Explore topic-wise InterviewSolutions in .

This section includes InterviewSolutions, each offering curated multiple-choice questions to sharpen your knowledge and support exam preparation. Choose a topic below to get started.

1201.

Solve : Microsoft releasing Vista Service Pack 1?

Answer»

Quote

SEATTLE -- Microsoft is releasing a major package of updates and fixes for the Windows VISTA computer operating system.

The company says Windows Vista Service Pack 1 will improve efficiency, performance and security.

Microsoft says Service Pack 1 was released today to computer makers. It will be available to consumers in March.

Microsoft ALSO is releasing Windows Server 2008 to upgrade computer servers.

Vista has been on SALE for more than a YEAR. It was Microsoft's first new computer operating system in FIVE years.
http://seattlepi.nwsource.com/local/6420ap_wa_microsoft_sp1.html
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9060738&intsrc=news_ts_head
1202.

Solve : Simple Hack On Google Services?

Answer» HERE

A security RESEARCHER named Rob Graham has noted that it doesn’t take a LOT of effort to disable the safety measure that exists on Google services such as Gmail.

The data that can be gathered from a user include map searches and calendar entries. The vulnerability is about the use of session-IDs on websites after users have logged in.

“If companies do SSL correctly, then you’re safe. The problem with Gmail is it’s not doing SSL correctly. In my experience just USING Gmail normally, I’ve seen this happen accidentally,” he said.

A spokeswoman from Google said that their security pros were looking in to his research.

Source: The REGISTER
1203.

Solve : Microsoft: Vista More Secure Than XP and Open Source?

Answer» HERE

Windows Vista was hit by significantly fewer publicly disclosed security flaws in its first year than Windows XP and open source rivals were, the software giant says.

Windows Vista was hit by significantly fewer publicly disclosed security flaws in its first year than Windows XP and open source rivals in their first years, according to a report from Microsoft.

The report, written by Jeff Jones, a security strategy director in Microsoft's Trustworthy Computing group, is part of Microsoft's effort to show that its work on REDESIGNING the security architecture and adding new security features to Vista have paid off.

Jones also found that changes to the way Microsoft handles patching has resulted in less work for system administrators on Vista compared to Windows XP.

The report comes on the heels of figures from Secunia, which reported fewer vulnerabilities for Windows in 2007 compared to open source operating SYSTEMS in the same time period. However, Microsoft's report compares the way each OS fared in its first full year of supported distribution.
Do Comparisons Work?

Comparisons between different types of operating systems on the basis of numbers of public bug reports are often downplayed by security experts, who say they are only part of the picture. For instance, Linux-based OSs are composed mainly of third-party components WHOSE bug reports are all known publicly, whereas third-party components play a small part in Windows and many BUGS may be uncovered but not made public.

However, Microsoft's MAIN interest with the new report is in convincing users that Vista - which has received heavy criticism over bugs and usability issues - is more secure and more easily managed than XP.

"The results of the analysis show that Windows Vista has an improved security vulnerability profile over its predecessor," said Jones in the report. "Analysis of security updates also shows that Microsoft improvements to the security update process and development process have reduced the impact of security updates to Windows administrators significantly compared to its predecessor."If i remember correctly Ford Motor Co. published some glowing reviews on the Pinto back in the day as well...That's true...
1204.

Solve : SanDisk takes SDHC memory card to 32GB?

Answer» http://crave.cnet.com/8301-1_105-9862842-1.html



LAS VEGAS--SanDisk, one of the best known MAKERS of flash memory cards, has STARTED making the jump to 32GB capacity.

The company announced its 32GB Ultra II SDHC card Thursday at the Photo Marketing Association trade show here, a model designed with the needs of flash-based video cameras.

It will cost about $350 when it goes on sale in April, the company said. A $180 16GB Ultra II card will be available in March, and both come with a MicroMate USB card reader.

In addition, SanDisk announced a $100 8GB Ultra II Plus card. It hinges open to reveal a USB plug that lets the card be directly connected to a computer.

All the new cards can write data at 15 MB/sec, a notch up from the 9 or 10 MB/sec of earlier Ultra II models, SanDisk said. However, that's not as fast as CompactFlash models, where SanDisk's top-end Extreme Ducati cards reach 45MB/sec.

SanDisk spokesman Ken Castle wouldn't comment on when the company's 32GB CompactFlash cards might reach the market. Competitors PNY and Transcend announced their 32GB CompactFlash cards in January.

"We've chosen to go with the SD first. That's where the momentum has been," Castle said. "Camcorders with HD (high-definition video) can eat memory pretty quickly."

SanDisk in 2007 sued 25 flash-card competitors, including Transcend and PNY, ALLEGING patent infringement.
1205.

Solve : YouTube Update Offers Millions of Videos to Mobile Users?

Answer» HERE

YouTube for Mobile can now be used on phones that can run video streaming and are supported by any 3G operator.

YouTube TODAY announced an expansion of its mobile APPLICATIONS that significantly expands the number of supported cell PHONE technologies that can support the viewing of its tens of millions of videos.

YouTube for Mobile, previously only available through deals with Verizon, Helio and Apple, can now be used on phones that can run video streaming and are supported by any 3G operator. That amounts to about 100 MILLION devices worldwide, according to YouTube.

In addition to gaining access to YouTube's mobile video catalogue, new YouTube for Mobile features will let users PERSONALIZE their use of the videos. For example, mobile users can access their accounts and YouTube Favorites, Videos and Channels. Another new feature allows mobile users to directly upload video from mobile devices.

The update also lets users rate and comment on videos directly from mobile phones, YouTube added.

The new mobile offerings will be available to users in 17 countries in 11 languages.
Java Version

In related news, YouTube Thursday also announced a Java version of YouTube for Mobile that can be downloaded for free on a limited number of on J2ME MIDP2 cell phone devices with streaming video capabilities. Now in beta and available only in the U.S. and the U.K., the application is initially available for Sony Ericsson k800, w880, Nokia e65, n95, n73, 6110 navigator and 6120 classic devices.

Ricky Cadden, who writes the Symbian-Guru blog, noted that the YouTube mobile application is "slick" and added that because it supports the uploading of videos from a mobile device, mobile users "can post longer, better quality videos (thought the YouTube 10 min/100MB limit still stands) through your mobile."
1206.

Solve : Windows Vista Sales Disappointing??

Answer» http://www.windowsnewsletter.com/current-issue.html

According to Microsoft, sales of Windows Vista licenses where around 100 million for 2007. That sounds impressive, but if you look at the PC Sales numbers that have been released by IDC and Gardner, some 270 million PCs where sold in 2007. Now you will see the obvious quite easy: Vista was only sold with roughly 1 out of every 3 PCs sold. By comparison, Windows XP sold nearly 90 million copies in its first year, despite a PC market that was selling only about 130 million PCs that year.

Since Windows still shipped on nearly all PC sold, one can argue that the bulk of Windows sales in 2007 have come from Vista's predecessor, Windows XP.

Early on, when Vista just started selling in the market there were reports of significantly lower retail sales of Vista, in some cases nearly 60% less than the same 'sales week' in Windows XP's sales cycle. At the time, analysts attributed the 'sales slump' of shrink-wrapped copies of Vista to a shift in the way users get the new OS. More businesses are purchasing Windows through a volume licensing program, which reduces the number of shrink-wrapped copies that are picked up at a retailer. It was also argued that Vista's hardware requirements caused many consumers to order a new PC instead - pre-installed with Vista, further reducing the need for the shrink-wrapped boxes sold through retail, which was the back-bone of Windows XP's sales in 2001.

An early indicator of trouble for Vista emerged in April when several PC makers were pressured by demand to offer Windows XP as an option on new systems, particularly on systems sold into the small business channel.

Even Microsoft itself had to adjust some of its policies toward Windows XP. Originally Microsoft had planned to stop sales of Windows XP from 30 January 2008, but last September it announced it would extend that date by five months to 30 June 2008. Previous versions of operating systems released by Microsoft have generally been available for up to two years after the shipment of a new OS.


Save Windows XP?

InfoWorld has launched a "Save XP" campaign, arguing that "Microsoft plans to end most sales of Windows XP on June 30, despite a deep reluctance by many business and individuals about moving to Vista. InfoWorld believes such an expensive, time-consuming shift with problematic benefits should not be forced on Windows users, so we have decided to rally XP users to demand that XP be kept available". Not only that, the actual petition will ask Microsoft to "keep Windows XP available indefinitely". That's just plane insane! That way computing would be stuck in 2001.

Windows Vista is superior to Windows XP. That's a fact, plain and simple. And the horror stories you are hearing about Vista? I would argue that the majority of reported Vista problems stem from lazy third-party developers who didn't get their hardware and software compatible with Vista in a timely manner, despite a development cycle lasting many years. Let me just offer you one example I experienced myself: Panasonic took nearly ten months after Vista's November 30, 2006 (business) release date to offer a driver for their KX-FLB751/756/FLM551 multi-function printer/fax/scanner. When I tried installing the driver it caused my machine to 'bleu-screen'. Obviously that was the last time I purchased such a device from Panasonic (my Canon MP510 has been working fine with Vista since day one). As I have stated before, Microsoft gave third parties all access they needed to develop their Vista drivers, but if they (the third parties) fail to deliver these drivers, one can hardly BLAME Microsoft for it. I may sound like a bit of an idiot here, but forgive me for my youth and for slightly hijacking the topic.
Has a similar scenario to this happened before, perhaps during the move from Windows 2000 to XP? I know the former was TARGETED more at businesses and the latter at home users, but it's a similar scenario with the old being replaced by the new.
Maybe 95 to 98, something like that?
Or is this an entirely new thing, so many people wanting to stick with an older OS?
Is this due to the very long delay between XP and Vista's releases?I totally agree. I was clinging to Win 98 for a long time, before moving on.
I've been using Vista for 4 months now, and I like it a lot.Quote from: Calum on January 26, 2008, 11:57:59 AM
...
Or is this an entirely new thing, so many people wanting to stick with an older OS? ...


Or perhaps the buyer has become more savvy.

