MySpace users are being tricked with a pop up that resembles a Windows Update screen, this happens when you visit specific, specially crafted, friend’s pages.
After clicking it, it will start downloading malware right to their PCs.
More info here.
S/MIME Processing could trigger automatic HTTP request in Outlook and others
April 8, 2008An attacker sending a specially crafted (signed) email could make you automatically load a page upon receiving it, at least this seems to be the case with Outlook and some other Office applications, according to this paper by Alexander Klink.
He also provides a proof of concept, send a blank email to smime-http@klink.name and you will receive an example email demonstrating this vulnerability.
Windows Vista Drive Encryption
March 5, 2008From time to time I get asked about BitLocker, the Windows Vista tool for drive encryption.
I found these two guides quite useful. Hope you will find them useful too. This one is from Microsoft, the other one from TechRepublic (requires free registration).
ISP Injected Adverts
February 27, 2008Today I want to talk about ISP injected adverts. It’s an increasing trend for ISPs to use transparent web proxies to inject their own Javascript and HTML code with their own ads to the pages their users request.
I know this has been around for some time now, and while I haven’t seen it in any ISP, I have experimented it myself in the free Internet connection provided at some venues, thus my post about it.
You can find more information and do some tests here.
Happy birthday, subatomico!
February 4, 2008subatomico security has been around for 1 year now. Time goes by quickly!
During this period I have been writing about a myriad of different security topics and also a little bit about technology. I have earned a constant and decent amount of readers, which is not that bad, and far beyond my expectations when I started all this out.
So I just have to thank all of you for your interest in subatomico. So let’s go for another year, hopefully even better!
Microsoft to buy Yahoo!
February 1, 2008The blockbuster of the week: Microsoft has made public today an offer to acquire Yahoo!
More info can be found in their press release here.
I’d bet the deal is going to happen. A huge battle between Microsoft and Google is about to start!
