Quiet Aspirations Inked By A Prickly US Senator

Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense has a complete write up the attack, dubbed ‘LizaMoon,’ but here’s the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It’s not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker’s server. This is repeated over and over until every Web page in the SQL database has been infected — and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn’t particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that’s it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there’s nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

NOVELL ITRON HEARTLAND PAYMENT SYSTEMS KEY

Sure, pushing builds of Android 4.0.4 out over the air is great, but what if you want to keep that unblemished piece of Ice Cream Sandwich for posterity? You could download the AOSP files, but you’d be missing some vital ingredients from the official factory images. Thankfully, build IMM76I of Google’s mobile OS is available to download in a simple archived format. With this release Big G is also introducing a second version of its software. In addition to the standard “yakju,” there’s now “takju,” which includes Google Wallet and the necessary support files. If you’re a safety first kind of guy or gal and like to keep a simple factory reset kit handy (you know, just in case that latest CM9 nightly doesn’t work out so well), head on over to the source link to download the untainted Android images.

Android 4.0.4 factory images hit the web for GSM Galaxy Nexus originally appeared on Engadget on Tue, 24 Apr 2012 15:42:00 EDT. Please see our terms for use of feeds.

Permalink Android Central  |  Google Developers  | Email this | Comments

Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/jqzu_i6Qw6Y/

ASML HOLDING IOMEGA MICROCHIP TECHNOLOGY AMAZONCOM

For the past several months we've had a general idea of which U.S. Samsung phones and tablets are slated to receive an update to Android 4.0 Ice Cream Sandwich. But today the manufacturer has stepped in with a full carrier-by-carrier breakdown of which devices are set to get the latest version of Google's OS.

The big picture is that if you've got a Galaxy Tab or Galaxy S II-class phone, chances are you're in line for an ICS update later in the year. The only real surprise comes from T-Mobile, which doesn't have any confirmed devices, though Samsung promises a list in the "coming months." There's also no mention of the original Galaxy S, but then that stopped being news a few months ago.

Unfortunately there are no specifics offered about exactly when these updates will begin rolling out (except for the Nexus S, of course, which already has its ICS update). Though with ICS for the international Galaxy S II already rolling out to handsets in Europe and Asia, we're hopeful S II owners in the U.S won't have too much longer to wait.

Source: Samsung Support; via: Samsung Mobile USA

Source: http://feedproxy.google.com/~r/androidcentral/~3/96RoE46m720/story01.htm

MICROSOFT HCL TECHNOLOGIES IMATION HEWLETTPACKARD

Marc, Seth, and Rene iterate through Google’s Project Glass, upgrade pricing, and Instagram’s sale to Facebook, and interrogate Justin Marcucci and Tammy Coron of Nickelfish. This is Iterate!

Source: http://feedproxy.google.com/~r/TheIphoneBlog/~3/dopolNw-t7o/story01.htm

MANTECH INTERNATIONAL INTERNATIONAL GAME TECHNOLOGY QUANTA COMPUTER OPENWAVE SYSTEMS

Light-based communication seems to wind throughout the MIT Media Lab — it is a universal language, after all, since many devices output light, be it with a dedicated LED or a standard LCD, and have the capacity to view and interpret it. One such device, coined Droplet, essentially redirects light from one source to another, while also serving as a physical interface for tablet-based tasks. Rob Hemsley, a research assistant at the Media Lab, was on hand to demonstrate two of his projects. Droplet is a compact self-contained module with an integrated RGB LED, a photodiode and a CR1216 lithium coin battery — which provides roughly one day of power in the gadget’s current early prototype status. Today’s demo used a computer-connected HDTV and a capacitive-touch-enabled tablet. Using the TV to pull up a custom Google Calendar module, Hemsley held the Droplet up to a defined area on the display, which then output a series of colors, transmitting data to the module. Then, that data was pushed to a tablet after placing the Droplet on the display, pulling up the same calendar appointment and providing a physical interface for adjusting the date and time, which is retained in the cloud and the module itself, which also outputs pulsing light as it counts down to the appointment time.

StackAR, the second project, functions in much the same way, but instead of outputting a countdown indicator, it displays schematics for a LilyPad Arduino when placed on the tablet, identifying connectors based on a pre-selected program. The capacitive display can recognize orientation, letting you drop the controller in any position throughout the surface, then outputting a map to match. Like the Droplet, StackAR can also recognize light input, even letting you program the Arduino directly from the tablet by outputting light, effectively simplifying the interface creation process even further. You can also add software control to the board, which will work in conjunction with the hardware, bringing universal control interfaces to the otherwise space-limited Arduino. Both projects appear to have incredible potential, but they’re clearly not ready for production just yet. For now, you can get a better feel for Droplet and StackAR in our hands-on video just past the break.

Continue reading Droplet and StackAR bring physical interface to virtual experiences, communicate through light (hands-on)

Droplet and StackAR bring physical interface to virtual experiences, communicate through light (hands-on) originally appeared on Engadget on Tue, 24 Apr 2012 15:03:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/P-j5f2BfGFs/

FIRST SOLAR MISCROSOFT OFFICE HIGH TECH COMPUTER F5 NETWORKS