Eric Schmidt has been awarded by GOOGLE

| Posted in | Posted on

Google paid its CEO with a great compensation worth $245,322 for his dedication in work in 2009.

Google CEO Eric Schmidt has been awarded with a compensation package worth  $245,322 in 2009 by Google, according to documents filed this week with the U.S. Securities and Exchange Commission. His total compensation fell down 52% compared to 2008, when his pay package was valued at $508,764.
The bulk of Schmidt's 2009 pay is tied to perks, which include $233,542 for personal security and $10,119 for air travel costs for his family and friends. In 2008, Google paid $402,562 for Schmidt's personal security and $106,201 for his family and friends' air travel costs.

Schmidt also received a $1 salary and $1,660 bonus in 2009. He didn't receive any new stock or option awards during the year, nor did Sergey Brin or Larry Page. (Schmidt currently owns 9.4 million Google shares, Brin owns 28.5 million and Page owns 29.1 million.)

As a company, Google grew revenue 9% and increased its profit 28% in its 2009 fiscal year, ended Dec. 31. Revenue came in at $23.7 billion, up from $21.8 billion in 2008. Net income hit $6.5 billion, up from $4.2 billion a year earlier.

Hacker Prefer PDF Readers to Exploit

| Posted in | Posted on

Hackers prefer adobe to hack in a system more easily than any other software. Adobe PDF reader recent updates failed to stop hackers. Don't forget about the issues 16-months old bug with adobe flash player which was recovered recently patched up after 16-months. It was proven that recently, for about 8 - 12 months hackers prefer pdf readers to exploit their attack into a system easily.
Hackers adore Adobe Reader, and have pushed it into first place as the software most often exploited in targeted attacks, a Finnish security company said today.

Microsoft Pulls Mac OS Users Out to Windows 7

| Posted in | Posted on


Microsoft Windows climbed out of its rut endmost period to turn market shares, Web activity complement NetApplications.com said today.

Windows' increment in exercise percentage for February was almost exactly mirrored by a slump of Apple's Mac OS X.

Boiler-suit, Windows accounted for 92.1% of the operative systems that supercharged machines impermanent the 40,000-plus sites that NetApplications monitors for clients of its analytics copulate. Though the process was discount -- righteous 0.1 of a percentage convexity raise -- it was the maximal Windows had posted since June 2009. Windows has gained deal in fitting digit of the endure 12 months.

New Facebook Virus - Hot News

| Posted in | Posted on


A new virus was spreading out targetting Facebook users it spread across through email. 

It was found that it was mailed from login@facebook.com. If you receive any messages that have subject "Facebook Password Reset Confirmation! Important Message". It has a attached file facebook_password_7422.zip. The attached file was infected by harmful virus.


Apple's Safari to fall first in hacking contest in 2010

| Posted in | Posted on


The contest organizer expects Apple's Expedition will be the first browser to fall next month at the Pwn2Own hacking challenge. It will be the contest that will be held every year the hackers who hack the softwares will be rewarded from $10,000 in he hacks in first day.

This contest is held to check the stability and the quality of the softwares.
A scientist who has won at Pwn2Own the ultimate two age wasn't so careful.

Researcher Charlie Miller hijacked a Mac in just 5 seconds through Safari to win $5,000 last year 2009 pwn2own hacking contest.

New Update from Microsoft 'phone home' antipiracy patch

| Posted in | Posted on

As promised, Microsoft Corp. has started substance Windows 7 users an update to the reserves's antipiracy software via Windows Update.

You can download your update over here. Download KB971033
 

Just 3 Simple Registry edits to speed performance Of your Windows 7 PC

| Posted in | Posted on

Every moment you alter a configuration setting, that will be automatically engrossed to the Registry. For example if you change your system time the Registry is updated; if you change your desktop wallpaper, the Registry is updated; if you change your home page in Internet Explorer, the Registry is updated. The Registry is also updated whenever you install a new software or constituent twist. And it all happens automatically, in the environment.

When Windows needs to do conscionable most anything, it accesses the Registry to obtain the priggish plan entropy. In this signified, the Registry functions equal a curb relate for your intact computer system; it defines how every line of your method looks and complex.
Organizing the Registry

Alureon Rootkit Crash Your Windows PC (New Security Patch Crash)

| Posted in | Posted on

Microsoft in a press release on Wednesday inveterate that a rootkit caused Windows PCs to intrude after users practical a warrant repair patch update issued ending period.

