Author Topic: If you use Windows pay attention!  (Read 867 times)

0 Members and 1 Guest are viewing this topic.

Offline DeeDee

  • P-F's Twitter-er
  • Charter Member
  • Motor Mouth
  • Join Date: Jul 2012
  • Posts: 6013
  • Country: us
  • Barkly & Vlad
If you use Windows pay attention!
« on: August 05, 2012, 01:16:46 AM »
If You See This Google Warning, Act Fast: Big Brother is Watching

http://articles.mercola.com/sites/articles/archive/2012/08/05/internet-security-virus.aspx

An Excerpt:

InformationWeek Security recently offered the following advice3:"... Microsoft has been working quickly to patch the certificate bug exploited by Flame. Notably, Microsoft released an update Friday [June 8] for Windows Server Update Services (WSUS) 3.0 Service Pack 2 (SP2), which according to the release notes "strengthens the WSUS communication channels ... [by] trusting only files that are issued by the Microsoft Update certification authority."

Microsoft is also set to issue an update Tuesday--as part of its monthly Patch Tuesday--that will further update all supported versions of Windows to block Flame. Security experts are recommending that all users install the update as soon as possible, since attackers will likely attempt to use the certificate vulnerability before it becomes widely patched. "Apply the certificate patch released a week ago today if you haven't done so already," said SANS Institute chief research officer Johannes B. Ullrich in a blog post. "This way, no patch signed by the bad certificate should be accepted tomorrow. Patch Tuesday is one of the best dates to launch such an attack, as you do expect patches anyway."

When installing the update, however, do so preferably only if using a trusted environment. "Avoid patches while 'on the road.' Apply them in your home [or] work network whenever possible," said Ullrich. "This doesn't eliminate the chance of a 'man in the middle' (MitM) attack, but it reduces the likelihood."

For users who must update while on the road, perhaps because they travel frequently, always use a VPN connection back to the corporate network, said Ullrich, since hotel networks can be malware and attack hotbeds. "Hotel networks and public hotspots frequently use badly configured HTTP proxies that can be compromised and many users expect bad SSL certificates--because of ongoing MitM attacks," he said."

« Last Edit: August 05, 2012, 01:32:58 AM by DeeDee »
"In order to really enjoy a dog, one doesn't merely try to train him to be semihuman. The point of it is to open oneself to the possibility of becoming partly a dog." Edward Hoagland
"Thorns may hurt you, men desert you, sunlight turn to fog; but you're never friendless ever, if you have a dog."