fresh news

CanSecWest more than three months after the researchers documented serious vulnerabilities in the content Fast leaving tens of thousands of sites wide open to attack, few have bothered webmasters remove files barouche, an expert from the safety of Google said .

That means that an unprecedented number of sites - many of them used to deposit, ecommerce and other sensitive transactions - remains vulnerable to attacks that steal the personal details of their clients, said the Cans Rich, an engineer for the security of information Google and one of a handful of researchers who were the public with the vulnerability in late December. A few weeks later, he appealed for security professionals to audit all appletes Rapids stored on their sites and replace those that contained vulnerabilities, but so far, few appear to have made if his advice.

"I doubt that many apps has been cleaned at all," Cans told the audience at the conference in Vancouver CanSecWest. "It's a pain in the ass to fix them." There are 10,000 or more sites that receive content barouche, he estimated.

Indeed, Google still has not been time to audit the entire SWF ubiquitous that it serves, although engineers have mitigated the risk to receive pages in numerical IP addresses that are balcanizadas of Google.com, and another domain called Gmail.com uses . That prevents atacadores exploit animations barouche to inject malicious code when people get access to e-mail, calendars and other Google services.

"Many other companies feel the kind of pain that we feel," said Cans. "I had a few major banks send me e-mail and say, 'Oh my God. This is a really big problem'."

One reason for the difficulty is that many of the appletes were created by third parties happy creators months or years ago. When webmasters call creators and ask files improved, third parties often say they no longer have copies of the old happy, Cans said. That means that the only way to remove the vulnerabilities is to regenerate the content from scratch, at considerable cost to the site.

The bugs reside in the safety SWF files created by the most common programs to engender appletes Rapids, which Encourage sites across the Web. The content opens vulnerable websites to cross-site writes (XSS) exploits, which allows atacadores to inject code into the web pages to be read by end users. Criminals could use the attack to ratear details of a user account or make withdrawals on behalf of a client.

Adobe, Autodemo, TechSmith and InfoSoft and most other software manufacturers reported the contents Fast has updated its products so they no longer files barouche product SWF. But so far few users of these products have used the updates to regenerate vulnerable happy, Cans said.

In December, Google searching revealed more than 500,000 appletes of barouche, but researchers, which also included members of the penetration test firm iSEC Partners, said the true number was probably much higher. Since then Google has pinched its search engine, so the same questions again only about 80,000 to 90,000 results.

But Cans remain convinced that the number of files barouche have barely moved, in large part because of the amount of effort required to remove and individuals.

Among the sites that end up in the search results are those belonging to a host of universities, government agencies and businesses, including a bank greater. During an interview, Cans showed us how to manipulate the uniform resource locator of a handful of these sites to force its own window to tap up the habit when he clicked on the link. He read "evil: -)"

While the pages that showed he was only homepages and publicity machine were harmless, he said he would not take much effort to find the content that vulnerable tied to reflect post pages or other sensitive sections of a site. "That's how I run javascript arbitrary," he said with a shy face. "I have essentially full control of that user."

Bumper Sticker Mania!

The internet is a breeding ground for new trends, everyone knows that. Social networking sites like Myspace.com and facebook.com have gotten their starts thanks to us- the internet community. The speed that these sites have grown is utterly amazing. Facebook is loaded with at least 16,000 applications that users can add to spice up their pages. They range in category from Chat to Fashion and Politics to Gaming. What is one of the most popular you ask? Bumper Stickers, of course! I have decided to let you in on some of the top stickers that are being sent from friend to friend...








Ever thought of getting bumper sticker mania on the net through online file sharing? You can use these stickers with a skype download through chatting. These internet phones are extremely useful for those who work at home. If you work at home and you have problems with backup, get a data recovery program. A data recovery software can solve all your problems and reduce all your stress. Get backup hosting for your online data.