f-secure.com · Domains · Slashdot Mirror

Apple does it too by Solandri · 2018-12-05 08:37 · Score: 0 · on Internal Emails Show Facebook Weighing the Privacy Risks of Quietly Collecting Call and Text Records From Its Android Users -- Then Going Ahead Anyway (theverge.com)

When it's convenient for them. Rather than pay to use someone else's SSID map database, or pay people to roam around the world and record the SSIDs for them, Apple simply lifted visible SSIDs and GPS data from iPhone users' phones.

This happened about the same time Google was caught accidentally recording more than SSID with their street view cars. Google admitted they did wrong, and the EU fined them. Apple never admitted any wrongdoing, and the EU never did anything about them. What we have today is a consequence of that dichotomy in regulatory reaction. Google tried to be open about their data collection so you could avoid it if you wanted, and were punished more harshly than companies being secret about their data collection so you were unwittingly subjected to it.

Consequently, now all companies collect information secretly, and don't admit anything even when they're caught. I salute all of you and the brave new world you've created for yourselves.

F-Secure Sense by Anonymous Coward · 2018-05-17 17:52 · Score: 0 · on Ask Slashdot: Which Is the Safest Router?

At least F-Secure have a router aimed for the not so tech-savvy consumers.

Do as I say, not as I do by Solandri · 2018-05-09 15:17 · Score: 1 · on Apple Cracking Down On Apps That Send Location Data To Third Parties (9to5mac.com)

Apple used to license a geographic map of WiFi SSIDs from Skyhook. Skyhook developed this map like Google did - by driving cars around the world and recording their GPS locations while sampling the SSIDs in range at that location. In 2010, Apple dropped Skyhook and began using their own SSID map database.

How did they develop this database without hiring people to drive cars all around the world? They simply recorded and downloaded iPhone users' location data, along with nearby WiFi SSIDs at each location.

Incidentally, Google was fined by various governments for accidentally recording too much WiFi data with their cars. Apple received very little scrutiny. i.e. Governments punished the company which hired people to go out there and collect this data for themselves, while doing nothing about the company who obtained it by lifting it from their users. Because of that precedent, I suspect pretty much all companies are now collecting this sort of data from their users whenever possible, instead of gathering it themselves.

Re:RSS for the masses? by Kris_J · 2018-03-15 17:21 · Score: 1 · on Digg Reader To Shut Down This Month -- Latest RSS Service To Bite the Dust (betanews.com)

I use TinyTinyRRS on an old laptop I leave running at home and have a variety of ways to connect to it from outside the house. It's my main source of news, and in fact the way I was alerted to this Slashdot article. It consolidates feeds from the following sources, allowing me to quicly keep up with a ton of news and other stuff that interests me in one place:

Steve(GRC) Gibson's Blog ("http://feeds.feedburner.com/SteveGibsonsBlog")
ASCII by Jason Scott ("http://ascii.textfiles.com/feed")
RobOHara.com ("http://feeds.feedburner.com/robohara")
The Baffler ("https://thebaffler.com/feed")
Ars Technica ("http://feeds.arstechnica.com/arstechnica/index/")
Slashdot ("http://rss.slashdot.org/Slashdot/slashdot")
Technology - The Huffington Post ("http://www.huffingtonpost.com/feeds/verticals/technology/index.xml")
TechSpot ("http://feeds.feedburner.com/techspot/news")
Wired Top Stories ("http://feeds.wired.com/wired/index")
The Australian | Politics ("http://feeds.feedburner.com/TheAustralianPolitics")
Al Jazeera English ("http://english.aljazeera.net/Services/Rss/?PostingId=2007731105943979989")
Australia news | The Guardian ("http://www.guardian.co.uk/world/australia/rss")
ABC News ("http://www.abc.net.au/news/feed/46182/rss.xml")
Arduino Blog ("http://www.arduino.cc/blog/?feed=rss2")
Lifehacker Australia ("http://feeds.lifehacker.com.au/LifehackerAustralia")
MakerBot ("http://www.makerbot.com/feed/")
Open Electronics ("http://feeds.feedburner.com/OpenElectronics")
PlanetArduino ("http://feeds.feedburner.com/planetarduino")
Raspberry Pi ("http://www.raspberrypi.org/feed")
SnapFiles - 20 latest freeware programs ("http://www.snapfiles.com/feeds/sf20fw.xml")
SparkFun: Commerce Blog ("http://www.sparkfun.com/commerce/rss.php")
TechCrunch Gadgets ("http://feeds.feedburner.com/crunchgear")
The MagPi Magazine ("https://www.raspberrypi.org/magpi/feed/")
Thingiverse - Featured Things ("http://www.thingiverse.com/rss/featured")
GitHub Engineering ("http://githubengineering.com/atom.xml")
BBC News - Science & Environment ("http://newsrss.bbc.co.uk/rss/newsonline_world_edition/science/nature/rss.xml")
English Wikinews Atom feed. ("http://en.wikinews.org/w/index.php?title=Special:NewsFeed&feed=atom&categories=Published&notcategories=No%20publish%7CArchived%7CAutoArchived%7Cdisputed&namespace=0&count=30&hourcount=124&ordermethod=categoryadd&stablepages=only")
F-Secure Antivirus Research Weblog ("https://www.f-secure.com/weblog/weblog.rdf")

