<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" version="2.0">

<channel>
	<title>IT Security Blog</title>
	
	<link>http://www.it-security-blog.com</link>
	<description />
	<lastBuildDate>Fri, 29 Jan 2010 03:05:06 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/rss+xml" href="http://feeds.feedburner.com/itsecurity-blog" /><feedburner:info xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" uri="itsecurity-blog" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><feedburner:emailServiceId xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0">itsecurity-blog</feedburner:emailServiceId><feedburner:feedburnerHostname xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0">http://feedburner.google.com</feedburner:feedburnerHostname><item>
		<title>Safe Eyes Mobile</title>
		<link>http://www.it-security-blog.com/real-world-issues/safe-eyes-mobile/</link>
		<comments>http://www.it-security-blog.com/real-world-issues/safe-eyes-mobile/#comments</comments>
		<pubDate>Fri, 29 Jan 2010 03:05:06 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Web browsers]]></category>
		<category><![CDATA[internet-security]]></category>
		<category><![CDATA[iphone]]></category>
		<category><![CDATA[mobile web browser]]></category>
		<category><![CDATA[Safe Eyes Mobile]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=646</guid>
		<description><![CDATA[Have an iPhone?  Or maybe you have another smartphone.  Personally, I am setting my eyes on the Google Nexus One.  It’s just as pretty and from most accounts, it is even more functional than the Apple iPhone.
In any case, most everyone has a smartphone now and that means that their children are [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2010/01/iphone-218x300.jpg" align="right" alt="iphone" title="iphone" width="218" height="300" class="alignright size-medium wp-image-647" />Have an iPhone?  Or maybe you have another smartphone.  Personally, I am setting my eyes on the Google Nexus One.  It’s just as pretty and from most accounts, it is even more functional than the Apple iPhone.</p>
<p>In any case, most everyone has a smartphone now and that means that their children are getting exposed to mobile computing as well.  If you think that it’s such a headache to ensure that children are protected when they go online on laptops and home computers, then think again.  It’s even more of a hassle to make sure they are safe on mobile platforms!</p>
<p>One thing you can do about the iPhone is to use the built-in parental control.  More than that, however, you can check out <a href="http://www.internetsafety.com/safe-eyes-mobile-iphone.php">Safe Eyes Mobile</a>, a web browser made specially for the iPhone.  It gives you additional control on top of the parental controls that the iPhone has.</p>
<p><a href="http://www.bestsecuritytips.com/xfsection+article.articleid+216.htm">Forrest Collier, CEO of InternetSafety.com endorses this mobile web browser</a>:</p>
<p><em>&#8220;Apple has gone a long way toward child-proofing the iPhone with the new parental controls in the iPhone 3.0 software, but those controls apply only to content that Apple itself distributes through iTunes and the App Store. They don&#8217;t address the #1 source of objectionable material: the Internet.  If you combine Apple&#8217;s parental controls with a browser that blocks pornography and other offensive websites, however, you can completely protect your child from harmful content both online and off.&#8221;</em></p>
<p>At the end of the day, these are excellent tools but I believe that your parenting skills will still emerge as the most important factor.</p>

<p><a href="http://feedads.g.doubleclick.net/~a/MwcFtqy6oJcZi9iX8BKlKV9Sj94/0/da"><img src="http://feedads.g.doubleclick.net/~a/MwcFtqy6oJcZi9iX8BKlKV9Sj94/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/MwcFtqy6oJcZi9iX8BKlKV9Sj94/1/da"><img src="http://feedads.g.doubleclick.net/~a/MwcFtqy6oJcZi9iX8BKlKV9Sj94/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/real-world-issues/safe-eyes-mobile/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Avoid Twitter Spam</title>
		<link>http://www.it-security-blog.com/tips/avoid-twitter-spam/</link>
		<comments>http://www.it-security-blog.com/tips/avoid-twitter-spam/#comments</comments>
		<pubDate>Tue, 26 Jan 2010 03:03:55 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Tips]]></category>
		<category><![CDATA[social media]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[Twitter]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=643</guid>