Sometimes it is the perception that counts most - and is the buying public perceiving that Vista is a real improvement? ... that Vista is bringing something better?.... that they 'need'?
It seems not.
And that is a bit of a new thing.

In the past, it seemed that everybody would surge to the new product, because it was new and better. This time around, it seems that the attitude is more a case of, "Do I really need it? What is it going to do for me that I don't already have?"
So this is in fact a new "thing" then, for people not to rush to the new product?
I thought it was, but not having been interested in computers at the "changing of the guard" before this, I wasn't entirely sure.
I think that perhaps more people now are reading reviews before upgrading or buying, and as Vista has so many negative reviews (yes, there are positive ones too, however the negative reviews are usually more outspoken, and there are usually more of them) it seems to have PUT people off.On another site i saw a review talking about what's wrong with Vista...
2 pages long.
At the end the Author revealed it was a 7 year old article about XP and all he had done was edit the title...Can you link me to that article? I'd be interested to read it.Here's the watered down version...Kudos to Cyanna.

Quote
FOUND an old thread on computing.net

"I for one would like to go on the record as saying VISTA sucks.
I am at my second clean install(in 5 days) on a new H/D fully formatted both times and loaded nothing but office and Norton 2002 and it is still an unstable P.O.S.
It freezes,pauses,hangs,skips,reboots and is generally fustrating.
The running task list is a flurry of duplicate items,with no HELP from even MS(generic tasks/components says the KB)
The interface suitable for preschoolers and the elderly.
MSN mesenger and "pop-up" ballons nag at every turn.
NO its not that I dont have enough memory(384 meg) or processor(pIII 700)
NO its not the components(all are less than a year and a half old and VISTA A-OK,so says MS)
NO its not the brand new HD or anything else...ITS THE CODE
ME is the BOMB compared to this junk,save yourself the $200 bucks.
BTW My ME installation(original)after 14 months still runs without a hitch.
Oh and dont bother with any help on the VISTA side of this board,apparently it is only for asking questions because few if any get answers and when they do they are marginal.
Everyone else is too busy trying to keep their VISTA system running long enough to get a post in,nevermind answer one!!
Thank you for your time...
jimi_l"

The rest gets mostly worse......I still found it amusing, specially in light of he last couple of topics in this forum.

I don't LOVE Vista. I don't hate it either. I've just been using it as a main desktop OS for almost a year and I'm now more familiar with it then with XP. And I look forward to Vienna. Not because it will be better/nicer. But because it will be different. It's like an adventure: most of the fun is when you plan for it and when you recount it. In the middle of it it's mostly wet socks for 12 hours, stale water, scarce food, mosquito bites galore......
Ah, back to enlighten people about the mysterious disappearance of the Start button (they've noticed it's not there anymore. Some wonder if he tutorials where the button is mentioned still apply, others want to know why it has been changed. The last ones are usually the ones that previously pointed out how silly it was to have to click on "START" in order to shut down the PC......)


Quote from: Calum on January 27, 2008, 07:02:48 AM
So this is in fact a new "thing" then, for people not to rush to the new product?

The rate at which they are "rushing" to it is lower, and I think that is a new thing.
In the past, I think the perception was, "This is the newest, best thing out there, so I need it."
Now, I think the view is more like, "What I've got right now does everything I need very well. Why should I spend more money?"

While both of these were true to some level in the past, as the software developers more or less forced people to upgrade, people were more accepting of the situation. I think they are more apt to balk and make noise about it now, and the number of them is what is new this time time around.

Quote

I thought it was, but not having been interested in computers at the "changing of the guard" before this, I wasn't entirely sure.
I think that perhaps more people now are reading reviews before upgrading or buying, and as Vista has so many negative reviews (yes, there are positive ones too, however the negative reviews are usually more outspoken, and there are usually more of them) it seems to have put people off.

I haven't been meaning to encompass reviews and reviewers. Just my gut feeling from listening to regular people.

For example, I know a small businessman. His network has three or four workstations and a server. A few years back, he didn't blink an eye when it was time to upgrade from NT. Why?... I don't know for sure.
This time around, his reaction to Vista is, "Why should I do that?". Why is he different this time? ... I don't know for sure.
All I've done is speculate.
The bottom line is: He is. And he's not alone.

Vista is too user friendly, thats why most don't like it. Most people don't really give a *censored* if they can scroll through windows, they just want an OS that is fast. As for drivers, Microsoft could have at least done something to make XP drivers compatible with Vista. A driver needs to be built for each OS as they all do not operate in the same fashion.
Vendors dropped the ball on drivers for Vista...not MS.
1208.

Solve : IrfanView FlashPix Plug-in Memory Corruption Vulnerability - Highly critical!!!?

Answer»

TITLE:
IrfanView FlashPix Plug-in Memory CORRUPTION Vulnerability

SECUNIA ADVISORY ID:
SA28688

VERIFY ADVISORY:
http://secunia.com/advisories/28688/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
IrfanView FlashPix Plug-In 3.x
http://secunia.com/product/17367/

DESCRIPTION:
Marsu has discovered a vulnerability in the FlashPix plug-in for
IrfanView, which POTENTIALLY can be exploited by malicious people to
compromise a vulnerable system.

The vulnerability is caused due to an error within the FlashPix
plug-in (fpx.dll) when processing FlashPix (*.fpx) FILES. This can be
exploited to cause a heap corruption by e.g. tricking a user into
opening a specially crafted FlashPix file.

Successful exploitation MAY allow the execution of arbitrary code.

The vulnerability is confirmed in version 3.9.8.0 of fpx.dll. Other
versions may also be affected.

SOLUTION:
Do not open untrusted FlashPix (*.fpx) files.

1209.

Solve : Dell Tops HP as Largest PC Supplier in the U.S.?

Answer» HERE

Dell's retail strategy to distribute PCs is starting to show results, helping extend its lead over Hewlett-Packard (HP) as the largest U.S. PC vendor in the fourth QUARTER of 2007, according to figures from analyst firms Gartner and IDC.

However, HP remained the world's largest PC dealer, topping Dell, Acer and Lenovo, according to figures from both firms.

Dell shipped 5.5 million units in the U.S., a 15.2 percent year-over-year increase and a 29.6 percent market share, according to IDC. HP, in second place, shipped 4.5 million units, a 9.8 percent year-over-year increase and a 24.3 percent market share. Acer, in third place, showed tremendous growth in the U.S., with shipments increasing 294.2 percent to 1.5 million units. Apple's shipments grew 30.9 percent to 1.06 million, a 5.7 percent market share. Toshiba was in fifth place, IDC said.

Gartner reported that Dell shipped 5.35 million units, with a 31.4 percent market share during the fourth quarter, compared to the 29.3 percent market share it had last year. HP shipped 4.4 million units, with market share growing to 26.1 percent from 25.5 percent last year. Acer and Apple were in third and fourth places, respectively.

Dell's switch from a direct sales model to selling PCs through RETAILERS like Best Buy and Wal-Mart is paying off and has helped the company improve shipments, said David Daoud, an analyst with IDC. "They're coming out of nowhere to everywhere," Daoud said.

However, Dell is trying to catch up internationally with HP, which is investing more in distribution channels and UNDERSTANDS business behavior in emerging markets better, Daoud said.

According to IDC, HP shipped 14.7 million units worldwide, a 23.3 percent year-over-year growth and a 19 percent market share. Dell was in second place, shipping 11.3 million units with a 14.6 global market share, a 17.1 percent rise from the previous year. Acer saw a sharp rise, with shipments growing 60.3 percent year-over-year to 7.4 million. Lenovo came in fourth, shipping 5.8 million units, a 22.3 percent year-over-year increase. Toshiba was in fifth place.

The acquisitions of Packard Bell and Gateway last year helped boost Acer's shipment volumes globally, though the companies have not yet fully contributed. "Given the acquisitions are relatively recent, it will takes years or more to see tangible results," Daoud said.

Acer's acquisitions have taken a bite out of Lenovo, which saw slower growth in the global market and is struggling to retain its core audience of business users, Daoud said. With the launch of the IdeaPad notebook, Lenovo is trying to EXPAND to the mass consumer market, which has alienated its traditional business users. Lenovo needs to reassert its commitment to business customers, Daoud said.

Lenovo also needs to acquire PC vendors if it wants to expand the way Acer did, although there are not many major PC vendors left for it to acquire, Daoud said.

The surveys include shipments of desktops, notebooks and ultraportable notebooks with up to 7-inch screens.Quite a few people have been known to regularly bash Dell's because it's a popular thing to do...personally i think most are built pretty solid even though they have their quirks and i have no problems servicing them.
This coupled with a better than average Support Line is a good recipe for success.
On top of that their Business CLASS laptops are as good or in some cases better than their competition and it's easy to see their recent successes.

I build my own but if i were to buy a mainstream PC today it would probably be one of theirs...I work for a local gov't and the only laptops we buy are Dell. Also, the IT department recently switched from custom built PCs to Dell Optiplex for desktops.
I've always thought dell was great. Easy to upgrade and work on.I find that the Dell laptops are really solid machines, ditto for the desktops.
However, I do find that they can be expensive, as with any prebuilt PC.
In contrast, I dislike most of HP's products, with the exception of certain printers.
1210.

Solve : Viruses on the Decline?

Answer» http://www.avg.com.au/index.cfm?section=news&feature=83

Quote
Sydney and Brno, 9 January 2008 - Security experts at Grisoft, developer of the AVG family of security SOFTWARE products, today published their analysis of 2007's top viruses, Internet hacks and exploits, and revealed their forecast for the top security threats facing computer users in 2008.

According to the team, viruses made up some 15 percent of the threat landscape in 2007, consistent with the company's predictions at the end of 2006. Phishing scams, backdoor worms, Trojans, keyloggers, spyware, adware and other web-based exploits comprised the majority of threats.

