Internet and online security professionals deal with hacking and cracking activity on a daily basis. With new technologies emerging every day the new security challenges arise and new vulnerabilities become available that allow black hat hackers to create and execute new scripts that can cause serious problems to the whole networks. Our mission is to let you know about the latest scams and to warn you about new exploits that can have a severe impact on your online business.
14th August 2007

False Computer Safety Feeling with Internet Security Systems

It’s an axiom that [tag]computer security[/tag] impossible these days without several security components. At the very minimum you should have and  installed on your computer. Those programs can minimize the risk of unwanted intrusions. There are many computer security packages, and they are not equal in their ability to identify and prevent potential attacks.

One of the most well-known internet security programs is a security line of Symantec products known as “Norton family”: Norton AntiVirus, Norton Internet Security, Norton Anti-Spyware Edition, etc.

Of course, Symantec claims that your computer will be totally secure and protected if you use their security products. The sad truth however, that Norton security products are known in the hackers world as theone of the most easiest to hack into.

The most sought after type of vulnerabilities are the ones that can grant remote access to user’s computer, and if this access can be obtained without authentication, it’s even better.

And Norton security products are so popular among average computer users that it make them almost as wide-spread as computers with some kind of Windows OS installed, and thus even more desirable targets for hackers.

A few days ago Symantec had to release a security warning about security vulnerability found in 2 ActiveX controls. The vulnerability belonged to the class of input validation errors.

This means that data received by user computer was not properly validated which could allow a malicious attacker to remotely execute arbitrary code with the rights of logged in user (which means no additional authentication is required). The only other thing that attacker would need to successfully complete the attack is to trick the user to go to the website where this code would run.

This vulnerability affected Norton AntiVirus, Norton Internet Security, and Norton System Works, version 2006 and Norton Internet Security, Anti Spyware Edition, version 2005. Symantec Corporate Edition and Symantec for Linux were not affected.

Symantec Security Response team realesed Bloodhound.Exploit.148 that patches this vulnerability.

If you’re using Norton security products and you regularly update virus definitions and signatures through LiveUpdate then you should be OK.

Otherwise click on your LiveUpdate Right Now!

You can learn more about this vulnerability from the Symantec website: “Symantec ActiveX Control Input Validation Error

Symantec credits Secunia Research for reporting this issue. Funny thing that this exploit is announced as a new one.

But it was known to hackers community for over 3 months! Yes, the remote access computer vulnerability through the execution of arbitrary code within those Norton ActiveX was annonunced by one of the hackers group on their blog more than 3 months ago, and they even released proof of concept code proving their point.

That just gives to show you that Symantec is not very quick in pinpointing and liquidating newest threats. Plus their support department is notoriously slow in support responses.

So in the next post I’ll talk about other computer and internet security programs that offer better support, and have quicker response.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • YahooMyWeb
  • Google
  • Yahoo! Buzz
  • TwitThis
  • Live
  • LinkedIn
  • Pownce
  • MySpace

posted in Computer Security, Main | 2 Comments

14th August 2007

What Can You Do Today To Keep Your Kids Safe?

In one of my recent posts I talked about sexual predators and child molesters and how in some cases they can use their hacking skills to abuse children. of course the most important question is what to do to keep your [tag]kids safe[/tag]?

Luckily, online molesters are still fairly rare type of child predators, but there are many more potentionally dangerous situations in the daily life of your children that should be addressed properly.

The book called “How To Protect Your Child From Sexual Predators” that can show you how to teach your children to stay safe while you’re not around. It’s not just “don’t take candy from the strangers” that we all heard about.

You’ll learn things like The Ultimate Safety Secret, The Five Secrets To Playing Outside Safely, The Magic Approach To Online Safety With Real Results.

Do you know for example that confidence and mental focus are two critical factors that can drastically improve the chances for your kid to avoid potential danger?

Well, I didn’t know either, I’m not an expert on and behavior or . Things like this can help your child when s/he needs it most. And the “Keeping Kids Safe” program created by Preston Jones and Joyce Jackson teaches you how to develop those skills in your child.

Take a look at their “Keeping Kids Safe” program and see if you can learn something that might be useful for your kid.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • YahooMyWeb
  • Google
  • Yahoo! Buzz
  • TwitThis
  • Live
  • LinkedIn
  • Pownce
  • MySpace

posted in Main | 0 Comments