Google API with OAuth, Apple wants 'Pod', ZoneAlarms scares, Microsoft shuts blog, and FBI cheats

Pop-Link@[27-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google Apps API now supporting the newer better OAuth mechanism for users to authenticate with the service via APIs instead of any need to provide its Credentials.

Article: http://googlecode.blogspot.com/2010/09/new-oauth-support-for-google-apps-apis.html

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

FBI Agent caught cheating in exams organized to evaluate their updated knowledge about security and globe... WOW!!!

Article: http://www.reuters.com/article/idUSTRE68Q32O20100927

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Microsoft is shutting down Windows Live Blogs, asking to move it to Wordpress; or others if yout want.

Article: http://www.zdnet.com/blog/microsoft/microsoft-makes-it-official-windows-live-is-no-longer-a-blogging-platform/7487
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Check-Point's ZoneAlarm just used to give nagging screens to buy but now it fall selfish-cheap scaring off its free version on name of malwares to buy off the product. No matter what I'll use its free version only to nag back.
Article: http://www.theregister.co.uk/2010/09/20/zonealarm_scareware_flap/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Apple is bringing Kokin to trial for using 'Pod' for his startup developing video projector called 'Video Pod'.
Article: http://arstechnica.com/tech-policy/news/2010/09/apple-startup-go-to-trial-over-pod-trademark.ars
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BruCon Destroy Companies, What Is Orkut XSS, Facebook outage cause, ASF Millionth Commit and e-Skin for Robo

Pop-Link@[26-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

@BruCon: Top 5 Ways to Destroy a company

Tarnish the Brand >> Alter Product >> Attack Employees >> Effect financial >> Your-Turn
Article: http://blog.c22.cc/2010/09/25/brucon-top-5-ways-to-destroy-a-company/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Orkut XSS demystified, gotta see the Javascript pattern used to launch 'Bom Sabado' attack on 25th Sep'2010
Article: http://antrix.net/posts/2007/orkut-xss/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Details on Facebook outage on 24-Sep-2010 for 2.5 hours.A flawed handling of error-handling via an automated system for configurations caused damage.
Article: http://www.facebook.com/note.php?note_id=431441338919&id=9445547199&ref=mf
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Apache Software Foundation hits its MILLIONTH Commit on 22nd Sep'2010 by ASF Member Yonik on behalf of Apache Lucene Project. Congratulations!!! to ASF on awesome contribution to community.
Article: https://blogs.apache.org/foundation/entry/the_asf_hits_its_millionth

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Pressure Sensitive 'e-Skin' for new generation Robotics has been fabricated by UC Berkley's Scientists using semi-conductor nano-wires
Article: http://www.associatedcontent.com/article/5803350/pressure_sensitive_eskin_revolutionizes.html?cat=15
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Orkut's Bom Sabado XSS, Stuxnet via Autorun, Nokia spends $10M on Symbian and NEW google, IBM

Pop-Link@[25-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'Bom Sabado' bombs XSS attack over Orkut, just after Twitter XSS a similar spreading attack on Orkut, its actually a Portugese word meaning 'Good Saturday'...
Article: http://www.echoblogger.com/internet/cross-site-scripting-attack-on-orkut/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Stuxnet is using Autorun vulnerability to spread this .LNK File Vulnerability
Article: http://www.symantec.com/connect/de/blogs/stuxnet-lnk-file-vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Nokia is spending $10 million for Symbian to be popular, giving away money to several developers via online development contest
Article: http://www.colordev.com/50_links_in_a_day/2010/09/nokia-paying-10m-for-symbian-coders/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Get to know about all new Google Products being launched instead of wondering when it came anyway...
Article: http://www.google.com/newproducts/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM at new-pulsed-STM technique making DRAM cells about 200,000 times faster than before... SPEED <3 IT
Article: http://eetimes.com/electronics-news/4208749/IBM-characterizes-single-atom-DRAM

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Interpol spoofed, Web Redirect-Hell, Context-aware UI, IBM DW Cloud Event and XSS

Pop-Link@[24-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Cyber Criminals spoofed INTERPOL Chief's identity on Facebook to gain information on International Fugitives, great is this how 'InterPol' is supposed to discuss such information on the first hand i.e. Socially...
Article: http://www.net-security.org/secworld.php?id=9884

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Short URLs and other web practices are increasing the hops between user and actual Web-content

Article: http://royal.pingdom.com/2010/09/22/is-the-web-heading-toward-redirect-hell/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Canonical's view about Ubuntu and Context-aware UI, they are working on features like video going full-screen mode automatically detecting user has laid back on chair in a resting position... nice :)

