Careless Facebook profiling can lead to Identity Theft!

I just got in contact with a old friend from High school and another friend of mine suggest the new friend. I was looking at her profile and couldn't believe what I saw:

As you can see this is not good I was amazed at how many people are giving out there birthdays and who they are married to to friends and family. So we heard about how people are claiming they need help or are in need of desperate money. This is nothing new, as you know people are having hard economy times and people are using the social engineering to scam people out of money.

I feel that I should warn people the important necessity.   You shouldn't be broadcasting your DOB and who your married to to your friends, just in case they get hacked.

Recent activity indicates that identity thieves are hacking into trustworthy profiles before selling on the login details to interested parties. This information is used by spammers to target legitimate users, posting misleading links on their "walls" – personalized message boards.

[Via Computing.Co.UK]

This deservese a little mind and a lot of understanding.   By the spammers hacking into facebook accounts they have the chance to scam or spam people with links to possibly have a virus or trojan installer.

[ad#ad2-right]For example This one blog talks about the Virus:

Symantec's Norton Antivirus software has flagged this as a "high risk" Infostealer.Gampass virus. More info on this particular Trojan vius is here. (Note: Symantec warns the risk level is "low," since it originated in 2006, but this new Facebook email is a new iteration of the same virus.)

You might be inclined to click on this link because it's from a friend, but they did not intentionally send it to you -- and yes, their Facebook photo is attached, too.

[Via Sync-blog]

Now I went searching through my friends list and also found this little bit of information.  As you can see this one is asking for people to use there account to scam people out of money.  They could use this to find out even more information of the Other partner and make you believe your talking to the real deal.   Saying they need money because they are stuck over seas or something like that.   I've seen this on other blogs where people have sent money to "friends" but are actually people who are the scammers.  Then if you send the money you are out of luck with your money and possibly your friends to.  I am sure there are more but this is prime examples of what you shouldn't do and why.

So what can you do to prevent Identity Theft and/or being scammed?

[ad#cricket-right-ez]

• Roboform Review — A Password Manager that will help protect your passwords from key loggers and other such phishing sites.    I strongly recommend it to to all who are security minded. (Never use the same password for all your accounts)


• Are you worried about your identity? -- This is good information in checking out sites that might be questionable.  You can find out what type of site it by using your brains.


• Old Phish Become New again -- This is blog post about twitter and what may happen if you did give out your password.   This is a good example of why you never should give out your password to third party websites.


• Twitter Spammers a getting more smarter -- This is also good example of what happens when you see become friends with someone who isn't real.   You could be the next to be spammed and/or impersonated.

If you follow some common steps you to could prevent from being the victim or getting your Identitiy stolen.   Some things to remember is Never tell anyone your Birthday the whole date like someone did on twitter a few days ago.  It's nice that they are growing older but that gives people that much more information to use to steal your money or your idenitiy.   Think before you give out any personal information like Age, Married, who your married to and anything that might be used to be able to access your account or your impersonate you.  Remember only you can prevent from being scammed or lossing your identity, you wouldn't want to have to pay for your mistakes.

Some program Vulnebilities Detected!!

Just got done looking at some of my security sites and according to SecuriTeam there are are several programs that have vulnerabilities. here are the Ones that I've found:

Google chrome is vulnerable to URI Obfuscation vulnerability.
An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.

[ad#ad2-right]iPhone Configuration Web Utility for Windows Directory Traversal
iPhone Configuration Web Utility lets "you easily create, sign and distribute configuration profiles using a web browser". A vulnerability in iPhone Configuration Web Utility allows remote attackers to access files that reside outside the bounding root directory of the program's files folder.

Streamripper Multiple Buffer Overflows
Streamripper "records Shoutcast and Live365 MP3 streams to a hard disk, creating separate files for each track. Runs under Unix and Windows." Secunia Research has discovered some vulnerabilities in Streamripper, which can be exploited by malicious people to compromise a user's system.

Amaya URL Bar Stack Overflow Vulnerability
A vulnerability in Amaya browser allows remote attackers to cause it to overflow an internal buffer which in turn can be leveraged to execute arbitrary code.

These are the ones that I found and wanted to let you know about these so you can make your system even more secure.   if I find any others I'll let you know!!!

Youtube gets ready to Launch "LIVE Event!!" 5pm PST/8pm EST

As the time approaches for the live even for Youtube. There are many confirmed and only one I want to see right now. As many people will agree that Mythbusters is the best show on Discovery Channel. They have been confirmed to be there tomorrow.



Some of the major players confirmed to be there are Mythbusters, Soulja Boy Tell'em, Katy Perry, Esmee Denters, Akon, FRED, and Will. I. Am.   Now I don't know all these stars.   I do Know Mythbusters and I've heard of FRED.   I'm just stating who is going to be there.

