Wednesday, December 31, 2008

Wednesday 12/31/08

11 in China sentenced for software piracy A court in Shenzhen, China, sentenced 11 members of a software counterfeiting operation Wednesday, with the defendants getting between one and a half and six and half years in prison, according to Microsoft. Read more...





Security vendors ready fix for 'Curse of Silence' SMS attack
December 31, 2008 (IDG News Service) A single malformed text message can prevent some Nokia Corp. smart phones from receiving further messages via Short Messaging Service (SMS) -- and the offending message can be sent from almost any Nokia phone, even non-smart-phone models, a German security researcher demonstrated Tuesday.






Top 9 Network Security Threats in 2009
Perimeter e-Security's Kevin Prince offers his predictions on the new year's threat landscape.
Read more







Microsoft: MD5 hack poses no major threats to users






Information on Microsoft Security Advisory 961509
Posted Tuesday, December 30, 2008 10:08 AM by MSRCTEAM
Hi everyone. This is Maarten Van Horenbeeck. I just joined the Microsoft Security Response Center a few months ago, and am the program manager working on the issue described in Microsoft Security Advisory (961509), which we just released.

This is not a vulnerability in our products, it is in fact an issue that affects the industry as a whole.







Researchers hack VeriSign's SSL scheme for securing Web sites
"a group of hackers announced that they'd beaten SSL, using a cluster of 200 PS3s. By exploiting a flaw in the MD5 cryptographic algorithm (used in certain digital signatures and certificates), the group managed to create a rogue Certification Authority (CA) which allows them to create their own SSL certificates"






Microsoft downplays Windows Media Player bug






Legal firms setting up practices devoted to video games
Video games are big business, to the tune of roughly $50 billion a year, and lawyers are starting to realize that getting involved could mean a big increase in billable hours.
December 31, 2008 - 06:30AM CT - by Michael Thompson







Fry's Electronics VP faces criminal charges and lawsuit
December 29, 2008 (Computerworld) A vice president at Fry's Electronics Inc. is facing the inside of two different courtrooms for allegedly running a kickback scheme that netted him tens of millions of dollars.

Ausaf Umar Siddiqui, former vice president of merchandising and operations at Fry's, has been charged in U.S. District Court in the Northern District of California with allegedly running a kickback scheme that defrauded the electronics retailer. Also, according to a report in the San Jose Mercury News, the San Jose-based electronics retailer is seeking the return of $10 million that Siddiqu allegedly borrowed and failed to repay. Siddiqui had worked at the company for the past 20 years.







30GB Zune apocalypse arrives as devices enter digital coma (Updated 2x)
Judgment day has arrived for owners of 30GB Zunes. The music player inexplicably entered a worldwide coma last night, and players are completely nonresponsive. Whoops.
December 31, 2008 - 10:05AM CT - by David Chartier






Flash cookies and other techniques:
Watch Out for Hidden Cookies Browser plug-ins can also store individually-identifying data, and your normal privacy settings may have no effect.







MS08-067 Worm on the Loose
Symantec has identified W32.Downadup.B as a new worm that is spreading by taking advantage of the RPC vulnerability from MS08-067.






Surprises in the Windows 7 EULA
Ed Bott: One of the first things I did before installing the leaked Windows 7 build was to read the end user license agreement (EULA), carefully. Most of it was boilerplate, but I found a few surprises hidden within the legalese.






Muslim hackers attack Israeli sites as Gaza strikes continue
Dan Kaplan December 31, 2008
Muslim extremists are targeting Israeli websites, as the conflict in the Gaza Strip rages on, with no end in sight.






1.5 million individuals affected in RBS WorldPay breach
Angela Moscaritolo December 29, 2008
Hackers may have accessed more than a million Social Security numbers being stored by WorldPay, an electronic payment processing service.

No comments: