Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus

LizaMoon SQL injection rogue AV
Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense
has a complete write up the attack, dubbed 'LizaMoon,' but here's the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It's not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker's server. This is repeated over and over until every Web page in the SQL database has been infected -- and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn't particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that's it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there's nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

SYMANTEC SYKES ENTERPRISES INORATED SYBASE SUN MICROSYSTEMS

BattlePaint is an addictive geometric shooter game

battlepaint
In BattlePaint, you play a cube. In fact, you're not even a cube -- just a square. But boy, are you fast! And you can shoot in all directions. That's important, because there are baddies coming in from all over the place.

The "baddies" are swarms of other squares, in all sorts of pretty colors. They track you all over the screen, and you run around very quickly and just shoot, shoot, and shoot some more. If that doesn't sound very emotionally deep, it's because it isn't. But it's fun!

After you shoot a baddy, it splashes paint as it disappears. You need to skate across this blob of paint and "eat it up" to get points. This game is fast. It clocked in at around 60-70 FPS on my system, and was loads of fun to play. It does tend to insult you when you die, though, but don't be offended -- I don't think it's personal.

BattlePaint is an addictive geometric shooter game originally appeared on Download Squad on Wed, 09 Mar 2011 17:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/03/09/battlepaint-is-an-addictive-geometric-shooter-game/

INFOCUS ZORAN ZIONS BAN YAHOO

The Engadget Interview: AMD's Sasa Marinkovic

The Engadget Interview: AMD's Sasa Marinkovic

This isn't the easiest time to be an AMD fan. The company's eight-core FX-8150 desktop chip was widely panned on the review circuit, and then NVIDIA's GTX 680 graphics card ran off with Radeon HD's thunder. Even when you look at notebook processors, where AMD has long excelled with its Fusion APUs, the hype wars currently favor Ultrabooks and Ivy Bridge. Affection for the gamers' brand and its ATI back-story may make this stuff uncomfortable, but the predicament is already starting to mess with AMD's balance sheet. Which raises the obvious question: what's to be done?

Sasa Marinkovic, AMD's Head of Desktop and Software Product Marketing, bravely took up the challenge of providing his side of the story -- even after we warned him that we'd try to disrupt his flow with accusatory glances. In the end, we did get him to acknowledge some recent hard knocks, particularly with respect to the FX chips and their (lack of) single-threaded performance. But we also got some insight into the mind of a chap who remains genuinely and abundantly confident about his employer's future. Read on and see for yourself.

Continue reading The Engadget Interview: AMD's Sasa Marinkovic

The Engadget Interview: AMD's Sasa Marinkovic originally appeared on Engadget on Fri, 20 Apr 2012 12:20:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/MDRJHjz3q3w/

ALLIANCE DATA SYSTEMS ALLTEL AMAZONCOM AMERICA MOVIL

Anontune: The New Social Music Platform From Anonymous [Video]

In a move sure to attract attention from the music industry, a small group of coders claiming to be part of Anonymous is putting together a social music platform. The rather ambitious goal: Create a service that seamlessly pulls up songs streaming from all around the internet. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/LOtWJ9maEdo/anontune-the-new-social-music-platform-from-anonymous

JDS UNIPHASE JDA SOFTWARE GROUP JACK HENRY and ASSOCIATES IXYS

Gladinet maps Amazon Cloud Drive to your Windows desktop

amazon cloud drive
Amazon's recently-introduced Cloud Drive is a great place to store your files online. It offers 5 gigs of totally free space, and U.S. users also get access to the handy Cloud Player app (for Web and Android!) which streams music you upload to your Cloud Drive.

The service could be a little easier to use, however. Until Amazon releases a desktop client, Windows users might want to take another look at Gladinet. The multi-service cloud connector has now added Amazon Cloud Drive support and will let you map a network drive letter to your account with minimal fuss.

Once you've added your credentials to Gladinet, just pick the letter you want to assign to the drive and you're good to go. You can then copy files to and from your Cloud Drive, rename items, and manage folders like you would any local hard drive in your system.

The only downside is that the free version of Gladinet gives you a limited number of cloud interactions. Once you use those up, you'll need to upgrade to the paid version, which costs $49.99. If you work with a number of cloud-based storage providers, however, it could be well worth the price tag.

