Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"
Syndication feeds available

Fake Amazon themed email.

May 23rd 2017 in safety and privacy on the Internet Read On No Comments

Yeah… nah.

May 17th 2017
Read On No Comments

ALERT – StrawberryNet.Com is revealing the name, addresses and phone numbers associated with a purchaser’s email address without authentication

May 3rd 2017

If you, your family or friends have used that website, please warn them. Here is what happens: Go to the website and put anything into the shopping cart. Click “checkout”. Enter an email address when prompted. If the email address is already in their database the name, address and phone number associated with that email […]

Read On No Comments

Big news re Google and Symantec issued EVs

March 24th 2017

Cite: https://arstechnica.com/security/2017/03/google-takes-symantec-to-the-woodshed-for-mis-issuing-30000-https-certs/ “In a severe rebuke of one of the biggest suppliers of HTTPS credentials, Google Chrome developers announced plans to drastically restrict transport layer security certificates sold by Symantec-owned issuers following the discovery they have issued more than 30,000 certificates. Effective immediately, Chrome plans to stop recognizing the extended validation status of all certificates issued […]

Read On 1 Comment

Naughty Adobe!!!

January 12th 2017

Not only is it impossible for the typical user to disable or change the software update settings for Adobe Acrobat Reader DC, the most recent SILENT update of Adobe Acrobat Reader DC also installed an Adobe Acrobat extension to Google Chrome without notice or consent. To add insult the injury, the extension’s option to “Allow […]

Read On Comments Off on Naughty Adobe!!!

That moment one “privacy” app interferes with another “privacy” app

January 7th 2017

Ghostery interfering with HTTPS Everywhere.

Read On Comments Off on That moment one “privacy” app interferes with another “privacy” app

Do you have an ASK Toolbar installed? Beware…

November 23rd 2016

Discovery by Red Canary: https://blog.redcanary.com/ask-partner-network-compromise “On 5 November, Red Canary detected suspicious activity associated with Windows applications distributed by the Ask Partner Network (a.k.a. APN, Ask.com, or simply Ask). Upon further inspection, we discovered that Ask’s software was being co-opted by a malicious actor to execute malicious software on victims’ endpoints. “

Read On Comments Off on Do you have an ASK Toolbar installed? Beware…

New security steps for linked Skype and Microsoft accounts

November 23rd 2016

I received a spam message via Skype today from a person who I normally think of as too sophisticated to do something silly like re-use passwords.  And heard of another person who had also been compromised, but had absolutely no idea how it may have happened. I learned as part of my research into what may […]

Read On Comments Off on New security steps for linked Skype and Microsoft accounts

Kryptowire discovers mobile phone firmware that transmitted personally identifiable information without user consent or disclosure

November 16th 2016

The Kryptowire article can be seen here: http://www.kryptowire.com/adups_security_analysis.html Adups response can be found here: http://www.adups.com/article/show_article.php?id=162

Read On Comments Off on Kryptowire discovers mobile phone firmware that transmitted personally identifiable information without user consent or disclosure


Archives