Re: Sure is gunna be unfortunate by Anonymous Coward · 2017-10-19 22:16 · Score: 0 · on Dodging Russian Spies, Customers Are Ripping Out Kaspersky (thedailybeast.com)

Avast is Czech, as is its subsidiary AVG, Avira is German, BitDefender is Romanian, ESET is Slovak, F-Secure is Finnish and Panda Security is Spanish. Sophos is British, so it is probably more likely to be tampered with.

that's the POWER that makes the world go round! by Anonymous Coward · 2017-07-19 07:04 · Score: -1 · on EU Court to Rule On 'Right to Be Forgotten' Outside Europe (wsj.com)

Just download a free antivirus livecd and scan your system with that.

Options include but are not limited to:

AVG:
https://www.avg.com/en-us/resc...
https://www.avg.com/en-us/down...

Avira:
https://www.avira.com/en/downl...

Bitdefender:
http://download.bitdefender.co...

Comodo:
https://www.comodo.com/busines...

Dr. Web:
https://free.drweb.com/aid_adm...

F-Secure:
ftp://ftp.f-secure.com/anti-vi...
https://www.f-secure.com/en/we...

Kaspersky:
http://support.kaspersky.com/v...
http://rescuedisk.kaspersky-la...

that's the POWER that makes the world go round! by Anonymous Coward · 2017-07-19 07:04 · Score: -1 · on EU Court to Rule On 'Right to Be Forgotten' Outside Europe (wsj.com)

Just download a free antivirus livecd and scan your system with that.

Options include but are not limited to:

AVG:
https://www.avg.com/en-us/resc...
https://www.avg.com/en-us/down...

Avira:
https://www.avira.com/en/downl...

Bitdefender:
http://download.bitdefender.co...

Comodo:
https://www.comodo.com/busines...

Dr. Web:
https://free.drweb.com/aid_adm...

F-Secure:
ftp://ftp.f-secure.com/anti-vi...
https://www.f-secure.com/en/we...

Kaspersky:
http://support.kaspersky.com/v...
http://rescuedisk.kaspersky-la...

F-Secure did something similar back in 2014 by D,Petkow · 2017-07-15 19:56 · Score: 1 · on UK Wifi Provider Tricks Customers Into Agreeing To Clean Sewers (upi.com)

However the TOS included a Herold clause that allowed the company to claim the first born child or the beloved pet of the users who agreed.
One of the terms stipulated that the user must give up their firstborn child or most beloved pet in exchange for WiFi use. In the short time the T&C page was active, six people agreed to the outlandish clause.
Link

Competition isn't any better by Solandri · 2017-04-22 04:28 · Score: 3, Informative · on EFF Says Google Chromebooks Are Still Spying On Students (softpedia.com)

1. Your location is transmitted to Google, together with surrounding wifi settings. They do this with a popup that appears whenever you turn on GPS, it asks you if you want to improve location accuracy, in actuality it's tracking the surrounding wifi spots and matching them against the GPS location your phone records. The dialog is written so you think you need to say yes to get GPS to work, but you can say no and GPS still works.

You can thank Apple and the government for that. Apple did (does?) exactly this to develop their initial WiFi map data. They rolled out an update which collected location and nearby WiFi SSID data from people's iPhones and uploaded it to Apple, and buried the fact that they were doing it in the iTunes installation process. Once they got this data by using every iPhone owner as an unpaid hotspot locator, they dumped the Skyhook WiFi map they had been licensing.

Google developed their WiFi map by adding WiFi SSID sniffers to the cars they were driving around the world to take Street View pictures for Google Maps. Someone at the EU claimed they were recording more than just SSID. Google said that was ridiculous, self-audited their collection software, found a developer's setting hadn't been turned off and that they had beent collecting more than just SSID, and self-reported themselves to the EU. The EU and US governments promptly sued and fined them for it. Apple OTOH got off scott free. So Google stopped collecting the WiFi SSID location data collection themselves, and just copied what Apple was doing - lifting the data straight from people's phones.

2. Google Play Store, if you try to disable or remove this, it will remove every app you installed from the playstore at the same time. Google play store provides Google with your credit card linkage, and real id, to the location and search surveillance it does.

So maybe they should be like Apple and make it impossible to remove the Play Store?

