feed on feeds - 2012/01/25 - items 0 to 15

Turkiets president Abdullah Gül har godkänt en ny lag som fastställer hans mandatperiod till sju år.

S-källa till SvD: Ingvar Carlsson har pratat med Margot.

Sparrowvsrevolution writes "With much of the web upset over about Google's latest privacy policy changes, it's helpful to remember it could be much worse: A search engine called Skipity offers the world's worst privacy policy, (undoubtedly tongue-in-cheek) filled with lines like this: 'You may think of using any of our programs or services as the privacy equivalent of living in a webcam fitted glass house under the unblinking eye of Big Brother: you have no privacy with us. If we can use any of your details to legally make a profit, we probably will.' The policy gives the company the right to sell any of your data that it wants to any and all corporate customers, send you limitless spam, track your movements via GPS if possible, watch you through your webcam, and implant a chip in your body that is subject to reinstallation whenever the company chooses."

Read more of this story at Slashdot.

Symantec released a patch for pcAnywhere products that fixes couple of vulnerabilities, among which the most dangerous one allows remote code execution. You can see Symantecs advisory here.
Now, for last couple of weeks there have been a lot of rumors about source code of several Symantecs products that got stolen by yet unknown hackers. Besides a post that listed file names nothing else has been released in public yet, as far as we know.
However, Symantec also released a document (available here) that details security recommendations for pcAnywhere users. It is obvious that Symantec is aware of how critical published vulnerabilities are. It makes us wonder if there already have been active exploitation of the published vulnerabilities or Symantec is just extra careful?
Well keep an eye on this, and if you are a pcAnywhere user PATCH NOW.
Update
And a short update: according to DShield data it appears that someone started scanning around for services on port 5631 (pcAnywhere). While the number of sources is still relatively low (indicating a single scanner, or a small number of them), the number of targets is pretty high. See for yourself here.
--

Bojan

INFIGO IS (c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Den amerikanska kongressen tog i dag ett känslosamt avsked av ledamoten i representanthuset, Gabrielle Giffords, som fick livshotande skador när hon sköts under ett politiskt möte i Arizona för drygt ett år sedan.

Socialdemokraterna får bara 22,9 procent i TV4/Novus senaste väljarbarometer.

brothke writes "In the classic poem Inferno, Dante passes through the gates of Hell, which has the inscription abandon all hope, ye who enter here above the entrance. After reading The Tangled Web: A Guide to Securing Modern Web Applications, one gets the feeling the writing secure web code is akin to Dante's experience." Read below for Ben's review.