Security

How I dodged a bullet to take a pic of McAfee

I am currently on a psychiatrist-imposed company retreat in Miami.

I have been told not to engage strangers, nor those from or to whom I would like to become either estranged or engaged.

Sitting quietly at my beloved News Cafe this morning (yes, where Gianni Versace had his last coffee), I detected an increase in traffic but a block away.

There was the slamming of truck doors. There was a flurry of fetching TV presenters, pressing down their beige trousers by hand.

Not being an investigative reporter, I sidled over and asked a burly cameraman what was going on.

"It's John McAfee," he replied. "He's in there." … Read more

Crazy like a fox? McAfee admits to playing the 'crazy card'

The recent actions of security software icon John McAfee may have seemed off kilter, but he now says that at least some of that was a ruse.

McAfee, speaking with ABC News after arriving in the U.S., said he faked illness to avoid being sent back to Belize from Guatemala. He also thanked the media for closely covering his story.

"It was a deception, but who did it hurt? I look pretty healthy, don't I?," he said during an interview with ABC at a Miami Beach hotel. He added:

What's a better story, millionaire mad … Read more

Microsoft gobbles up AV ground

Microsoft Security Essentials may not have done well in recent independent tests, but it's now the global leader in security suite market share for the first time since it debuted in 2009, says Opswat's latest study.

Opswat gauges usage by looking at the software installed on computers running their AppRemover program. The data came from more than 150,000 computers.

When asked about the differences between Opswat's numbers and research and analysis firm NPD, Opswat marketing manager Elisse Lockhart wrote in an e-mail, "Our data looks at all applications installed on machines and aggregates various versions … Read more

GhostShell claims breach of 1.6M accounts at FBI, NASA, and more

Team GhostShell, the hacktivist collective, said today that it has stolen accounts from a large number of government agencies, contractors, and security firms, posting information from 1.6 million accounts online.

Dubbed Project White Fox, the hacking project appears to have affected NASA, the FBI, the Pentagon, and Interpol, among many others. The hackers announced their work in a file posted on Pastebin.

Our colleagues at ZDNet report:

The file dump, upon closer inspection, seems to include a number of records obtained via SQL injection. A random selection of the files contain email and home addresses, defense material tests and … Read more

Windows 8, RT to receive more critical patches next Tuesday

Windows 8 and RT are set to receive their second lineup of bug fixes when next week's Patch Tuesday rolls around.

The patches are also aimed at the other current versions of Windows, including XP, Vista, and Windows 7, as well as Server 2003 and 2008.

Five of the patches are rated critical, while two are deemed important. The critical ones are designed to shore up holes in the OS that could allow an attacker to infect a PC with malicious code.

Assuming Windows Update is set to automatic, critical patches are automatically installed, while those considered important can … Read more

DoNotTrackMe: New name, same tracker-blocking game

While providing sharp teeth for the Do Not Track header has proved to be futile so far, Abine's DoNotTrackMe makes increasing your privacy online as easy as installing an add-on. The latest update, available exclusively today from Download.com, makes it much easier to use while making some important but small security changes.

Known as Do Not Track Plus when it underwent a massive overhaul at the beginning of this year, DoNotTrackMe remains available as a cross-platform, multibrowser add-on.

You can download DoNotTrackMe for Firefox (Windows | Mac), Chrome (Windows | Mac), Internet Explorer 32-bit (Windows only) | Internet Explorer 64-bit), and … Read more

Twitter SMS bug lets hackers tweet via other users' accounts

Twitter users who post tweets to their feeds via SMS could be vulnerable to a security flaw, according to a security consultant.

Jonathan Rudenberg yesterday posted to his blog an SMS vulnerability he discovered in Twitter that allows anyone who has knowledge of someone's mobile number to post tweets to that person's feed.

In order for the vulnerability to be exploited, victims must have SMS tweeting authorized on their accounts. From there, the would-be poster needs only to spoof their actual mobile number through an SMS gateway -- something Rudenberg says can be done very easily -- and … Read more

How to avoid making one of the 10 worst Facebook mistakes

People use Facebook in very different ways. Most Facebook users update their status only a couple times a month or not at all, according to a recent survey by the Pew Research Center Internet & American Life Project. In fact, one in six Facebook users has never posted a status update.

On the other hand, women on Facebook average 21 updates per month, and men six updates each month, according to the survey, which was published last May.

As many Facebook users quickly learn, the social network is not without its risks. This is especially true for people whose Facebook … Read more

Massive worm hits Tumblr, spams big blogs like USA Today

A massive bug swept Tumblr today and infected some of the biggest blogs -- including USA Today, Reuters, The Verge, and CNET -- until Tumblr resolved the issue shortly before 10:30 a.m. PT.

GNAA, a hacker group, claimed responsibility for the attack. The group's Twitter profile earlier today said 8,600 unique Tumblr users were affected.

Tumblr didn't explain what happened but said in a blog post that no accounts were compromised, and users didn't need to take any further action.

"Our sincere apologies for the inconvenience," the company said. "As always, … Read more