Plaintext passwords in Firefox

Go to Tools > Options and click on Password tab. Then click on View Saved Passwords. Now click Show Passwords to reveal all saved passwords in Firefox. :o

Wow� It really reveal all the saved passwords in plaintext. I never knew about this before. But fortunately only me use this computer. I hope there is no one read my passwords.

How to secure it?
To secure all the saved passwords, you must setup your Master Password. And if there is someone who want to reveal the saved passwords, s/he need to enter Master Password first before they can view the saved passwords.

Secure your saved passwords in Firefox [gHacks] [tags]firefox, internet, softwares, privacy[/tags]

How to Prevent from IP Spoofing?

IP Spoofing is a trick which an attacker use to spoof clients to think that the packets come from trusted machine. There are many types of IP Spoofing and these are common types of the attack:

  • Blind spoofing
  • Non-blind spoofing
  • Denial-of-service attack

To prevent from IP Spoofing, Jonathan Hassell has wrote an article about The Top 5 Ways to Prevent IP Spoofing. He explain some common attacks in his article and how to prevent from these attacks.

After read his article, I agree with his point to use encryption when transfer private data to others. It is more secure by that way.

The Top 5 Ways to Prevent IP Spoofing [Computer World]

ZoneAlarm warned! Clear text password send to Bloglah.com

I was shocked today when I want to login to my site, ZoneAlarm Pro gave me warning, Firefox want to send password to Bloglah.com. Huh? When did I want to send password to Bloglah.com. I want to send password to CypherHackz.Net so I can login to my site. I talking to myself.

I denied the request and Firefox sent me back to WordPress login prompt. I type in my user and password and try to login again. ZoneAlarm warned me with the same question. Hey! Not Bloglah.com but I want to login to CypherHackz.Net…

There is something wrong with my Firefox I thought. I close Firefox and try to login from Opera. Still get the same warning from ZoneAlarm. So the problem is not from Firefox. But my computer.

Continue reading “ZoneAlarm warned! Clear text password send to Bloglah.com”…

12 flaws in Firefox fixed

After the release new patches for Firefox, 12 flaws discovered have been patched. Five of the patches issued in Firefox 1.5.0.4 were labeled “critical”. Mozilla has released four security updates to the 1.5 edition since it was made available last November.

Why you need to update your Firefox?
You need to update your Firefox because multiple vulnerabilities have been reported in Firefox. HTTP response smuggling attacks, could allow malicious code writer to steal login cookies or other sensitive data if the user has an account at the spoofed website.

Beside than that, hackers can run buffer overflaw to unpatch Firefox that would allow them plant malicious code on victim’s computer. Other flaws could let attacker run malicious JavaScript without the user’s permission.

I have updated my Firefox to the latest version. How about you? ;)

More Info: Mozilla Fixes 12 Flaws in Firefox Browser

Kaspersky 6 – Best Buy Award from Computer Shopper

Kaspersky AntiVirus 6 won the Computer Shopper Best Buy Award for this June edition of Computer Shopper. Ease of use, good perform in detection, easy to update and reasonable price are the things that make Kaspersky 6 worth to get the award.

Kaspersky 6 which released this 15th May 2006, was tested against other leading antivirus programs for the first time in UK.

Once install, you can leave Kaspersky 6 do it works. A reviewer commented: “An updated, friendly interface gives access to lots of options; many suitable for advanced users. However, if you don’t want to get your hands dirty playing with advanced settings or exporting virus scan reports in CSV format, you don’t have to. Simply install the software, let it update itself, and it scans your system regularly. A single slider selects one of three security levels.”

The reviewer add: “Perfectly, as it turned out. It was one of only three products tested to detect every sample. Interestingly, the other two (F-Secure and Steganos AntiVirus) also use Kaspersky Anti-Virus technology.”

More Info: Kaspersky® Anti-Virus 6.0 wins first Best Buy Award from Computer Shopper

Cypher says: I currently using KAV 5. Will upgrade it when KAV 6 support local folder update.

StarOffice got his first virus

Based on Kaspersky researchers report, they found a new virus that attack StarOffice. They named it “Stardust”. Stardust is the first virus that created to infect StarOffice and/or OpenOffice. Written in Star Basic, the macro virus download an image (adult content) from the Internet and open it as a new document.

Kaspersky said, they will add up more information about Stardust in their Virus Encyclopedia very soon.

More Info: Virus.StarOffice.Stardust.a

Skype users in Danger

SkypeThis is kind of old news. But attention to all Skype users. Download the latest Skype update for your Skype software because a flaw has been found by Australian security firm.

Security-Assessment.com has discovered with the install of Windows-based Skype client. The flaw is dangeorus because an attacker can retrieve files from other Skype users through unauthenticated connections due to a flaw in the URI(Uniform Resource Identifiers). Skype was notified about the flaw earlier this month (May) and promptly issued a patch. General vulnerability dissemination was made on 22 May by Security-Assessment.com.

More Info: Australian company uncovers Skype flaw

Remote Exploit in Symantec Antivirus

According to research conduct by eEye, a vulnerability remote exploit has been found in Symantec Antivirus product. The flaw does not require any user interaction for exploitation and can compromise the systems. With this exploit, the affected system allow for the execution of malicious code with SYSTEM level access. Symantec software that affected with this vulnerability are Symantect Antivirus 10.x, Symantect Client Security 3.x and maybe other products also affeted with this exploit.

Source: eEye Digital Security

Cypher says: Fortunately I use Kaspersky on my comp. :)

Loading...

Jom sertai peraduan "Saya Nak Hosting Percuma Pengendali Blog". Hadiah menarik menanti anda...