Posts by JCitizen

Equifax's disastrous Struts patching blunder: THOUSANDS of other orgs did it too

It just goes to show...

that even Apache Linux can fail when you get java involved! It's not just for Windows anymore!

Re: What are the rest doing?

@keithpeter - When I worked at Hein-Werner - we kept the entire plant off line because we knew it was hopeless to protect the network. At least managment was smart enough to realize that. You could only download a program for a CNC by manual switching and only for the seconds it took to load each program. then switch off. This network was completely isolated - everything else was 'sneaker net'. One good thing about it was, you never had to worry about a patch blowing up your programming; so it was darn well worth it, in my best estimation.

Of course there was no Windows involved just G code and some paper tape conversions.

Lloyds Bank payments glitch frustrates merchants

Let's hope..

IBM's WATSON does a better job!

Downloaded CCleaner lately? Oo, awks... it was stuffed with malware

I call BS to any detractor of this people's choice!!

I cal BS to anybody claiming to be a professional that says CCleaner is useless - maybe you don't want to mess with the registry cleaner OH KAYYyy! But too many of the other features and proven themselves, along with the reg cleaner to me over the years, to convince me of any other reality. I've NEVER had a problem with CCleaner - I've ALWAYS solved problems with it, and all of my clients have breathed a sigh of relief every since.

NOBODY can talk me down or convince me otherwise, as I have just seen too much happen; especially in my honeypot lab! In fact I have actually seen malware try to manipulate CCleaner icons, and shortcuts in an effort to foil any restricted rights user from operating it - you can't tell me it is not effective in removing most threats that stay inside the parameters the operating system sets, just as long as the user doesn't fall for any Social Engineering to allow the attack. I've seen too much proof to be convinced other wise!

All of my clients are on a budget...

and cannot afford much more than one paid solution. I've been putting Avast on their systems for years, and sometimes they were using an inferior free bee, and always had trouble with them. Avast has its quirks, but they are usually easy to correct. Now I only recommend even poor people should try to buy MBAM. If they go in together and buy a 3 license copy, they can get a really good deal and spread them among them selves. I still recommend Avast, because it will block many problems before they ever get on the computer, so MBAM has nothing to deal with in those instances. Avast is noisy, and I think that is why people think it acts like malware - I LIKE It to get noisy, because other wise you don't know the otherwise legitimate site is using bad security practices. There are just too many good features on Avast, like the application updater, and notifier, to ignore it. I will admit, that on folks using Windows 10, I feel the built in Defender is enough, but even then I recommend MBAM Premium if they have anything to lose! I will admit the paid for version of Avast is a pain in the behind and I will never recomment it!

CCleaner's best feature..

Is cleaning Zombie files, or LSO cookies. It is one of the few free utilities that does that. If you ask any IT expert that has been around a LONG time, they all recommend CCleaner. It is an industry wide understanding. Personal opinions are fine, but you will never brow beat me into uninstalling CCleaner - it has proven itself in my honey pot lab over, and over and over again.

Re: So...

Only two installers were affected - the 32 bit and cloud version, from what I understand = simply updating to the newest version will get rid of the malware, but you may have to use REGEDIT to manually delete this entry - and yes I'd delete it, because it sets a bad trigger for anything else that might go wrong in the suture. Just delete Agomo - if you are not familiar with editing the registry, maybe you'd better get a geek friend to do it. And no - CCleaner will not find this superfluous entry. Oh, and delete any downloaded exe files you may have used to update CCleaner; you wouldn't want to accidentally activate the wrong update again.

HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\Agomo

Re: Was there a reason...

Exactly the opposite - only the 32 bit version of the update was affected. CCleaner x64 was not compromised.

Where CCleaner really shines..

is in removing stuff from the temp files in the app data folder and LSOs. That last acronym is what Zombie files are called ( or persistent cookies), it is one of the few free ways of getting rid of those nasty files, because not just any file cleaner can do that.

