<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>Security forum - dslreports.com community</title>
<link>http://www.dslreports.com/forum/security</link>
<description>Security forum current topics</description>
<language>en</language>
<copyright>Copyright 2007, dslreports.com</copyright>
<pubDate>Sun, 08 Nov 2009 07:56:20 EDT</pubDate>
<lastBuildDate>Sun, 08 Nov 2009 07:56:20 EDT</lastBuildDate>

<image>
<title>dslreports.com</title>
<url>http://i.dslr.net/bbrdisc1.gif</url>
<link>http://www.dslreports.com</link>
<width>19</width>
<height>18</height>
<description>bbr disc</description>
</image>

<item>
<title>Anti Virus Program? Tried Avast-Looking For Better Program</title>
<link>http://www.dslreports.com/forum/remark,23300669</link>
<description><![CDATA[Looking for a the "best" anti virus program that works with Windows 7. Tried Avast and do not like. Besides AVG what is the safest and best anti virus program out there? Thanks.
--
Love That SpongeBob! Great Forum]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23300669</guid>
<pubDate>2009-11-06 08:57:52</pubDate>
</item>

<item>
<title>Remote Desktop via SSH and error message</title>
<link>http://www.dslreports.com/forum/remark,23309168</link>
<description><![CDATA[http://theillustratednetwork.mvps.org/Ssh/RemoteDesktopSSH.html

I tried to configure SSH server (let us call this PC : Server PC) and putty (let us call this PC: Client PC) exactly as described in the link above (step by step).

I have got two PC with XP Profe OS,,,,one PC (Where SSH server is installed) is on cable modem and other PC (where PUTTY is installed ) is on dialup.

I was able to establish a SSH Tunnel  but I could not access RDP,,,,I do not know where was the problem.

Port forwarding is okay no problem otherwise I would not be able to establish SSH tunned

from PC where PUTTY is installed (let us call it Client PC) when I tried to type in the ip address (for the PC where SSH server is installed let us call it Server PC) with source port number (for Client PC) I received the below error message :

  

http://img687.imageshack.us/i/errormessagessh.jpg/

Any idea what troubleshoot should I perform ?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23309168</guid>
<pubDate>2009-11-08 06:53:44</pubDate>
</item>

<item>
<title>Is Antivirus Software Dead?</title>
<link>http://www.dslreports.com/forum/remark,23306959</link>
<description><![CDATA[Always-on Internet connectivity is keeping malware concerns alive and well. We examine whether antivirus software is up to the task, or whether it's a security solution of the past:
http://www.informationweek.com/news/security/antivirus/showArticle.jhtml?articleID=221600458&cid=nl_IW_daily_html]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23306959</guid>
<pubDate>2009-11-07 16:05:11</pubDate>
</item>

<item>
<title>New Cookie Attack - Google, Facebook, Others at Risk</title>
<link>http://www.dslreports.com/forum/remark,23293217</link>
<description><![CDATA[From The Register
4th November 2009 - said by Dan Goodin :Newfangled cookie attack steals/poisons website creds
Google, Facebook risk

A security researcher has discovered a weakness in a core browser protocol that compromises the security of Google, Facebook, and other websites by allowing an attacker to tamper with the cookies they set.

The weakness stems from RFC 2965, which dictates that browsers must allow subdomains (think www.google.com) to set and read cookies for their parent (google.com). The specification also states that if a cookie for a subdomain doesn't already exist, the browser should use the cookie belonging to the parent instead.

The arrangement makes it possible for attackers to steal or even alter the cookies that websites use to authenticate their users. Attackers would first have to identify an XSS, or cross-site scripting, bug in some part of the site they are targeting. But because virtually any subdomain will suffice, the scenario isn't unrealistic, two web security experts said.

"Most websites actually will store session IDs in a cookie and that's actually how they keep track of users throughout the use of their website," said Mike Bailey, a senior researcher for Foreground Security who first documented the flaw at last month's Toorcon hacker conference. "Using the same techniques to attack those cookies, I can really damage sessions and cause some problems."

Bailey's paper goes on to demonstrate how he used the technique to bypass a feature Google recently implemented to beef up security on Gmail and other properties. By exploiting a minor vulnerability in sites.google.com, he was able to falsify the contents of his global Google cookie. Google has since fixed the XSS hole in the subdomain.

In turn, that allowed him fool the Google protection, which checks to make sure the value in the cookie matches a hidden parameter of the login page.

Bailey lists several other sites that have been known to be vulnerable to similar attack techniques. Using an XSS hole on www.advertising.expedia.com, he found it was possible to poison the global cookies for the entire expedia.com domain. Because the site didn't set the cookies with proper escaping, an attacker could have used the weakness to inject malicious javascript into expedia pages.

