<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Security forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/security</link>
<description>Security forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Sat, 04 Jul 2009 18:21:26 EDT</pubDate>
<lastBuildDate>Sat, 04 Jul 2009 18:21:26 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>Trojans,spyware,etc......</title>
<link>http://www.dslreports.com/forum/remark,22651724</link>
<description><![CDATA[It all is very scary how this crap can just install itself on your computer!!

My mom was using the XP this morning doing some research and all of a sudden she started saying "Whats going on??"

I went into the room and ANTIVIRUS PRO 2009 HAD INSTALLED and was throwing up porn popups,etc....... (Thats a fake virus program that tries to say your PC is infected,etc)

I told my mom to relax as i did a system restore to June 16th and it was gone.....

My mom doesnt know much about computers or i would try to explain to her about SURFING WITH SCRIPTS DISABLED.. (Much safer)

She uses IE7 and when i use that computer,i use Firefox 1.5 (WITH SCRIPTS DISABLED) as i dont like IE7 at all....... (And ff1.5 is alot like MyIE2 (My favourite browser))

Spysweeper didnt seem to stop this fake ANTIVIRUS 2009 from installing...... (Thats what is on there)

Its all quite scary the level these scumbags go thru to hurt people and thier computers!!]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22651724</guid>
<pubDate>2009-07-03 20:49:06</pubDate>
</item>

<item>
<title>Symantec executive: dangerous to run free antivirus</title>
<link>http://www.dslreports.com/forum/remark,22653456</link>
<description><![CDATA[ quote:A top Symantec executive has hit out at free antivirus software, including Microsoft&#146;s Microsoft Security Essentials, warning consumers that it won&#146;t be enough to keep them safe.

Speaking to BLORGE, David Hall, Symantec&#146;s Product Manager Asia-Pacific Consumer Products and Solutions said that free antivirus software isn&#146;t able to keep up with full-price suites like those offered by Symantec.

&#147;If you are only relying on free antivirus to offer you protection in this modern age, you are not getting the protection you need to be able to stay clean and have a reasonable chance of avoiding identity theft,&#148; he said.


http://tech.blorge.com/Structure:%20/2009/07/04/symantec-its-dangerous-to-rely-on-free-antivirus/

Does anyone else think this is pure FUD? Besides, not only is it still possible to get a layered security setup with free software from different companies, but Symantec's software has had poor detection rates of a lot of threats compared to free offerings like Avira & ClamAV. And that has led to more infections on machines supposedly protected by Symantec's products. And add to that the bloat, hogging of resources, and the intrusiveness of it.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)
]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22653456</guid>
<pubDate>2009-07-04 11:21:37</pubDate>
</item>

<item>
<title>Norton 2010 Beta  - finally posted</title>
<link>http://www.dslreports.com/forum/remark,22651382</link>
<description><![CDATA[Norton Internet Security 2010 beta has finally been posted:

http://www.symantec.com/norton/beta/download.jsp?pvid=nis2010

This is, of course, beta software, so expect the unexpected and don't run it on your production machine.

Full disclosure, I'm from Symantec.  But this year's model is worth looking at.  We focused on

1.  Performance 
We are determined never to take our eye off that particular ball again.  The goal is to put out the fastest scanner that uses the least memory and that does the least to impact your computing experience.  We will be testing the performance many different ways - but we want to hear from you on this year&#146;s model.

2.  Quorum
Which is an internal name for a dynamic reputation system that informs many of our components.  Last year we introduced Norton Insight - which used reputation to separate what files are safe from those that are not.

This year we extended that to give you insight into what is impacting the performance of the system.  We also are using Quorum to better make firewall decisions (this, IMHO, is what Microsoft should have done in W7&#146;s UAC), to throttle our new heuristic engine, do to better spam and phishing filtering.  Take a look at it, it improves security, speeds the scanner and gives you a very interesting view of your system.

Quorum is white listing done right - comments are appreciated.

3.  SONAR 2 - our new heuristic engine.  It looks for new/unknown malware both in static files and in real time and rates every file and every process.  The security rating feeds Quorum - and you get to see the security rating of everything running on your system.  We expect big improvements on pro-active malware tests.