I like to run it to delete any malware attack files sleeping in the folders waiting for the user to make a mistake. I've tested for that many times, and I discovered as long as the malware isn't going outside the "temp" folders, you can rid you self of it post haste that way. Much easier than scanning with your favorite resident AV/AM solution.

AND despite what people say about registry editors, I've found that when unruly installer/uninstallers corrupt an uninstall routine, or say an application had an unsuccessful update patch, the registry cleaner undeniably helps fix the problem!! I may not use the registry cleaner for years, unless a problem comes up - because I generally use Revo to cleanup after bad uninstall routines. Coders are not want to remove all their junk from you files when you are ready to get rid of an app you don't like or just don't need anymore. I refuse to accept that a registry cleaner is NOT necessary - because without them I had headaches galore! I've also found that CCleaner's reg cleaner helps after a nasty battle with malware. The AM solutions do not always clean up the detritus very well it seems.

Re: Meanwhile ...

To AC - "I haven't used (or needed) CCleaner since I got an ounce of sense and realised that nobody actually needs a registry cleaner"

I rarely need the registry cleaner - if you operated as a restricted user just like you should on every other operating system, all you usually need to do to get rid of malware is run CCleaner at least before log off, shut down, or restart on Windows. I like it because it is easier than constantly running manual scans with my AV and AM solutions. I've tested this, and unless the malware is capable if silent install into the app data folder, other than "temp", CCleaner will take care of it. I've never run into a malware that can do anything without permission from the restricted user so far. Just don't get click happy with every pop up you see, and things will be JUST FINE!! I run a honey pot lab BTW, so I've seen just about every scenario you can imagine!

Only the 32 bit version is affected..

If you use the 64 bit - no problemo - also simply updating to the next version deletes the malware, but not one of the registry entries. It would probably be easier for folks not familiar with the registry to use Revo uninstaller to remove this version of CCleaner, so the offending left over reg entries can be deleted. The new version of CCleaner reportedly does not see this unnecessary entry, so no luck doing it that way. I'd post the reg edit, but you can find it on search easy enough.

Equifax's IT leaders 'retire' as company says it knew about the bug that brought it down

Re: What you knew yesterday (or when you graduated) about cyber security is already outdated

You hit that right on the nail head - have a sip for me!

The US Congress has been threatening...

to pile more regulation on the credit reporting industry for years, but the big 3 always manage to convince them that they got it down pat. I hope this if the straw that broke the camel's back and they finally lower the BOOM on them!!

Re: The Elephant in the room

A permanent credit freeze is the only way to address this effectively for now. If this article is suggesting that it will be done - I don't believe it. I called my congressman and demanded that Equifax do this for free and give at least 3 free "unfreeze" actions for the future.

I don't think all readers here know that all other reporting agencies synchronize to catch up to the same level of data accuracy within a maximum of 3 months, So it isn't always necessary to write a letter to all three of the big ones. They all get the same data eventually. I only had to put a free fraud alert on one of the big three, and it spread to the other two automatically. Unfortunately they only last 90 days. I be damned if I'm going to pay for Equifax's mistakes!!

Red panic: Best Buy yanks Kaspersky antivirus from shelves

Re: Counteract stupidness or it will spread

"Ban McAfee, Norton, Fortinet and Webroot and play them at their own game."

I don't know about Fortinet, but I won't take a client that uses those other products - it just isn't worth the effort to try and keep their machines running.

Re: Classic whisper to reality campaign

"I guess they just HAD to go because they didn't support US efforts to plant malware"

- Emisoft is well known for telling governments (including their own) to stick it up where the sun don't shine, when pressured to put nation state spyware on their customers machines. When I was using it, this anti-malware would even find the digital rights managment (DRM) in my machine governing my HD content. At first I was able to get it to leave the DRM alone so I could enjoy my content, but eventually I had to get rid of it, becauser that featrue stopped working. However if you REALLY like a serious malware weapon; I'd say it is the best in the world at this time!

Stand up who HASN'T been hit in the Equifax mega-hack – whoa, whoa, sit down everyone

Re: those responsible for stopping the hacking have been hacked...

Where's that squirrel? It must be ALL his fault! LOL!