Top Ten Viruses for 2007
According to AVG global security strategist Larry Bridwell, the 10 viruses exhibiting the most staying power in 2007 were:
1. W32/Detnat
2. W32/Netsky
3. W32/Mytob
4. W32/Bagle
5. W32/MyWife
6. W32/Virut
7. W32/Zafi
8. W32/MyDoom
9. W32/Lovegate
10. W32/Bagz

"The anti-virus industry has been in a transition period for the past two to three years as malware has morphed from simple viruses to complex malicious website hacks that combine exploits and social engineering to scam unsuspecting users of their data," said Bridwell. "As 2008 ushers in new security issues and challenges, Internet users need to boost their anti-malware defences with safe surfing tools like AVG LinkScanner that detect and stop web exploits in real time."

Unlike traditional malware such as viruses or Trojans that are created by thrill-seeking programmers and computer geeks trying to create chaos, exploits are a fast-growing category of crimeware APPLICATIONS used by criminal cyber-gangs to steal digital assets for financial gain. Exploits are usually DELIVERED in the form of drive-by downloads intended to take advantage of unpatched computer vulnerabilities.

"2007 was the year that cybercriminals began to seriously employ exploits and social engineering attacks to undermine the trusted web," adds Grisoft chief technology officer Karel Obluk. "This year we expect the bad guys to leverage the knowledge gained to wage larger scale attacks using a wide range of malware tools. The real danger is that these attacks will begin to impact the growth of search engine and social networking use."

Top Ten Web Exploits for 2007
Drawing on research gained through its recent acquisition of Exploit Prevention Labs, AVG identified the following as the top ten web exploits of 2007:
1. Super Bowl/Dolphins website drive-by download hack (February)
2. Google AdWords reroute via malicious site (April)
3. Google Bait & Switch keyword site exploit servers (July)
4. Bank of India website drive-by download hack (August)
5. Storm Trojan Fakes YouTube Links through phishing and fake codecs (August)
6. .Gov Hacks cause government websites to serve porn, malware, and fake anti-spyware (September)
7. Facebook Banner Ads used to distribute adware-driven exploits (September)
8. Alicia Keys/MySpace Hack deliver behind-the-scenes drive-by exploits (November)
9. MLB & NHL.com malicious banner ads hijack user sessions, push malware (November)
10. Monster.com hack feeds exploits to jobseekers (November)

"From the attacks on Facebook and the Major League Baseball Web site to the Alicia Keys' sites, it's clear over the past year that incidence of online threats is accelerating," said Roger Thompson, chief research officer at Grisoft "In 2008, Internet users are likely to see more sophisticated attacks as organised cybercriminals step up their efforts to steal digital assets from social networking site users. Social networks are particularly vulnerable because they rely heavily on hyperlinked content, information sharing and the trust of their participants."

Top Security Threats Expected in 2008
Thompson's team has identified five major areas of continued or INCREASED risk for Internet users in the coming year:
1. Web exploits and web-based social engineering attacks. "Viruses will continue to be a threat, but we'll also see an explosion of exploits through social engineering and Web 2.0 attacks in 2008," said Thompson.

2. Storm Worm on the rise. "Storm is here to stay," said Obluk. "We're seeing pieces of Storm sold off to the bad guys and we expect orchestrated attacks across multiple platforms."

3. Email-propagated viruses. Many novice users remain unaware of email security issues and continue to open attachments from senders they do not know or click on unsafe hyperlinks.

4. Web exploits targeting trusted web sites. "Today's cybercriminals tend to go for the low-hanging fruit," said Thompson. "If they can infiltrate a popular site, they will reap their rewards quickly and be gone in no time."

5. An INCREASE in the number of Windows Vista attacks. With increasing adoption of Microsoft's latest operating system, Vista will become a bigger and thus a more tempting target for the bad guys.

While AVG expects international law makers to pay closer attention to cybercrime in 2008, it's unlikely that stronger laws will deter cybercriminals. "The international laws against drug trafficking have not significantly dented the traffickers' incomes," said Obluk. "So there's little reason for us to believe that laws against criminal behaviour in cyberspace will have much impact on online fraud. There is simply too much money to be made."
1211.

Solve : Free Legal Music Service?

Answer»

Quote

Adam Sherwin, Media Correspondent, in Cannes

After a decade fighting to stop illegal file-sharing, the music industry will GIVE fans today what they have always wanted: an unlimited supply of free and legal songs.

With CD sales in free fall and legal downloads yet to fill the gap, the music industry has reluctantly EMBRACED the file-sharing technology that threatened to destroy it. Qtrax, a DIGITAL service announced today, promises a catalogue of more than 25 million songs that users can download to keep, free and with no limit on the number of tracks.

The service has been endorsed by the very same record companies - including EMI, Universal Music and Warner Music – that have chased file-sharers through the courts in a doomed ATTEMPT to prevent piracy. The gamble is that fans will put up with a limited amount of advertising around the Qtrax website’s jukebox in return for authorised use of almost EVERY song available

Full Story
1212.

Solve : Microsoft update "could" fix Windows XP SP3 problems?

Answer» http://www.heise.de/english/newsticker/news/110111

A month ago, problems were reported in connection with Windows XP Service Pack 3. If Norton Internet Security 2008 was also INSTALLED, the DEVICE manager and the overview of network connections and devices remained empty after SP3 had been installed. In addition, a slew of USELESS keys turned up in the registry. heise Online was able to reproduce the LATTER, but not the former, problem in tests.

Symantec claimed the problem was down to Microsoft, but nonetheless later supplied a patch. Now, Microsoft has followed suit and published its own update to fix the problem. But Redmond does not seem to be certain whether it really works – the flaw description closes with the statement, "Applying this fix could help resolve this problem".

The patch must be installed in safe mode. For more details, see Article 953979 in Microsoft's knowledge base.
1213.

Solve : Sony's new controller??

Answer»

Jealous are we?

QUOTE from: Site

According to several news reports, Sony is working to create a new controller for its next-gen gaming PLATFORM, PlayStation 3. The big surprise (or maybe not so big) is that the new controller seems inspired by the already famous Wiimote.

http://www.efluxmedia.com/news_Sony_Working_On_A_New_PS3_Wii_like_Controller_18999.htmlIf you can't beat them...I think Sony is just grasping for the longest straw honestly. I'd be willing to bet (although many of my recent bets have been wrong) that the PS3 is the first console to go under. I think they're getting killed by the Xbox and Wii. Before any fanboys come at me I do own a PS3 so go easy. Although I primarily bought it for a blu-ray player. I personally think the Nintendo 64 was the last Console system worth owning. And No that isn't because it is the newest one I have- I don't have any anymore Quote from: BC_Programmer on June 29, 2008, 06:43:33 PM
I personally think the Nintendo 64 was the last Console system worth owning. And No that isn't because it is the newest one I have- I don't have any anymore
I still have mine Quote from: Carbon Dudeoxide on June 30, 2008, 07:33:08 AM
Quote from: BC_Programmer on June 29, 2008, 06:43:33 PM
I personally think the Nintendo 64 was the last Console system worth owning. And No that isn't because it is the newest one I have- I don't have any anymore
I still have mine

My Mother pretty much ended up selling mine (long story, but that is essentially what it boils down too), as well as my SNES. The ANNOYING thing was I purchased what is now a high-demand game, Super Smash Brothers. 68$, if memory serves back in the day...


But now I can play all the games I owned and more with emulation
1214.

Solve : Gartner counts more than 1 billion PCs served?

Answer»
The number of personal computers in USE around the world has exceeded 1 billion and will double by 2014, with most growth coming from developing markets, according to Gartner research released Monday.

A 12 percent annual increase would amount to more than 2 billion PCs in use by 2014, according to a report that counted installed machines rather than laptops and desktops sold.

LinkWoah.... 1 billion out of the 7 billion people.

I should start a poll "How many computers do you have"

Please don't, it would make me look silly... i have around 25...

But we don't use them all!

We have a commodore, a ZX Spectrum, a few Amega's, around 10 DOS / WIN 3.1 computers, a win98SE, four Windows XP's, and a few other assorted ones as well as a few broken ones too.

The reason we have so many is I refuse to let old tech be thrown away. I think it is supremely valuable. MAYBE one day I'll have a HOUSE with old computers set up around it instead of ornaments (I hate ornaments) and paintings by DEAD people.

However, we only have six monitors...Don't worry, I personally have 5 computers but I only use this laptop.Quote from: Carbon Dudeoxide on JUNE 24, 2008, 03:09:45 AM
I should start a poll "How many computers do you have"


well hurry up already!
1215.

Solve : Researchers spot Mac Trojan in the wild?

Answer»
Security researchers reported last week that they've spotted a Mac TROJAN horse in the wild that could compromise machines running Apple Inc.'s Mac OS X 10.4 or 10.5.

SecureMac, a Mac-specific anti-virus VENDOR, posted an alert last Thursday that its researchers had found a Trojan horse, dubbed "AppleScript.THT," being distributed from a hacker-operated site where discussions of spreading the malware via iChat, Apple's instant messaging and video chat software, were also taking place.

LinkHere is another link: http://www.wired.com/politics/security/news/2007/11/mac_trojan/I SAW a Trojan Horse in the wild. *censored* thing was eating my corn. It ran away before I could look at the stamp between it's legs to see wether it was windows or Mac however.
1216.

Solve : The Firefox community is the proud new owner of a Guinness World Record?

Answer» http://blog.mozilla.com/blog/2008/07/02/were-official/

The Firefox community is the proud new owner of a Guinness World Record — each and every one of you! Mozilla today received confirmation from Guinness World Records that we’ve officially achieved the record for the “largest number of software downloads in 24 hours.” From 18:16 UTC on June 17, 2008 to 18:16 UTC on June 18, 2008, 8,002,530 people downloaded Firefox 3!

This is another wonderful accomplishment in a long line of them for our community! Ever since Firefox was launched in 2004 we’ve relied on our community to help us spread the WORD, and thanks to projects including crop circles, newspaper ads, giant stickers, videos, blogs and more we now have over 180 million users in more than 230 COUNTRIES. Incredible work!I received official email from spreadfirefox.com:



More news:
http://www.spreadfirefox.com/en-US/worldrecord/

Quote
Thanks to the SUPPORT of the always amazing Mozilla community, we now hold a Guinness World Record for the most software downloaded in 24 hours. From 18:16 UTC on June 17, 2008 to 18:16 UTC on June 18, 2008, 8,002,530 people downloaded Firefox 3 and are now enjoying a SAFER, smarter and better Web.