Article: http://www.thinq.co.uk/2010/9/14/canonical-designer-demos-context-aware-ui/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The actual code style for Twitter XSS attack, here you could have a look over what kind of 'onmouseover' tweet acted as a malicious script

Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Twitter-OnMouseOver-XSS/ba-p/82527#feedback-success

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM DeveloperWorks Virtual Event in October on Cloud for Developers, Register Now

Article: http://www.ibm.com/developerworks/offers/techbriefings/details/cloudfordevelopers.html?cmp=dw&cpb=dwcld&ct=dwcom&cr=dwcom&ccy=zz

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BAE wins, Google hunted down, Security Success, Firewall and giant Zynga

Pop-Link@[23-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BAE Systems has won $40m for the deal to secure US Cyber Borders, covering FBI networks. What happened to Security Teams in US, and even if someOne hacks them after this.
Article: http://www.itnews.com.au/News/232968,fbi-awards-42m-cybersecurity-deal.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google revealed that its fiber cable at Oregon was shot down by hunters... OMG!!! my data was there, is this how they securely transfer it, anyways thanks for telling that your cables lie there ;)
Article: http://www.itnews.com.au/News/232831,us-hunters-shoot-down-google-fibre.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Is Firewall required on individual Desktops? Is it an over-KILL? If your machine is sitting behind a secure server, then still you require Firewall or it is slowing you down? see someone else's perspective...
Article: http://www.pcpro.co.uk/realworld/361375/do-we-really-need-a-firewall-on-our-desktops
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"HP Blog" on  how to measure success of a Security Program in your Organization. Some thoughts on reducing legacy defects and newer possible risks.
Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Measuring-quot-Success-quot/ba-p/82522
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Some details on fastest growing social-gaming giant Zynga... 10% of Internet Population has played their games
Article: http://techcrunch.com/2010/09/22/zynga-moves-1-petabyte-of-data-daily-adds-1000-servers-a-week/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google 2x Security, UK Cyber, SNES on PS3, POET hack Oracle, childish MI5

Pop-Link@[20-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Mr.Fox says UK Cyber Security should be handled by National Security Council also, it's not any small issue to be handed over to few officers.

Article: http://www.publications.parliament.uk/pa/cm201011/cmhansrd/cm100913/debtext/100913-0001.htm#1009137000024

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Super Nintendo Emulator SNES9x pver PS3, some features yet to be supported.

Now go MARIO on your PS3 :)



Article: http://ps3-evolution.dcemu.co.uk/super-nintendo-emulator-snes9x-released-for-ps3-327501.html


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oracle based services are vulnerable for side-channel attack for padding Oracle against CBC mode encryption... this was discussed once in 2002 at EuroCrypt conference, in 2010 again its still active demo was presented at a Hacking Conference, they ares supposed to affect 25% of Internet Infrastructure (ASP.net, JSF, etc.)

Article: http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
ALSO, a new ASP.net vulnerability responsible for Information Disclosure
https://www.microsoft.com/technet/security/advisory/2416728.mspx


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

a Twitter User @PigSpotter warning motorists of SpeedTraps, tension for Cops.

Now when Cops are monitoring his acts so he has gone on break stating his BlackBerry is in for repair.


Article: http://www.iol.co.za/index.php?art_id=vn20100918083241209C425606&singlepage=1

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

MI5 states cyber made espionage more strong but is more straightforward in blocking data stealing... 

They Are KIDDING right, land-water-air are much more safer to identify enemy... in Cyber World anyone can be MI5.
Article: http://www.theregister.co.uk/2010/09/17/mi5_cyber/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The leaked master key of HDCP (High B/w Digital Content Provider) cracked it to strip down encryption... and thus Intel HDTV code got cracked.

How many times shall we repeat that 'Security should not depend on obscurity'.

Article: http://www.foxnews.com/scitech/2010/09/16/intel-confirms-hdtv-code-cracked/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



2 Step Auth by Google, currently just for some App users... to protect you from phishing, you will also have to enter the sms-code sent to your phone number added to your Google Account [ but what if I loose my Mobile :), logged out till arrange new sim with same number ]

Article: http://techcrunch.com/2010/09/20/google-secure-password


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Facebook Phone, Mandriva Forked, Social Spy, Suse on Sale, NetFlix Hit

Pop-Link@[19-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Facebook is up building a phone (android based), claiming to aim for a platform not just a phone...
Article: http://www.businessinsider.com/heres-why-facebook-is-secretly-building-a-phone-it-needs-to-be-a-platform-not-just-a-service-2010-9