Re: Customer Help Web Site No Help

I wonder what's up with that? I am not getting that on Firefox 64 bit (latest version) on Windows 7?! I'm not getting an SSL warning on Chrome (latest version) either. However Web of Trust has a grey rating for that web site!! That should be strange, as they should have had plenty of time to gather a good rating by now??!!

Re: "exploiting a vulnerable website application"

Aughhhh GEEZE! That figures!

Yeah - S&P

doesn't exactly sound like an IT security expert corporation to me. Sounds like someone in upper management has absolutely no clue. That is, unless they just want to ignore the problem and let a financial audit substitute for what really needs to get done.

Re: Oh Well

I could get worse - ever been arrested for something you didn't do? It can take 10 years to clean up the mess, and break the bank to boot.

Re: I'm safe..

I'd laugh, but unfortunately, when I think of all the trouble a criminal can do to make your life absolutely miserable, I just can't LOL!! :p

I've seen people put in jail, in and out, arrested, you name it, because some crook used their identity to throw off the police when they get stopped. It can take 10 years and a LOT of personal finances to clean it all up, and it isn't even our fault. THAT is why I think the Feds need to take the toys away from the credit agencies until that can help us clean up the damage that THEY allowed to happen!!

Re: On the bright side

I'm sure that you are just being sarcastic, but it would be better if they LOCKED your credit report until you need a free unlock in case you applied for anymore credit. Too many things DON'T show up on regular credit reports to really tell if you've been dinged or not.

Re: 'We pride ourselves on being a leader in managing and protecting data'

Wadda crock! How much you want to bet the other two agencies are compromised now, and just haven't discovered it yet, like Equifax did? Credit monitoring is NOT enough, They should lock down ALL our credit for free, and lift it when we need it with a simple phone call, for one transaction each, like opening another account. We shout NOT have to pay for their stupid mistakes!

House Reps grease the wheels for hundreds of thousands of robo-cars on America's streets

I for one..

welcome our robot over lords!

Remember when Lenovo sold PCs with Superfish adware? It just got a mild scolding from FTC

Not excusing bad behavior but..

I remember when DELL computers came with something just as bad and maybe worse. Every time I got a Dell client the first thing I'd do is scan for it and remove it. I don't remember the name of the offending software. but they got away with it for over 5 years before the uproar finally got loud enough, and they started losing market share. I'd wager all the big players were guilty of the same or similar at least once.

Calm down, internet. Elon's Musk-see SpaceX spacesuit is a bit generic

As long as it is...

"alien" bug proof, I'm okay. =)

WikiLeaks a 'hostile intelligence service', SS7 spying, Russian money laundering – all now on US Congress todo list

Re: yeah,,,,

So far, I haven't seen one national secret worth guarding in the information leaked by that organization. Maybe I'm forgetting something, but it is ridiculous what we classify in this nation!! It costs a lot of tax dollars to keep all those "secrets", so I think congress just ought to get a grip, and practice more transparency, and quit worrying about embarrassing information that they should have thought about before they did it anyway.

Snopes.com asks for bailout amid dispute over who runs the site and collects ad dollars

Sort of true - but...

we need at least two "fact checking" sites on the web, and so far I've not found one the qualifies as a true opposition to Snopes. Oh so you think Snopes needs no opposition? That is the BIG problem here!

Google unleashes 20m lab-created blood-thirsty freaks on a city. And this is a good thing, it says

Re: Having had Dengue Fever,

I've had better luck building Cliff Swallow and bat houses, and having a thriving community of these wonderful creatures eating away at the bugs. I never get bit by one mosquito when I set this up properly. However, I also learned how to build traps for biting flies and mosquitoes. but they are now available at hardware stores. They waft CO2 in the wind, and simulate the temperature of a human around 98 degrees F. Then there is a suction system that traps them in the unit as they fly too close to carefully designed ports and/or landing points. These gizmos are very successful, and the price has been dropping since NASA released the public license to build them years ago.

