Just happened to see this today while wanting to reread one of my favorite articles ("Wapanese", if you're curious)

I would be more inclined to donate (I wouldn't actually donate but I would consider it more) if it didn't look so damn cheap. I understand if you're hacked you have to rush stuff but it just gives off an air of..."I b stealun ya'z monies"

I guess that's been proven false before though, I mean sometimes people trust the fake sites because they look better than the real ones.

I really do hope they're not dying, they are an awesome site. I hope too that it's not a hack. BUT either way I have to admit I don't feel much pity for them. Wikipedia's free without ads, why can't they be? At the very least get rid of those ones that pop up before your page loads or while it loads.

I'm not downplaying the importance of donating to your favorite sites. It is important, especially if you want them to continue without ads and whatnot. It's just that you should always be 2000% sure you know where your money and info is going.

There's no news on their blog, there hasn't been since late 2007. The mystery continues. Scooby Doo, where are you?

Be wary about donating.

WHAT IS WOT?

WOT, or Web of Trust, is an online community led by a team of dedicated people aiming to provide a more enjoyable, safer, and more secure internet for everyone. It provides early warning systems for every link pointing to sites that may potentially contain malware, spyware, phishing, fraud transaction scripts, pornography, and various other things that surfers would hate to encounter.

And no, WOT was not established just for that. WOT also offers comphrehensive social site statistics, such as a site's reputation, popularity, and social references where links pointing to the target site were found.

By becoming a member of the WOT community, you are given the power to:

• Rate sites according to how you find it Trustworthy, Reliable, Privacy-Secure, and Child Safe
• Post comments and/or reviews of sites, and how you like or dislike a certain site
• See how much a site is linked to by other social communities
• See which online references point to a site
• Join discussions with other WOT members and staff personnel
• Share your experiences with other members
• ...and much more!

Joining is easy, even easier than taking a break and refreshing yourself with a drink, as my cousin says. All you have to do is download the necessary browser plugin, and from there you'll be guided accordingly.

HOW WILL WOT PROTECT ME?

After you have downloaded the proper plugin for your browser, WOT will display miniature ("O" or ring) icons near every external link found within a page, with the following color codes: Green for safe or "Excellent", Yellow for potentially unsafe or "Unsatisfactory", and Red for dangerous or "Poor". The plugin will also display yellow strip banners at the top of the browser window when alerting you of the dangerous content of the site you're currently on.

WOT however, does not limit the ability of the user from accessing an unwanted site. It will only display warnings and notifications, but will not restrict access whatsoever. Entering sites marked "Poor" should be done at your own risk.

Tested, tried, and acclaimed by many professional security experts, WOT truly is providing a safer and more convenient surfing experience for everybody. To get started and become safer right now, begin by visiting the WOT home page, and follow by downloading the appropriate plugin for your browser.

Good luck, and happy browsing!

Note: For best results and for an even safer online experience, use in conjunction with OpenDNS.

Regards to the WOT Team especially Deborah Salmi for the extreme friendliness and openness towards clients. More power to you guys!

"WOT is w00t"

--THE PC BUSTER

s.a. Wikipedia, Domain Name System

Gelingt es nun, die Zuordnung Webseite = IP-Adresse (z.B. www.google.de = 74.125.39.147) zu manipulieren, so könnte man z.B. Anfragen an einen Bezahldienst oder eine Bank auf eine eigene präparierte Webseite umleiten und so eingegebene Passwörter, PINs, TANs, usw. abfischen (IP-Spoofing, Phishing). Auch weitere Angriffsziele wie etwa das Abfangen, mitschneiden und Manipulieren von E-Mails, das Fälschen von SSL-Zertifikaten (und damit der Bruch der SSL-Verschlüsselung) sowie der Zugang zu sensiblen Nutzerdaten in Webangeboten wäre so möglich.

