Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus

LizaMoon SQL injection rogue AV
Over the last few days, a mass SQL injection attack has been quickly gathering speed. Just three days ago only 28,000 URLs were affected, but at the time of writing, there could be up to 3.8 million infected URLs.

Websense
has a complete write up the attack, dubbed 'LizaMoon,' but here's the basic gist: it looks like someone is exploiting a vulnerabilty (or vulnerabilities) in hundreds of thousands of websites running on Microsoft SQL Server 2003 and 2005. It's not yet known whether this is a vulnerability in SQL Server, or simply a case of outdated, unmaintained, and easily-exploitable CMSes.

The attack takes the form of an SQL injection, which then inserts a link to a JavaScript file hosted on the attacker's server. This is repeated over and over until every Web page in the SQL database has been infected -- and considering 3.8 million URLs have been infected, you can see that this is a very easy, and automated, attack.

Fortunately, the JavaScript isn't particularly malicious: it pops up a rogue AV program called Windows Stability Center, but that's it. Better yet, the rogue antivirus is already recognized by a bunch of real antivirus suites, including Avast, Panda and Microsoft Security Essentials.

The real problem with SQL injection attacks is that there's nothing we surfers can do about them. There will always be old and unmaintained websites, and thus SQL injections will remain one of the easiest and most lucrative tools of hackers and spammers alike. All you can do is keep your antivirus and anti-malware software up to date, and pray.

Gargantuan SQL injection infects 3.8 million URLs, installs rogue antivirus originally appeared on Download Squad on Fri, 01 Apr 2011 05:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/massive-sql-injection-infects-3-8-million-urls-installs-rogue-a/

FEI COMPANY FAIRCHILD SEMICONDUCTOR INTERNATIONAL FAIR ISAAC FACTSET RESEARCH SYSTEMS F5 NETWORKS

Foxconn Raises Pay of Factory Workers

Ever since Wired reported high suicide rates at Chinese iPhone manufacturer Foxconn in 2011, the company — and Apple — have been under public pressure to improve pay and working conditions at the factory. On Friday, Foxconn announced pay increases of 16 to 25 percent for its factory workers, with the exact amount tied to [...]

Source: http://www.wired.com/gadgetlab/2012/02/foxconn-raises-pay-of-factory-workers/

LEXMARK INTERNATIONAL LEVEL 3 COMMUNICATIONS LAWSON SOFTWARE LAND SOFTWARE LAM RESEARCH

Where Espresso Machines Are Born [Video]

I took a trip to Seattle a little while ago. Actually a long while ago. And I shot a bunch of video of cool stuff. Then it got lost, because I am a terrible person. But I found them, so here they are. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/erGMRVVij34/where-espresso-machines-are-born

LAWSON SOFTWARE LAND SOFTWARE LAM RESEARCH L1 IDENTITY SOLUTIONS KINGSTON TECHNOLOGY COMPANY

Apple Begins Countdown to 25 billion App Downloads

The App Store has been around for nearly 4 years, and it is approaching 25 billion downloads. (That's 25,000,000,000!) To celebrate, Apple is doing a countdown and giving away a US$10,000 (or equivalent) iTunes gift card to the person who downloads the 25 billionth app.

Source: http://feedproxy.google.com/~r/TheIphoneBlog/~3/-8etFMKLFKQ/story01.htm

SONUS NETWORKS SONIC AUTOMOTIVE SKYWORKS SOLUTIONS SILICON LABORATORIES SI INTERNATIONAL

Lytro video camera 'a possibility', would need more processing muscle

While we impatiently await a Lytro to call our own -- or at least rigorously review -- it looks like the light field technology could be used for video. Ren Ng, CEO of Lytro and the man behind the camera's focus-dodging optical wizardry, mentioned that the main barrier between the curious camera lens and video recording is the amount of processing power required to manipulate all that fully-lit input. He also mentioned that Lytro is continuing to develop the wireless connectivity within the device, something that wasn't fully baked during our hands-on. If it's a processing power issue, those incoming quad-core smartphones might be able to help squeeze some video out of that f/2.0 lens...

Lytro video camera 'a possibility', would need more processing muscle originally appeared on Engadget on Fri, 17 Feb 2012 17:36:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceTechCrunch  | Email this | Comments

Source: http://www.engadget.com/2012/02/17/lytro-video-camera-a-possibility-would-need-more-processing-m/

YAHOO YAHOO XILINX WESTERN DIGITAL VOLT INFORMATION SCIENCES

OmmWriter brings its clean, calm writing interface to Windows

ommwriter
I have a thing for full-screen text editing. I use WriteMonkey for my creative writing needs, and VIM in a full-screen PuTTY session for my Web development work. That being the case, I'm all over the monospace, dark-background, focused editing scene.