		<description><![CDATA[I have become more active on Tweeter in the past months, mainly due to a self-imposed Facebook hiatus.  I just found Facebook to be so tiresome and irritating (not just the platform but the people using it).  I have had my Twitter account for many years now but I rarely use it.  [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2010/01/twitter-300x200.jpg" align="right" alt="twitter" title="twitter" width="300" height="200" class="alignright size-medium wp-image-644" />I have become more active on Tweeter in the past months, mainly due to a self-imposed Facebook hiatus.  I just found Facebook to be so tiresome and irritating (not just the platform but the people using it).  I have had my Twitter account for many years now but I rarely use it.  Now that I have been using it a lot, though, I realized that it is NOT exempt from spam.</p>
<p>What am I talking about?</p>
<p>Direct message spam.  This is one of the most common things I get.  I receive DMs from people I don’t know.  </p>
<p>Retweets.  I love how you can retweet messages on Twitter but sometimes, they just clutter up my timelines!  What’s even worse is that I am not even interested in what some people retweet.</p>
<p>Tweets from those I follow.   Yep, they can inundate my timeline as well.</p>
<p>The bottom line here is to KNOW who you follow and who follows you.  Every single day, I get “follow” e-mails and many times, I have no idea who they are.  Now I know better than to follow people I don’t really know.  Once, I even got a “The Real Carrie Underwood is now following you” e-mail.  Guess what? It wasn’t the real Carrie Underwood.</p>
<p>More so, disable the autofollow feature.  This doesn’t make sense as you get all sorts of followers trying to fish for their own followers.  Again, filter those you follow.</p>
<p>Another thing you can do is go to this link: http://twitter.com/spam.  They have some practical and useful tips that can help you address Twitter spam issues.   </p>

<p><a href="http://feedads.g.doubleclick.net/~a/MviQIFOI1gn6uU_uBkJ7o-_VcV4/0/da"><img src="http://feedads.g.doubleclick.net/~a/MviQIFOI1gn6uU_uBkJ7o-_VcV4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/MviQIFOI1gn6uU_uBkJ7o-_VcV4/1/da"><img src="http://feedads.g.doubleclick.net/~a/MviQIFOI1gn6uU_uBkJ7o-_VcV4/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/tips/avoid-twitter-spam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New Cybersecurity Chief Chosen By Obama</title>
		<link>http://www.it-security-blog.com/real-world-issues/new-cybersecurity-chief-chosen-by-obama/</link>
		<comments>http://www.it-security-blog.com/real-world-issues/new-cybersecurity-chief-chosen-by-obama/#comments</comments>
		<pubDate>Thu, 24 Dec 2009 11:43:23 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Barack Obama]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[Howard Schmidt]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=640</guid>
		<description><![CDATA[Early this week, Obama once again made a move that set certain circles a-buzzing.  You might have heard of it already – he appointed a cybersecurity chief.  President Obama picked Howard Schmidt, who already has a reputation for being good at what he does.  He has vast experience both with the government [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/12/20091222schmidt.jpg" align="right" alt="20091222schmidt" title="20091222schmidt" width="250" height="191" class="alignright size-full wp-image-641" />Early this week, Obama once again made a move that set certain circles a-buzzing.  You might have heard of it already – he appointed a cybersecurity chief.  President Obama picked Howard Schmidt, who already has a reputation for being good at what he does.  He has vast experience both with the government and the IT industry.</p>
<p>This move is no less controversial than others.  I guess it’s always like that when you’re a public figure.  You can’t please everyone, and you’ll always have various opinions about what you do.  According to <a href="http://www.ft.com/cms/s/0/89cbb622-ef2a-11de-86c4-00144feab49a.html?nclick_check=1">Richard Waters of Financial Times,</a> the news was welcomed by security experts.  He writes:</p>
<blockquote><p>The appointment of Howard Schmidt, an internet security veteran with experience in both industry and government, was greeted with relief among security experts, where the move was seen as a welcome outcome after a seven-month delay in filling the role.</p>
<p>Like other security industry experts, Mr Silva said that Mr Schmidt’s broad experience and personal contacts in both the public and private sectors would put him in a good position to make the most of the role.<br />
The Computer and Communications Industry Association added that the new official will also be in a position to represent the administration’s position as momentum builds on Capitol Hill for legislation on cybersecurity.</p></blockquote>
<p>Of course, there remains some skepticism as to just how effective the role will be.  It’s not even the person that some are questioning – it is the office and the powers that are associated with it.  What do you think?</p>