Ever since Firefox was launched in 2004 we've relied on our community to help us spread the word, and thanks to projects including crop circles, newspaper ads, giant stickers, videos, blogs and more we now have over 180 million users in more than 230 countries.

So what's next? We'll just have to wait and SEE what YOU come up with!


Poor North Korea: 0Quote from: Carbon Dudeoxide on July 02, 2008, 09:09:56 PM
Poor North Korea: 0
I wonder if that has anything to do with their government?No need to wonder...
1217.

Solve : Always read the small print....?

Answer» Link

Quote
You find some odd things in End User License Agreements (EULAs) - if you can be bothered to wade through the small print. Deep within Apple's iTunes EULA you'll find the following:

"Licensee also agrees that Licensee will not use the Apple SOFTWARE for any purposes prohibited by United States law, including, WITHOUT limitation, the development, design, manufacture or production of nuclear, missiles, or chemical or biological weapons."
US law does not apply outside the US. Portions of some MICROSOFT EULAs have been declared null and void by British courts. It always amazes some of me the things that they contain.
They could put almost anything into a EULA, most people don't have the time to bother reading all the legal drivel. (I know I don't)I'm thinking of adding an EULA to my website, specifically the Arcade section, which will state that FREQUENT use of the arcade will result in the formation of pimples on a certain part of the human anatomy where the sun don't shine... Do that and I wont be visiting your website! LOL! Quote from: kpac on June 29, 2008, 10:10:25 AM
"Licensee also agrees that Licensee will not use the Apple Software for any purposes prohibited by United States law, including, without limitation, the development, design, manufacture or production of nuclear, missiles, or chemical or biological weapons."

Man, this means I can't use iTunes to HELP me develop my weapons of mass destruction anymore!i wonder howw he does that anyways... mabye he uses it as working music or something.. i saw this along time ago somewhere
1218.

Solve : Firefox 3 Bugs Reported (Also affects 2)?

Answer»
Security flaws were found in Firefox 3 just hours after the open SOURCE Web browser was released Tuesday by developer Mozilla.org.

Within five hours after the official RELEASE, security tool vendor TippingPoint was notified of a "critical vulnerability" affecting Firefox 3.0 and 2.0. The flaw could enable an ATTACKER to RUN malicious code on a computer, the COMPANY said. Like other browser-based vulnerabilities, a person would have to click on a link in an e-mail or visit a malicious Web page to get infected.

Link i hope i didnt! at least my macafee site adviser plugin said i didnt i think..
1219.

Solve : Texas PC Repair Now Requires PI License?

Answer»

Huh. Guess I'll need to start working on getting a PI LICENSE. Maybe that'd be a good thing, I think more chicks would dig me if I said I was a PI instead of a COMPUTER technician.

---

From its Texas Rangers to its ENTHUSIASTIC take on the death penalty, the Lone Star State has long been known for its aggressive stance on law enforcement. Thanks to a strange new law, it's a sting that may soon be felt by a number of the state's computer-repair people.

A recently passed law requires that Texas computer-repair technicians have a private-investigator license, according to a story posted by a Dallas-Fort Worth CW affiliate.

Link

PI is private investigator rightYeah.
wow! they need that for repair! An unmentioned point is that you'll ALSO need to promote one of your employees (or hire one) to the position of "higgins".

1220.

Solve : AVG Linkscanner - Badware??

Answer»

Here is a very interesting article.

Say it ain’t so AVG, say it ain’t so: AVG LinkScanner = Badware?Quote

AVG SOFTWARE pre-crawls search results to try to protect users.
It SOUNDS useless....Eh, AVG simply screwed up good antivirus program.
I'm pretty sure, they lost lot of business.I'm sure LinkScanner and similar items have their uses, just not on my computer.To me, the problem with this particular issue, is not, that it's there, but HOW it GOT there.
AVG taking really bad example from other is forcing you to install Link Scanner, and some other bar (Yahoo?).
I say, forcing, because not everyone uses custom install, and before you know, both addons are there.
There is no simple way to get rid of it.
You can actually disable it, but then AVG displays yellow "!" mark on its systray icon.
The only way to get rid of it, is to reinstall AVG over the top, using specific command line, but again, how many people are aware of it?Looks like you're right when you told me not to recommend AVG anymore, Broni. (at least not now)There is a way to install AVG8 without the toolbar and a way to remove it if it is installed already.

Thanks to TeMerc and CLAUS at Grand Street Dreams blog.

Instructions for Taming AVG 8 Free Edition/AVG Free V.8 REVIEW w\Toolbar Removal Tips

The instructions are not for the novice user!Quote
The instructions are not for the novice user!
This is what I was talking about.Quote
(at least not now)
Yeah, I've been using AVG for many years, but with ver. 8.0 I had to let it go.
1221.

Solve : No More GATES!!!!?

Answer»

Friday Bill Gates resigns an becomes visor of the company an three associates are supposed to take his place. Its on early show.com, I think that we may see some changes soon. Yeah, I head he was stepping down.

Good job Bill!

Like us, we all make mistakes *cough*Vista*cough* Yea he changed the way we think, learn, work, communicate, play etc. etc. etc......and made many, many people loads of money in the process.

Good thing that mind is no longer around to influence anyone I wonder how long microsoft will last without him.....Quote from: michaewlewis on June 26, 2008, 09:50:52 AM

I wonder how long microsoft will last without him.....

No seriously. Bill Gates made the company what it is today. I'm afraid to think about MS with Ballmer in charge. He'll probably change the GUI to be really bright and flashy and instead of subtle BEEPS when a device is plugged in, it will sound like a screaming banshee.HA HA HA Thats what I thought so we can develope our own we call it CH Mark 3Ballmer is a lunatic, I've seen some of the videos of him at conferences.
"Developers developers developers developers" I believe he has been known to chant.
Whatever issues people may have with Microsoft and their products you cannot deny Gates' DRIVE and ambition, and also his success.A funny video about this from earlier this year...

http://www.youtube.com/watch?v=Xr5w3X4R8b4;Dhahahaha...He should have officaly step down as of yesterday, what will happen to the company? Probably eventually get swallowed up or something.Good Time line on gates

.. and for any of the people who don't like Bill Gates, I'll just point you to: http://www.gatesfoundation.org and the main reason he's stepping down so he can focus more on donating his money. Extremely generous guy.Its not that I dont like him, but I hate people who flash there money an think there better then everyone. Not pointed to anyone here but you know what I mean.I don't like people that do that either. However, Bill Gates I'd think WOULD be the last person that flashes his money. I don't ever recall seeing him on MTV Cribs. ALTHOUGH come to think of it I would really like to see a show that walks through his house (none of this virtual stuff).Quote from: squall_01 on June 28, 2008, 02:19:38 PM
Its not that I dont like him, but I hate people who flash there money an think there better then everyone.

He may not be a better person necessarily, but he is definitely more successful. People have an intrinsic need to belittle successful people because they make them feel inadequate.


I'll admit it's good fun making quips about Bill, but there is no denying he's successful.


And I really don't like the way EVERYTHING microsoft does wrong is bill gates fault- I have a STRANGE feeling he doesn't go over every single last dialog resource in every single microsoft application to make sure that the Mnemomic captions are consistent. A few other people work at Microsoft too.
1222.

Solve : Microsoft again says it's interested in bidding for Yahoo?

Answer»
Steve Ballmer and CARL Icahn suddenly are on a first-name basis, and their familiarity has resulted in another TWIST in the Microsoft-YAHOO saga.

Microsoft Corp. said Monday that it would be interested in trying again to acquire part or all of Yahoo if Icahn succeeds in his attempt to replace the Internet company's board. The statement — Microsoft's first public expression of support for Icahn's move — came shortly after the activist/investor informed Yahoo SHAREHOLDERS in an OPEN letter that he has spoken "frequently" with Ballmer, Microsoft's chief executive, in the past week.

Link
1223.

Solve : Watch Out for an IE Zero-Day Attack?

Answer»
Microsoft yesterday warned of a new attack underway against a flaw in the ActiveX control for the Snapshot Viewer for Microsoft Access, USED by IE. There is not yet any patch AVAILABLE for the zero-day security hole, and the attacks LIKELY focus on business targets.

Link
1224.

Solve : Google Lively?

Answer»

Instead of linking to the news articles discussing this new SERVICE from GOOGLE I thought I'd just link to their page. Looks LIKE an interesting new service from Google. Basically a 3D chat ENVIRONMENT. If anyone happens to get on let us KNOW. Too late/early for me to try this before going to sleep.

http://www.lively.com/html/landing.html

1225.

Solve : Pioneer's 400GB Blu-ray Disc Holds 48 Hours of Movies?

Answer» http://news.yahoo.com/s/nf/20080708/tc_nf/60673

Quote
Get ready to never leave your home. Pioneer announced this week a read-only Blu-ray technology that could put up to 48 hours, or 400GB, of movies on a single disc.

By comparison, the current Blu-ray Disc format stores 25GB on a single-layer disc and 50GB on a dual-layer version. A 50GB Blu-ray disc can hold up to about six hours of high-definition video.

16 Layers

The new Pioneer technology has 16 layers on a conventional 12-centimeter optical disc, and is currently a play-only version. The company has indicated that a writable version is being developed.

Pioneer's announcement said "it is POSSIBLE to maintain compatibility" between the new, very high-density Blu-ray format and existing players. However, the company indicated that some kind of modification may be necessary, either in the production of the discs or in the players.

The key to making such storage possible, Pioneer said, is reducing interference between adjacent layers, as its prototype does.

A formal announcement of the 400GB technology is expected at the International Symposium on Optical Memory and Optical Data Storage, which begins Sunday in Hawaii. Industry observers anticipate that Pioneer will not commercially produce the discs, but will work with manufacturers. TDK has also announced a high-capacity disc, with six layers and a 150GB capacity.

In a separate announcement, Pioneer said it will start selling Blu-ray recorders in Japan before NEXT March.

The recorders, to be sold under the Pioneer brand, will be made with Sharp Electronics. Sharp, Sony and Matsushita control virtually the entire Blu-ray market in Japan. Matsushita makes Panasonic products. No plans for sales of the recorder in the U.S. or elsewhere were announced.