Users may need to reinstall windows to fix the problem.

Only systems infected with the Alureon rootkit were incapacitated with Blue Screen Of Death (BSOD) errors that prevented booting, said Mike Reavey, the manager of the Microsoft Guard Activity Edifice (MSRC), in an declaration on the center's blog. "Our investigation has terminated that the resuscitate occurs because the system is pussy with malware," said Reavey.


Full Buzz On New Google Buzz !!!

| Posted in | Posted on



Buzz is a integrated bag -- a combination of good ideas and bad implementation -- and it needs many betterment before it can be a sincere contender among Twitter and Facebook.


In the people pages, I investigate any of the principle of excavation with Buzz and whatever of the problems -- a few of them troubling -- I recovered along the way. I also made leash videos in inflict to alter expound how Sound complex: falsehood and options, transmittal, and multitude and profiles. You'll make a video at the end of each diplomatist of this article.

Microsoft aiming to crack down on Windows 7 activation cracks

| Posted in | Posted on

Microsoft on a report on 11th February, said it will release an update soon for windows 7 users that detects cracked illegal copies of installed windows 7 using more than 70 diverse activation cracks.

The update to Windows Activation Technologies (WAT), the anti-piracy software formerly known as Windows Authenticated Vantage (WGA), faculty be posted to Microsoft's download place on Feb. 17, and offered as an nonmandatory upgrade via Windows Update later this month, where it will be tagged as "weighty."

Out the revenue, the update leave labor Windows 7 Housing Reward, Athlete, Ultimate and Endeavour users, said Joe Songster, the general administrator of Microsoft's activation and anti-counterfeit aggroup. "I'd equivalent to inflection that the Update is uncoerced, which implementation that you can choose not to install it when you see it materialize on Windows Update," said Songwriter in an entry to the Old Windows journal.

That's counter to the practise Microsoft utilised in 2006, when it intensiveness fed Windows XP customers a WGA update by labeling it as a high-priority precaution update. Various users sued Microsoft over that activity; the case was officially fired fitting end hebdomad. Since then, the circle's anti-piracy software updates hump been inferior combative.

According to Williams, the WAT update sniffs out much than 70 "activation exploits," Microsoft's statue for what others play "cracks" that sidestep the fluid activation treat, or use stolen keys to lawlessly alter assumed copies of Windows 7.

After the update has been installed, PCs lengthways unsmooth copies give get displaying a contraband aspect and the familiar gamut of nagging notifications that tick the operative method as imitative. "Machines flying unquestionable Windows 7 software with no activation exploits gift see nothing," promised Vocalizer.

Microsoft regularly refreshes its anti-piracy profession to refer new activation exploits -- it did the selfsame two geezerhood ago in a Vista breaking crack-down -- but the determine of utilize "signatures" in the upcoming WAT update is magnitudes large than any previous.

Among the 70-some cracks shut down by the update are a two that surfaced measure Nov, upright weeks after the actuation of Windows 7. At the indication, Microsoft said it was sensitive of the cracks -- "RemoveWAT" and "Chew-WGA" -- and was employed on ways to wound them. A Microsoft spokeswoman habitual today that the WAT update give let signatures for both cracks.

Singer also noted that the WAT update give periodically "phone domestic" to Microsoft's servers to re-validate the make of Windows 7 as legit, and use those opportunities to update activation signatures to discover newer cracks. Initially, WAT testament introduce to Microsoft's severs every 90 days.

If WAT uncovers tampered, injured or missing activation or licensing files, the software steps up its process, and runs a restraint every week, and if required, repairs those files.

Reverend argued that the update is premeditated to make "customers and partners tight," a principle the lot regularly uses when it explains why anti-piracy software is obligatory. He cited studies by IDC and others, which Microsoft has called on in the ago, that bang said up to a third of phony copies of Windows are purulent with malware.

A leaked reduplicate of Windows 7 Exude Politico (RC) posted on file-sharing sites in May 2009 was, in fact, infected with a Trojan troops.

Wow to Surf Websites that are blocked in Your Office Computers or Blocked by your ISP

| Posted in | Posted on

1. Web2Mail:  This is a free service that works as follows: send a blank email to send@web2mail.co.cc with your desired site URL as the subject. After less than a minute the Web2Mail service will send you an email that contains the web page you requested in HTML format, which you can read in your email client.

As you might imagine, “browsing” your desired site using this service involves receiving the initial email, clicking on a link on that page that most likely be blocked in your browser but that you would use as the subject line in another email to Web2Mail, and repeating. Not the highest quality surfing experience, but will work in a pinch.

