Scwoa's Blog

Trojan in the android phone

scwoa — Mon, 03 Jan 2011 14:40:08 +0000

A new trojan can infect your Android mobile device, and send all your phone information to China !

It may be able to turn your phone into a botnet.

Expect to see more of these phone viruses and trojans. All of these devices have very little security built in, and a lot of users wont believe the phones can get viruses. As vendors build in more and more functionality into the phone, the malware \ trojab \ viruses will just get worse.

Mozilla Password exposure

scwoa — Wed, 29 Dec 2010 22:39:28 +0000

If you have an old Mozilla account, you should change your password.

If you are using the same password everywhere, you should change all your passwords.

http://blog.mozilla.com/security/2010/12/27/addons-mozilla-org-disclosure/

Man faces charges for reading wife’s email.

scwoa — Wed, 29 Dec 2010 22:33:21 +0000

Leon Walker is being charged with using his wife’s email account to read her email.
The password was stored in a book next to the laptop.

http://www.freep.com/article/20101226/NEWS03/12260530/1011/NEWS09/Is-reading-wifes-e-mail-a-crime

So this means, every parent who logons to a kids facebook account, will face charges?

MS Internet Explorer 0-Day

scwoa — Fri, 24 Dec 2010 18:10:18 +0000

A specifically crafted web page, could result in code execution on your client. Metasploit has already released something.

This affects all versions of IE, including 6, 7, 8. Use Firefox as a short-term workaround.

http://www.microsoft.com/technet/security/advisory/2488013.mspx

Gawker passwords released

scwoa — Thu, 23 Dec 2010 20:14:26 +0000

Email addresses and passwords for hundreds of thousands users were posted online.

if you have posted on the websites: Lifehacker, Gizmodo, Gawker, Jezebel, io9, Jalopnik, Kotaku, Deadspin, and Fleshbot. Your account info may have been stolen.

Read the FAQ http://lifehacker.com/5712785/

Should I change my password?

If your facebook passowrd is the same as your online banking account?
Do you have the same user names across multiple sites?
Have you given someone else your password?
Is your email account password the same as twitter, facebook, yahoo, gmail, work, online banking, amazon, online stocks, etc…..

You should have different passwords for each site.
Yes, this is annonying.

But so is having your identity stolen. Your Choice!

Man used neighbor’s Wi-Fi to threaten Vice President Biden

scwoa — Thu, 23 Dec 2010 03:55:49 +0000

OK, for all you people out there that state:
Who would break into my house?
I have nothing of value
WEP \ WPA is secure
Why would anyone bother me ?

Make sure you read this article from computerworld.

http://www.computerworld.com/s/article/9202160/Man_used_neighbor_s_Wi_Fi_to_threaten_Vice_President_Biden

This person used Aircrack to crack the WEP password, he does not appear to be a computer guy at all.

Threats like these make the Secret Service come to your house, and stay for a long time!
Put your wireless on WPA2 ! ! ! !

Pacman !

scwoa — Fri, 21 May 2010 20:58:57 +0000

Pacman is 30 years old ! ! !

http://www.cbsnews.com/8301-31749_162-20005654-10391698.html

You can play it on Google. www.google.com

Boy do I feel old….I played this in high school

Browsers and Privacy

scwoa — Wed, 19 May 2010 18:02:15 +0000

This article, from Electronic Frontier Foundation explains how unique your browser is, and how to track you.

https://panopticlick.eff.org/browser-uniqueness.pdf

>> We observe that the distribution of our fingerprint contains at least 18.1 bits of entropy, meaning that if we pick a browser at random, at best we expect that only one in 286,777 other browsers will share its ngerprint. Among browsers that support Flash or Java, the situation is worse, with the average browser carrying at least 18.8 bits of identifying information. 94.2% of browsers with Flash or Java were unique in our sample.

Most browsers have flash or Java enabled. 98 % of all browsers have flash installed. Flash is required for Youtube, among others.

If you thought – going to Starbucks to use their wireless, will make me untraceable, think again…

A hole in the Internet

scwoa — Mon, 12 Apr 2010 05:51:55 +0000

I found a hole in the Internet

Arkansas mom charged with hacking son’s facebook account

scwoa — Sun, 11 Apr 2010 18:11:18 +0000

http://www.katv.com/news/stories/0410/723100.html

http://www.eweek.com/c/a/Security/Arkansas-Mom-Charged-After-Hacking-Sons-Facebook-Account-256860/

This could have been prevented:

Dont let Facebook autologin
make your facebook password hard to guess
dont post stupid stuff to facebook, especially when your mom will find out.
If your mom could crack your password, it means you have bad security !
Dont press charges against your mom ! Come on, that is crazy ! If you find dead bugs in your food, now you know why !

On the other side of the issue:

Mom probably owns\pays for the computer & internet line
You are 16 and live at home, you dont have any privacy
You post stuff to facebook – you have no privacy

http://www.katv.com/news/stories/0410/723100.html

http://www.eweek.com/c/a/Security/Arkansas-Mom-Charged-After-Hacking-Sons-Facebook-Account-256860/