This week in computer security

Originally Posted by Drithius
What happened to the old account, pibbur?

I sort of deleted/inactivated it. Stupid, but I sometimes do things like that.

The updates wouldn't be so bad but everyone has their own updater. Look, Microsoft provides a perfectly workable one that they appear to be willing to let others use. You don't all need to have your own!! I had 4 of them all asking me to reboot my PC earlier this week.

Originally Posted by figment
I'm really starting to get sick of all of the continuous stream of software updates that are invading my life.

The solution is actually very, very simple :

Just don't connect your PC to the internet.

Problem solved.

I already do so with my "gaming PC" : I connect it only once per several weeks to the internet to check for new updates.

A PC that's not connected just can't be invaded. It's as simple as that.

But of course this requires us to re-think our internet affinity/handling, and to be more conscious about what we do.

… and to get those updates downloaded and installed FAST when you do connect.

Originally Posted by Alrik Fassbauer
But of course this requires us to re-think our internet affinity/handling, and to be more conscious about what we do.

Alrik, I think you'll be pleased to know that your goverment has just been caught red-handed spreading spyware. It features amongs other things wiretapping Skype, Email, MSN, Websurfing, audio/video recording, +++.

The security group who discovered it is not impressed by how the goverment has secured the spyware. It is apparently very easy for other malicious people to take gain control over the spyware once installed.

Yes, I know about this "spyware fuzz". It's extremely … dumb, and it was almost to expect.

Ye'ol Java had a some security problems. Updated installers here for Java SE 6 Update 29.

Critical security vulnerabilitiy, you know the drill.

Download: Adobe Flash Player 11.1.102.55
Check: your current version

Yay update! Java has self-fatality flaws. Installer found here for Java SE 6 Update 31.

And Flash too:
Download: Adobe Flash Player 11.1.102.62
Check: your current version

According to several newspaper and online articles Google and two other marketing companies managed to set cookies and/or track user's behaviour even they they did NOT want themselves to be tracked - happened with Apple's "Safari" browser.

As source is an "Wall Street Journal" mentioned.

This was found out - according to one online article - by an scientist named Jonathn Mayer from the Stanford University.

I heard it was a bug with Safari. I wouldn't be surprised. Apple has a poor history of fixing Safari bugs, imho.

The article rather sounded as if they were wiggling around user settings.

New critical security vulnerabilities in Flash.

Download: Adobe Flash Player 11.1.102.63
Check: your current version

Some meta-thoughts on current computer and iDevice security : http://www.pcmag.com/article2/0,2817,2401381,00.asp

Time to patch Win7 : http://www.h-online.com/security/new…y-1474191.html

Here is another critical update for Flash. Adobe has now changed the update procedure. It now installs a service that will keep your Flash up-to-date all the time, handling installation etc.

New in this release, Adobe requires websites that use Flash for high-performance graphics to pay license. It marks the beginning of the end of Flash. Some will cry, while most will rejoice. The era of Html 5 is fast approaching.

Download: Adobe Flash Player 11.2.202.228
Check: your current version

Thanks for the heads up!

The "Super Worm" : http://www.h-online.com/security/new…m-1585876.html

Impressive : http://www.h-online.com/security/new…d-1612246.html

should point out that 8 million LinkedIn passwords have been compromised. Lots of free information is given out there so I'd update yours if you got one.