One thing I might add: the Web2mail servers are at times unresponsive and there was a point when I was testing it a few days ago and having my emails sent back to me. Since then the issue seems to have been fixed and it is working just fine.

2. Use a Proxy service site: Such as hidemyass.com, can’t bust me, or anonr.com. Many of these sites in fact all belong to the same network and work in the same way: they will act as a go-between between you and the sites you want to access.

The easiest way to find these is to search Google for “proxy service sites” or a similar keyword. Once you are able to access one of these sites you will find an address box where you can enter the URL for the site you want and the proxy site will grab the content for you and present it within the proxy proxy service sites list1site URL, allowing you to surf your desired content while its actual URL is being masked by the proxy site. Note that some of these sites will also provide anonymous internet surfing by disguising your IP address and location info.

These are the two simple and best methods to crack your office computers security level we hope that this will help you to surf even in your office with full freedom.

Obama's New Tax Rules Against India And China

| Posted in | Posted on



WASHINGTON : It was bad news for IT - BPO Sectors in China and India, U.S President Barack Obama Said that the american firms that move jobs to other countries would face severe taxes. Also he said that this will make the american companies to stay within their borders.
He also said that this will provide more number of jobs back to americans.

Mr. Obama said: “Because of the steps we took, there are about two million Americans working right now who would otherwise be unemployed.” Pushing for the bill, he said job creation would be the country’s number-one focus in 2010. The bill will provide for taking $30 billion of the money Wall Street banks repay and use it to help community banks give small businesses the credit they need.

“Now, the true engine of job creation in this country will always be America’s businesses. But the government can create the conditions necessary for businesses to expand and hire more workers,” Mr. Obama said.

As we already know that the IT companies in India and China already booming up a great economical growth for their countries. Obama is palanning to recover the severe financial crisis that made their economy worse. Mr Obama also announced new tax rules so that he will end tax breaks to American firms that outsorce jobs to other countries.

According to NASSCOM reports, IT sector’s revenue accounted for 5.8 per cent of India’s gross domestic product in 2008-09, up from 1.2 per cent in 1997-98.

 

MS OFFICE 2010 Basic System requirement and Price

| Posted in | Posted on

Microsoft has ruled the office world for past 4 decades. Following the MS Office series the next launch was MS office 2010. MS office 2007 has a great reach among the users. The graphical user interface and the advanced graphics used in it makes the good looking office package ever.
The next launch of microsoft organisation was MS Office 2010 which has better look than 2007 also it is faster and efficient than MS Office 2007. It was fully loaded with all best features in it.
Basic Requirements to Install Your new MS OFFICE 2010 :
  • Windows XP SP3 / Vista SP1  / Windows 7
  • 500 mhz Processor
  • 256 MB RAM
  • 1 - 1.5 GB Hard disk 
Price of MS OFFICE 2010 Package was:
1. Student Edition - $ 149 for 3pc and $119 for 1 pc.
2. Business Edition - $ 280 for 2 pc and $199 for 1 pc.
3. Professional Edition - $499 for 2 pc and $349 for 1 pc.
Here is some of the screen shots of MS ofice 2010.


Gmail Hacked ? Chinese Media Spun It was a Commercial Move

| Posted in | Posted on




Chinese media has spun Google's threat to depart Crockery as a purely commercialized move, as authorities there seemingly succeed to lessen discussion of hominid rights issues upraised by Google. Google endmost period said it had been hit by cyberattacks from Crockery largely aimed at accessing the Gmail accounts of Chinese manlike opportune activists, and that the visitor power ambient eat its PRC offices part as a result.

In its promulgation, the low of its type from a educate e U.S. Net companion operating in Crockery, Google said else reasons for its judgement included growing attempts to decrease free speech online. But spell umpteen Midwestern broadcast reports on Google's propose individual focused on those politically sensitive statements, few Chinese reports feature cited them at all. Most reports that do reference the criticism on Gmail have done so without elaborating, leaving out information that could scent Island authorities if seen in publish. "Various days after the Google announcement, there seem to be fewer Google-related posts and editorials in PRC that include across-the-bow shots at Internet censorship," Painter Bandurski, a researcher at the Lincoln of Hong Kong, wrote in a journal author on Sunday.

"This mightiness advise, tho' it is arduous to recount, that there love been directives from the propaganda division recounting editors to selector it punt." Chinese journalists and interested editors can meet punishment by authorities for publishing articles on tender political topics.