 4.  Feeding your inner geek.  More information for the user.  Including more info on:
 - What happened when a system got infected
 - Information on the safety and performance rating of new software before you install it
 - And pretty pictures of system performance - and system changes.  The idea is to make it easy to how new software impacted your system's performance.  

5.  Brightmail
Yes, we finally put the Brightmail spam engine into NIS

6.  Onlinefamily - a new approach to parental controls - give you a little insight into what your pre-teen is doing online . . . 

I know this was a long post - but hopefully some of you will try the software and send us some feedback. ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22651382</guid>
<pubDate>2009-07-03 19:20:01</pubDate>
</item>

<item>
<title>NSA plans massive, 65MW, $2bn data center in Utah</title>
<link>http://www.dslreports.com/forum/remark,22654098</link>
<description><![CDATA[When completed, the facility will require at least 65 megawatts of power and cost $1.93bn, according to news reports. The 120-acre data center will be located in Utah's Camp Williams, which borders Salt Lake and Tooele counties. Two major power corridors already run through the spot, a major reason the NSA chose it.

The articles came around the same time The Washington Post reported that the Obama administration will proceed with a Bush-era plan to use NSA assistance is screening government computer traffic on private-sector networks. The plan is controversial because of the NSA's involvement in warrantless wiretapping of US citizens. 

http://www.theregister.co.uk/2009/07/03/new_nsa_data_center/

Wow, a 120-acre data center for collection of data and just to power the beast it will take 65MW but the real question is what kind of information will our government be collecting.
--
"Quis Custodiet Ipsos Custodes"]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22654098</guid>
<pubDate>2009-07-04 14:47:38</pubDate>
</item>

<item>
<title>Stop Password Masking</title>
<link>http://www.dslreports.com/forum/remark,22603527</link>
<description><![CDATA[http://www.useit.com/alertbox/passwords.html

"Usability suffers when users type in passwords and the only feedback they get is a row of bullets. Typically, masking passwords doesn't even increase security, but it does cost you business due to login failures..."

I don't really I agree with this if the password needs to be entered twice to be sure they are matching. I do like masking and I know passwords can be revealed on unencrypted connections.

What do you guys think?
--
Ant @ http://antfarm.ma.cx and http://aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22603527</guid>
<pubDate>2009-06-24 14:29:09</pubDate>
</item>

<item>
<title>AV for Windows 7 64 bit</title>
<link>http://www.dslreports.com/forum/remark,22652587</link>
<description><![CDATA[I plan on updating to Windows 7 this fall and would like to know if any of the free AV's are 64 bit Windows 7 compatible.  I'm currently running Avast, which is 64 bit ready, but they do not mention anything about Window's 7.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22652587</guid>
<pubDate>2009-07-04 01:12:04</pubDate>
</item>

<item>
<title>Femtocell Question</title>
<link>http://www.dslreports.com/forum/remark,22640009</link>
<description><![CDATA[As a manner of due dilegence, a company performs war driving to test wireless access points and locate rogue ones.  

Could a Femtocell be setup and utilized via tethering or PCMCIA card and not be detected by Netstumbler or Kismet?

If so, is there a tool to detect such activity?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22640009</guid>
<pubDate>2009-07-01 14:10:52</pubDate>
</item>

<item>
<title>Cloud-based computing will be &#x22;extremely dangerous&#x22;</title>
<link>http://www.dslreports.com/forum/remark,22653931</link>
<description><![CDATA[DarkReading | Jun 30, 2009 

Reformed black-hat hacker Michael Calce, better known as the 15-year-old "mafiaboy" who, in 2000, took down Websites CNN, Yahoo, E*Trade, Dell, Amazon, and eBay, says widespread adoption of cloud computing is going to make the Internet only more of a hacker haven. 

"It will be the fall of the Internet as we know it," Calce said today during a Lumension Security-sponsored Webcast event. "You're basically putting everything in one little sandbox...it's going to be a lot more easy to access," he added, noting that cloud computing will be "extremely dangerous." 

"This is not the last you're going to hear of this," he said. 