Beware, sheep rustlers of the South West of England! Police drone spy unit gets to work

Deleted

by author

I always wanted to run one of those things.

If it were me, I'd park occasionally on a high point, like the top of a pole or high rise building, and save flight energy for when I see an event, or a person of interest! I'd have a whole map of strategic perch points for my little electronic vulture!

Astroboffins spot tiniest star yet – we guess you could call it... small fry

Re: habitability of tidally-locked planets

@stepharsh - your statement is totally logical. Just for argument's sake though. One advantage of our earth is that the core spins (at a retrograde I suspect) to the spin of our earth. This creates the Van Allen belt attributed to protection of our atmosphere. We need another model to protect the atmosphere of your theoretical planet - no? How will such a slow moving planet generate a magnetosphere?

Uncle Sam says 'nyet' to Kaspersky amid fresh claims of Russian ties

I'd probably still recommend Kaspersky..

However, even when I do, it is with one caveat. I always admit that I don't trust them. But if you are not a business that has Intellectual Property (IP) to guard, or government contracts, I also say you have nothing to lose in the first place. Most entities will never be a target of a serious Russian breach. One would be more worried about ransomware, which I doubt will ever be hosted by Kaspersky.

However I also tell them it will be VERY expensive and usually always results in system instability of some kind. If I were going to pay for an AV product I'd go with ESET, or if an Enterprise, SOPHOS, so that is my usual recommendation - but since most of my clients are indigent, I always recommend the free ware that is abundant and does the job good enough that the risk margin is pretty thin compared to paid for solutions. So any of these companies will certainly not be making much money off my recommendations.

Since I didn't hear it brought up though - seriously - if you are a large successful company in Russia, do you seriously think that a criminal oligarchy is not going to notice you? Does the media seriously think if Putin comes knocking on your door, you will see him out?

I didn't think so!!

Trump Hotels left orange faced: Hackers plunder systems for credit cards

I was wondering how long...

it would take before a Trump hotel of related service was hacked. With almost every chain out there getting it long ago, I'm really surprised it took this long. Now maybe Trump will finally realize just how pervasive the problem is, and quit denying it like it will go away, if you just ignore it.

Talk about a hit and run: AA finally comes clean on security breakdown

Well...at least

they didn't come out with that tired old axiom of "your security is very important to us". That statement is so cliched that I can't even take any company using that line as "serious" at all!!

RED ALERT! High-speed alien fugitives are invading our Milky Way

Even at those speeds..

which seem fantastic - it will probably take them forever to even get close enough to a star system to perturb it. In fact they may pass right though our entire galaxy and NEVER hit anything at all. That saddens me as I love collisions, but by that time the Earth will probably be destroyed by something completely unexpected. I certainly will not be around any more! I hope these massive computer simulations show data that can be made into a video - maybe even a 3D video to show them prancing through our universe without a care in the - uh - world. Heh, Heh!

Boffins with frickin' laser beams chase universe's mysterious trihydrogen

Hmmm!!

Since there are no frickin' laser beams in space, the first substitute that comes along, in my mind, is gamma ray bursts! I probably should get my coat!

Boffins' five eyes surprise: Bees correct colour for ambient light

Bees have more than one sense

they can smell, and even sense direction to discovered food sources - I'm not sure scientist have figured out what kind of "GPS" this is, but the workers do a dance when they come from a new source of food, and other workers can tell what direction to take from the movements - Also I wonder if this behavior lets them get a whiff of the pollen on the bee's storage pockets, so they also know what kind of pollen they will detect.

I've seen nature videos showing bees recognizing an enemy by color and from several yards - and they claim it is visual alone. I'd imagine you wouldn't want to look, smell like, or wear any black or brown shirts, or they may get the idea you are a bear, their worst natural enemy next to fire. I really wonder why smoke calms them down so much - you would think it would be like the biggest panic you could think of. I guess that is one of nature's greatest mysteries?