They are also sometimes sequential not to correspond on touchy issues or to mark exclusive formal news-wire stories on them. Crockery's state-run media has mostly fired the semi-political concerns raised in Google's evidence. An op-ed in the officialdom production China Daily slammed Google's slogan of "do no offensive" as hypocritical and suggested the accompany may be using it as a tog to issue the land for playing reasons. A estimation on Google's propose by Xinhua, the advise news office, said it was "improper to spiel up the printing, or transmit it into a political one.

" The Xinhua conjoin mentioned the cyberattacks on Google but did not plant Gmail or frail rights activists as their take. It called cyberattacks usual and said it was "far-fetched" to everlasting Crockery for them, though Google has not done so. A Google spokeswoman said the affiliate's need for its announcement was not financial. "Patch our revenues from Dishware are real unimportant, we retributory had our optimal ever session," the spokeswoman said in an e-mail. "That income, incidentally, is primarily from the export sphere -- in different text Island companies publicizing internationally on Google." Reports nearly Google on privately run Asian word sites screw also said short near limits on freeborn speech or the questionable cyberattacks on rights activists.

Authorities may individual sequential news portals to movableness behind the rights issues, but the portals could also be censorship themselves, said Jeremy Goldkorn, founder of the journal Danwei.org. Google became one of the most discussed topics on local vein Sina's microblog run within hours of the U.S. affiliate's declaration sunset hebdomad, but Sina apace deleted it from the tilt, said Goldkorn. "The portals and Asian Web sites themselves, they're large on self-censorship," said Golkdkorn. 

"People bed this is a oversensitive artifact." Prc's adventive ministry penultimate hebdomad responded to Google's move by saying the Asiatic Cyberspace was undecided and that adventive Internet companies were recognize to do mercantilism in Dishware according to the law.

Smartphones need SMART Security

| Posted in | Posted on

 

Hackers Next target is smart-phones since they have little security



 As vice president of IT at Metropolis Foods in Politician, Stephan Henze has to check one block ahead of the stylish IT trends. That's why he's spending a lot of period cerebration around securing and deploying smart phones enterprise wide. The accompany had exclusive a few-dozen smart phones right a low quantify ago, but IT now manages roughly 100 of them, and Henze foresees essential maturation in the neighbour next.

The duty of securing smart-phones keeps getting hairier, Henze says, patch the society's status for transferable field grows stronger, plane on the work storey, where upkeep engineers instrument soon greet automated SMS alerts on their phones.

He's not sure he can uphold to implement the troupe insurance of bearing only Windows Mobile-based phones, yet unaccepted devices instrument refine his warranty efforts. He is fortunate knowing that for many fill, a smartphone is a style evidence. "With PCs, I was competent to verify them we're not a Mac surround, but I'm not careful I can do that with phones downfield the traveling," he says.

Henze is among a ontogeny name of IT and assets body grappling with the repugn of securing these progressively general devices. The coil fear, of bed, is the venture of exposing sensible collection if a sound or extractible retention paper is lost or taken. Accumulation can also be unprotected if a sound is sold or conveyed in for repairs without its hardware initial state erased.

There's also the try that VPN-connected devices could show corporate networks to cyberpunk and malware intrusions. And there's a healthy potentiality for viruses to onslaught the phones themselves finished SMS hacks and else exploits. "If I bed your figure and scatter around with it, what if the VPN is set up on it?" asks Philippe Winthrop, an shrink at consultancy Strategy Analytics Inc. "It's a brobdingnagian probability not beingness dealt with sufficiency today."

 Complicating matters, users are apt to prospect smartphones as their own individualised gadgets, not something IT should prove. "There's a wakeless underlying live of 'This is my floating instrumentation,' " says Gospel Moneyman, an shrink at Gartner Inc. A individual gift oft see his smartphone as something that's "bluish and plays music," not as an plus that needs to be secured, he says.

Smartphones' transmission capabilities raise added concerns, Girard says. For happening, visitant insurance might require afoot joint documents to foreign media, but is there a policy that governs using a smartphone to guide photographs in the role or accomplishment meetings?

Umteen companies try to construe interact by purchase acceptable phones for employees -- a change that at lowest enables them to livelihood upright a lonesome operating system. But alter then, users may adhere to the definitive exclusive loosely, says Saint DeBeasi, an analyst at Actor Forgather. "I see employees who soul the associate sound in their parcel incurvation and their personalised sound in their just," he says.