At least they give you the option to not use the Google Play Store if you don't want to use it. You can use an alternate store like Amazon. Or if you're really paranoid you can just sideload everything directly from your PC. Good luck doing that with the competitors.

3. You cannot remove the required google account and keep the apps you installed.

Well duh. Without the Google account, the apps have no way of knowing if they were installed after being legitimately purchased, or if they were pirated. The Achilles heel of online software distribution is confirmation of licensing. Either Google does it, with the side-effect that removing the Google account disables the apps. Or every app developer out there including the one-person shops has to run, operate, and maintain their own licensing server 24/7/365.

4. Android now INSISTS on a telephone number for Android device registrations.

? My Android tablet didn't. You sure this isn't something the cellular carriers have added to Android phones?

6. Did you agree to backup the phone? That pester message that pops up regularly that you can't tell "no never' to? You just gave Google the password to every wifi network and business server you ever used. Compromising a lot of data.

Everyone does this. Google is the only one who lets you see what they've collected on you, and gives you the option to delete it if you wish.

Easy or free, pick one by Anonymous Coward · 2016-09-25 19:45 · Score: 3, Interesting · on Ask Slashdot: Is My IoT Device Part of a Botnet?

There are free tools you can use to monitor a network, but they might not be so easy for the average user. Just googling around, I found this solution that's designed to answer such questions, but note it costs money. I've never seen it in action. One would hope that you get something user-friendly at such a price.

The other guy who said that if you can log in with "admin" as the userid and "password" as the password, or some other default login, that's spot-on. Botnet creators will probe for that, so at the very lease change the userid and password before actually going live... or just do what I do and not have any IoT stuff.

Your iPhone knows where you are by Solandri · 2016-09-13 09:04 · Score: 0 · on Android Users Need To Delete Google Maps and Google Play If They Don't Want Their Locations Tracked (theregister.co.uk)

And has probably been recording your location ever since you got your iPhone. Apple is also not afraid to secretly download this location history from your phone. You know how Google got in trouble with the EU because their Street View cars were also recording wifi hotspot info? Apple did the exact same thing, except instead of paying people to drive Apple cars around, they turned every iPhone owner into an unpaid contractor who would scurry around the globe gathering hotspot location information for them.

Wasn't Apple that did in RIM by Solandri · 2016-05-23 04:02 · Score: 3, Interesting · on Avoiding BlackBerry's Fate: How Apple Could End Up In a Similar Position (marco.org)

I know a lot of you think the iPhone's introduction was like the second coming of Christ, but RIM/Blackberry increased in market share from 2007 to 2009 immediately after the iPhone was released. RIM's decline actually correlates closer with Android's rise in popularity.

The big losers in the early smartphone days were Nokia (Symbian was dated and badly needed an overhaul, which never happened) and Microsoft (who started off with a good lead from Windows Mobile on PDAs, but squandered it).

As for privacy, Apple has shown they're more than happy to violate their users' privacy when it's in their self-interest. When Apple ditched Google Maps, they didn't have their own database of SSID locations, so they couldn't locate you if you had the GPS turned off. The first year they paid for a wifi database from Skyhook. The next year, they used their own database. How did they mysteriously generate this database without sending around Apple street view cars to record the SSID and location of every hotspot on Earth like Google did? By secretly logging iPhone owners' locations and nearby SSIDs, and having the phones send the info back to them. Essentially, Apple turned all iPhone owners into unpaid contractors who scoured the Earth recording the locations of every SSID, and used a chunk of their data plan to transmit this data back to themselves.

Re:After the 29 will the simi forced updates come by Solandri · 2016-05-05 11:19 · Score: 4, Interesting · on Windows 10 Now Runs On 300M Active Devices; Upgrade To Cost $119 After July 29

Actually, Apple pretty much did just that. You remember when Google got in trouble with the EU for recording too much wifi info while its street view cars were driving around taking pictures? The reason they were recording wifi info was to correlate the SSIDs with physical locations. That way, even if your GPS is off, Google can make a pretty good guess at your general location.

When Apple ditched Google Maps, they didn't have their own database of SSID locations. The first year they paid for a database from Skyhook. The next year, they used their own database. How did they mysteriously generate this database without sending around Apple street view cars to record every wifi hotspot's SSID? By secretly logging iPhone owners' locations and nearby SSIDs, and having the phones send the info back to them. Essentially, Apple turned all iPhone owners into unpaid contractors who traveled around recording the locations of every SSID on Earth. Given that they got away with it, while Google got sued by the EU for trying to do it the non-evil way and paying to send their own cars around to record it, I expect next time Google will just secretly harvest the data from its users.

Freedome VPN claims to do this by pls2917 · 2016-02-01 06:15 · Score: 1, Flamebait · on Ask Slashdot: How Do I Reduce Information Leakage From My Personal Devices?

