storm

Security experts warn of potential malicious AIR code

On Monday, Adobe Systems rolled out its new Web 2.0 development tool, Adobe Integrated Runtime, or AIR. Following its release were some concerns from the security community.

AIR, formerly Adobe Apollo, is a runtime environment that allows developers use HTML, Flash, AJAX, Flex, and other Web 2.0 tools to create desktop applications. One such application built using Adobe AIR comes from Nickelodeon Online.

But some security experts are concerned about local file access by AIR applications. Recently, Firefox experienced a vulnerability that could have allowed remote attackers to access a targeted file system. To mitigate this, Adobe says … Read more

From Storm, with love

The FBI is warning that Valentine's Day e-mails you see this year might be coming not from loved ones, but from the Storm worm botnet. In a press release Tuesday, the FBI warns users to be on the lookout for e-mail that "directs the recipient to click on a link to retrieve the electronic greeting card (e-card). Once the user clicks on the link, malware is downloaded to the Internet-connected device and causes it to become infected and part of the Storm worm botnet."

Dr. Jose Nazario of Arbor Networks said the authors of Storm have launched … Read more

Free tool blocks Facebook, MySpace, and Yahoo ActiveX vulnerabilities

A researcher over at the Internet Storm Center has created a powerful GUI that will set the kill-bits on vulnerable ActiveX controls used in Facebook, Myspace, and Yahoo apps. These popular apps came under attack on Monday after researchers Elazar Broad and Krystian Kloskowski disclosed their findings to a online security newsgroup.

On Tuesday, exploits for the Yahoo apps were reported circulating. There is currently no patch from the individual vendors, so the only workaround is to disable the several specific, vulnerable ActiveX controls. (ActiveX controls were developed by Microsoft for use with Internet Explorer and other browsers.)

The SANS … Read more

Phishers now leasing the Storm worm botnet

A number of phishing sites have cropped up within the last day using domains previously attributed to the Storm worm botnet. Last fall, Storm was used in a series of pump-and-dump stock spam blasts, including a unique MP3-based spam blast, but researchers at F-Secure don't think the original authors of Storm are necessarily trying something new. F-Secure said Tuesday that "October brought evidence of Storm variations using unique security keys. The unique keys...allow the botnet to be segmented allowing 'space for rent.'" They think phishers are leasing parts of the larger botnet.

F-Secure cites a Halifax … Read more

Long power outage a wake-up call to be better prepared

I've just emerged from a brief visit to the 19th century (via a storm-driven 36-hour power outage) and among all my other experiences and impressions during this odd weekend, none was more powerful than an extremely visceral understanding of just how fragile our modern infrastructures are.

This all began when, just as I was about to run out of my Sausalito, Calif., house on Friday morning, I decided to do a quick e-mail check. Oddly, there was no Internet connection, and after a cursory check to see why, I realized that our power was out, a condition that had … Read more

Metal Storm reaches Navy test range

After years of development, a new class of weapon that uses computer-controlled electronic ignition instead of primers to fire projectiles may be finally taking its much coveted place in the U.S. military inventory.

Brisbane, Australia-based Metal Storm has delivered a four-barrel weapon to the Naval Surface Warfare Center for testing that uses a small electrical current instead a conventional firing pin to deliver stacked rounds at an astounding rate.

How astounding? Try 1 million rounds per minute. That's the rate, by the way, not the volume; still, there's no way you want to be anywhere near the … Read more

Widgets, widgets galore: MatchKey, MuseStorm, FeedHub

Three more companies making new micro-applications that track and deliver media preferences.

Matchmine allows consumers to figure out what kind of media they like by creating a MatchKey, or a visualization of their preferences.

Just give a ZIP code, date of birth and rate some movies, blogs, etc. with a star system a la Netflix. Users can share their MatchKey with friends and/or advertisers, but not any personal information. The Facebook widget version show what the person has in common with his or her friends--like Flixster, but not in list form. Matchmine has an API online for developers to … Read more

Storm worm rivals world's best supercomputers

What good are several million Storm worm infected PCs? According to one researcher, the current computing power of Storm worm's botnet is greater than IBM's Blue Gene supercomputer. "If you calculate pure theoretical throughput," Matt Sergeant, chief antispam technologist with security vendor MessageLabs, "then I'm sure the botnet has more capacity than IBM's Blue Gene. If you sat them down to play chess, the botnet would win."

The Australian publication IT News also quotes Sergeant as saying, "In terms of power, the botnet utterly blows the supercomputers away." He goes … Read more

Web Shirts: 20 rad T-shirt sites

Internet commerce is becoming the new pastime for many in my generation. Generation Yers like to buy interesting T-shirts online, and there's no shortage of sites out there that are putting out an absurd amount of user-generated designs. Here's a list of more than 20 quality sites that put cotton, and inspiration, on your back.

Readymade: These services sell shirts that are designed by users and professionals.

Threadless is one of the most popular shirtmakers out there. It started out with user votes to pick out which shirts would go on sale, and have since moved on to independent designers. When shirts sell out, they're typically not for sale again unless the demand becomes great. They're also set to open a retail store in Chicago next month.

Glarkware, a small Canadian shirt company, is based out of Toronto, Ontario, and has a fairly eccentric line of humor-related shirts. They've also got a line of T-shirts on the way for toddlers.

Shirt.Woot. From the same bunch that does good ol' Woot.com and Wine.Woot.com, is Shirt.Woot.com--a one-shirt-per-day service that rolls out a new design every night at midnight Central time. Every shirt is always $10 with free shipping, along with the option to get it delivered in two days for another five bucks. While a good deal of the shirts are designed by professionals, the service also runs a weekly "derby" with user-generated designs. The most popular design goes on sale, and the designer gets a cut of the profits.

Bountee is a hybrid service that offers both professionally designed T-shirts and a build-it-yourself solution. Bountee features a variety of "Web 2.0" features like tagging, user ratings, and commenting. It's also got a really slick, easy-to-use design.

Split The Atom is a U.K.-based T-shirt company that's pretty much exactly like Threadless, but with a smaller selection. It also takes user designs in return for a one-time cash prize.

Design by Humans has a very small collection of shirts, but offers some pretty decent prize money for winning designers with a daily, weekly, and monthly design contest. Each designer also gets their own profile page for listing any background information and to showcase some of their other works.

BustedTees and Defunker are two very different Net T-shirt services from the same company. Bustedtees is more about humor, while Defunker offers more designer solutions akin to Threadless. Both sites are really slick, but between the two, Defunker feels a bit snappier. There's also a pretty large price gap, with most Bustedtees topping out at around $16, and Defunker averaging in the high-$20s and mid-$30s.

T-ShirtHell. There's a reason this site has a warning page and a hellish name. These shirts are the kind that will get you stares in public, and usually not for a good reason. Definitely not for the faint of heart, or workplace.

The Cotton Factory doesn't actually make cotton, but they have a very solid selection of designer, and humor T-shirts. There's even a section of T-shirts less than 10 bucks. There's some real gems in this place, especially if you like "ninja" apparel.

… Read more