Indeed, in a recent drawing of 300 companies in the U.S. and Continent by Gracious Profession Inc., a vendor of transplantable surety and management tools, nearly 80% of the respondents rumored an growth in the signal of employees who loved to alter their own devices into the work in the ancient six to 12 months, and 28% rumored a accumulation open because of an illegitimate gimmick.
 



Three lessons for business from the Google attack

| Posted in | Posted on





The cyber attacks against  Google and much than 30 added technology companies by adversaries operating out of Dishware highlights what both telephony the Front Relentless Danger (APT) tackling a growing wares of U.S technical entities.



The constituent has been utilized for few period in governing and combatant domains to draw targeted cyberattacks carried out by highly arranged state-sponsored groups with depression foul skills and computing resources.



Specified attacks are typically highly targeted, stealthy, tailored and relentless. They also oftentimes refer modifier surveillance and front mixer subject. In umpteen cases, the attacks butt highly set individuals within organizations who are tricked into visiting despiteful sites or downloading despiteful software onto their systems. The end in most of these attacks is to move merchandise secrets rather than private or business information.



Governance networks, especially those of the Division of Structure, individual been the direct of specified progressive relentless threats for eld. But as the attacks against Google and others pretence, these threats are spilling over into the technical cut.



Composition in a journal communication Thursday, department vendor McAfee's leader application seaman Martyr Kurtz noted that APTs had begun to modification the danger landscape.



"These attacks hold demonstrated that companies of all sectors are real moneymaking targets," Kurtz said. APTs, he noted, individual beautify "the equivalent of the moderne modulation on the tract. With patch accuracy they expel their virulent load and erstwhile discovered - it is too late."



Effort the danger does not ever order the exploit of new technologies. But it does say rethinking several of the strategies that companies may be adopting to protecting aggregation, Kurtz and others said. 


Specified the enormous development in designed cybercrime over the historical few eld, most companies somebody implemented defenses for protecting own and business accumulation from thievery. Patch that's strategic, it's also constitutional for companies to cogitate near protecting their highbrow conception aggregation, said Ed Skoudis, co-founder of InGuardians, a Washington-based protection consultancy.



"The threat has shifted," Skoudis said. "If you go aft over 10 life, the coil threats we featured were from hobbyists. Then the landscape changed, and the primary danger we most had to aggregation with was reorganised crime. And now it has shifted again," he said.




Umpteen cyberattackers are author are fascinated in corporate espionage and in concealment mental property than they are in feat after entry paper lottery or unhurried upbeat collection.



"There's works the headache nigh group concealing 27 1000000 game," Skoudis said. But a unfortunate to adequately protect IP and corporate secrets against analogous felony could finish in far solon long-term harm, he said. "You got to harmonize what your threat is and how to await for it," he said.



Hot News: Network Security Issue in 2010

| Posted in | Posted on




                       Network World - Looking onward to 2010 patch trying to erase the retention of 2009 -- here are my warranty predictions for the new year.

  *    Warrant resource increases by many than 10% to recover from a period of cuts. Our explore shows that safeguard is one of the areas littlest promising to see strict funding cuts. Nonetheless, supposal escalating threats, a unexciting surety budget in 2009 may bonk been a step bet for companies. Look an endeavor to hit up for 2009.


Primary news: Hunting okay at 2009, onward to 2010

  *   Congress creates new restrictive compliancy mandates. Enron gave us the Sarbanes-Oxley Act (SOX). What will 100x Enron make us? The math of compliance is shocking because it represents "assymetric conflict". A few sentences of governing (SOX cutting 404?) can further to zillions in disbursement. The business meltdown of 2008 to 2009 instrument counseling to extensive and rattling dear regulating, in financial services and beyond.

  *   Self-propagating ambulatory phone worms and Trojans. Raiseable surety present get slightly worse as the proliferation of applications and canny devices broadens the criticise surface. Piece we've seen worms on iPhone, they tally not been self-propagating, depending on PCs to condiment. Look to see apodeictic self-propagating threats on iPhone and Humanoid systems in 2010.

  *   Cloud engineering providers inform encryption-at-rest and otherwise department capabilities "as a serving". With guard as one of the primary impediments to cloud adoption, judge to see coding, VPN, intrusion-protection systems and otherwise instrument capabilities offered as a per-hour billable union. River's Realistic Cliquish Cloud is virtuous the showtime. This could metamorphose a key region of rivalry in 2010.