<p><a href="http://feedads.g.doubleclick.net/~a/lnD2vmxN3MT0VtWhG5oouM9a-Xo/0/da"><img src="http://feedads.g.doubleclick.net/~a/lnD2vmxN3MT0VtWhG5oouM9a-Xo/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/lnD2vmxN3MT0VtWhG5oouM9a-Xo/1/da"><img src="http://feedads.g.doubleclick.net/~a/lnD2vmxN3MT0VtWhG5oouM9a-Xo/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/real-world-issues/new-cybersecurity-chief-chosen-by-obama/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows 7 Hit By Zero-Day Exploit</title>
		<link>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/</link>
		<comments>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/#comments</comments>
		<pubDate>Fri, 13 Nov 2009 09:57:30 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[bugs]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[Windows 7]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=637</guid>
		<description><![CDATA[Windows 7 fans were rejoicing when Microsoft released a patch on Tuesday because their system was not affected in any way by the six security issues.  The rejoicing was short-lived, however, as news has been released that there IS a bug that can crash a Windows 7 system.  The bug has been named [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/11/windows_7_preview-300x224.jpg" align="left" alt="windows_7_preview" title="windows_7_preview" width="300" height="224" class="alignleft size-medium wp-image-638" />Windows 7 fans were rejoicing when Microsoft released a patch on Tuesday because their system was not affected in any way by the six security issues.  The rejoicing was short-lived, however, as news has been released that there IS a bug that can crash a Windows 7 system.  The bug has been named <strong>Zero-Day Exploit</strong> and was discovered by <strong>Laurent Gaffie</strong>.  </p>
<p><a href="http://www.pcworld.com/businesscenter/article/182093/protect_your_pcs_from_windows_7s_zeroday_exploit.html">PC World provides further details</a>:</p>
<blockquote><p>The issue is in the SMB (Server Message Block) protocol that forms the backbone of Windows file sharing. When triggered, the flaw results in an infinite loop which renders the computer useless.</p>
<p>Tyler Reguly, Lead Security Research Engineer with nCircle, explains &#8220;Exploitation of this vulnerability occurs when a user attempts to browse to Windows Share hosted on the malicious server. On Windows 7, the DoS (denial of service) will occur as soon as you type ‘\\<ip>\&#8217; in the search box. &#8221; The vulnerability actually impacts both Windows 7 and Windows Server 2008 R2. </ip></p></blockquote>
<p>While the threat is very much real, experts say that the chances of the bug being exploited are quite low:</p>
<blockquote><p>There are currently a couple different proof-of-concept exploits circulating, but there are no reported attacks in the wild at this point. Because the flaw only enables an attacker to crash the system, and doesn&#8217;t provide any unauthorized remote access that could lead to compromising information or performing other malicious activities, the odds of the exploit being actively used by attackers is fairly slim. </p></blockquote>
<p>So what are Windows 7 users supposed to do now?  Currently, Microsoft has not yet released a patch to deal with the threat.  I suppose the only sensible thing to do is to be more careful with regard to visiting web sites, especially if you are unsure of its legitimacy.</p>
<p><em>Photo courtesy of Megaleecher</em></p>

<p><a href="http://feedads.g.doubleclick.net/~a/j-GcSMVgYWGYVej92S3Essklgzg/0/da"><img src="http://feedads.g.doubleclick.net/~a/j-GcSMVgYWGYVej92S3Essklgzg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/j-GcSMVgYWGYVej92S3Essklgzg/1/da"><img src="http://feedads.g.doubleclick.net/~a/j-GcSMVgYWGYVej92S3Essklgzg/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/operating-systems/windows-7-hit-by-zero-day-exploit/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Scan Storage Devices before Enabling</title>
		<link>http://www.it-security-blog.com/it-security-basics/scan-storage-devices-before-enabling/</link>
		<comments>http://www.it-security-blog.com/it-security-basics/scan-storage-devices-before-enabling/#comments</comments>
		<pubDate>Tue, 27 Oct 2009 03:48:27 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Backups]]></category>
		<category><![CDATA[IT Security Basics]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Operating Systems]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[Security Policies]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Storage]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[Wireless Security]]></category>
		<category><![CDATA[infections]]></category>
