scam. If anyone else has any other ideas about this just leave your comment.  I don't see how this can be real.   I am thinking once they have your credit card information, they'll start using it.

Is Hulu the "salad course"?

As I've been watching Hulu the last few months.  I've come to think that Hulu isn't offering us the viewers the chance of a full course meals.  They seem to like to stop after the first 2-3 seasons on most of the shows.    I recently contacted Hulu about the Naruto episodes and here's what they had to say about it:

Thanks for the email. On background, sometime in the coming weeks, Hulu
will get the remaining episodes of Naruto Season 1, and we'll also get
episodes from Season 2-3 in the future as well.

Please let me know if you have any questions. Thanks.
Brandon Boone

[ad]

So why does Hulu do this? I have a theory and this is one that most people will agree on. My theory is that the distributors are trying to entice us into buying the rest of the seasons from someplace, like Amazon or Itunes. Now I am going to have to say this is really stupid way of business and will sooner or later create even more of a demand to download these shows illegally. In the past people have always looked for the cheap way to watch there favorite shows.

Increasingly people are using BitTorrent to download their favorite TV-shows. The rise of unauthorized downloading of TV-shows is a signal that customers want something that is not available through other channels. It’s more about availability than the fact that it’s free and should be viewed as an opportunity, not a threat.
[Via Torrentfreak]

It is one thing to offer free content and get revenue from the free content. It is another to offer free shows and encourage people to download the rest of the show illegally.

Why do they want to buy the rest of the episodes, it is simple math.  They are wanting to get the money for each DVD you buy.  In today's economy there seems to be less and less Blue ray sales.

[ad]

Published: September 23, 2008 - 08:18PM CT

The numbers show that Blu-ray's market share dropped 13.39 percent from the previous week, and that DVD's numbers actually went up by 0.15 percent. Netflix CEO Barry McCarthy recently told Home Media Magazine that he didn't expect Blu-ray to have much of an impact on the company's DVD business in 2008 at all. Citing high player prices, he said that only a fraction of Netflix subscribers currently rent Blu-ray disks.

[via Arstechnica]

Although, this is a couple weeks old article from arstechnica, I thought it was more relevant than most. It talks about how people can't afford to buy a player and the BD Dvd's due to the high prices and charge more than they should. So why do it in the first place? I don't know but all this is showing people are having to choice cheaper and cheaper ways to watch what they want because of the US economy slinding further into recession.

[ad]

What is your most favorite show or movie?  Are you willing to pay a lot for the movie?  These are questions,  that we have to challenge Hulu and other shows on why they only have 2 or 3 seasons of a particluar series.  Is it right to have lure us into the episode and not offer more episodes later on?

Living the Life of a Blogger 101

Having been blogging for the last few months and years. I've learned so much from blogger the platform. I thought I would talk about that in this post. To give those who want to use Googles Blogger platform to there fullest. It is inconsequential to the grand scheme of blogging. It is not enough to just blog it has to be some kind of meaning in it. You have to think of how best can I help people out. It is legal to use fair use. That is why congress has put it into congress.

Fair Use comes from the idea of using something that is 'Copyrighted' and use some portion of it to talk about or as a demonstration. Most people don't understand that, you can use anything on the web as long as you don't publish there material fully. I like to us hulu for example. I've embedded there videos on my site, and talked about Hulu from time. This last few weeks they had clues out on there site. I started trying to solve the clues they Published to better help figuring out there clues. Although they might consider there promotion as being copyrighted. I used there clues to publish what I considered was fair use. They couldn't do much other than smile that some one started blogging about there clues weekly because once they published there clues. I had the right to try to figure the clues out. I actually loved doing it.

[ad]

So why do we blog if we can have it protected?

In truthfulness, anything I publish will inevitable be published somewhere else on some one elses blog. Now they have the right to publish small clips of my stuff or even to link to my site. That comes from understanding my community and relationship with others. I have to let them do what they want with my blog post to an extent because I can't make the readers mad by sending out the old fashioned "Cease and Desist" orders. That would make my readers mad. I know how important it is to make my readers becoming my FAN.

How do you make your readers a Fan?

I identify with my readers because I know how I once was a reader myself. I have certain blogs that I like to read from time to time. I've got my blogs I like to read and comment on and I hope you do too. It's something that comes from years of reading and having a passion for telling people my point. I know people are uncomfortable making comments on blogs. They think the writer will not see or read it. Some also think the owner of the blog will delete the comment. That comes with understanding that we have to prune the comments because sometimes we have those annoying spam comments and others that will try to start a flame comment war. Those aren't needed in blogs we either like it or make a comment how the writer could of made it better. I am constantly thinking about how I can make my published work better and having more content. This is how I do it, I think about what I like to talk about and I make it more real. I then make it more reader friendly so that, I get the readers involved and let them choice what they want to read. People are always going to be picky they will always want a choice that is always going to happen.

[ad]

How do we get readers involved in a blog?

Little things can get readers to become involved in a blog. I remember a time on how I talked a little about Hulu the first time. I got a comment from the creator of Hulu to leave a comment. That was Awesome and Softened me to see just how many people read my blog and comment about my blog. I've learned during a regular blogging session, I need to keep commenting on the blogs because it makes people want to get involved in my blog and will greatly increase my blog community.

Can I start my own blog?

You can start a free blog just as I did. You would only need to sign up to Blogger and start blogging. Giving people the ability to start blogging is essential to making a difference in my writing ability because of the possible comments people will make on my blog. That is what I want to see more of is comments because people will always want to read the comments on a blog. Just like TechCrunch people love to go to that site to read or hear comments. I've done it, and I am sure others do to. That is a community and I like that type of community.

[ad]

Hot, sexy bot sweet-talks personal data out of chatters

[ad#ad2-left]

Security software company PC Tools warns that the bot can easily be used for malicious purposes. The company said that the program's ability to mimic human behavior to dupe chatters is worrisome, and could readily be used to collect all manner of information. "As a tool that can be used by hackers to conduct identity fraud, CyberLover demonstrates an unprecedented level of social engineering," said PC Tools senior malware analyst Sergei Shevchenko in a statement. "CyberLover has been designed as a bot [robot] that lures victims automatically, without human intervention. If it's spawned in multiple instances on multiple servers, the number of potential victims could be very substantial."
[Via Arstechnica]

This is really a security issue here. Never give out your personal information online. I just want to post this to remind people not everything online is safe.