Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus

LizaMoon SQL injection rogue AV
Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense
has a complete write up the attack, dubbed 'LizaMoon,' but here's the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It's not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker's server. This is repeated over and over until every Web page in the SQL database has been infected -- and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn't particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that's it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there's nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

MEMC ELECTRONIC MATERIALS MICROSOFT MILLICOM INTL CELLULAR MOBILE TELESYSTEMS

Daily Crunch: Finish Line Edition

Thanko Sells Underwater Video Camera Goggles The Pringle?s Can Antenna Is Now 10 This Wood Bike Looks Like It Came Out Of Minecraft ? In A Good Way Laser Research Company TeraDiode Starting Humble, But Hopes To Make Ray Guns Soon Card-Case Speaker Is A Speaker Like A Card Case

Source: http://www.crunchgear.com/2011/07/06/daily-crunch-finish-line/

NETWORK APPLIANCE NETGEAR NCR NATIONAL SEMICONDUCTOR

Verizon to enable global roaming for LG Spectrum and Droid 4

VZW's latest LTE handsets don't make the best travel companions right now. Aside from getting stressed in airports and talking too much on coach trips, they also lack support for global GSM roaming. However, Big Red says it's "working on a few network enhancements" that will let the LG Spectrum and Droid 4 (shown above) work outside CDMA areas -- probably by the first half of this year. It's a nice gesture, but it also reminds us that what we're going to need in future -- full-on data roaming at LTE speeds -- will be a lot trickier to achieve.

Verizon to enable global roaming for LG Spectrum and Droid 4 originally appeared on Engadget on Thu, 12 Jan 2012 08:59:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourcePhoneScoop  | Email this | Comments

Source: http://www.engadget.com/2012/01/12/verizon-to-enable-global-roaming-for-lg-spectrum-and-droid-4/

PRICELINECOM QIMONDA QUALCOMM QUANTA COMPUTER

Facebook gets chatty, brings Comments Box plugin to mobile media sites

Chiming in on your favorite posts is about to get a little bit easier, now that Facebook has brought its Comments Box mobile plugin to media websites. Today's announcement comes just about a month after the social network introduced its Subscribe button, marking its latest efforts to enhance user engagement on mobile web platforms. According to Facebook, the new feature will use "social signals" to automatically detect the highest quality comments for each individual, with each thread ordered to show the most relevant and popular comments from a user's friends. There's also an integrated moderation function so, you know, play nice. Developers interested in getting in on the action can find more details at the coverage link below.

Facebook gets chatty, brings Comments Box plugin to mobile media sites originally appeared on Engadget on Wed, 11 Jan 2012 23:54:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceFacebook  | Email this | Comments

Source: http://www.engadget.com/2012/01/11/facebook-mobile-comments-box-media/

NCR NATIONAL SEMICONDUCTOR NATIONAL INSTRUMENTS MOTOROLA

Daily Crunch: Animal TV Edition

Video: Super-efficient Chicken Breast Deboning Robot Colorfly?s ?Audiophile-Quality? Audio Player Is Made Of Wood Video: A Scary Realistic Iron Man Mark I Suit The 4:20 Watch From Cadence Panda Itazura Bank: Super-Cute Piggy Bank (Video) This Wooden iPad Frame Does Retro Right

Source: http://www.crunchgear.com/2011/06/16/daily-crunch-animal-tv-edition/

ALLIANCE DATA SYSTEMS ALLTEL AMAZONCOM AMERICA MOVIL

Google Chrome and Chromium add protection against malicious downloads

google chrome malicious download
Google Chrome already sports a number of security-minded features, from Incognito mode to a software sandbox which makes exploiting the browser a Herculean task. Now, Google has announced additional protection for Chromium and Chrome users.

Built upon the Safe Browsing API, the new feature introduces protection against malicious downloads. If a download link appears in the Safe Browsing blacklist, Chrome and Chromium will warn users against downloading -- a save button is still presented, of course, in case you're convinced a file is perfectly safe to download.

We'd like to see something a bit more eye-catching than the red warning icon -- like perhaps painting the entire bar red. Many of the people a feature like this aims to protect probably won't notice the icon or change in wording as they'll be focused on clicking the save button.

Google is initially making download protection available to Chrome dev channel users, and you'll likely see it in Canary and Chromium snapshot builds as well. After thorough testing, beta and stable users will be next in line.

Google Chrome and Chromium add protection against malicious downloads originally appeared on Download Squad on Tue, 05 Apr 2011 15:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/05/google-chrome-and-chromium-add-protection-against-malicious-down/

FIRST SOLAR FINISAR FEI COMPANY FAIRCHILD SEMICONDUCTOR INTERNATIONAL

Save your tabs and Panorama tab groups in Firefox 4

Firefox 4 save tabs
When Firefox 4's tab grouping tool, Panorama, had its keyboard shortcut changed to the finger-breaking combo of Ctrl+Shift+E, we thought Panorama would get dropped before FF4's final release -- but, thankfully, it made the cut!