'Not Earth-Shattering'

Josh Martin, an analyst with industry research firm Yankee Group, said the new, high-capacity disc is "interesting, but not earth-shattering." He said the last time he checked, it was not much cheaper to produce a Blu-ray disc with, say, three times the capacity of a single disc, than to produce three discs.

And then there's the matter of value for the average consumer. Martin said "there is value to a consumer in having multiple discs for, say, a $100 set." He added that a single disc with the same amount of movies, at the same price, doesn't have the same perceived value. But, Martin noted, a high-capacity recordable Blu-ray disc might have value in some businesses.

In general, he said Blu-ray player and disc sales appear to be picking up momentum, but there probably won't be any SIGNIFICANT sales until closer to the holiday season. Martin noted that some retailers, such as Amazon and Wal-Mart, have reduced the price of some titles to $15 from about $25 or $30, and this could spur sales.

1226.

Solve : Want XP on a new Dell? You'll pay up to $50 extra for the aging OS?

Answer»

Quote from: alan1000 on July 09, 2008, 05:06:55 AM

Quote from: Saviour on June 29, 2008, 06:28:37 PM
Compared to Vista...I'd be willing to pay the extra $50...in a HEARTBEAT!
Does everything XP can do, at the same speed, in HALF the memory...

Windows 3.1 has a fairly SIMILAR feature set, and it can run with 2MB of memory! Of course good luck finding a Windows 3.1 driver for your GEFORCE or Radeon...
1227.

Solve : Microsoft Word Unspecified Code Execution Vulnerability - Extremely critical!!!?

Answer»

NO SOLUTION, yet!

TITLE:
Microsoft WORD Unspecified Code Execution Vulnerability

SECUNIA ADVISORY ID:
SA30975

VERIFY ADVISORY:
http://secunia.com/advisories/30975/

CRITICAL:
Extremely critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Microsoft Office XP
http://secunia.com/product/23/
Microsoft Word 2002
http://secunia.com/product/2150/

DESCRIPTION:
A vulnerability has been reported in Microsoft Word, which can be
exploited by malicious people to compromise a USER's system.

The vulnerability is CAUSED due to an unspecified error and can be
exploited to cause memory corruption via a SPECIALLY crafted
document.

Successful EXPLOITATION allows execution of arbitrary code.

NOTE: According to the vendor, the vulnerability is currently being
actively exploited.

The vulnerability is reported in Microsoft Word 2002 SP3 and is
currently not believed to affect other versions.

SOLUTION:
The vendor suggests viewing Word documents in Microsoft Office Word
2003 Viewer or Microsoft Office Word 2003 Viewer SP3.
Still running Word 2000 on many of my machines, which I guess is not affected. However, I don't care for their current solution they have. How about the alternative solution of viewing the word document in an open source program like OpenOffice Writer.

1228.

Solve : Microsoft to stop selling Windows XP on Monday?

Answer»

Yeah, it's a shame. A lot of desktop computers and laptops here are sold without an OS package. I know Acer, ASUS, and BenQ all offer their laptops here without an OS. It lowers the overall price of the laptop, then the customer usually installs a PIRATED copy of Windows XP on it (or the shop who sells the laptop does it for them!). More than a few times has a computer been brought into my shop with the request of installing Windows on it. I politely tell them sure, I'll do it, and then I tell them how much the OS costs and that they'll have to buy a licensed disc. They usually huff and puff then walk out of the shop.

Funny thing is, I know I could install the pirated software here and get away with it. I just won't.Quote from: quaxo on July 05, 2008, 11:54:54 AM

Funny thing is, I know I could install the pirated software here and get away with it. I just won't.

Kudos to you, serously. I don't know a single computer shop around (here) that even stops to think about what they're doing when they BREAK rules like that- I walked into a shop once, asked if they had windows 98 CDs (as in to BUY) and he went in the back and CAME back out and gave me a burned copy- *censored*? I got it free (I would have refused to pay for it anyway, on account of only costing them the cost of the media), long story short, my Laptop now has it's OS CD.

I mean, they come off seeming all bound to the rules, but it doesn't take more then a small nudge (I'd be thankful if you could do this...) all because they think that that person might come back and actually spend some money.

Really it's just a case of the shop being far TOO friendly with customers.I'm not much of a vista fan, not saing that I really like it. I like xp better but these are only my opions cause I been around alot of differnt OS. I tend to think of Vista on a computer as analogous to putting a old lady in a lamborghini- the car will never reach it's potential. (alright- cases can be made for memory and such, but performance-wise Vista will almost never touch XP)Too bad thats not all true Quote from: BC_Programmer on July 08, 2008, 05:53:42 AM
I tend to think of Vista on a computer as analogous to putting a old lady in a lamborghini- the car will never reach it's potential. (alright- cases can be made for memory and such, but performance-wise Vista will almost never touch XP)
It's not meant to, and that's the point people are missing.
Due to the huge gap of 7 years between the two systems, the performance lag is also huge.
Think Windows 95 compared to Windows XP, and then some - Vista's gap is nowhere NEAR that huge.
I hope this makes sense, I do know what I want to say but not sure if that said it.Quote from: Calum on July 09, 2008, 12:58:56 PM
Quote from: BC_Programmer on July 08, 2008, 05:53:42 AM
I tend to think of Vista on a computer as analogous to putting a old lady in a lamborghini- the car will never reach it's potential. (alright- cases can be made for memory and such, but performance-wise Vista will almost never touch XP)
It's not meant to, and that's the point people are missing.
Due to the huge gap of 7 years between the two systems, the performance lag is also huge.
Think Windows 95 compared to Windows XP, and then some - Vista's gap is nowhere near that huge.
I hope this makes sense, I do know what I want to say but not sure if that said it.

I know exactly what you mean- basically Vista will have the edge when software/hardware manufacturers completely stop supporting it (that is, driver wise and such) or for core features, such as memory limits (this is the same story with 3.1 which couldn't handle more then 64MB, and 98 which I believe maxes out around 512 or thereabouts).

I just don't personally think a video card should require anything more then basic 2d functions simply for running an office application, but Vista requires a DX9 card- (or is that just for aero/aero glass?)

A 32-bit OS will not handle more than 4GB of RAM, period.
I believe that by the time 64 bit operating systems become commonplace Vista will be long gone anyway, so in that respect it doesn't have much of an edge over, say, XP.
I believe that the video card is mainly used for the new visual effects, including Aero - I just find it funny that Vista's requirements surpass many of my PC games' requirements.
1229.

Solve : Firefox 3 download passes 20 million mark?

Answer»

All GOOD now. I waited until add-ons got updated, and INSTALLED FF3 TWO DAYS ago.Mozilla’s GUINNESS World Record Certificate

http://blog.mozilla.com/blog/2008/07/10/mozillas-guinness-world-record-certificate/Nice

1230.

Solve : Unpatched Web Browsers Prevalent on the Internet?

Answer» http://www.pcworld.com/businesscenter/article/147776/article.html?tk=nl_cxanws

Only 59.1 percent of people use up-to-date, fully patched Web browsers, putting the remainder at risk from growing threats from diligent hackers, according to a new study published by researchers in Switzerland.

The study, published Tuesday, is one of the most comprehensive analyses of what versions of Web browsers people are using on the Internet. The study was conducted by researchers at The Swiss Federal Institute of Technology, Google and IBM Internet Security Services.

Web browsers are often a weak LINK in the security chain, as software vulnerabilities can make it easy for hackers to gain control of a PC. When that happens, hackers can perform MALICIOUS acts such as stealing personal data or turning PCs into spam-spewing drones.

What the researchers found is that although software vendors provide patches for security problems, it can take days, weeks or months before people update their applications. In the meantime, those users are at risk.

But it's not entirely the fault of users, since Web browser vendors haven't exactly made patching easy, said Stefan Frei, a doctoral student at the institute, which is known as ETH Zurich, and one of the report's authors. The Web browser is still fairly young technology, and the industry has yet to settle on a dominant, well-tested design, he said.

The study looked at search and Web application server log data provided by Google to see what versions of the Firefox, Opera or Safari browsers people were using, Frei said.

Microsoft's Internet Explorer, however, only tells Web servers what major version a person is using, such as IE 6 or IE 7. The researchers relied on data from people who have installed a tool on their PC called the Personal Software Inspector, from DANISH security company Secunia that can detect incremental versions of IE, Frei said.

Firefox users were the best at upgrading: 83.3 percent are using the latest version (the study just looked at Firefox 2.0). For Apple's Safari, 65.3 percent use the latest version; 56.1 percent for Opera and 47.6 percent for Microsoft's Internet Explorer.

Mozilla's Firefox came out on top due to its auto-update feature, which tells a user a new patch is available and offers a one-click way to upgrade. Within three days, most Firefox users are up to date, the study said.

Frei recommends that all browser makers put in an auto-update feature since the process now is cumbersome and slow.

Now, Opera users are told there is a new version, but they have to go to Opera's Web site and go through the same installation process as if they had initially downloaded the browser for the first time, Frei said.

Safari uses an external updater that only polls for updates at certain intervals. Microsoft's updates are distributed on the second Tuesday of the month. Those gaps in time between when a vulnerability is publicly disclosed and a person patches is crucial, as they're an OPEN window for an attack.

The problem with lax patching falls squarely on the shoulders of the application vendors -- users often simply can't visually tell if their browser needs to be upgraded, Frei said.

He advocates software vendors take a cue from the food industry and put an "expiration date" right on top of the browser to let people know the browser's state. For example, a warning could appear beside the address bar: "145 days expired, three patches missing"

"It's a non-technical suggestion," Frei said. "How can you expect people that they run the update if they don't even know? We think it's the same as having a speed limit on a highway."

Even search engine companies such as Google could display the same warning above search results, as the browser version is transmitted to its servers when someone performs a query, Frei said.

Alternatively, security companies could make application version scanning part of their consumer products, which they have done for some enterprise-level software, Frei said.

But the problem of out-of-date browsers pales in comparison to the quagmire of plug-ins, which add extra functionality to the browser, such as Adobe's Flash and Apple's QUICKTIME multimedia program.