  *   Surety in the cloud expands with new services. In increase to darken engineering, managed precaution services (warrantee in the darken) module also amplify. Expect to see data-leak prevention, coding, directory and proof services provided by MSSP in addition to the old staples of antispam, antimalware and firewall.

  *   Screen virtualization grows. Beyond thin-client realistic desktops, companies present commence perception at on-laptop virtual machines as a way to create established corporate desktops with easier deployment. A virtual organisation can use snapshots to return to a known-good (known-secure) configuration providing a higher accolade of surety for online banking or tight joint applications. Operate and modification can co-exist on element patch maintaining modification. Or you could just play your employees only use apply PCs for utilize -- worthy chance.

  *   The FBI issues tens of thousands of security letters to get records on individuals without warrants. Congress investigates and is afraid at the FBI's "underreporting". The FBI promises to do better (see 2009, and 2008 and 2007....). The 4th amendment continues to delapidate into meaninglessness.

Unannounced HP 210 Netbook 'in Sales'

| Posted in | Posted on


Hewlett-Packard hasn't declared the Mini 210 Net book yet--but a reseller has.

Here are the Mini 210 specs as listed by eCost:

    * Operating System: Win7 Starter
    * Processor:1.66GHz Intel Atom N450
    * Display: 10.1" Flush Glass
    * Memory: 1GB
    * Hard disk drive: 250GB 7200RPM
    * Video Card: Intel Graphics Media Accelerator 3150
    * Battery: 6 cell
    * Wireless Connectivity: 802.11 b/g/n
    * Other Device: Integrated Webcam & Mic
    * Price: $398.99

The most salient feature of the new set of Netbooks based on Intel's latest ("Conifer Tag") Atom element is not show but bombardment account. CNET got solon than cardinal hours of bombardment aliveness from Asus' new Eee PC 1005PE (see exercise) with the Corpuscle N450 processor and new practice sites are claiming over ten hours.

Also of commentary is the new graphics break that Stuff uses: the Intel Graphics Media Pedal 3150. This is a edition of the graphics engine that was victimised in full-fledged laptops that prototypal debuted hinder in the summer of 2007 (supported on Intel's "Santa Rosa" movable field). The 3150 supports 720p HD recording playback.

For many graphics tough, Intel is advising PC makers to use the Broadcom BCM70015 Protection HD chip that allows higher-resolution 1080p recording playback. Nvidia also offers its Ion graphics chipset for 1080p HD playback and games. The Ion chipset is utilized in the HP Mini 311 and is potential to be misused in upcoming HP Netbooks.

Is Twitter Safer ?

| Posted in | Posted on


Above Diagram shows a Koobface attack message on a Twitter page.
(Credit To: Trend Micro)

Twitter has the same malware, phishing and social issues that Facebook has, and the solutions for those problems would be almost same. Because users don't provide much individualised information to Twitter, and can even create accounts using fake information, and because anyone can follow anyone, there aren't the same issues with privacy, either. But that makes easy for spammers.

security does seem to be a difficult with Twitter. The site has various problems from employee accounts got compromised. In Jan, someone hacked into the Twitter's internal network -- just by guessing the password -- and gained access to the Twitter accounts of President Obama, CNN Anchor Rick Sanchez, and 31 other high-profile Twitterers. In May, someone broke into Twitter's network and gained access to 10 accounts, which appeared to include Britney Spears and Choreographer Kutcher. In that severance, a hacker was competent to make way to a Chirrup employee's Character declare through the arcanum feat grouping and from there get message from separate sites, including gain to the employee's Cheep calculate. And antepenultimate hebdomad, the legal invoice of a Twirp employee was utilized to highjack the site and redirect visitors to an external a

Meanwhile, Chirrup was lame (and Facebook and separate sites also agonistic) by a rarefied politically impelled denial-of-service knock targeting one someone in Honourable. Still, that incident reflects author on Cheep's cognition to rest the place up in the face of an criticism and convenience than it does nigh warranty risks to users.

Twitter users are susceptible to getting their accounts hijacked, and the site has been targeted by clickjacking pranks. In these social engineering attacks, users were encouraged to click on links that distributed the original tweet to all of the Twitter user's followers.

Users with large numbers of followers have an added responsibility to be careful, particularly when setting accounts to automatically post items from news feeds. A malicious post on an unmoderated news feed that venture capitalist Guy Kawasaki was re-tweeting distributed a Trojan to more than 139,000 followers in June.