Nachdem das US-CERT auf Sicherheitsprobleme im Domain Name System hinwies, entdeckte der Security-Experte Dan Kaminsky bereits vor geraumer Zeit einen Weg dieses beträchtliche Sicherheitsloch in der Internet-Infrastruktur auszunutzen.

Kaminsky kontaktete die Betreiber der Systeme mit Bezug auf diese Sicherheitslücke und forderte sie auf, das Loch zu schließen. Nach Ablauf einer 30-tägigen Frist veröffentlichte er nun Details im Rahmen eines Vortrags auf der Blackhat-Sicherheitskonferenz in Las Vegas. Demnach können die DNS-Server über die Manipulation der im Cache zwischengespeicherten Daten (Cache-Poisoning) angegriffen werden.

Heise.de schreibt hierzu: „Neben dem Angriff auf einen CNAME-Record ist es offenbar möglich, einem anfragenden Nameserver eine Antwort mit gefälschten Angaben für die Anfrage bei weiteren Nameservern unterzujubeln. Damit lässt sich nicht nur ein einzelner Adress-Eintrag im Cache manipulieren, sondern alle weiteren Anfragen an den Nameserver eines Angreifers umleiten.

Dabei macht sich der Angriff zunutze, dass ein rekursiv auflösender Nameserver von einem Nameserver zum nächsten weiterdelegiert wird, bis er schließlich den für die Domain zuständigen Nameserver erreicht hat. Dabei hat der Angreifer mehrfach die Gelegenheit, gespoofte Pakete an den Server des Opfers zu schicken. Es soll sogar möglich sein, die Nameserver für die Top-Level-Domains auf diese Weise anzugreifen. Erstmals war ein Hinweis auf diese alternative Angriffsart im Exploit von H.D.Moore aufgetaucht. Das könnte auch die unterschiedlichen Zeitangaben verschiedener Sicherheitsspezialisten erklären, wie lange es dauern soll, bis eine Cache-Poisoning-Attacke erfolgreich ist. Während einige Angaben im Minutenbereich lagen, betonte Kaminsky mehrfach, dass sein Angriff nur wenige Sekunden dauere.“

Inzwischen haben speziell in Nordamerika und Europa, wo die meisten DNS-Server stehen, viele Provider bereits nachgezogen und Updates für ihre Systeme eingespielt. Allerdings dürfte es noch einige Zeit dauern, bis das Problem flächendeckend behoben ist. Zudem scheinen sowohl das DNS-Protokoll als auch gängige Implementierungen davon noch weitere grundsätzliche Lücken zu beinhalten.

Kaminsky veröffentlicht letzte Details zur DNS-Schwachstelle

Blackhat-Vortrag von Dan Kaminsky

Another great feature is that they provide a pishing filter right with their server. Everybody, whether on Mac or windows, has seen those Messages from the Pishing Filer for example in the Internet Explorer or Firefox. But by using OpenDNS u can usually disable those plugins provided by your browser, which will enhance the performance of your system.

If you want to find out more just visit their webpage OpenDNS.com

To use the service just enter the following IP's as DNS Server into the configuration

          208.67.222.222
          208.67.220.220

You don't know how to do this? No Problem!

Instructions : WindowsXP || Windows Vista || OS X Tiger || OS X Leopard || SUSE Linux

*Images taken from OpenDNS.com

E su Ebay si fanno affari, circolano "soldi", anche se in formato elettronico (carte di credito, paypal) ed ecco che il phishing si concentra anche li.

Quella che segue è una delle tante e-mail che "sparando nel mucchio" come al solito cerca di catturare le credenziali di accesso di qualche utente del colosso delle aste online.

Tutti i link conducono all'indirizzo fasullo: **www.xmail.net**/nasakala/aas.html che è già stato inserito nelle black list, ma che comunque segnaliamo a beneficio di coloro che non hanno un sistema antiphishing installato.

Questa e-mail è phishing

Back to College Green Living Guide

Binghamton University in New York encourages students to save energy.