		<category><![CDATA[scan]]></category>
		<category><![CDATA[trojans]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/it-security-basics/scan-storage-devices-before-enabling/</guid>
		<description><![CDATA[Viruses and malware issues are far from being a thing of the past. On the contrary, they seem to grow large by numbers as each day passes. Thus the works of security software companies have their work cut out for them. There is not definite date to which such threats and intrusions would wholly be [...]]]></description>
			<content:encoded><![CDATA[<p>Viruses and malware <a href="http://www.newspaperblog.net/">issues</a> are far from being a thing of the past. On the contrary, they seem to grow large by numbers as each day passes. Thus the works of security software <a href="http://www.bizcrunch.net">companies</a> have their work cut out for them. There is not definite date to which such <a href="http://www.biziki.com">threats</a> and intrusions would wholly be resolved. </p>
<p><a><center><img src="http://ittimes.ucdavis.edu/v7n6may99/irr.gif" alt="Scanning Protocol" /></center></a></p>
<p>For the time being, it would be advisable for people to scan third party storage <a href="http://www.geeksblog.net">devices</a> such as diskettes, USB drives and mobile storages to be safe and sound. These wandering viruses can attack at any time and this is a fact anywhere computer related materials are concerned.</p>
<p>Files can go as far as infecting the executable files, hence document, excel and compiled scripts are baits for immediate <a href="http://www.thehealthblog.net">infection</a> and malicious intrusions. Software applications also have their limits as their development teams cater only to a specific genre for known harmful files. But it is better to lower the risk of intrusion than not having protection at all.  </p>
<p>[tags]scan, spyware, virus, infections, spyware, malware, trojans[/tags]</p>

<p><a href="http://feedads.g.doubleclick.net/~a/--MU91GwjSlFUG-G9e7ZmChT-c0/0/da"><img src="http://feedads.g.doubleclick.net/~a/--MU91GwjSlFUG-G9e7ZmChT-c0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/--MU91GwjSlFUG-G9e7ZmChT-c0/1/da"><img src="http://feedads.g.doubleclick.net/~a/--MU91GwjSlFUG-G9e7ZmChT-c0/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/it-security-basics/scan-storage-devices-before-enabling/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ants Versus Worms</title>
		<link>http://www.it-security-blog.com/malware/ants-versus-worms/</link>
		<comments>http://www.it-security-blog.com/malware/ants-versus-worms/#comments</comments>
		<pubDate>Tue, 29 Sep 2009 15:35:20 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[antivirus]]></category>
		<category><![CDATA[ants]]></category>
		<category><![CDATA[it-security]]></category>
		<category><![CDATA[worms]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=630</guid>
		<description><![CDATA[Not everyone hates worms – the natural kind, that is.  I still remember classmates from grade school (even high school!) who grossed out everyone else by eating worms in their natural state.  I am talking about a different kind of worm here, though; the kind that everyone hates; computer worms.
Pretty soon, we just [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/09/ant-300x278.jpg" align="right" alt="ant" title="ant" width="300" height="278" class="alignright size-medium wp-image-631" />Not everyone hates worms – the natural kind, that is.  I still remember classmates from grade school (even high school!) who grossed out everyone else by eating worms in their natural state.  I am talking about a different kind of worm here, though; the kind that everyone hates; computer worms.</p>
<p>Pretty soon, we just might have ants on our side to combat the threat that worms pose year in and year out.  Researchers in the field of IT security have been working on a project to combat worms, drawing their inspiration from the common ant.  <a href="http://www.dailytech.com/Security+Researchers+Use+Digital+Ants+to+Battle+Computer+Worms/article16354.htm">The Daily Tech tells the story:</a></p>
<blockquote><p>Security researchers found inspiration in the common ant.  Describes Wake Forest University Professor of Computer Science Errin Fulp, &#8220;In nature, we know that ants defend against threats very successfully.  They can ramp up their defense rapidly, and then resume routine behavior quickly after an intruder has been stopped. We were trying to achieve that same framework in a computer system.&#8221;</p>
<p>WFU created digital &#8220;ants&#8221; &#8212; utilities that migrate from computer to computer over networks searching for threats.  When one locates a threat, others congregate on it, using so-called &#8220;swarm intelligence&#8221;.  The approach allows human researchers to quickly identify and quarantine dangerous files by watching the activity of the ants.</p></blockquote>