On average, people have between six to 10 plug-ins, many of which come from different vendors with different patching regimes and schedules, Frei said.

"The browser is the bread, and even if the bread is fine, if the ham is rotten, you have a problem," Frei said.

Just one software vulnerability in a plug-in can put a person's PC in danger. Frei is proposing that an organization such as a national Computer Emergency Response Team create a service where browsers can verify if it has the latest version of a plug-in.

Besides Frei, the study was also conducted by Thomas Dübendorfer of Google, Gunter Ollmann of IBM Internet Security Systems and Martin May from ETH. The study will be presented at the Defcon security conference next month in Las Vegas.
1231.

Solve : Fiber Access Gains on Cable for Broadband Access?

Answer» http://www.pcworld.com/businesscenter/article/147842/article.html?tk=nl_cxanws

For the first time, fiber-based broadband access is expanding faster than cable: 4.2 MILLION compared to 2.5 million subscribers were added during the first quarter, according to the analysts at Point Topic.

"It's a significant milestone for fiber-optic broadband; where it is available consumers will take fiber over other broadband technologies," said Oliver Johnson, CEO at Point Topic.

Johnson is convinced fiber will become the biggest access technology. In three to five years it will PASS cable, and that it will be about 10 years before it becomes bigger than DSL (Digital Subscriber Line), he said. That is, unless something HAPPENS to make it possible for DSL to keep up with bandwidth demands.

Currently there are 42 million fiber broadband users worldwide, compared to 79.6 million cable and 238 million DSL subscribers. "DSL is ADDING more subscribers than fiber in absolute numbers, but not in percentage growth," said Johnson.

Users who choose fiber are also getting "more bits for their buck", according to Point Topic. The cost for fiber can get as low as US$0.50 per megabit per month, compared to US$20 for DSL and US$12 for cable, taking GLOBAL averages.

The growth of fiber numbers is being driven by China (which is closing in on the U.S. in terms of the total number of subscribers), Japan and South Korea, where cable and DSL are losing subscribers to fiber. Collectively Asia amount to over 35 million subscribers, according to Point Topic.

In the U.S. and Europe fiber is having a harder time. Deploying the technology is still expensive, and incumbent operators are reluctant to share infrastructure, according to Johnson.

"Without some form of centralized funding it will be a long time before consumers in these markets get access to cheaper bandwidth," said Johnson.
1232.

Solve : *Update - AVG 7.5 Free ends 31st August 2008?

Answer»

AVG 7.5 FREE will no longer be supported after 31ST August 2008
[INDENT]Quote

Support for AVG 7.5 Free Edition is planned to end on 31st August 2008.

No more VIRUS updates are planned for after that date.

Note that no more 'program' updates are due! Only virus updates will CONTINUE until the end date.

AVG 7.5 Paid version will be supported until 31/12/08.
AVG Free Forum - AVG 7.5 Free - Support ends 31/08/20088.0 HOWEVER will remain free. So if you're concerned about being out-of-date uninstall 7.5 and install 8.0.

http://free.avg.com/
1233.

Solve : MIT opens new 'window' on solar energy?

Answer»
Imagine windows that not only provide a clear VIEW and ILLUMINATE rooms, but also use sunlight to efficiently help POWER the building they are part of. MIT engineers report a new APPROACH to harnessing the sun's energy that could allow just that.

Link


1234.

Solve : Bill Gates Savaged by Windows?

Answer» http://blog.seattlepi.nwsource.com/microsoft/archives/141821.asp

"Read on past the jump for one of the gems that turned up, showing Gates in the role of chief rabble-rouser. (Original document: PDF, 5 PAGES.) It shows that even the Microsoft co-founder -- who champions the "magic of software" -- isn't immune to the frustrations of everyday computer users. Keep in mind that this was more than five years ago, so it doesn't necessarily reflect the specific state of things now. At the bottom, see what Gates said when I asked him about the message last week.

Quote
---- Original Message ----

From: Bill Gates
Sent: Wednesday, January 15, 2003 10:05 AM
To: Jim Allchin
Cc: Chris Jones (WINDOWS); Bharat Shah (NT); Joe Peterson; Will Poole; Brian Valentine; Anoop Gupta (RESEARCH)
Subject: Windows Usability Systematic degradation flame

I am quite disappointed at how Windows Usability has been going BACKWARDS and the program management groups don't drive usability issues.

Let me give you my experience from yesterday.

I decided to download (Moviemaker) and buy the Digital Plus pack ... so I went to Microsoft.com. They have a download place so I went there.

The first 5 times I used the site it timed out while trying to bring up the download page. Then after an 8 second delay I got it to come up.

This site is so slow it is unusable.

It wasn't in the top 5 so I expanded the other 45.

These 45 names are totally confusing. These names make stuff like: C:\Documents and Settings\billg\My Documents\My Pictures seem clear.

They are not filtered by the system ... and so many of the things are strange.

I tried scoping to Media stuff. Still no moviemaker. I typed in movie. Nothing. I typed in movie maker. Nothing.

So I gave up and sent mail to Amir saying - where is this Moviemaker download? Does it exist?

So they told me that using the download page to download something was not something they anticipated.

They told me to go to the main page search button and type movie maker (not moviemaker!).

I tried that. The site was PATHETICALLY slow but after 6 seconds of waiting up it came.

I thought for sure now I would see a button to just go do the download.

In fact it is more like a puzzle that you get to solve. It told me to go to Windows Update and do a bunch of incantations.

This struck me as completely odd. Why should I have to go somewhere else and do a scan to download moviemaker?

So I went to Windows update. Windows Update decides I need to download a bunch of controls. (Not) just once but multiple times where I get to see weird dialog boxes.

Doesn't Windows update know some key to talk to Windows?

Then I did the scan. This took quite some TIME and I was told it was critical for me to download 17megs of stuff.

This is after I was told we were doing delta patches to things but instead just to get 6 things that are labeled in the SCARIEST possible way I had to download 17meg.

So I did the download. That part was fast. Then it wanted to do an install. This took 6 minutes and the machine was so slow I couldn't use it for anything else during this time.

What the heck is going on during those 6 minutes? That is crazy. This is after the download was finished.

Then it told me to reboot my machine. Why should I do that? I reboot every night -- why should I reboot at that time?

So I did the reboot because it INSISTED on it. Of course that meant completely getting rid of all my Outlook state.

So I got back up and running and went to Windows Update again. I forgot why I was in Windows Update at all since all I wanted was to get Moviemaker.

So I went back to Microsoft.com and looked at the instructions. I have to click on a folder called WindowsXP. Why should I do that? Windows Update knows I am on Windows XP.

What does it mean to have to click on that folder? So I get a bunch of confusing stuff but sure enough one of them is Moviemaker.

So I do the download. The download is fast but the Install takes many minutes. Amazing how slow this thing is.

At some point I get told I need to go get Windows Media Series 9 to download.

So I decide I will go do that. This time I get dialogs saying things like "Open" or "Save". No guidance in the instructions which to do. I have no clue which to do.

The download is fast and the install takes 7 minutes for this thing.

So now I think I am going to have Moviemaker. I go to my add/remove programs place to make sure it is there.

It is not there.

What is there? The following garbage is there. Microsoft Autoupdate Exclusive test package, Microsoft Autoupdate Reboot test package, Microsoft Autoupdate testpackage1. Microsoft AUtoupdate testpackage2, Microsoft Autoupdate Test package3.

Someone decided to trash the one part of Windows that was usable? The file system is no longer usable. The registry is not usable. This program listing was one sane place but now it is all crapped up.

But that is just the start of the crap. Later I have listed things like Windows XP Hotfix see Q329048 for more information. What is Q329048? Why are these series of patches listed here? Some of the patches just things like Q810655 instead of saying see Q329048 for more information.

What an absolute mess.

Moviemaker is just not there at all.

So I give up on Moviemaker and decide to download the Digital Plus Package.

I get told I need to go enter a bunch of information about myself.

I enter it all in and because it decides I have mistyped something I have to try again. Of course it has cleared out most of what I typed.

I try (typing) the right stuff in 5 times and it just keeps clearing things out for me to type them in again.

So after more than an hour of craziness and making my programs list garbage and being scared and seeing that Microsoft.com is a terrible website I haven't run Moviemaker and I haven't got the plus package.

The lack of attention to usability represented by these experiences blows my mind. I thought we had reached a LOW with Windows Network places or the messages I get when I try to use 802.11. (don't you just love that root certificate message?)

When I really get to use the stuff I am sure I will have more feedback.

When we were concluding our interview last week, I showed Gates a printout of the e-mail and asked if he ever got Movie Maker to work. Gates noted that Microsoft plans to include Movie Maker as part of Windows Live, so people will get the program when they download that online package. The company isn't confirming that officially yet, but's not a complete surprise. See this Wikipedia entry and this related post on LiveSide.net. (Site temporarily down as of Tuesday morning.)

As for the message, Gates smiled and said, "There's not a day that I don't send a piece of e-mail ... like that piece of e-mail. That's my job."Thanks, I had seen this before and it is absolutely wonderful!

My favorite: "So they told me that using the download page to download something was not something they anticipated."
1235.

Solve : Unpatched Windows PCs fall to hackers in under 5 minutes - you've been warned!?

Answer» HERE

Other researchers, however, put average 'survival' time at around 16 hours

It takes less than five minutes for hackers to find and compromise an unpatched Windows PC after it's connected to the Internet, a security researcher said today.

The SANS Institute's Internet Storm Center (ISC) currently estimates the "survival" time of an Internet-connected computer running Windows at around four minutes if it's not equipped with the latest Microsoft CORP. security patches, said Lorna Hutcheson, a researcher and analyst, in a post to the ISC blog.

"I have been asked many [times] by PEOPLE if I really believed the survival time graph on the ISC site was truly an accurate representation of how long a new system had once connected," said Hutcheson. "The answer to this is 'yes' for most home users and systems that are Internet-facing.

The ISC maintains a record of the time between network probes for an average IP address, and assumes that hackers would follow a successful PROBE -- which would disclose one or more open ports -- with an exploit, most likely a worm.