Do it in the dark. This semester, think before you flip the light switch. You may not need to turn on the lights every time you enter a room. That's just one of a number of simple strategies to consider if you want to go green on campus. Green living starts with carefully planned back to school shopping and continues in the way students go about their daily lives. Most students arrive on move-in day in SUVs and vans stuffed to the max with electronic equipment, appliances, clothes and other furnishings. Some even bring school supplies. Read more of Asa Aarons answer...

John Merris has an above average credit score. But he wants to make it even better. "Although my credit report and score are both good, the credit reporting agency informed me that it would be even higher if I had a credit card history," the New Jersey man explained. Merris was confused, because he's been using credit cards for more than two decades. Read more of Asa Aarons answer...

Simple mistakes can affect your data and identity.

Technology is no match for the carelessness of the consumers who use it. That's the warning from Consumer Reports, which identifies seven of the most common online errors in its September issue. The Yonkers-based organization identified the worst things computer users can do, including taking security software for granted. "It's not enough to install it and forget it," the magazine warns. "It's fully effective only when activated and frequently updated. Most software requires an annual subscription, which consumers have to remember to renew when it expires." Read more of Asa Aarons answer...

Read more about package shrink... and questionable purchases.

Back to College Green Living Guide

Binghamton University in New York encourages students to save energy.

Do it in the dark. This semester, think before you flip the light switch. You may not need to turn on the lights every time you enter a room. That's just one of a number of simple strategies to consider if you want to go green on campus. Green living starts with carefully planned back to school shopping and continues in the way students go about their daily lives. Most students arrive on move-in day in SUVs and vans stuffed to the max with electronic equipment, appliances, clothes and other furnishings. Some even bring school supplies. Read more of Asa Aarons answer...

John Merris has an above average credit score. But he wants to make it even better. "Although my credit report and score are both good, the credit reporting agency informed me that it would be even higher if I had a credit card history," the New Jersey man explained. Merris was confused, because he's been using credit cards for more than two decades. Read more of Asa Aarons answer...

Simple mistakes can affect your data and identity.

Technology is no match for the carelessness of the consumers who use it. That's the warning from Consumer Reports, which identifies seven of the most common online errors in its September issue. The Yonkers-based organization identified the worst things computer users can do, including taking security software for granted. "It's not enough to install it and forget it," the magazine warns. "It's fully effective only when activated and frequently updated. Most software requires an annual subscription, which consumers have to remember to renew when it expires." Read more of Asa Aarons answer...

Read more about package shrink... and questionable purchases.

Phishing attacks aren't causing problems for just consumers. They're also destroying the integrity of financial institution brands online.

But now with new anti-phishing services from Secure Identity Systems (SIS), financial institutions gain control of their brand integrity online, while protecting consumers from phishing attacks. Most important, these services enable financial institutions to fulfill Section 114 of the Identity Theft Red Flags and Address Discrepancies under the Fair and Accurate Credit Transactions Act (FACTA), which requires them to implement "reasonable policies and procedures" for identifying, thwarting, and preventing red flag activities-including phishing attacks-by Nov. 1.

"Phishing attacks continue to compromise consumers' identities, and undermine their trust in online commerce-that includes online banking," says Bryan Ansley, CEO of Secure Identity Systems. "By integrating world-class phishing detection and take-down services into our comprehensive services offering, we're giving our financial institution clients a complete solution for protecting their customers' interests, and complying with federal ID protection mandates."Available now through SIS, the anti-phishing services enable banks, credit unions, and other financial organizations to track the occurrence of their name, brands, trademarks, and slogans on the Internet. The service identifies phishing attacks, where e-mails and Web sites that display the financial institution's brand are used to trick unwary consumers into providing account and logon information. SIS customers will be protected by a technology that is detecting and blocking as many as 5,000 phishing attacks daily around the world.