Elon Musk reveals Mars colony rocket capable of bringing pizza joints to the red planet

@ I ain't Sparticus

If you read the "Ride Report" you will see one of the most thoughful processes at that time for planned exploration of the solar system. Sally Ride wrote it and it was very inspiring to a college kid like me at the time. I think Musk discounts the Moon in this plan because he knows we can bypass it if what we wan't to do is just get there. However you brought up points that make me think the Ride Report is still valid.

I propose that we mine He³ on the moon - it has the most dense source of this excellent fusion material that any other known source worth looking at. If we take advantage of the Moon's low gravity, we may be able to accelerate progress on accomplishing fission, and with that wonderful process you can make ANYTHING. The fusing of any atomic atoms, can result in anything you want from the periodic table, so you could throw moon dust in the process and make fuel, gold, whatever you want to enhance the next hop to Mars. Even if we establish this base and end up bypassing it, the lessons learned will go a long way toward building any base on Mars, and we would be much closer for any rescue missions that may come up.

And there again, many a rich folk might want bragging rights to being one of the first civilian moon walkers! Tourism might actually help pay for the next step.

SpaceX nails two launches and barge landings in one weekend

Re: Grid fins

Actually ALCOA holds that record for forging the under (belly) pan of an Army tank.

Meteor swarm spawns new and dangerous branch

Re: Interesting use of statistics... "lies, damned lies and statistics"

@Pompous Git - Noah forgot to put the 19 mega-fauna on board? Heh! Heh!

Obama's intel chief says Russia totally tried to swing it for Trump

Re: I would be ashamed to push this line

@ atrum - #2 it depends on how you view the majority - In a Democratic Republic all people count.

https://scatter.wordpress.com/2017/02/19/sunday-morning-sociology-first-edition/

This was published in The Washington Post - so I doubt any argument of FAKE news can be attributed.

Re: I would be ashamed to push this line

SOOOOO true Tikimon!!

Re: Reeaaallly....

I actually approved of that sale - because we were looking at an uncontrolled former Soviet nuclear warhead stockpile with woefully inadequate guarding - so trading old nukes for uranium for maintaining their new weapons instead, was actually a brilliant move in my best estimation - it was one of the things that surprised me about that administration, and the guts it took to do it. There is still missing weapons that haven't been accounted for to this day - but it was too late for them. Keeping the damage to a minimum was all we could hope for.

Yep!

@ Prof - WWS

There is no "just the facts ma'am", any more - no money for actual fact checking or good old gum shoe reporting!

Re: Fake News ?

I would say there is no such thing as "real" news - that is the problem - the news media could care less about the real facts at all. They are all on an obvious agenda, and all of it would make Edward R. Murrow turn over in his grave!

Re: "potential jeopardy to the very fundamental underpinnings of our political system"

the purchasing of power with OUR MONEY - There - FTFY

Re: Its a great narrative..

I would like to add another thought here - the US badgered the Russians during the entire cold war, with Radio Free Europe transmissions, and all kinds of dirty tricks to foul up Soviet progress at every step. The US interfered with other nations using NO rules of fair engagement to attempt to blast Soviet influence at all cost. And now we complain about innocuous interference in elections? Geeze! The US did lot worse over the cold war against the Russians; and they didn't care who's toes, or small country they had to step on!

And as far as hacking the DNC and their politicos - the fact is the information was the truth wasn't it? Probably the only time in recent history, that Americans found out the straight facts!!

Assumptions that US elections can be easily swayed..

I think the world is making a silly mistake assuming voters can be so easily swayed in US elections. The public has lost too much confidence in not only their government but even more in the media - they have no confidence the truth is told at all.

If you have people who are already mad about one side or the other, they are ready to make assumptions about each side of the political spectrum - what they suspect is even worse than the fake news! I can say with confidence that the interference had minimal change in the result of the election, and if anything it may have back fired very badly for either side of the fence.

For those that actually bothered to vote. the outcome was literally up for grabs - and a coin toss could change everything. Many of the silent majority stayed home in disgust - but some of them had finally had enough and decided to throw a bomb into Washington no matter the consequences - Trump was that bomb - and now it is DAMN THE TORPEDOES FULL SPEED AHEAD!!