If you've used Firefox 4 and Panorama, you might have noticed that Mozilla's new browser doesn't always save your tab groupings when you close the browser -- a bit of a pain, if you spend a long time setting up the perfect groups! This is tied into the removal of the 'Save and Quit' dialog box -- and enabling Panorama tab group saving is just a matter of re-enabling the Save and Quit dialog.

Open a new tab and head to about:config. Click through the warning and type 'quit' into the filter box. Double click browser.showQuitWarning to change its value to true (see image after the break). That's it -- now you'll have the option of saving your tabs, and thus tab groups, when you close Firefox.

For more tech tips, visit our tips index.

Continue reading Save your tabs and Panorama tab groups in Firefox 4

Save your tabs and Panorama tab groups in Firefox 4 originally appeared on Download Squad on Mon, 04 Apr 2011 11:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/04/save-your-tabs-and-panorama-tab-groups-in-firefox-4/

UNISYS TRIQUINT SEMICONDUCTOR TRIMBLE NAVIGATION LIMITED TRIDENT MICROSYSTEMS

Scientists Discover Galaxies Far, Far, FAR Away—The Farthest Ever Seen [Astronomy]

Astronomers have discovered the far, far away galaxies. The farthest galaxy cluster ever seen, in fact, a whooping 13.1 billion light-years away. According to the researchers, "these galaxies formed during the earliest stages of galaxy assembly, when galaxies had just started to cluster together." More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/BOZfaz77oqc/scientists-discover-galaxies-far-far-faaaaaaaaaar-away++the-farthest-ever-seen

ITRON IRON MOUNTAIN INORATED IOMEGA INTUIT

Hands On Intel's Latest, Bestest Stab at Mobile Processing [Video]

The Medfield codename invoked strange Cloverfield associations for me. Would Intel's first serious mobile chip be a monster that destroys absolutely everything in its path? Well, the dust has cleared, and we have the Atom Z2460. It's not going to crush everything else, but it looks damn decent. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/hOLqWhJOZP8/hands+on-intels-latest-bestest-stab-at-mobile-processing

METHODE ELECTRONICS MENTOR GRAPHICS IMS HEALTH IMATION

Corel releases VideoStudio Pro X4, we go hands on (video)

videostudioprox4
Corel seems to be on a roll lately; after releasing WinZip System Utilities just last week, this morning the company announced VideoStudio Pro X4.

VideoStudio Pro is aimed at home users and small business professionals who want to create professional-looking videos, but without the hassle, steep learning curve and price of Adobe Premiere Pro and the likes.

This new version introduces several features:

  • Stop motion animation: You can now capture still frames using a webcam, camcorder or DSLR and use them to produce an animation. Tools such as "onion skin view" let you compare the previous image in the sequence with the current one and make the animation as smooth as possible.
  • Processor optimization: Corel says the app is optimized for Intel's new Sandy Bridge systems, and have shown us some graphs with very impressive numbers. We've been unable to test this particular point, but if you have a recent-generation Intel or AMD Fusion system, VideoStudio performance should be blazing. Even on our older test system performance was quite impressive.
  • Customizable workspace: You can drag the video preview window to your secondary monitor (if you have one) and tweak just about any other element in the window layout. Once done, you can save your ideal workspace in one of three slots.
  • Share-to-Web: VideoStudio Pro X4 hooks directly into YouTube, Vimeo, Facebook and Flickr, so you don't even have to launch a browser to upload your final product. Edit, produce and share from within the app itself.
  • Smart Package: Video projects typically consist of many files; Smart Package lets you bundle all video assets for a given project into one ZIP file which you can password-protect and keep in a safe place once you're done editing.
I've had a chance to play around with a pre-release version for a few days, and have put it through its paces editing a short video for my day job. Overall, I've been impressed with how easy it was to create pro-looking results. If you do any sort of video editing but are leery of the investment other apps require (both in dollars and effort), VideoStudio Pro is well worth checking out. To see a bit of the interface itself and what the app can do, watch the video after the jump.

Note: We'll be running a give-away of ten VideoStudio Pro X4 licenses later today, each worth $100 USD. Keep your eyes peeled for the giveaway post!

Continue reading Corel releases VideoStudio Pro X4, we go hands on (video)

Corel releases VideoStudio Pro X4, we go hands on (video) originally appeared on Download Squad on Tue, 22 Feb 2011 09:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/02/22/corel-releases-videostudio-pro-x4-we-go-hands-on/

JDA SOFTWARE GROUP JACK HENRY and ASSOCIATES IXYS ITRON