Another security researcher, however, said unpatched machines can last longer than just a few minutes before falling to attack. The German Honeypot Project, which sets vulnerable systems on the Internet to collect malware, estimates survival time in hours, not minutes.

"Compared to the survival time from the Internet Storm Center which is currently below five minutes, we measure a higher survival time," said Thorsten Holz, a co-founder of the project and current a Ph.D. student at the University of Mannheim, in a post to the Honeypot Project's blog. The project's data estimates the average time between connecting to the Internet and compromise at under 1,000 minutes, or approximately 16 hours.

"[But] the time is still short, and you need to PATCH a system before taking it online," said Holz.

"While the survival time varies quite a bit across methods used, pretty much all agree that placing an unpatched Windows computer directly onto the Internet in the hope that it downloads the patches faster than it gets exploited are odds that you wouldn't bet on in Vegas," added Hutcheson of the ISC.Instead of patching a NEWER machine, just get a Windows 3.1 machine hooked up to the net. that way, any viruses or anything that do get downloaded can't run anyway!Quote from: BC_Programmer on July 17, 2008, 11:33:42 AM
Instead of patching a newer machine, just get a Windows 3.1 machine hooked up to the net. that way, any viruses or anything that do get downloaded can't run anyway!

Or do this. [Has the WWW reached your vic 20?
1236.

Solve : Vista Compatibility Center up and running?

Answer»
I've certainly GIVEN them a hard time about it, so it's only fair to point out that as of FRIDAY MORNING, Microsoft's VISTA Compatibility CENTER Web site is now live.

Link
1237.

Solve : San Francisco Hacker??

Answer»

Heres something interesting to read, as it happened and is still happening:

'Maniacal' computer engineer Terry Childs takes city network hostage

Quote

A disgruntled computer engineer has been sitting in a prison cell for four days after locking out everyone but himself from a city computer system.

Terry Childs is accused of tampering with San Francisco's new computer network to give himself exclusive access. He has REFUSED to hand over the password and is being held on $5 million bail while officials try to crack his code.


Suspect In Hijacking Of San Francisco Computer Network 'Willing To COOPERATE'


Quote
A computer engineer accused of taking control of San Francisco's network and locking out other system administrators has pleaded innocent to four counts of computer tampering.
Terry Childs, 43, of Pittsburg, Calif., was arraigned on CHARGES Thursday before Superior Court Judge Paul Alvarado, the San Francisco Chronicle reported. He remained in jail Friday on $5 million bail.

Childs has refused to disclose the password he allegedly created to lock out other system administrators and supervisors from the city's new FiberWAN (wide area network), which stores 60% of all city government data, including e-mails, law enforcement records, and payroll documents.

Who Is the San Francisco Hacker?

Quote
San Francisco Department of Technology employee Terry Childs was in a jail cell Friday, accused of illegally locking out fellow authorized network administrators from the city computer network he helped build. But as the case against Childs entered its sixth day, questions remained about his motivations for the alleged crimes, the extent of the damage he allegedly did and whether the San Francisco District Attorney's Office has the expertise necessary to prosecute such a high-profile cybercrime case.
Childs, 43, plead not guilty Thursday to four felony counts of computer network tampering and one count of causing losses in excess of $200,000 as a result of the alleged tampering. ARRESTED last Sunday and arraigned Tuesday, Childs' bail has been set at $5 million. He has a bail hearing scheduled for next Wednesday at 9am PT.


(Note: The quotes aren't the best bits, they're just enough so if you can't be bothered opening the links you'll get a general idea)
1238.

Solve : Death of the Internet Foretold (Malware Warning)?

Answer»

Quote

Rumors about the Internet as we know it dying by 2012 have been circulating for some time now, so it’s not really that surprising when the TrendLabs Content Security team was ALERTED that a Trojan is taking advantage of this conspiracy theory in order to trick users into running it.
Then again, spammed email with sensational headlines do make even the most cautious computer users take a peek (the latest NUWAR/Storm run being a prime EXAMPLE). What more when the said headlines tell them that the Internet, which has been PRACTICALLY their extra limbs since the last century, will suddenly be up for…TV-like subscriptions?
The malware involved in this spam run is detected by Trend Micro as TROJ_PIDIEF.JT, a Trojan that arrives as a PDF file named doc.pdf. This file promises more information regarding the alleged Internet death, and based on the email subjects and details it arrives with (see sample messages below), it’s not easy NOT to double-click on it:
Full read - Death of the Internet Foretold | TrendLabs | Malware Blog - by Trend Micro

Admin edit:
Fixing broken link.Wish the article had some additional details about the associated trojan and details to whether or not the latest version of Adobe Acrobat is affected by it. I'd imagine that if you're running the latest version you probably wouldn't get infected. Other than that good post. THANKS. It is probably down to your AV to catch this one. The pdf document has been modified to add malicious code. The pdf comes via email so nothing Adobe can do about that I don't think.

Quote
PIDIEF Trojans are known malware droppers or downloaders, so once users click on the attached PDF file — and whether or not they believe the theory — another malware is already up and running on their systems and doing their malicious routines.

Trend Micro users already blocks this spam with its Smart Protection Network. Other users, as always, are advised to keep their systems and applications up to date with the latest security patches and to be wary when opening SUSPICIOUS email, no matter how interesting they appear to be.
1239.

Solve : Firefox 3.0.1?

Answer» What’s New in Firefox 3.0.1

Firefox 3.0.1 fixed several ISSUES found in Firefox 3.
  • Fixed several security issues.
  • Fixed several stability issues.
  • Fixed an issue where the phishing and malware database did not update on first launch.
  • Under certain circumstances, Firefox 3.0 did not properly save the SSL certificate exceptions list.
  • Updated the internal Public Suffix list.
  • In certain cases, installing Firefox 2 in the same directory in which Firefox 3 has been installed resulted in Firefox 2 being unstable. This issue was fixed as part of Firefox 2.0.0.15.
  • Fixed an issue where, when printing a SELECTED region of content from the middle of a page, some of the output was missing (bug 433373).
  • Fixed a Linux issues where, for users on a PPP CONNECTION (dialup or DSL) Firefox always started in "Offline" mode (bug 424626).
Got it. Luckily I have automatic updates enabled.It's been out for a few days but for some reason my auto updates never kicked in. I tried to wait but ended up doing it manually.

Firefox 2 has updated to 2.0.0.15 also.Quote from: evilfantasy on July 17, 2008, 12:38:00 PM
It's been out for a few days but for some reason my auto updates never kicked in. I tried to wait but ended up doing it manually.

I got notified about an HOUR ago, and I have been running FF 4 hrs a day every day.Quote from: evilfantasy on July 17, 2008, 12:38:00 PM
Firefox 2 has updated to 2.0.0.15 also.
The latest release is now 2.0.0.16. i heard from a friend that firefox 3 really eats your memory, and doesn't regurgitate it when it closes. is that true?Firefox 3 does use more RAM than FF2, I agree.
However, it also seems to me that it's more responsive, i.e. it uses the RAM better.
I've not seen my available RAM disappearing though, I'm sure it does release the RAM when closed like every other application.noted, thanks.
1240.

Solve : Firefox 3.0.1 - TabMixPlus incompatible - resolved?

Answer»

If you use TabMixPlus, you MAY wait with FF updating.Tab Mix Plus Dev-Build 0.3.6.1.080416 WORKS.

http://tmp.garyr.net/tab_mix_plus-dev-build.xpi

This is what I'm getting, when trying to update:



so I'm not sure, if I should take a RISK?I don't know why they won't sign off on it through mozilla. Everyone keeps asking but they aren't answering for some reason.

The link above works, and is safe. It's what I had to use when I updated today and comes from the Tab Mix Plus forums - http://tmp.garyr.net/forum/index.phpWrong link above. Here is the dev builds thread - http://tmp.garyr.net/forum/viewtopic.php?t=7031I have build 416 installed, but FF warns me about incompatibility.
Did you install 3.0.1, and TMP works?No and yes. When I updated to 3.0.1 today TMP wouldn't install (incompatible) so I went to the forums and reinstalled the latest build and it worked fine. GOT a warning but ignored it.Wait. You didn't have TMP before 3.0.1 update?Yes I had the same build I do now with FF3.0. When I updated to FF3.1 today TMP wouldn't install. I think the NEW FF3.1 "broke" the TMP install. Not sure, all I know is I reinstalled it and it was back to normal.Oh, OK. Here is a thread discussing what happened. I don't understand half of it but I think what they are basically saying is to reinstall the dev build .I did edit install.rdf file as prescribed in your link, FF update still gave me warning about TMP, but update installed without damaging TMP.
Good, thanks.I don't know who is to blame, the developers or mozilla but I wish they would get it together. It's been long enough now.

1241.

Solve : YouTube Ordered to Give Complete User Logs to Viacom?

Answer»

and besides if you try to hack your modem, then you'll void the warranty.and get your service cut off there were accually about 8 people in ohio who got arrested for this usually that doesnt happen thoughQuote from: DaveLembke on JULY 16, 2008, 12:33:07 PM

you will lose your internet until your ISP REFERENCES the MAC to your account.

Quote from: computeruler on July 16, 2008, 05:39:14 PM
and get your service cut off

that's what he just SAID...
1242.

Solve : organized cybercrime?

Answer»

Quote

Cybercrime is evolving. The lone hacker who steals and resells credit card numbers is being replaced by a well-structured BUSINESS model. The game is no longer simply about hacking for fame, but rather about creating a business where you have frequent customers who buy your stolen product. The latest research report from web security company Finjan gives a peek at what exactly is going on.
Full STORY at:
http://arstechnica.com/news.ars/post/20080716-report-cybercrime-groups-starting-to-operate-like-the-mafia.html
Its like selling crack over the internet.

I heard most virus senders are between the age of 14-17Malware has become big business and isn't driven by bored TEENAGERS any more. There are actually underground malware WRITING teams who are out to steal as much as they can.