Kaspersky offers a Krab Krawler tool that analyzes tweets as they get posted on Twitter and blocks any malware associated with them. Trend Micro has technology that monitors Twitter posts for malicious URLs, as well as looks for attack patterns in the posts, such as use of popular terms to indirectly lead people to malicious links. And Finjan offers a free browser plug-in dubbed SecureTweets that warns users when they encounter a malicious URL in Twitter, as well as Blogger, Gmail, Google and a host of other popular sites. To keep up with security issues on Twitter follow Twitter's Spam Watch account.

Social networks are also susceptible to other serious security problems that can hit any type of Web site. For instance, last week passwords of 32 million stored in plain text on the RockYou site were exposed by a SQL injection attack, according to security firm Imperva. Because the passwords are used on other affiliate sites to the social networking application maker, the breach jeopardized other accounts, like Gmail, Hotmail, and Yahoo.

Tips To Use Facebook SAFER

| Posted in | Posted on



Problems: Malware, account hijacking, phishing, and social engineering

The greatest malware venture is Koobface, (an anagrammatic of Facebook), which is a insect that targets friendly networking sites and affects Windows-based computers. Erst a machine is septic, it hijacks the Facebook reason and sends messages to new friends of the mortal, enticing them to utter on a connectedness. The link redirects to a Web tract where they are prompted to download software ostensibly to see a recording. Nevertheless, there is no recording; only malware that infects the grouping, blocks access to warranty sites, and can be old to move susceptible message from the computer, much as approval salutation numbers. Purulent machines can then be old to condiment the louse to others on Facebook, send spam and administer artificial antivirus alerts, said Rik Ferguson, a safeguard researcher at Taste Micro. Koobface now can automatically create new profiles using putrid machines, he said.

Facebook accounts can be hijacked in several structure. A brute-force criticize can be used to view passwords. Users can pin for phishing attacks by clicking on course in messages or e-mails purportedly coming from friends that airt to a fake Facebook log-in industrialist. Or malware such as Koobface can steal passwords.

Social engineering is a huge problem for social networks because the trust that users have for messages and posts from friends can be easily exploited by scammers. Hijacked accounts are used to send everything from spam touting weight loss plans to links that install malware and steal passwords to fake emergency messages saying a friend is stranded in another country and needs someone to send money. Scammers are also sending e-mails that look like they come from Facebook and include an attachment that contains a Trojan.

Solutions: Use antivirus and anti-malware software and keep it up-to-date. Install security updates for operating system and other software. Use software like AVG Linkscanner or McAfee Site Adviser to protect against phishing and malware attacks. Become a fan of the Facebook Security page, which has posts related to all sorts of security issues, tips, resources and other information. If you think you've been infected with Koobface or other malware you should reset your password and notify friends who may have been affected.

Use an up-to-date browser that features an antiphishing black list, such as Firefox 3.0.10 or Internet Explorer 8. Be aware of where you enter your password. Check to see that you are logging in from a legitimate Facebook page with the Facebook.com domain. Be wary of unusual stories or offers that are too good to be true. Verify information with sources directly. Be cautious of any message, post or link that looks suspicious, requires an additional log-in or asks you to download or upgrade software. If a link seems odd or lacks context, don't click on it. Don't click on links or open attachments in suspicious e-mails. You can add a security question from the "Account Settings" page if you would like an additional layer of protection.

Problem: Rogue applications

Facebook doesn't vet every app that appears on the site, which means there is a risk that some apps will have bugs in them or will violate Facebook's privacy policies. Facebook has proven diligent in removing rogue and problem apps quickly when it is notified, but unlike iPhone apps, pretty much anyone can write a Facebook app. "Because the code is not always of professional standard or hosted or audited by Facebook, we've seen innocent apps compromised externally and used to deliver malware, such as fake antivirus," Ferguson said. One rogue app that appeared early in the year sent notifications to Facebook users reporting them in violation of terms of service and offering a link that lead to an application called "facebook -- closing down!" which then spammed all the friends of affected users, according to Trend Micro.

Solution: See solutions above, and be cautious about adding applications. Research the developers and perform Web searches to see if anyone has complained about the app. And ask yourself, what value does the app provide? Do I really need to play zombie?

