costly Samsung Tab, FB 'Group' flaw, Ubuntu 10.10, Windows7 Phones, 29 Java Vulns Patch

 Pop-Links@[11-Sep-2010]

==================================================


High Costs than Expected of Samsung Galaxy Tablet :

now Apple iPad costs $500 and the leaked cost of Samsung Galaxy Tab is $650 ($400 if you sign 2yrs long contract for services)... are they nuts or what, they got poor resolution and way poor brand-name than Apple... leave all that, its Android based tablet and even after using OpenSource platform they cost high

Link: http://www.itworld.com/mobile-amp-wireless/123579/samsung-galaxy-tab-price-leaked-it-too-high

==================================================

 Facebook flaw let you Add Anyone to Group :

 one more flaw recently noticed in Facebook is anyone could be added to a Facebook Group without the account owner's prior permission or choice. Suppose you create a Group and want anyone to be its member just add his/her name in members to be added and mark its 'Privacy' status as 'Closed'. Now, whom all you added as member will be directly added without any confirmation required... nice :)

Link: http://www.itworld.com/internet/123516/whats-wrong-facebooks-group-grope
==================================================

Ubuntu 10.10 released

newer version of Ubuntu has been relased on 10-10-2010... its giving games a next-gen graphics overhaul. The kernel 2.6.35 has seen graphics improvement and the OpenGL drivers included are DirectX 11 equivalent. When you will start playing a game or powerful HD Video, it will automatically shift onto nVidia or ATI(now AMD, :( ) card.



Link: http://www.ubuntu.com/desktop/get-ubuntu/download

==================================================

 First Look : Windows Phone 7 Hardware

Microsoft CVP Steve Guggenheimer tells how quick and easy Windows Phone 7 would be over newer fancy phone models displayed by him. He displays a Dell Phone (vertical slide-out tactile keyboard); HTC 7Surround, (slide-out speakers with surround sound, 720p video camcorder); and other models from LG, Smasung

Link: http://ecn.channel9.msdn.com/o9/ch9/3394/5cb9da58-c9f3-4001-9fee-9e0c002d3394/WP7Gugg_2MB_ch9.wmv
==================================================
 
Oracle made Java Critical Patch Update pre-release Announcement

The announcement is for 12th October 2010. The patch contains 29 security vulnerabilties fixes.
Products affected are
JDK, JRE 6 Update 21 and earlier for Windows, Solaris, and Linux
JDK and JRE 5.0 Update 25 and earlier for Windows, Solaris and Linux
SDK and JRE 1.4.2_27 and earlier for Windows, Solaris and Linux

Link: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

==================================================

Google API with OAuth, Apple wants 'Pod', ZoneAlarms scares, Microsoft shuts blog, and FBI cheats

Pop-Link@[27-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google Apps API now supporting the newer better OAuth mechanism for users to authenticate with the service via APIs instead of any need to provide its Credentials.

Article: http://googlecode.blogspot.com/2010/09/new-oauth-support-for-google-apps-apis.html

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

FBI Agent caught cheating in exams organized to evaluate their updated knowledge about security and globe... WOW!!!

Article: http://www.reuters.com/article/idUSTRE68Q32O20100927

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Microsoft is shutting down Windows Live Blogs, asking to move it to Wordpress; or others if yout want.

Article: http://www.zdnet.com/blog/microsoft/microsoft-makes-it-official-windows-live-is-no-longer-a-blogging-platform/7487
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Check-Point's ZoneAlarm just used to give nagging screens to buy but now it fall selfish-cheap scaring off its free version on name of malwares to buy off the product. No matter what I'll use its free version only to nag back.
Article: http://www.theregister.co.uk/2010/09/20/zonealarm_scareware_flap/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Apple is bringing Kokin to trial for using 'Pod' for his startup developing video projector called 'Video Pod'.
Article: http://arstechnica.com/tech-policy/news/2010/09/apple-startup-go-to-trial-over-pod-trademark.ars
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google 2x Security, UK Cyber, SNES on PS3, POET hack Oracle, childish MI5

Pop-Link@[20-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Mr.Fox says UK Cyber Security should be handled by National Security Council also, it's not any small issue to be handed over to few officers.