<p>The implications are tremendous.  Anti-virus software that is commonly used today usually take up a lot of resources, and make computers slow down.  With this new technology, we just might see a whole new breed of anti-virus programs.  While everything is in the research and development phase still, it does give us a bright future in terms of fighting malware!</p>

<p><a href="http://feedads.g.doubleclick.net/~a/Cgvy1WSpLzy-1FDQwbogP0nbw38/0/da"><img src="http://feedads.g.doubleclick.net/~a/Cgvy1WSpLzy-1FDQwbogP0nbw38/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Cgvy1WSpLzy-1FDQwbogP0nbw38/1/da"><img src="http://feedads.g.doubleclick.net/~a/Cgvy1WSpLzy-1FDQwbogP0nbw38/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/malware/ants-versus-worms/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook More Private, Thanks To Canada?</title>
		<link>http://www.it-security-blog.com/real-world-issues/facebook-more-private-thanks-to-canada/</link>
		<comments>http://www.it-security-blog.com/real-world-issues/facebook-more-private-thanks-to-canada/#comments</comments>
		<pubDate>Thu, 10 Sep 2009 02:47:13 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Privacy & Anonymity]]></category>
		<category><![CDATA[Real-World Issues]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[privacy settings]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Social Networking]]></category>
		<category><![CDATA[web sites]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=627</guid>
		<description><![CDATA[To date, Facebook is perhaps the most successful and widespread social networking site.  It has transcended age and race, and practically everyone I know has an account.  It has so much to offer, hence the amount of time that the average person spends on Facebook has skyrocketed in the past months.  Even [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/09/facebook-300x223.jpg" align="right" alt="facebook" title="facebook" width="300" height="223" class="alignright size-medium wp-image-628" />To date, Facebook is perhaps the most successful and widespread social networking site.  It has transcended age and race, and practically everyone I know has an account.  It has so much to offer, hence the amount of time that the average person spends on Facebook has skyrocketed in the past months.  Even businesses and employers use Facebook to make their presence felt online!</p>
<p>But in spite of the allure and usefulness of Facebook, it does have some security issues.  All the information that one enters can be accessed by the site AND its third party partners.  With each application a user “allows,” his information is accessed, probably even shared with others.  Unless a user changes the default privacy settings, practically anyone can access his information.  This is something that not everyone really thinks about.</p>
<p>But the Canadian government found these issues important.  In fact, the pressured Facebook to create some changes with regard to security.  Thanks to them, several tweaks have been enacted. <a href="http://www.pcworld.com/article/171030/thanks_canada_facebooks_4_big_privacy_fixes.html">PCWorld featured this move and outlined the fixes.</a></p>
<p><strong>One, Facebook had to fix the way applications access users data:</strong></p>
<p><em>Apps will have to tell the user what information it wants and get express consent from the user beforehand. Information will be split into categories, which the user can check off before installing. Developers will also have to explain how that personal data will be used.</em></p>
<p><strong>Two, what happens to a user’s information if he deactivates his account?</strong></p>
<p><em>Users will be given an option to either deactivate or delete their accounts. Upon deactivation, they&#8217;ll be notified of the option to delete, and can elect to do so should they want all their data gone for good.</em></p>
<p><strong>Three, what will happen to your account if you die?</strong></p>
<p><em>Facebook will explain in its privacy policy what happens to an account after its owner passes away.</em></p>
<p>My thoughts – one and two are quite valid.  Three, I am not so sure.  You’ll be dead, why would you care?  In any case, I wonder if Facebook will apply these fixes to the whole system or just for their Canadian users?</p>

<p><a href="http://feedads.g.doubleclick.net/~a/G8X1gCu3L4645YRNgp5qLtkdqZ0/0/da"><img src="http://feedads.g.doubleclick.net/~a/G8X1gCu3L4645YRNgp5qLtkdqZ0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/G8X1gCu3L4645YRNgp5qLtkdqZ0/1/da"><img src="http://feedads.g.doubleclick.net/~a/G8X1gCu3L4645YRNgp5qLtkdqZ0/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/real-world-issues/facebook-more-private-thanks-to-canada/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google Chrome Even More Secure</title>