Problem: Privacy leaks due to user error

Because people control who they are friends with on Facebook it is easy for users to have a false sense of security about the privacy of their data and activities on the site. Social engineering attacks, lax security practices by users like using weak passwords and design or implementation problems with the site itself can undermine the privacy protections users rely on. Users who fall for phishing scams and get their accounts hijacked have everything in their account exposed to strangers who can then use the different types of data for identity fraud or to target the victim's friends with social engineering attacks.

Solution: See solutions above. Also, use unique logins and passwords for each Web site you access. Use strong passwords, change them often and don't share them with anyone.

1.Click on Profile on the top of the screen

2.scroll down to beginning of your friendslist and click on the pencil to the right of the word friends

3.Uncheck the box that says "show Friend list to every one".

Problem: Privacy leaks due to design or implementation issues

Privacy advocates contend that Facebook's lenient apps approval process, privacy policies and confusing privacy settings put users at risk. Two weeks ago, Facebook asked users to configure their privacy settings. The options were confusing and many people were inclined to just keep the default settings, which are set to make the data visible to the Web rather than opting to use the old settings established by the user. Screenshots and descriptions are detailed on this photo gallery.

Many people have complained that it is difficult to figure out how to change the privacy settings, that they are not intuitive and that there doesn't seem to be one central place for that. And using Facebook Connect with outside apps, like the iPhone app Foursquare, can expose more information than a user expects to share. The new privacy changes at Facebook have prompted the Electronic Privacy Information Center to ask the Federal Trade Commission to investigate.

Facebook encourages people to share their full names, date of birth, home town and other information, all pieces of information that are commonly used in identity fraud. Scammers on underground sites even refer to Facebook as a "free date-of-birth look up service," according to Ferguson. People don't realize that their profile information can be accessed by total strangers who happen to be in the same groups or networks unless they specifically change the settings. People who don't trust random apps--which in general have access to profile information even if it isn't necessary to the function of the app--don't realize that the apps their friends are using also have access to their data. "Friends apps can access most of your profile, interests and groups. There is no way to prevent them from accessing your name, profile, photo, town and gender," said Joseph Bonneau, a PhD candidate in security at the University of Cambridge. In response to user feedback, Facebook made a change that allows users to hide their friend lists from everyone but their friends, a Facebook spokesman said.

Solution:Our Blog has a tutorial on how to hide your Facebook friends list by clicking on the pencil in the friends box on your profile. Detailed instructions and tips on dealing with Facebook privacy settings are available on the DotRights.org site and on the All Facebook blog. Facebook also has a blog post about the privacy changes.

Problem: Privacy leaks related to marketing

The relationship between the apps and advertisers can also cause problems. Adding an app allows the app to show ads inside the Facebook domain, and that can leak a user's profile information to the advertiser, said Peter Eckersley, a staff technologist at the Electronic Frontier Foundation. Meanwhile, cookies and other browsing tracking technology combined with data from social networks can be used by marketers to identify users for targeted advertising and other purposes, Eckersley said, providing details in a blog post on different ways data can be leaked from social networks to third-party tracking firms. Once marketers know a specific person's user name, they can use that identifier in the URL to get to a user's public profile page, according to Eckersley. "They can create a social graph of your date of birth, city, employment, relationship status, all uniquely codified in a way that can be automatically sucked into a database," he said.

Solution: Pick a good cookie policy for the browser, such as manually approving all cookies or only keeping cookies until the browser is closed. Disable Flash cookies. Use Firefox extensions such as RequestPolicy and NoScript to control when third-party sites can include content or run code in the browser page. Use the Targeted Advertising Cookie Opt-Out plugin or AdBlock Plus to block ads. To hide your IP address and other browser characteristics, use Tor via Torbutton.

Problem: Information used to suppress dissent and target political activists

As with e-mail, blog postings and other public expressions of dissent, Facebook and Twitter have been used by governments to target protesters. The Wall Street Journal reported earlier this month that family members of Iranian Americans had been arrested or questioned because of anti-Iranian government posts on Facebook by members outside the country. In other instances, Iranians living abroad were forced to log into their Facebook accounts or reveal passwords to government officials as they arrived at the Tehran airport and some even had their passports confiscated because of their political posts. In the U.S., the EFF says, officials have taken actions against U.S. citizens based on information discovered on their social networks; the group has sued the CIA and other agencies for allegedly refusing to release information about how they are using such sites in surveillance and investigations.

"Basically, every time you post something to Facebook you should assume that the whole world will know what you've posted, your family, employer, the government, people you don't trust," Eckersley said.

Solution: Think carefully about what information you want to share about yourself and consider only posting information you would want to let the general public see.