Article: http://www.publications.parliament.uk/pa/cm201011/cmhansrd/cm100913/debtext/100913-0001.htm#1009137000024

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Super Nintendo Emulator SNES9x pver PS3, some features yet to be supported.

Now go MARIO on your PS3 :)



Article: http://ps3-evolution.dcemu.co.uk/super-nintendo-emulator-snes9x-released-for-ps3-327501.html


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oracle based services are vulnerable for side-channel attack for padding Oracle against CBC mode encryption... this was discussed once in 2002 at EuroCrypt conference, in 2010 again its still active demo was presented at a Hacking Conference, they ares supposed to affect 25% of Internet Infrastructure (ASP.net, JSF, etc.)

Article: http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
ALSO, a new ASP.net vulnerability responsible for Information Disclosure
https://www.microsoft.com/technet/security/advisory/2416728.mspx


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

a Twitter User @PigSpotter warning motorists of SpeedTraps, tension for Cops.

Now when Cops are monitoring his acts so he has gone on break stating his BlackBerry is in for repair.


Article: http://www.iol.co.za/index.php?art_id=vn20100918083241209C425606&singlepage=1

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

MI5 states cyber made espionage more strong but is more straightforward in blocking data stealing... 

They Are KIDDING right, land-water-air are much more safer to identify enemy... in Cyber World anyone can be MI5.
Article: http://www.theregister.co.uk/2010/09/17/mi5_cyber/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The leaked master key of HDCP (High B/w Digital Content Provider) cracked it to strip down encryption... and thus Intel HDTV code got cracked.

How many times shall we repeat that 'Security should not depend on obscurity'.

Article: http://www.foxnews.com/scitech/2010/09/16/intel-confirms-hdtv-code-cracked/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



2 Step Auth by Google, currently just for some App users... to protect you from phishing, you will also have to enter the sms-code sent to your phone number added to your Google Account [ but what if I loose my Mobile :), logged out till arrange new sim with same number ]

Article: http://techcrunch.com/2010/09/20/google-secure-password


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

faulty (Diaspora, CIA , Facebook, Adobe), MS Secured, Botnet Sales

Pop-Link@[18-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The Open-Source initiative to replace Facebook, Diaspora isn't yet close to secure... need a lot more hardwork.


Article: http://www.thinq.co.uk/2010/9/17/alert-raised-over-diaspora-security/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Netezza bought geospatial softwares from IISI, reverse engineered it and sold flawed version to 'CIA' ...Big Daddy got Conned and used hacked software for its Drones

Article: http://www.aolnews.com/nation/article/cia-drone-program-using-hacked-software-company-claims/19638508

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Facebook, turning out to be the second name for Social Networking is also turning out to be the biggest Malware Infection source.

Article: http://www.net-security.org/malware_news.php?id=1466

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

SpyEye, a famous botnet kit not only let botnet owners steal Credit Card information but also let them make fake sales from any site where the many can be transferred using a cart.


Article: http://krebsonsecurity.com/2010/09/spyeye-botnets-bogus-billing-feature/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'EMET' i.e. Enhanced Mitigation Experience Toolkit by Micorsoft to make your computing experience more secure computing by securing any kind of application running over Windows to be exploited for its vulnerabilties.

Article: http://blogs.technet.com/b/srd/archive/2010/09/02/enhanced-mitigation-experience-toolkit-emet-v2-0-0.aspx

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

I don't beleive Adobe is still caught in 'strcat' over 'strncat' issues for Security... well its a well big bloated organization with big bloated code.

Article: http://www.theregister.co.uk/2010/09/15/unofficial_adobe_reader_patch/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Just for fun and Self-reminder... Epic Failures : 11 Infamous Software Bugs

Article: http://www.itworld.com/software/120117/epic-failures-11-infamous-software-bugs

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-