OmmWriter attempts to take that aesthetic and make it somehow more spiritual, with three picturesque backgrounds and ambient background audio tracks (there are seven of each in the paid version).

I'm of two minds about this app. On the one hand, yes, it's beautiful. But if you want music as a background to your writing, why not pick your own soundtrack with Winamp or Foobar2000 running in the background?

OmmWriter also offers three keyboard-clicking sounds, which are kind of nice. None of these features are groundbreaking, really. OmmWriter could be seen as a way to gently ease into the world of distraction-free writing -- in case something like WriteMonkey's dark background is just too oppressive for you.

After the fold you can see a video showcasing several of OmmWriter's features and creative soundscapes.

Continue reading OmmWriter brings its clean, calm writing interface to Windows

OmmWriter brings its clean, calm writing interface to Windows originally appeared on Download Squad on Fri, 01 Apr 2011 13:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/01/ommwriter-brings-its-clean-calm-writing-interface-to-windows/

SAIC ROCKWELL AUTOMATION RF MICRO DEVICES RED HAT RADISYS

Microsoft releases sexy Bing app for iPad

It's still a bit odd seeing Microsoft deliver apps for Apple's mobile platform. And it's even stranger still to see one as sexy as the new Bing app for iPad, which brings a slick, immersive search experience to Apple's tablet.

Just as a regular search on bing.com will, the Bing app for iPad tailors the results it displays based on what you're searching for. There are loads of custom views, covering everything from movies and maps to weather and shopping. The app also offers a heads-up display of currently trending searches, complete with related images, which is an iPad-exclusive feature.

Navigation is a breeze thanks to multitouch controls, allowing users to flick or swipe through results. And while the development team refers to the app as "touch and decide," Bing Voice Search is also built in -- making it easy to start a query without using the iPad's on-screen keyboard.

The Bing app for iPad is available for download now from the App Store.

Microsoft releases sexy Bing app for iPad originally appeared on Download Squad on Thu, 07 Apr 2011 16:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/07/microsoft-releases-sexy-bing-app-for-ipad/

TAKETWO INTERACTIVE SOFTWARE SYNTEL SYNTAXBRILLIAN SYNOPSYS SYNNEX

Corel VideoStudio X4 giveaway

corelvideostudiox4giveaway
This morning, Corel released VideoStudio X4. We've already published a quick overview and hands-on of the application, and now is the moment you've all been waiting for: We're giving away ten full licenses of this new version, each worth $99.99!

To enter our random draw, you just have to leave a comment. Full terms and conditions are after the break.

Continue reading Corel VideoStudio X4 giveaway

Corel VideoStudio X4 giveaway originally appeared on Download Squad on Tue, 22 Feb 2011 13:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/02/22/corel-videostudio-x4-giveaway/

ALLTEL AMAZONCOM AMERICA MOVIL AMKOR TECHNOLOGY AMPHENOL

Torus is an impressive 3D Tetris game powered by HTML5

torus
As far as Tetris goes, most variations look quite similar. You're usually looking at a "wall" of bricks directly from the front. Torus takes that notion and throws it away; as you might have guessed from the name (or screenshot), this Tetris clone is played on a ring-like 3D surface.

You rotate the ring itself with the arrow keys, while a Tetris-like piece slowly (excruciatingly slowly, in fact) descends from the top. As soon as you make a solid line, it disappears.

Not all pieces are Tetris-like; some of them wouldn't really work with a regular Tetris game but are a good fit for Torus' 3D format.

Torus is ideal for playing at the office, because it has absolutely no soundtrack. The game is dead-quiet. It's also very very slow (slow enough for me to mention it twice in one post) so you can safely look away for a moment and then keep playing. Also, as soon as the game loses focus, it automatically pauses.

Bottom line: It's an impressive demo of the power of HTML5; if it were a bit faster, it would have some serious addictive potential.

Torus is an impressive 3D Tetris game powered by HTML5 originally appeared on Download Squad on Thu, 17 Feb 2011 17:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/02/17/torus-is-an-impressive-3d-tetris-game-powered-by-html5/

METHODE ELECTRONICS MENTOR GRAPHICS IMS HEALTH IMATION IKON OFFICE SOLUTIONS