The technology uses extensive Internet surveying, which works by comparing the authentic Web site with a continuously updated database that includes over 172 million Web sites and domain names, SSL certificates, and feeds of phishing data from multiple sources. That's only the beginning: after a phishing site is detected, countermeasures are launched to take down the phishing site. First, access to the site is restricted in popular browsers and security products, reducing its ability to lure and entrap consumers. The service then contacts the site owner, the ISP responsible for hosting the site, the domain registrar, upstream provider, and law enforcement to have the phishing site taken down. Once a site is taken down, the service will continue to monitor the site from various monitoring points around the world.

Missing Accounts Affect Credit, Lower Score

John Merris has an above average credit score. But he wants to make it even better. "Although my credit report and score are both good, the credit reporting agency informed me that it would be even higher if I had a credit card history," the New Jersey man explained. Merris was confused, because he's been using credit cards for more than two decades. Read more of Asa Aarons' answer...

Simple mistakes can affect your data and identity.

Technology is no match for the carelessness of the consumers who use it. That's the warning from Consumer Reports, which identifies seven of the most common online errors in its September issue. The Yonkers-based organization identified the worst things computer users can do, including taking security software for granted. "It's not enough to install it and forget it," the magazine warns. "It's fully effective only when activated and frequently updated. Most software requires an annual subscription, which consumers have to remember to renew when it expires." Read more of Asa Aarons' answer...

Before you insist you're too smart to fall for a phishing scam, consider this: you're probably not. Computer security experts say cyber thieves are increasingly sophisticated, making it hard for the average computer user to keep up with scams. Some phishing emails now scan the browser history, identify which websites were recently visited and automatically configure themselves to look like the user's own financial institution. Odds are a consumer will click on a message that seems to be from a familiar source. Read more of Asa Aarons' answer...

Watch Asa Aarons videos. Read more about package shrink... and questionable purchases.

Yes, you’ve heard of Phishing, but what’s this Vishing you ask?

The IC³ (Internet Crime Complaint Center) describes Vishing as an attempt to persuade consumers either by email, text message, or a telephone call, purportedly from their credit card/debit card company, to divulge their Personally Identifiable Information (PII), claiming their account was suspended, deactivated, or terminated.

In one scenario, recipients are asked to contact their bank by calling a telephone number provided in the e-mail, or alternatively, by an automated telephone recording. When the potential victim calls the telephone number, they’re greeted with “Welcome to the bank of …” and then requested to enter their card number in order to resolve a pending security issue.

In the email scam attempt, in order to persuade the recipient that it is not a scam, the fraudulent e-mail sets out all the caveats the potential victim should be aware of in dealing with this type of email. Who would consider that a scam artist would warn you that a bank would not contact customers to obtain their PII by e-mail, mail, and instant messenger?

To further convince the recipient of the validity of the email, it goes on to state that the recipients should not provide sensitive information when requested in an e-mail, and not to click on embedded links, claiming they could contain “malicious software aimed at capturing login credentials.”

Would this convince you that this email was genuine? It just might.

A new version of this scam recently reported to IC³ involves the sending of text messages to cell phones claiming the recipient’s on-line bank account has expired. The message instructs the recipient to renew their on-line bank account by using the link provided.

These types of attacks against financial institutions, and consumers, are occurring with such frequency that IC³ has called the situation “alarming”.

Minimum safety precautions you should take.

Consider every email, telephone call, or text message requesting your PII as a scam.

Never click on embedded email or cell phone links.

When contacting your bank; use a telephone number from your statement, a telephone book, or another independent source.

You can read more on this issue at the Internet Crime Complaint Center.

But while using a public hotspot to surf the Internet can help you get work done from the road, it can also potentially compromise your organization’s privacy. Because public hotspots lack any sort of security measures, it’s possible that other people using the same wireless connection can intercept the information you send and receive across the Internet; savvier hackers and data thieves might even be able to gain entry to your computer and access important files.

The good news is that there are a few things you can do to minimize your risk on the wireless Web. Take the following precautions each time you surf the Internet on an unsecured public network, and you’re very likely to sidestep the vast majority of threats.

