10/21/2007

Microsoft launches social bookmarking/GTD/wiki service

Filed under: — Aviran Mordo

Microsoft Live Labs has a new “technology preview” for you to play with. It’s called Listas and it’s basically a social bookmarking service for keeping track of content you come across while browsing the Web, and sharing it with others.

Users can make their own containers full of all sorts of links, and supplement it with text, images, and RSS feeds using a WYSIWYG editor or by just pasting in entire Web pages from their text clipboard. The service is being billed as a way to make lists, but I think its core appeal will ultimately end up as a Web clippings service.

brewery offers beer for laptop

Filed under: — Aviran Mordo

A New Zealand brewery is reportedly offering a lifetime supply of beer for the return of a stolen laptop.

Local media said the laptop was stolen from the Croucher Brewing Company in the central North Island city of Rotorua earlier this week.

Owners were desperate to retrieve the computer containing designs, contact details and financial information, the Rotorua Daily Post said.

They have offered free beer to anyone giving clues leading to its recovery.

Co-owner Paul Croucher said the company would provide a lifetime supply of about 12 bottles a month to anyone who could name the thief.

‘Fiendish’ Trojan pickpockets eBay users

Filed under: — Aviran Mordo

Miscreants have unleashed a new strain of a sophisticated Trojan that targets eBay users by feeding them spoofed web pages containing fraudulent information about high-ticket purchases, The Register has learned. It has already contributed to an $8,600 loss by one eBay member.

The Trojan installs a scaled-down webserver on an infected machine that masquerades as eBay and several third-party destinations frequently used to sniff out fraudulent offerings, including Carfax.com, Autocheck.com and Escrow.com.

When a victim browses to one of these sites, the webserver creates a parallel universe of sorts, in which the victim sees counterfeit pages designed to counter fraud protection mechanisms offered by eBay and third-party sites.

“To think that somehow they got software on their system that managed to spoof all the validation sites - that’s a shit-scary story,” said Roger Thompson, a researcher at Exploit Prevention Labs who specializes in web-based attacks. “It’s fiendishly clever.”

The malware was found on the machine of one eBay Motors user who recently lost $8,650 after trying to buy a 2005 Jeep Liberty advertised for 10 days on the site. Customer representatives have refused to cover the theft because, they said, the transaction was made outside of eBay.

IE + RealPlayer = Security hole

Filed under: — Aviran Mordo

If you have RealPlayer installed and use Internet Explorer to browse the web, beware: an exploit in circulation can allow an attacker to take complete control of your machine, Symantec is warning.

Attacks targeting the most recent version of RealNetworks’ music and video player were first observed Thursday night. They exploit a vulnerability in the way RealPlayer interacts with IE, providing a stealthy means for miscreants to shoehorn their way into a user’s PC.

“If you have RealPlayer installed, simply visiting a malicious Web page can put your computer at risk,” a Symantec blog post explains. “The player does not need to be running.”

The ActiveX object being exploited resides in the the RealPlayer component ierpplug.dll. Attack code reviewed by Symantec causes RealPlayer to download and execute a copy of Trojan.Zonebac.

Powered by WordPress