		<link>http://www.it-security-blog.com/uncategorized/google-chrome-even-more-secure/</link>
		<comments>http://www.it-security-blog.com/uncategorized/google-chrome-even-more-secure/#comments</comments>
		<pubDate>Thu, 27 Aug 2009 04:18:42 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[Google Chrome]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=624</guid>
		<description><![CDATA[From Internet Explorer to Mozilla Firefox to Google Chrome – that’s the path that many computer users have followed in the past years.  Personally, I have stuck to Mozilla but I do use Chrome every now and then when I want things to go much faster.  But did you know that Google’s streamlined [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/08/google-chrome-logo-300x225.jpg" align="right" alt="google-chrome-logo" title="google-chrome-logo" width="300" height="225" class="alignright size-medium wp-image-625" />From Internet Explorer to Mozilla Firefox to Google Chrome – that’s the path that many computer users have followed in the past years.  Personally, I have stuck to Mozilla but I do use Chrome every now and then when I want things to go much faster.  But did you know that Google’s streamlined browser has its share of security issues as well?</p>
<p>This is not really that surprising.  After all, most any product you see in the market will be exploited by those who want to do so.  In any case, Google has come out with updates to their browser, making it more secure for us users.</p>
<p>The most recent update for Google Chrome fixes some issues on how the browser handles Javascript and XML.  For the Javascript engine, the fix makes sure that an infected web site will not allow malicious Javascript to run arbitrary code.  You and I know very well that the phrase “run arbitrary code” simply translates to “install malware.”  With this problem supposedly fixed, Chrome is definitely safer.</p>
<p>Another fix deals with the possibility of a web page using XML to, again, run arbitrary code.  This happens when the malicious XML crashes a Chrome tab.</p>
<p>Last, the Chrome update will not allow you to connect to &#8220;HTTPS (SSL) sites whose certificates are signed using MD2 or MD4 hashing algorithms.&#8221;   The reason for this is that these algorithms are prone to hacking and that it is relatively easy to pose as a fake HTTPS site. </p>
<p>For more detailed info, read it from <a href="http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html">Google’s own blog</a>.</p>
<p><em>Photo courtesy of <a href="http://i-nz.net/2009/01/26/the-story-of-the-google-chrome-logo/">Ivan Zlatev</a></em></p>

<p><a href="http://feedads.g.doubleclick.net/~a/vtokNnaGgDtXHIUjC11A8CpY-FQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/vtokNnaGgDtXHIUjC11A8CpY-FQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/vtokNnaGgDtXHIUjC11A8CpY-FQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/vtokNnaGgDtXHIUjC11A8CpY-FQ/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/uncategorized/google-chrome-even-more-secure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mozilla E-Store Hacked</title>
		<link>http://www.it-security-blog.com/uncategorized/mozilla-e-store-hacked/</link>
		<comments>http://www.it-security-blog.com/uncategorized/mozilla-e-store-hacked/#comments</comments>
		<pubDate>Thu, 06 Aug 2009 17:30:41 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[Firefox]]></category>
		<category><![CDATA[General]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=621</guid>
		<description><![CDATA[This piece of news is not so good for Mozilla.  It had to shut down the operations of its online store late on Tuesday because of an alarming finding.  The fact is that the firm that Mozilla had hired to deal with their backend operations has suffered a security breach.  Mozilla immediately [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/08/mozilla_firefox_readerszone.jpg" align="left" alt="mozilla_firefox_readerszone" title="mozilla_firefox_readerszone" width="244" height="241" class="alignleft size-full wp-image-622" />This piece of news is not so good for Mozilla.  It had to shut down the operations of its online store late on Tuesday because of an alarming finding.  The fact is that the firm that Mozilla had hired to deal with their backend operations has suffered a security breach.  <a href="http://blog.mozilla.com/blog/2009/08/04/mozilla-store-vendor-security-breach/">Mozilla immediately issued a statement about the issue:</a></p>
