Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus

LizaMoon SQL injection rogue AV
Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense
has a complete write up the attack, dubbed 'LizaMoon,' but here's the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It's not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker's server. This is repeated over and over until every Web page in the SQL database has been infected -- and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn't particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that's it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there's nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

RF MICRO DEVICES RED HAT RADISYS RACKABLE SYSTEMS QUEST SOFTWARE

Apple unveils iOS 6 at WWDC, launch apps with Siri, Facebook integration, Maps

Apple unveils iOS 6 at WWDC, launch apps with Siri, Facebook integration, Maps

Looks like they didn't print the banner out for nothing -- as anticipated, it's not just refreshed MacBook Airs or Mountain Lion getting the red carpet treatment at today's World Wide Developer's Conference keynote. Cupertino has also taken the shiny cling wrap off of the latest version of iOS. What's new? Well at least 200 things! Most notably, Siri has gotten a little make over, including the ability to launch apps, more knowledge of sports, restaurants and movie times, it's also coming to iPad. There's better Facebook integration too, with photos, websites, maps and more getting the instant share option -- you can even "like" or share app from the Appstore. Other tweaks on the phone side of things let you dismiss incoming calls with a swipe, or send a pre-written SMS, even set it to give you a reminder once you change location.

Another popular feature will be "Do Not Disturb" which holds off all those notifications (from your new Facebook friends, we guess). You'll still get them, but the won't alert, or light up the screen. Face-timers will also be pleased to see that feature finally working over cellular. Sharing images also just got easier with shared Photo Streams -- choose the pictures, choose the friends. Done. New "Guided Access" allows parents or teachers (for example) to keep users from exiting an app accidentally (or in the case of the teachers -- intentionally!). More info and PR after the break.

Continue reading Apple unveils iOS 6 at WWDC, launch apps with Siri, Facebook integration, Maps

Apple unveils iOS 6 at WWDC, launch apps with Siri, Facebook integration, Maps originally appeared on Engadget on Mon, 11 Jun 2012 14:12:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/Z5aQESlonfM/

IBASIS HYPERCOM HEWLETT PACKARD CO HEARTLAND PAYMENT SYSTEMS GOOGLE

Rumor: Updated MacBook Air to Feature 8GB RAM and 512GB SSD? [Rumors]

Apple?s iBook App is Brilliant

By far one of the best features of Apple’s iPad is it’s ability to access thousands of apps. It does have a great multi-orientation interface too but the fact that these apps have been designed for the iPad only means there is very little chance of finding them on any other device other than the iPhone and iPod Touch.   The applications cover a wide range of categories from entertainment to business with games, education and sports in between. Apple [...]

Source: http://tabletbuzzblog.com/apples-ibook-app-is-brilliant/

MILLICOM INTL CELLULAR MOBILE TELESYSTEMS NANYA TECHNOLOGY NII HOLDINGS NIKON

Corel releases VideoStudio Pro X4, we go hands on (video)

videostudioprox4
Corel seems to be on a roll lately; after releasing WinZip System Utilities just last week, this morning the company announced VideoStudio Pro X4.

VideoStudio Pro is aimed at home users and small business professionals who want to create professional-looking videos, but without the hassle, steep learning curve and price of Adobe Premiere Pro and the likes.

This new version introduces several features:

  • Stop motion animation: You can now capture still frames using a webcam, camcorder or DSLR and use them to produce an animation. Tools such as "onion skin view" let you compare the previous image in the sequence with the current one and make the animation as smooth as possible.
  • Processor optimization: Corel says the app is optimized for Intel's new Sandy Bridge systems, and have shown us some graphs with very impressive numbers. We've been unable to test this particular point, but if you have a recent-generation Intel or AMD Fusion system, VideoStudio performance should be blazing. Even on our older test system performance was quite impressive.
  • Customizable workspace: You can drag the video preview window to your secondary monitor (if you have one) and tweak just about any other element in the window layout. Once done, you can save your ideal workspace in one of three slots.
  • Share-to-Web: VideoStudio Pro X4 hooks directly into YouTube, Vimeo, Facebook and Flickr, so you don't even have to launch a browser to upload your final product. Edit, produce and share from within the app itself.
  • Smart Package: Video projects typically consist of many files; Smart Package lets you bundle all video assets for a given project into one ZIP file which you can password-protect and keep in a safe place once you're done editing.
I've had a chance to play around with a pre-release version for a few days, and have put it through its paces editing a short video for my day job. Overall, I've been impressed with how easy it was to create pro-looking results. If you do any sort of video editing but are leery of the investment other apps require (both in dollars and effort), VideoStudio Pro is well worth checking out. To see a bit of the interface itself and what the app can do, watch the video after the jump.