[ad#ad2-left]Then the Obvious question comes to my mind and I am sure this is being asked by everyone right now.  Is Mythbusters shows coming to Youtube?  I would say from what all is going on with Youtube, they might become a competitor to Hulu.  With them adding High Defination Viewing and allowing bigger video to be uploaded. There is no question that Youtube and Google is getting ready to release a major statement, or change there direction.   So be ready tomorrow at 8 PM EST/5 PM PST and let's see what happens.

Scam ALERT: NATIONWIDE MARKETING!!

*Update* Seems to be that they've went and changed to another name.  They are now using  Excel Marketing, and I plan on keeping people updated.   Read the comments to find out about what people have said!!!

Hi all,

[ad] Just got this nice little letter from Nationwide Marketing.  This was sent snail mail, or Postal mail.   I came home today to find I got mail from 30 Centurian Drive/Markham, ON L3R 8B9 Canada.   I opened it up and find a check from Nationwide Marketing.   it's the old routine, they want you to cash the check send them $3,500 and you keep the rest.  The fake check that I know is faked, I call the bank in question.   It says you have to do a 2 hour evaluation training and get paid training for 200$ per Hour.   The fake check was for $3,990.00 and $3,500 was supposed to be sent through a Wal-mart Money Gram.   The so called position was Customer Service Evaluator (Rep ID#: KB0C0608).     I am supposed to call 1-905-598-1519 I received this assignment to validate the enclosed payment.Thank goodness I did a little searching and found out this was a scam.

A little more information about this so called fake check is:

Nationwide Marketing

PO BOX 91

Minneapolis, MN 55440

Keybank of UTAH in Price, UT

Check Date 10/06/2008 Vendor ID 6280748  31-0300/1243

Routing number is : 124303007   Bank: KEY BANK NATIONAL ASSOCIATION

Peter Goldman Is the So called Co-ordinator.

Along with the letter and check there was a Customer Satisfaction Evaluation Tool (CSET), I'm assuming this is a way for them to get the important information of the money gram.   We are supposed to fax that after the completion of the assignment.

I did posted this to get the word about this scam.  I encourage all of you leave comments about this and warn people of all the variety of this scam.  Thank goodness I did research or I could of been a victim too, thanks Google!!!

There was another form of this starting up and I wanted to let people know:

Well, guess what . . . I just got a "Customer Service Evaluator" letter, check and survey sheet in my mail! The post mark is from Canada, and the check is from The State Bank of Faribault, Minnesota and the survey company letterhead says that they are located in New York. The phone number I am supposed to call is 1-416-831-1673 to let them know that I have gotten the check. Then I keep $100 and wire the rest back using Money Gram.

I did a google search on the name of the company, and they have a scam alert on their site telling people that the letters that they are getting in the mail are NOT from them.

http://www.surveyclub.com/e/ScamAlert.aspx
They should really check WHO they are sending these letters and checks to before they drop them in the mail!

[From Shawn Mosch]

This came from the scam victims site and wanted to inform people of this scam too!

[gsom-optin]

5 ways to improve your chance of getting hired.

Having seen the economy this week, I've come to the conclusion that it is time to redo all the important essentials and get all my ducks in the order as they say.   I've been thinking of how best to be ready in case the dreaded day comes when my employer no longer needs my assistance and what could I do to be prepared.

[ad]

• Get Someone to Critique your Resume -- This is the most important step because this is the first place employers look when they want to hire someone.  So how do you get it critiqued?   Here are some good links to help you start off with:  Careerbuilder Critique, Mind of Root Peer Critique(Last until Oct 30, 2008).


• Have your Resume Ready to upload to Resume sites --  You should always register at all the important resume sites just in case.  The Sites that I recommend are : Monster, Career Builder,  Hot jobs, Dice, US jobs, Best Jobs USA, Computer Jobs, and Nation Job.


• Use your website as a place to put your Resume -- Have your resume available in case some contacts you and tells you they know someone who is looking to hire people.  Have this resume hidden and only give it out to people you know.   This is also known as networking.
  


• Network as much as possible --  There are sites out there that have made it easier to network.  Sites like linkedin.com, this site is great because of the 6 degrees of possibility as I call it.  You know someone, they know someone, and then you will both know the same one!!   This also will greatly increase your chance of an employer finding you.


• For those who want to be Self employed --  I wanted to say that most people who want to be self employed know just how hard it is to begin with.  So I've got some interesting links to help start you on your way.   First link is Technibble.com Computer Business Kit,  This has Maintenance Sales Letter, Work Order, Marketing Analysis and Payment Overdue Letter. It is also a good idea to have an MP3 Advertisement that you can give to podcast and throw them the link to it.  You will need to market yourself to the public in ways that no one has thought of.   You will on an occasion have to spend money in order to get money, it's always been that way but it seems to work.

These are some great tips that will greatly improve your chances of landing that job or becoming even more chance of you making money.   If you have any tips or want to suggest ways to improve upon these tips please email me.   If you like what you see discuss it on the blog or click on my ads to help offset the cost of this blog.