Gladinet maps Amazon Cloud Drive to your Windows desktop originally appeared on Download Squad on Mon, 04 Apr 2011 09:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/04/map-amazon-cloud-drive-to-windows-local/

TIBCO SOFTWARE TIBCO SOFTWARE THQ TEXAS INSTRUMENTS

Bittersweet Eulogy as a Bialetti Kicks the Bucket [Design]

Everyone has some object that's just too beautiful to give up, despite a major flaw in its function. What is it for you—an old Polaroid or 35-millimeter camera, a stopped watch, an original Nintendo? Hell, a bit brace? More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/S1mvlHopxL4/bittersweet-eulogy-as-a-bialetti-kicks-the-bucket

ECLIPSYS EASTMAN KODAK CO EARTHLINK DST SYSTEMS

Clueless Hackers Took Down DC Government Sites Thinking They Were Attacking the Feds [Hackers]

This morning, hackers took down some of Washington DC's government websites. But as DCist reports, the hackers who did it probably thought they were going after the federal government. Sigh. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/XAGT99SAMj0/clueless-hackers-who-just-took-down-dc-government-sites-thought-they-were-attacking-the-feds

IRON MOUNTAIN INORATED IOMEGA INTUIT INTERSECTIONS

Torus is an impressive 3D Tetris game powered by HTML5

torus
As far as Tetris goes, most variations look quite similar. You're usually looking at a "wall" of bricks directly from the front. Torus takes that notion and throws it away; as you might have guessed from the name (or screenshot), this Tetris clone is played on a ring-like 3D surface.

You rotate the ring itself with the arrow keys, while a Tetris-like piece slowly (excruciatingly slowly, in fact) descends from the top. As soon as you make a solid line, it disappears.

Not all pieces are Tetris-like; some of them wouldn't really work with a regular Tetris game but are a good fit for Torus' 3D format.

Torus is ideal for playing at the office, because it has absolutely no soundtrack. The game is dead-quiet. It's also very very slow (slow enough for me to mention it twice in one post) so you can safely look away for a moment and then keep playing. Also, as soon as the game loses focus, it automatically pauses.

Bottom line: It's an impressive demo of the power of HTML5; if it were a bit faster, it would have some serious addictive potential.

Torus is an impressive 3D Tetris game powered by HTML5 originally appeared on Download Squad on Thu, 17 Feb 2011 17:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/02/17/torus-is-an-impressive-3d-tetris-game-powered-by-html5/

AMKOR TECHNOLOGY AMPHENOL ANIXTER INTERNATIONAL APPLE COMPUTER

DirecTV drops NFL Sunday Ticket price for current subscribers

DirecTV drops NFL Sunday Ticket price for current subscribers

After raising the price of its NFL Sunday Ticket package last season, this year DirecTV is dropping it back down for current subscribers, to just $199. Of course, most of the impetus for the price drop is probably because so many current subs are people who signed up for the service last season with Sunday Ticket as a freebie, but we're sure regular customers will gladly keep the cash in their pockets. Another change for the 2012 season is the NFL Sunday Ticket Max package, which includes all the extras of SuperFan and To-Go (RedZone Channel, streaming to iOS and Android mobile devices, Short Cuts, VOD highlights, etc.) extras as a part of the bundle for an extra $100 to existing customers, or for $299.95. There's no word on any additional game consoles or internet only packages yet, but at least with the lockout a distant memory, football fans have all offseason to decide if they want to shell out for it.

Continue reading DirecTV drops NFL Sunday Ticket price for current subscribers

DirecTV drops NFL Sunday Ticket price for current subscribers originally appeared on Engadget on Thu, 19 Apr 2012 23:31:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceDirecTV  | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/PDUrT_eQeGQ/

INTERSECTIONS INTERNATIONAL RECTIFIER INTERNATIONAL GAME TECHNOLOGY INTERNATIONAL BUSINESS MACHINES (IBM)

Leffot The Fold ? Wallet Origami

The Fold from Leffot is made from one piece of leather, that folds to create a simple wallet. Available in 4 leather colors and 2 sizes (one for US currency and one for international), The Fold is priced from $95 – $120. Very expensive considering that anyone with a dead cow skin and a pair [...]

Source: http://the-gadgeteer.com/2012/04/17/leffot-the-fold-wallet-origami/

IDT IBASIS HYPERCOM HEWLETT PACKARD CO