Chase.com, capitalone.com and chasevisasignature.com either are or were vulnerable to similar attacks because they shared code with images.bigfootinteractive.com, which was vulnerable to XSS exploits.

Bailey said it's not hard to imagine university websites would be vulnerable to such attacks because the domain names frequently use names such as psychology.school.edu, geography.school.edu and so forth. A single bug in a student-maintained computer science project might be enough to compromise personal data stored on the college's student enrollment server, he said.

Websites can guard against attacks by regularly checking their pages for bugs, but because the attack exploits the way browsers are supposed to handle cookies, a more comprehensive fix will probably require a change to the underlying protocols. Which means this attack will probably be around for a while to come.

The paper is here.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23293217</guid>
<pubDate>2009-11-04 20:44:14</pubDate>
</item>

<item>
<title>Java SE (JRE 5.0 Update 21)</title>
<link>http://www.dslreports.com/forum/remark,23308308</link>
<description><![CDATA[http://java.sun.com/products/archive/j2se/5.0_21/index.html for those with older versions and OS'. Note that there is an annoying registration to get them! :( Or go to http://java.sun.com/javase/downloads/5u21/jre directly. ;)

Note that its support ended on end of October 2009.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23308308</guid>
<pubDate>2009-11-07 22:17:41</pubDate>
</item>

<item>
<title>online web tool &#x22;web sniffer&#x22;</title>
<link>http://www.dslreports.com/forum/remark,23308759</link>
<description><![CDATA[http://web-sniffer.net/
let the server do the dirty work.
--
&#9786;]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23308759</guid>
<pubDate>2009-11-08 00:51:30</pubDate>
</item>

<item>
<title>[UPnP Broken?] Avira 9 Premium Security Suite</title>
<link>http://www.dslreports.com/forum/remark,23308814</link>
<description><![CDATA[UPnP has "recently" stopped working in XP64 and I can't get it function anymore. It was always working normally with Avira 9 but no more. I tried checking Avira's Firewall settings and it looks normal. I tried switching from "Medium" to "Low" but it made no difference? UPnP Framework service is enabled with SSDP enabled. I wonder if a new firewall engine update was installed recently and changed something? I have also confirmed that this issue is now present on my other PC that runs Avira 9 PSS. UPnP was also working recently on that PC too. Can anyone else verify UPnP is no longer working correctly with Avira 9 Premium Security Suite?]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23308814</guid>
<pubDate>2009-11-08 01:18:31</pubDate>
</item>

<item>
<title>Microsoft ships stolen GPL code in Windows 7</title>
<link>http://www.dslreports.com/forum/remark,23307090</link>
<description><![CDATA[ quote:While poking through the UDF-related internals of the Windows 7 USB/DVD Download Tool, I had a weird feeling there was just wayyyyyyyyy too much code in there for such a simple tool. A simple search of some method names and properties, gleaned from Reflector&#146;s output, revealed the source code was obviously lifted from the CodePlex-hosted (yikes) GPLv2-licensed ImageMaster project. (The author of the code was not contacted by Microsoft.)

I see two problems here. (I&#146;m not a FSF professional, so there may be more.)
Microsoft lifts GPL code, uses in Microsoft Store tool
--
Obamanomics: Trickle-up poverty.]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23307090</guid>
<pubDate>2009-11-07 16:42:01</pubDate>
</item>

<item>
<title>Please Help, I think my computer is being monitored</title>
<link>http://www.dslreports.com/forum/remark,23304736</link>
<description><![CDATA[Recently, I'd say within the last few weeks I have begun noticing through TcpView that my computer seems to be periodically connecting to a site called "objectsciences.com". The connections take place in both Firefox/IE and even Yahoo IM. They appear as for exp.- "host4.objectsciences.com" "host50.objectsciences.com" etc. and so on. I have scanned my computer and it appears clean. The thing that worries me though is that after searching for info on this site, I have found that it apparently resolves to a company called SAIC which apparently is a large contractor for NSA, FBI, CIA, Homeland Security, DOD and whomever else I really dont know.

I am just a typical novice home computer user and have honestly not done anything illegal. Can someone possibly offer any info on what this all may be? What is this site? Should I inquire with my ISP? Should I contact a lawyer? Should I expect that the FBI or something is going to come to my door?  Assuming I am in fact for whatever reason somehow being monitored, is that even Legal then for them to do? 

I really am in desperate need of some help or advice or any info here. Please can anyone help me?

Thank you  ]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,23304736</guid>
<pubDate>2009-11-06 23:10:04</pubDate>
</item>

</channel>
</rss>
