AVG virus definition update cripples Windows PC’s

November 11, 2008

A recent update in the virus definitions of AVG causes a critical file, user32.dll, to be detected as a virus. As a result, the affected computers running Windows XP keep rebooting right before the log-on screen appears.

AVG recommends affected users to boot into Safe Mode, restore the user32.dll file from the Windows CD, or from a website and temporarily remove AVG until an update addresses the issue.

Read More

WPA2 Personal Cracked, Russian Company Claims

October 13, 2008

The Russian based security firm ElcomSoft is claiming to be able to crack WPA2 Personal wireless authentication security in a matter of weeks rather than years. According to their press release, they’ve employed purpose-written software which is powered with a backend of clustered, commodity-grade NVIDIA GPUs.

This all sounds rather alarming at face value. But how effective would their methods be in real-life application? Read on for my dissection of this development.

[Read more]

Mac OS X Security Update 2008-007

October 9, 2008

Just in case you missed it, today Apple has released an security update for OSX 10.5.5, fixing the usual vulnerabilities and bugs. Jump for the list of fixes includes in this update.

Read More

Security hole in Adobe Flash allows recording of video

September 29, 2008

A security hole found in the Adobe Flash software allows people to stream movies from online distributors at no cost! This includes giants like Amazon.com and its online rental service.

Read More

Use NoScript to protect yourself from Clickjacking

September 26, 2008

With all the hubbub about Clickjacking (gag, buzzwords!), I thought it would be valuable to write a brief article on the topic.

What it is

Details are still being suppressed at this point, but it appears to be an IFRAME manipulation used to effectively cover a normal web link with a trusted site that appears good and proper, with a bad one to an attacker site. That is, in its currently disclosed form. The implication is that it could potentially be a lot nastier, maybe even 100% automated. In any case, this attack could conceivably be used for phishing or host exploitation.

Who it affects

Basically, any modern browser which supports IFRAMEs. This includes any reasonably current versions of IE, Firefox/Mozilla, Safari, Flock, Opera, etc. So, pretty much everybody. It doesn’t include browsers which don’t support IFRAMEs, such as lynx or elinks.

[Read more]