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

A new Linux Distro forked from Mandriva... Mageia
Article: http://www.mageia.org/





-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Corporate web monitoring of their employees social activities, mail & chat habits
Article: http://www.darkreading.com/security_monitoring/security/vulnerabilities/showArticle.jhtml?articleID=227500152

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

NetFlix causing big losses to Cable TV
Article: http://www.businessinsider.com/30-of-young-netflix-subscribers-are-cutting-the-cable-cord-2010-9



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

VMWare is trying to buy over SUSE Linux from Novell's Linux Software Unit
Article: http://online.wsj.com/article/SB10001424052748703440604575496053490383496.html

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

faulty (Diaspora, CIA , Facebook, Adobe), MS Secured, Botnet Sales

Pop-Link@[18-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The Open-Source initiative to replace Facebook, Diaspora isn't yet close to secure... need a lot more hardwork.


Article: http://www.thinq.co.uk/2010/9/17/alert-raised-over-diaspora-security/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Netezza bought geospatial softwares from IISI, reverse engineered it and sold flawed version to 'CIA' ...Big Daddy got Conned and used hacked software for its Drones

Article: http://www.aolnews.com/nation/article/cia-drone-program-using-hacked-software-company-claims/19638508

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Facebook, turning out to be the second name for Social Networking is also turning out to be the biggest Malware Infection source.

Article: http://www.net-security.org/malware_news.php?id=1466

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

SpyEye, a famous botnet kit not only let botnet owners steal Credit Card information but also let them make fake sales from any site where the many can be transferred using a cart.


Article: http://krebsonsecurity.com/2010/09/spyeye-botnets-bogus-billing-feature/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'EMET' i.e. Enhanced Mitigation Experience Toolkit by Micorsoft to make your computing experience more secure computing by securing any kind of application running over Windows to be exploited for its vulnerabilties.

Article: http://blogs.technet.com/b/srd/archive/2010/09/02/enhanced-mitigation-experience-toolkit-emet-v2-0-0.aspx

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

I don't beleive Adobe is still caught in 'strcat' over 'strncat' issues for Security... well its a well big bloated organization with big bloated code.

Article: http://www.theregister.co.uk/2010/09/15/unofficial_adobe_reader_patch/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Just for fun and Self-reminder... Epic Failures : 11 Infamous Software Bugs

Article: http://www.itworld.com/software/120117/epic-failures-11-infamous-software-bugs

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Pigeon Vs Broadband, Futuristic Intel, Microsoft and Google defamed ...& more

Pop-Link@[17-09-2010]

to show state of woeful broadband speed in Rural parts of UK, ISP Timico snet 2 pigeons carrying 200MB microSD card... to check which transfer completes first. Any guesses who won, The Pigeon :)

Article: http://www.ispreview.co.uk/story/2010/09/16/uk-business-isp-timico-challenges-pigeon-to-beat-rural-broadband.html
Video:: http://www.youtube.com/watch?v=bI14QdKm3iA&feature=player_embedded



Phones sensing your mood, TV-Remote knowing your entertainment preferences... not a sci-fi movie; Intel is working for it ...but already dependency ratio is too high, would this extreme level of dependency good for the human perspective of humans, I'm sure of the doubt ;)
Article: http://www.ibtimes.com/articles/62682/20100915/intel-guru-future-phones-will-sense-your-mood.htm

Microsoft Exec 'Glyn Mody' says 'Open' means 'Incompetent'... and I say don't worry about frustration on open incompetency about things they can't tackle.

Only God can save Microsoft from such... you know what. 

 Article: http://lazarus.freepascal.org/index.php?topic=10523.0



Small-to-Medium sized Business greatly got infected my malware infection via social networking


Article: http://www.securityweek.com/smbs-embrace-social-media-and-pay-price



Google Engineer caught snooping on teenager's chat and data

still not handed over to Cops just fired... its a damn digital offense

China peaking in Google is a sin, Google peaking in Users data is Human-Error

Article: http://thenextweb.com/google/2010/09/14/ex-google-employee-dug-through-private-data-and-harassed-teens/

"poplink.blogspot.com" returns back to its motive

it has been over an year since I thought (to try) to start e-Mag...

and this blog was supposed to aid it with regular tech-updates at even shorter interval

out of circumstances (ill-managed time, what else) I've decided to carry on with the post-act of e-Mag...  that was feeding in nice Tech-Updates in this blog...

so,  from now on


http://poplink.blogspot.com/ i.e. this Blog if you are surfing it by mistake
will be the hub of all good fine web-resources I view daily...
[now don't ask why I don't use online Bookmark service... 'cuz they limit me in one or other way]