<blockquote><p>Today, Mozilla discovered that GatewayCDI, the third-party vendor entrusted to run the backend of the Mozilla Store, suffered a security breach.  Once notified, we took the immediate preventative step of shutting down the Mozilla Store to ensure that no additional users could be compromised.</p></blockquote>
<p>And just to be sure, the company immediately shut down the international version of their online store.  While this was not really necessary since the international edition is being maintained by a separate company, Mozilla still shut it down as a precaution.  As of this writing, there is no news yet as to the whether the security breach has been fixed.  Indeed, Mozilla did not even really divulge details as to the nature and extent of the breach.  I guess it is enough that they owned up to the issue and that they took immediate steps to stop the problem before it became serious.</p>
<p>And in case you were not aware of what Mozilla offers in its online store, this is where you can get T-shirts, coffee mugs, backpacks, mouse pads, and all sorts of other things that you can buy with the popular Mozilla logo prominently printed on them.</p>
<p>Moral of the story?  Even one of the best IT companies in existence today is prone to hacking.  Us &#8220;mortals&#8221; should learn from this.</p>

<p><a href="http://feedads.g.doubleclick.net/~a/P8nG45yhFqeP-_X_HkAhrdrM17I/0/da"><img src="http://feedads.g.doubleclick.net/~a/P8nG45yhFqeP-_X_HkAhrdrM17I/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/P8nG45yhFqeP-_X_HkAhrdrM17I/1/da"><img src="http://feedads.g.doubleclick.net/~a/P8nG45yhFqeP-_X_HkAhrdrM17I/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/uncategorized/mozilla-e-store-hacked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>One Out Of Six: Yes To Spam</title>
		<link>http://www.it-security-blog.com/malware/one-out-of-six-yes-to-spam/</link>
		<comments>http://www.it-security-blog.com/malware/one-out-of-six-yes-to-spam/#comments</comments>
		<pubDate>Thu, 23 Jul 2009 04:52:17 +0000</pubDate>
		<dc:creator>Saran</dc:creator>
				<category><![CDATA[E-mail]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://www.it-security-blog.com/?p=617</guid>
		<description><![CDATA[Last week, I found myself craving for Spam – the kind that you put in between two slices of nice white bread.  The moment I checked my Inbox, though, my feeling towards spam – in general; food or e-mail related – changed drastically.  For some reason, I keep getting these e-mails about Viagra [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.it-security-blog.com/wp-content/uploads/2009/07/spam-300x300.jpg" alt="spam" title="spam" width="300" height="300" class="alignleft size-medium wp-image-618" />Last week, I found myself craving for Spam – the kind that you put in between two slices of nice white bread.  The moment I checked my Inbox, though, my feeling towards spam – in general; food or e-mail related – changed drastically.  For some reason, I keep getting these e-mails about Viagra and winning the lotto.  And I am talking about my WORK e-mail here, not my personal e-mail!  Seriously, I don’t understand why these people keep sending out these e-mails when everyone knows they’re SPAM and that they amount to NOTHING! No one pays attention to these e-mails, right?</p>
<p>Well, apparently, some people do!  <strong>According to a survey conducted by Messaging Anti-Abuse Working Group, <a href="http://blogs.wsj.com/digits/2009/07/17/one-out-of-six-responded-to-spam/">1 out of 6 people in the United States and Canada respond to spam e-mails</a></strong>.  I know, this is simply unbelievable, isn’t it?</p>
<p>In this day and age, why would anyone still fall for these scams?  Haven’t we learned anything at all?  No wonder that these scammers continue to send out their e-mails!  I mean, just one or two people who respond to their bait might give them the profit that they are out for.</p>
<p>To be fair, the scammers are getting more and more creative.  They also take advantage of the hottest things happening.  For example, around the time of Michael Jackson’s death, there was an astronomical increase in e-mails about him – a lot of these were spam.  Even those who are normally careful were lured into opening these e-mails and clicking away.</p>
<p>Bottom line: spam might be here for a while.  Make sure you are careful and don’t be cocky (like me) – you never know what might hit you!</p>

<p><a href="http://feedads.g.doubleclick.net/~a/yBxoohlQJKSdXcrgkx8LEEpcEWU/0/da"><img src="http://feedads.g.doubleclick.net/~a/yBxoohlQJKSdXcrgkx8LEEpcEWU/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/yBxoohlQJKSdXcrgkx8LEEpcEWU/1/da"><img src="http://feedads.g.doubleclick.net/~a/yBxoohlQJKSdXcrgkx8LEEpcEWU/1/di" border="0" ismap="true"></img></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.it-security-blog.com/malware/one-out-of-six-yes-to-spam/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