Some grow up - http://blog.trendmicro.com/29a-grows-out-of-virus-writing/

Some get caught -
http://www.virusbtn.com/news/2006/07_01a_virus.xml
http://www.sophos.com/pressoffice/news/articles/2008/03/nakatsuji.html

Some evolve - http://www.physorg.com/news97411646.html

Although in the end the malware writers helped shape the mold for Vistas newly ADDED security features. Headache or not the new features in Vista are doing a good job in combating malware.
a 63yr old sending maleware
1243.

Solve : Massive Internet security flaw uncovered?

Answer»
Security researchers on Tuesday said they had discovered an enormous flaw that could let hackers steer most people using corporate computer networks to malicious websites of their own devising.

LinkI've been following these reports but I can't get any clear idea as to WHETHER the patch is something I need to apply to my own computer, or is it up to my ISP to apply it to their servers? If I have to apply it to my computer, where can I download it? Is it freeware?Because the flaw hasn't been disclosed full details aren't really fully known. However, the problem appears to be more with the server end and not end-user end. So unless you're running a web server you won't have to WORRY. If you are however running a web server I'm sure in the upcoming days there will be a patch that addresses this issue.
Hackers are a skeptical bunch, but that doesn't bother Dan Kaminsky, who GOT a lot of flack from his colleagues in the security research community after claiming to have discovered a CRITICAL bug in the Internet's infrastructure.

LinkHoly crap......
Its SCARY what a 40 year old who lives in his moms basement can do with a computer.....
I dont see how Hackers get joy out of sending viruses.
1244.

Solve : NSA tracking all Internet traffic?

Answer»

sorry wait a minute. From WAT it SAID in the video. if its just going through a computer, what the NSA is saying then the NSA EMPLOYES ARENT even laying an eye on it. ok so the computer is just filtering it but its a computer so its not gonna LAUGH at so random email.

1245.

Solve : additional e amail address?

Answer»

how can i obtain a secondary email addressSign up to Yahoo/Hotmail (Windows Live Mail)/gmail or any other of the free email providers. CONTACT your ISP as well...some of them give you as many as 10 per ACCOUNT...Quote from: patio on FEBRUARY 01, 2008, 09:39:40 AM

Contact your ISP as well...some of them give you as many as 10 per account...

UMM, Thats what I MEANT to say as well oops lol.
1246.

Solve : MPAA Admits it Overstated College Student Piracy by Nearly 300%?

Answer» HERE

The Motion Picture Association of America (MPAA) has issued a statement in which it admits that the figure it has been touting since 2005 - that piracy of movies by college STUDENTS accounted for 44% of all of the motion picture industry’s domestic losses - was overblown by nearly a whopping 300%.

In REALITY, the amount of losses due to piracy by college students amounts to just 15% of the motion picture industry’s total domestic losses.

Now, granted, 15% of total losses in an industry that experiences billions of dollars of losses a year is not chump change, but consider that 85% of all of the motion picture industry’s losses were due to other factors, and then consider the massive witch hunt which the industries have conducted at colleges and universities across the country.

Said Seth Oster, EXECUTIVE Vice President, Corporate Communications for the Motion Picture Association of America, in a written statement:

“In 2005, the Motion Picture Association of America hired LEK, one of the world’s top
consulting firms, to conduct a first-of-its-kind, comprehensive study of the global economic
impact of movie piracy. That study shed light on the international effects of motion picture
piracy and gave the industry its first look at the extent of Internet piracy both domestically
and in 21 other countries.

While in the process of recently updating that study with current data, we discovered there
had been an isolated error in the LEK process two years ago that resulted in an inflated
number for piracy by college students. The 2005 study had incorrectly concluded that 44
percent of the motion picture industry’s domestic losses were attributable to piracy by
college students. The 2007 study will report that number to be approximately 15 percent —
or nearly a quarter of a billion dollars in stolen content annually by college students in the
U.S.

We take this error very seriously and have taken strong and immediate action to both
investigate the ROOT cause of this problem as well as to substantiate the accuracy of the latest
report. Additionally, the MPAA will retain a third party to validate LEK’s updated numbers.
We are confident that when the report is complete it will provide an accurate and reliable
assessment of worldwide piracy.”

Um, weren’t you confident that the last report provided an accurate and reliable assessment of piracy? You know, that report on which you predicated that witch hunt?
1247.

Solve : GreenPrint World 1?

Answer» HERE

GreenPrint World is a free Windows utility that helps eliminate wasted pages while printing. The download and installation were painless, producing a bright interface that pops up each time you click to PRINT. GreenPrint highlights content you're unlikely to WANT committed to paper, like that DREADED banner AD that prints an extra sheet of paper when printing from the Web. With a single click, that page is gone. In addition, GreenPrint lets you block images and ads to save on ink and paper. The app also displays a running tally of pages and GREENHOUSE gas emissions you can save through regular use. We found this tool simple and efficient.

1248.

Solve : Skype Cross-Zone Scripting Security Enhancement - Highly critical!!!?

Answer»

TITLE:
Skype Cross-Zone Scripting Security Enhancement

SECUNIA ADVISORY ID:
SA28791

VERIFY ADVISORY:
http://secunia.com/advisories/28791/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Skype for Windows 3.x
http://secunia.com/product/12919/
Skype for Windows 2.x
http://secunia.com/product/7268/
Skype for Windows 1.x
http://secunia.com/product/4250/

DESCRIPTION:
An update has been released for Skype, which implements security
enhancements to prevent compromise of users' systems.

Skype uses the Internet Explorer web control to render HTML from
certain websites (e.g. DailyMotion, METACAFE, and SkypeFind). As the
content is rendered in the "Local Machine" security zone, this allows
execution of arbitrary script code on a user's system via script
insertion vulnerabilities present in these websites.

Various vulnerabilities have been DISCOVERED in these sites, which
provide vectors when a user e.g. uses the Skype video gallery browser
section or finds a video UPLOADED to the DailyMotion gallery with a
specially crafted video title.

Successful exploitation requires that a displayed website is
vulnerable to script insertion.

The vulnerability is reported in the following Skype for Windows
VERSIONS:
- All versions including 3.5.*
- Version 3.6.*.244 and prior

SOLUTION:
Update or upgrade to version 3.6.*.248 or later, which now runs the
Internet Explorer web control in the "Internet" security zone.

http://www.skype.com/download/skype/windows/

1249.

Solve : As More Undersea Cables are Gashed...?

Answer» HERE

Disrupting Internet Access to Middle East, India, Sri Lanka and Pakistan - Investigation Reveals Cuts Not Accidentally Caused by Anchors - Cause “Unknown”

As a third and then fourth SUBMARINE Internet cable are cut, further disrupting power to India, Sri Lanka, Pakistan, Egypt, Iran, Qatar, and other Middle East countries, officials admit that the cuts to the undersea cables have not been caused by poorly dropped anchors, but deny that the cable cuts are the result of malicious activity.

According to a statement made by Egypt’s Ministry of Communication, “A marine transport committee investigated the traffic of ships in the area, 12 hours before and after the malfunction, where the cables are located to figure out the possibility of being cut by a passing vessel and found out there were no passing ships at that time,” adding that where the cables were cut “was in a restricted area so ships would not have been allowed there to begin with.”

“The area is also marked on maps as a no-go zone and it is therefore ruled out that the damage to the cables was caused by ships,” the statement said.

Still, officials are downplaying the suggestion that the DISRUPTIONS may be intentional, or related to terrorism, and is attempting to quash conspiracy theories.

A spokesperson for FLAG (Fibre-optic Link Around the Globe) Telecom, which owns two of the cables, said, of the suggestion that the cable damage was intentional, “I think it is doubtful,” although they did admit that the fact that all four cables were cut within such a close time PERIOD did seem like a bit of a coincidence.That's the most contradictions i've seen in a short ARTICLE since the original review of Vista.I have a strong suspicion, that someone was really unhappy with Indian tech support...Update....

HERE

Plot Thickens as FIFTH Undersea Internet Cable Outage Reported and Iran Taken Offline

A few days ago we reported that a a third and fourth undersea telecom Internet cable had been cut, following the initial disruptions caused by damage to two underwater cables that had been blamed on anchors dropping on the cables, plunging millions of people in India, Pakistan, Sri Lanka, and the Middle East, into Internet darkness.

Now, the plot thickens as a fifth undersea Internet cable outage is reported, and Iran is taken offline.

According to Khaleej Times, an estimated “1.7 million Internet users in the UAE have been affected by the recent undersea cable damage.”

Total users affected so far by the outages exceeds 80million.

Reports are that Iran has been taken down to zero Internet access, and a review of the data available at the Internet Traffic Report site substantiates this:


Internet Traffic to/from Iran at the time of the writing of this article is at a standstill:

Said Mahesh Jaishankar, executive director for du, a UAE telecom provider, “The submarine cable cuts in FLAG Europe-Asia cable 8.3km away from Alexandria, Egypt and SeaMeWe-4 affected at least 60 million users in India, 12 million in Pakistan, six million in Egypt and 4.7 million in Saudi Arabia.”

With the fact of not only a fifth cable being damaged, but the fact that these cables are many miles apart, theories abound.

One thing is sure, however: at this point calling it a coincidence - unlike whatever is actually happening to these cables - just doesn’t cut it.
1250.

Solve : Beware Fake Windows Update Sites!!!?

Answer» http://www.pcmag.com/article2/0,2817,2256892,00.asp

F-Secure has identified a fairly convincing fake Microsoft Update site.

The site has the superficial look of Microsoft Update, but has one prominent button and a message urging the user to "Get critical update (obligatory)". Another message says "URGENT: Please intall critical Windows XP/2000/2003/Vista update!" Note the misspelled "intall".

The REAL domain of the site is cfm48.com which is still up, but no longer serving this page. The domain is registered to an INDIVIDUAL in California. There is no indication that he is involved or if the site was compromised, but F-Secure says the site is in a "fast flux network," MEANING that the IP address for the domain changes rapidly. The DNS administration of the site would have to be COMPLETELY compromised.

Click on the button, according to F-Secure, and you get a file named WindowsUpdateAgent30-x86-x64.exe. This is a "dropper," identified by F-Secure as Trojan-Dropper:W32/Agent.DYD, which then drops the real malware, identified as Backdoor:W32/Agent.CVU.