Google’s Malware Detection Broken

January 31, 2009 – 8:21 AM

As of right now, it appears any google search you do will come up with all the same results as before.  What has changed is that it appears to be reporting that every site might contain malware (i.e. it shows the “This site may harm your computer” warning with every result).  Apparently it has been happening for about the last 15 minutes.  So things are going a little haywire there and I’m sure it’ll be fixed shortly.  Bottom line, there is no massive web-based attack going on.

Source:
http://isc.sans.org/diary.html?storyid=5779&rss

Worm Floats Obama’s Head on Your Desktop

January 29, 2009 – 6:58 PM

The odds are pretty good that this will never happen to you, but should a floating head of U.S. President Barack Obama pop up on your desktop Monday morning, know this: You’ve been hit with the Obama worm.

The worm was spotted this past Monday after it infected PCs at a preparatory school in Metairie, Louisiana, and was first reported by Walling Data, a value-added reseller in Claremont, North Carolina. Though it is not detected by any antivirus products right now, it is not considered to be a serious threat because it has infected so few systems.

The worm spreads via USB drive, using the Windows autorun feature to install itself automatically on any drive it connects with. Unlike most of today’s profit-driven malware, the Obama worm doesn’t steal your credit card number or turn your PC into a remote-controlled zombie system. In fact, it isn’t designed to do anything besides float a small picture of Obama at the bottom right corner of your desktop all day every Monday.

Unfortunately, it is so badly written that the worm gradually renders any PC it is run on completely useless, according to Rob Koliha, Walling Data’s director of innovation. “It will basically prevent execution of any kind of files.”

Because antivirus programs don’t detect it yet, it’s also hard to know when you’ve been infected, except on Monday.

Source:
http://www.pcworld.com/article/158614/worm_floats_obamas_head_on_your_desktop.html?tk=rss_news

Securely Delete Your Files With DP Shredder

January 28, 2009 – 5:45 PM

DP Shredder scrubs files, folders, and free disk space with Department-of-Defense-approved methods. Completely stand-alone and small, DP Shredder is a great addition to your flash drive toolbox.

dp shredder

After selecting the disk, folder, or file you want to securely delete with DP Shredder, you can select the method and number of times the method will be applied. You can use a basic overwrite with all zeros, pseudo-random blocks of data, or opt to use more robust methods. DP Shredder can wipe with the power of US DoD 5220.22.M ECE 7X—which, if you must know, deletes the files, overwrite all locations with a character, its complement, then a random character followed by an overwrite, and it’s repeated seven times. At the end of a single round, every bit of data you’ve deleted has been over-written 49 times.

Download:
http://www.portablefreeware.com/?id=1470&ts=1233111891

Via:
http://lifehacker.com/5140995/dp-shredder-securely-shreds-your-files

Get IE8/Google Chrome Style Domain Highlighting in Firefox

January 26, 2009 – 8:30 PM

IE8 and Google Chrome both have a great feature that helps users detect phishing websites by highlighting the root domain when you browse to a page.  You can get this functionality in Firefox with an add-on called Locationbar that is available here:

https://addons.mozilla.org/en-US/firefox/addon/4014

Screenshot:

Locationbar

Windows RunAs Password Length Vulnerability

January 26, 2009 – 6:20 PM

The ‘RunAs’ application included with Microsoft Windows is prone to a local information-disclosure vulnerability that may reveal information about password lengths.

A local attacker may exploit this issue to gain information about user passwords. This may aid in further attacks, such as brute-force or dictionary attacks against passwords.

An attacker requires local, interactive access to exploit this issue.

Source:
http://www.securityfocus.com/bid/33440/info