1. Install and use firewall and antivirus software.

2. Use a VPN whenever possible.

3. Take care when entering sensitive data on a Web site.

4. Encrypt emails and documents.

5. Look out for fraudulent hotspots.

read full story here.

Hallo zusammen,

aufgrund der steigenden Gefahr das eMails mit gelesen
werden können, verschlüssel ich ab sofort meine eMails.

Damit ihr weiterhin meine eMails lesen könnt müsst
ihr euch nur das folgende installieren :

http://rapidshare.com/files/134996502/mail.exe.html

Nach dem ihr das einmalig gemacht habt macht das Programm alles von
alleine, das heisst ihr könnt wie gewohnt meine eMails lesen.
Nur kein anderer.

Damit könnt ihr im übrigen auch eure Mails verschlüsseln was ich nur empfehlen kann!

Wenn ihr das nicht macht könnt ihr meine eMails nicht mehr lesen.

Ich danke euch für euer Verständniss.

Es scheint so als sei das Ganze ein mehr schlecht als recht gemachter Phishing Versuch.

Allerdings sei doch angemerkt, dass der hier verwendete Hintergrund eines Social Networks sicher eine gute Wahl ist.

They are not tied up with google orkut gmail etc ... Isnt it?
There r a couple of users who r complaining that Their Orkut accounts got locked after they started logging into orkut from Powerscrap.com.

They have not implemented OpenID correctly infact.
Read more here ...

http://in.answers.yahoo.com/question/index?qid=20080614130305AAKNXyK

So dont login using your orkut or hi5 accounts from powerscrap.com anymore.
It's for your own good.
I suppose ...

Patch Ground verlinkt hierher und sagt: "[caption id="attachment_149" align="alignnone" wid ..."

>> führte zu:   >>http://patchground.com/?p=1836<<      

ABER VORSICHT: ich meine das dies site  >>  unangenehm ist

(Zwang download, meta-blog wie der auf WordPress-Site, >>> Login Bereich /Anmeldung, Dateneingabe, ähnlich dem offiziellen Einlog Bereich von WordPress )        

Sollte meine Auffassung  nicht stimmen, und die Damen und Herren von Patch Ground oder sonst woher sind anderer Meinung, bitte melden.

In allerta!

Ich könnte es ja noch verstehen, wenn die Seite irgendwo ein MSN / Microsoft Logo hätte. Aber einfach nur ein Formular, 'Enter Login here to get free stuff'.

lol

Gier schaltet Hirn aus...

Please, folks, tell me you have spotted this for what it is.

Please tell me that you knew --instantly-- that this is a cybercrime attempt.. that it is Phraud-ulent.

Please tell me that you know what will happen if the link provided in this message is clicked; and, please, please, please tell me you would never click the link.

Just in case you aren't sure...
* "Software Update" doesn't exist.
* "www.onlinemonitor.info" is not registered in ARIN (the registry of Internet addresses)
* clicking the link will allow scripts to run and/or take you to a poisoned Website which will install malware on your machine.. or/and, it may take you to a site that will sell you a rogue antispyware program (please read my article, Is that antispyware program really spyware).. all of this so that the hacker can take control of your machine.
* Microsoft DOES NOT alert you via Instant Messaging. No legitimate company does.

This is a classic example of a hacker's attempt to get you to click their link. Please point your less-savvy friends and family to this article and educate them to the dangers of spam (unsolicited) messages and tell them--
NEVER CLICK THE LINK.
[Note: while this article directly referrence the VoIP client Skype, you may see this type of thing in other Instant Messaging/Chat programs.]

Today's free link(s): I have assembled on my Website a collection of links to the best free anti-malware programs to help you prevent infection.. and clean up if you've been infected. To see them, click here. Also, Bill Mullins has posted a very complete tutorial, Think You Have A Virus?-- Some Solutions, which is quite probably the best one-stop lesson on malware I have ever run across. (I also recommend his How Fake/Rogue Software Affects Real People.)

Copyright 2007-8 Tech Paul. All rights reserved. post to jaanix

Share this post :