Note: We'll be running a give-away of ten VideoStudio Pro X4 licenses later today, each worth $100 USD. Keep your eyes peeled for the giveaway post!

Continue reading Corel releases VideoStudio Pro X4, we go hands on (video)

Corel releases VideoStudio Pro X4, we go hands on (video) originally appeared on Download Squad on Tue, 22 Feb 2011 09:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/02/22/corel-releases-videostudio-pro-x4-we-go-hands-on/

ACER ADOBE SYSTEMS ADVANCED SEMICONDUCTOR ENGINEERING ALLIANCE DATA SYSTEMS ALLTEL

This Double-Handled Caraffe is Obviously Designed For Serious Dinner Hosts [Design]

Do your friends talk about your epic dinner parties weeks after the event is over? If so, and you fancy yourself a master of preparing and serving a meal, this lovely glass caraffe will have you topping off water glasses like an industrial machine on a factory assembly line. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/yQWInWGvkfM/this-double+handled-caraffe-is-obviously-designed-for-serious-dinner-hosts

TRIDENT MICROSYSTEMS TRANSACTION SYSTEMS ARCHITECTS TOTAL SYSTEM SERVICES TNS TIBCO SOFTWARE

Asus PadFone, tablet Station get imported stateside courtesy of Negri Electronics, yours for $860

Having to fiddle with a separate Android tablet and smartphone and a laptop just won't cut it? You might be eager to get your mitts the ASUS PadFone if that's your sentiment, but folks in the US won't exactly find these at their local Best Buy. Still, despite having no official carrier support or definitive launch plans within the states, you'll now be able to snag the smartphone bundled with its tablet dock if you're willing to hit the gray market. As discovered by Phone Arena, our friends at Negri Electronics are now stocking the international edition of the über-hybrid; $860 gets you one to call your own, but tactile-typists should note that it doesn't include the keyboard dock. To refresh your memory, the fone itself is runs Ice Cream Sandwich atop a 1.5GHz Snapdragon S4 CPU, and features a 4.3-inch AMOLED display, 16GB of expandable storage, HSPA+ connectivity and a 1,520mAh battery. Additionally, the 10-inch PadFone Station (tablet dock) scores you more screen real estate (naturally) and a nine-fold increase in battery life. Feel free to refresh your knowledge of the device (and its accessories) with our previous hands-on posts, then check out the source link below if you decide to pick one up with your hard-earned dough.

Asus PadFone, tablet Station get imported stateside courtesy of Negri Electronics, yours for $860 originally appeared on Engadget on Sun, 10 Jun 2012 16:12:00 EDT. Please see our terms for use of feeds.

Permalink Phone Arena, Phandroid  |  sourceNegri Electronics  | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/bcpHE4pedko/

LEXMARK INTERNATIONAL LEVEL 3 COMMUNICATIONS LAWSON SOFTWARE LAND SOFTWARE LAM RESEARCH

This Week's Top Web Comedy Video: Keenan Thompson at the Cool Kids Table [Video]

What's life like at the cool kids table? Even worse than you thought, apparently, as Keenan Thompson finds out. At least they're taking out most of their pretty ire on Zuck. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/WyyukpBRX_E/this-weeks-top-web-comedy-video-keenan-thompson-at-the-cool-kids-table

NUANCE COMMUNICATIONS NOVELLUS SYSTEMS NOVELL NETWORK APPLIANCE NETGEAR

Mitoza is a fun, freaky Web toy with an artistic look

mitoza
While not a game per se, I found Mitoza intriguing enough to spend quite some time with it. You start off with a seed, and are then presented with two choices: you can either click a flower pot, or click a cute little birdie.

If you click the flower pot, a flower pot appears and the seed is planted inside. You're then presented with two further choices -- a water can or a bottle of fertilizer. Each choice you make causes your creation to morph, and presents you with two other choices.

There's no winning or losing, really. Each "game" usually lasts around four or five choices, at which point the plant/animal dies in some creative (but not too gruesome) way. At this point you instantly start over with a new seed.

The graphics are captivating; the whole thing has a cinematic feel to it, with a bit of artificial camera shake added for style.

All in all, it's a fun, peaceful way to spend a few minutes, and it might even make you think a little bit while you're at it.

Mitoza is a fun, freaky Web toy with an artistic look originally appeared on Download Squad on Mon, 28 Mar 2011 17:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/03/28/mitoza-is-a-fun-freaky-web-toy-with-an-artistic-look/

FAIRCHILD SEMICONDUCTOR INTERNATIONAL FAIR ISAAC FACTSET RESEARCH SYSTEMS F5 NETWORKS EPICOR SOFTWARE