April 2008


from vnunet.com

HP has issued a security notice after USB keys shipped with some of its ProLiant servers were found to have been infected with viruses.

The keys, which come in 256MB and 1GB varieties, are used to help configure the servers on installation.

“A potential security vulnerability has been identified with two types of optional HP USB Floppy Drive Keys intended for use with certain ProLiant servers,” reads the advisory.

“This vulnerability could cause a local ‘W32.Fakerecy’ or ‘W32.SillyFDC’ virus infection.”

The W32.Fakerecy is written primarily for removable drives and was first reported last year. W32.SillyFDC is also adapted for removable drives but can also be used to download more malicious files onto an infected machine.

“This is a worrying security lapse, especially as it comes from a major global brand with huge resources,” said John Hawes, technical consultant at Virus Bulletin.

“Production and release procedures at all serious companies should be locked down tight to prevent this kind of thing – if we can’t trust the big boys to keep their systems clean, who can we trust?”

It is not known whether the malware got on the drives as part of a targeted attack against HP’s products or if it was accidentally introduced due to problems on the manufacturer’s side with infected machines.

from filefront.com

Probably every other person who has ever played an online game has wished they could get some real-life revenge for in-game transgressions. But not many people have the means to do so and even then, you’d think some people’s concience would prevent them from actually doing anything too drastic. Of course none of that stopped one outsourced Comcast tech named Mark Ribeiro. After being hit with a packet flood by someone on Xbox Live, he decided to find a way to get back at the perpetrator. So he used the resources available to him at work to find the kid’s personal info – since he happened to be using Comcast — and thought he’d have a little fun by calling up his house. He described the incident on the Halo 3 forums:

“well the father was furious, not at me however he assured me he would take care of the problem… the father began to yell at his son, i then heard a loud smack, and then sobbing, and then cracking noise as if something was breaking..it then occured to me that the father had just beat the s*** out of his kid, and the cracking noise was the sound of a hammer on an xbox , i decided that being the self indulgent bastard i am, i wanted more…the father put the son on the phone, still sobbing i might add..and i said to him..”do you know who this is??” he answered “no”..i said “remember that guy u cheated some 20-30 minutes ago and i said u would pay??, well guess what son…u just did.”

It’s hard to tell if Ribiero is just making stuff up to be dramatic (because getting kids physically beaten is soooo cool), but regardless, he then went on to gloat about what sort of power his job grants him:

“YES I can powercycle ’shut off your modem’ and lag you out of matchmaking as well…let this stupid little boy be a lesson to u all, dont flood my ip, or anyone elses…because if you plan on doing so i will cancel your service and you WILL have to find an new isp which can mean up to 500$ in installation charges, and for many of you comcast is the ONLY isp in your area…so let me rephrase this..IS IT WORTH IT????”

Now that we’ve established this guy is a huge tool, it’s also worth noting that he used his real name in posting on the forums. Naturally, Comcast has caught wind of this, according to spokesperson, Jenni Moyer:

“We have identified the person who created this inappropriate post as an employee of Convergys, a third-party vendor who provides technical customer support for Comcast customers…We’ve contacted Convergys to demand that he be immediately removed from performing any work for Comcast and that they conduct a thorough investigation and take appropriate disciplinary action.”

I’ve said before that I love to hear stories of internet justice, but those usually involve people wreaking vengeance on others who are bigger tools than themselves. Plus those people usually go through proper channels — which this guy would know about — before going all vigilante, and then they usually just use information that anyone could obtain through normal internet sites. Instead, we’ve got a guy using his access to people’s personal information to carry out his own personal vengeance; and then saying he would gladly do similar things to others who cross him online. Yeah, cause what we really need is some d-bag from Xbox Live having access to people’s phone numbers and credit cards.

from gizmodo.com

After some delays, the iPhone Pwnage tool—which is used to flash your iPhone with hacked firmware that will allow you to run any application, use it unlocked in any compatible cellphone network, and basically do whatever you want do to with it, is now available for download. I have been testing this and previous versions for a few weeks now and it works well, but you will need a 2.0 version of the iPhone firmware to try the latest and greatest.

« Previous Page