Paul Henry, security and forensics expert for Lumension, says cloud computing, indeed, will open up new avenues of risk. "We haven't even handled the fundamentals of [securing it] in our existing environments," Henry said during an interview after the Webcast. "Now we're going to push it up to the cloud?"http://www.darkreading.com/securityservices/security/attacks/showArticle.jhtml?articleID=218102139
--
Smokey's Security Forums http://www.smokey-services.eu/forums/
Smokey's Security Weblog http://smokeys.wordpress.com/
Site Member ASAP - Alliance of Security Analysis Professionals]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22653931</guid>
<pubDate>2009-07-04 13:51:55</pubDate>
</item>

<item>
<title>Secure browser by default</title>
<link>http://www.dslreports.com/forum/remark,22643731</link>
<description><![CDATA[I've followed most of the topics on this in the past, but always sided with my favourite still.

How ever, I've had enough of the endless bandwidth taken up by the countless communications. Free must be subsidised somehow, so I can't blame Opera's methods, but for me it isn't what I want. I've tried early Firefox and it's mail client Thunderbird, and let's not go Firefox with NoScript either.

What's left out there that is worth looking at, even paid is worth a look in, if it is secure by default. Opera 9.64 still has exploits that haven't been fixed and so does other popular browsers, but I'm not going Opera 10 again, even if it is the closest to perfection in some levels, whereby in the past it was a horror for some web pages.

If I was to look at another browser, no Opera, no Firefox and no IE shell browsers, what is left for the front page of my computer that will show internet pages, but still be configurable too while being a good solid secure browser?

I'm open to ideas as I'm all browsered out at present. 
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22643731</guid>
<pubDate>2009-07-02 08:48:10</pubDate>
</item>

<item>
<title>Obama&#x27;s internet monitoring plan moves forward</title>
<link>http://www.dslreports.com/forum/remark,22651198</link>
<description><![CDATA[Proposal for defending against cyber attacks worries privacy experts 

The Obama administration is moving cautiously on a new pilot program that would both detect and stop cyber attacks against government computers, while trying to ensure citizen privacy protections. 

The pilot program, known as Einstein 3, was supposed to launch in February. But the Department of Homeland Security is still pulling the plan together, according to senior administration officials.

Einstein 3 has triggered debate and privacy concerns because the program will use National Security Agency technology, which is already being employed on military networks.

Any involvement of the NSA &#151; the agency which oversees electronic intelligence-gathering &#151; in protecting domestic computer networks worries privacy and civil liberties groups who oppose giving such control to U.S. spy agencies.

Officials, who spoke on condition of anonymity because the program is still being finalized, said that while the technology will come from the NSA, the program will be managed and run by the Department of Homeland Security. The monitoring would be limited to government systems and any internet traffic moving in and out of them.

The latest developments in the Einstein 3 program were first reported Thursday on the Washington Post's website.

"The NSA will provide technical assistance," Homeland Security Secretary Janet Napolitano told reporters. "We absolutely intend to use the technical resources, the substantial ones that NSA has."

Einstein 1, which is currently in use by DHS, is an automated program designed to detect intrusions into government networks, and Einstein 2, which is now being put in place, is a more advanced system for detection. It is being used now by about five of the higher risk government agencies, one senior official said.

Einstein 3 would be designed to not only detect intrusions, but to stop them &#151; preventing any malicious computer codes from getting into government networks and stopping any data theft from those systems. The key, said officials, is that the focus of the monitoring and prevention program is not the content of emails, but any codes attached to emails that could infect the system or steal information.

Ari Schwartz, a vice-president of the Center for Democracy and Technology, said Thursday that privacy advocates want to ensure that as the government begins to more aggressively protect its computer systems, it follows the law, and does not look into private systems.

"There are a number of concerns that come with this process, the main one being how do you go about protecting the system in a way that insures you're not monitoring private systems," said Schwartz. "I don't have a full answer to that question. But the president made that pledge. That makes me more comfortable that it won't happen."

The planned deployment of the new Einstein 3 program was noted in the administration's recently released cyber security review. The 60-day review said the government would continue to consult with privacy and civil liberties groups as the program moves forward.

Obama released the review saying that cyber threats are one of the most serious economic and national security challenges faced by the nation. And he said he will name a new cyber co-ordinator for the federal government.
Source: 
http://www.cbc.ca/technology/story/2009/07/03/obama-cyber-attacks.html
--
siljaline 

Here at Mountain View Chocolate, we&#146;re committed to transparency and choice]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,22651198</guid>
<pubDate>2009-07-03 18:40:07</pubDate>
</item>

</channel>
</rss>