Freedome VPN claims to help with this:
https://www.f-secure.com/en_US...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-03-13 04:12 · Score: 0 · on Panda Antivirus Flags Itself As Malware

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-03-13 04:12 · Score: 0 · on Panda Antivirus Flags Itself As Malware

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-03-01 14:32 · Score: 0 · on Ask Slashdot: How Does One Verify Hard Drive Firmware?

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-03-01 14:32 · Score: 0 · on Ask Slashdot: How Does One Verify Hard Drive Firmware?

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT by Anonymous Coward · 2015-02-24 12:35 · Score: -1, Offtopic · on AMD Unveils Carrizo APU With Excavator Core Architecture

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

Listen:

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT by Anonymous Coward · 2015-02-24 12:35 · Score: -1, Offtopic · on AMD Unveils Carrizo APU With Excavator Core Architecture

Let's revisit the SONY BMG ROOTKIT for a moment, and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

Listen:

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-02-22 13:03 · Score: 0 · on Ars: SSL-Busting Code That Threatened Lenovo Users Found In a Dozen More Apps

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

SONY BMG ROOTKIT revisited by Anonymous Coward · 2015-02-22 13:03 · Score: 0 · on Ars: SSL-Busting Code That Threatened Lenovo Users Found In a Dozen More Apps

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

Let's revisit the SONY BMG ROOTKIT for a moment by Anonymous Coward · 2015-02-22 13:00 · Score: 0 · on Inside the Business of Online Reputation Spin

and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

Now tell me gov/corp give a shit about us.

Let's revisit the SONY BMG ROOTKIT for a moment by Anonymous Coward · 2015-02-22 13:00 · Score: 0 · on Inside the Business of Online Reputation Spin

and read/listen to a quote from Thomas Hesse:

"Most people don't even know what a rootkit is, so why should they care about it?" - Thomas Hesse, President, Global digital business, Sony BMG

http://www.f-secure.com/weblog...

Now tell me gov/corp give a shit about us.

Some LiveCDs ... Re:AVG: People still use it? by Anonymous Coward · 2015-02-19 05:23 · Score: 0 · on New Android Trojan Fakes Device Shut Down, Spies On Users

Thank you.

Are you a Linux user by chance?

I found this:

http://www.bitdefender.com/bus...

And it appears to be 100% free with a free license.

I know - people say *nix doesn't need antivirus program(s)...but clamav isn't enough to satisfy my needs.

###

Avira continues with popups? What a shame. One would think popups to be a form of adware. I enjoyed the configuration options which Avast didn't provide [several years ago].

MSE makes me wonder if I have any protection at all.

Avast may be the winner here [for free options] if you turn off most of the non-virus related scanning modules.

I like Clamwin for a backup manual scanner, it's caught some trojans MSE couldn't find. I hear detection rate is poor and false positives are common but it's one more tool in my chest.

Here are some free antivirus LiveCDs:

+ AVG:
http://www.avg.com/us-en/avg-r...

+ AVG ARL: The latest release version of the AVG Rescue CD GNU/Linux (ARL) with daily updated virus database,
latest alpha or beta version of the ARL and all the resources needed to build the ARL from scratch. Releases are signed!
https://share.avg.com/arl

+ Avira:
https://www.avira.com/en/downl...

+ BitDefender:
http://download.bitdefender.co...

+ Comodo Rescue Disk (CRD):
https://www.comodo.com/busines...

+ Dr.Web LiveCD:
http://www.freedrweb.com/lived...

+ F-Secure:
https://www.f-secure.com/en/we...
https://www.f-secure.com/en/we...

+ Kaspersky:
http://support.kaspersky.com/f...
http://support.kaspersky.com/v...
http://forum.kaspersky.com/ind...

As with all antivirus products, please read the greedy EULAs before proceeding.

Some LiveCDs ... Re:AVG: People still use it? by Anonymous Coward · 2015-02-19 05:23 · Score: 0 · on New Android Trojan Fakes Device Shut Down, Spies On Users

Thank you.

Are you a Linux user by chance?

I found this:

http://www.bitdefender.com/bus...

And it appears to be 100% free with a free license.

I know - people say *nix doesn't need antivirus program(s)...but clamav isn't enough to satisfy my needs.

###

Avira continues with popups? What a shame. One would think popups to be a form of adware. I enjoyed the configuration options which Avast didn't provide [several years ago].

MSE makes me wonder if I have any protection at all.

Avast may be the winner here [for free options] if you turn off most of the non-virus related scanning modules.

I like Clamwin for a backup manual scanner, it's caught some trojans MSE couldn't find. I hear detection rate is poor and false positives are common but it's one more tool in my chest.

Here are some free antivirus LiveCDs:

+ AVG:
http://www.avg.com/us-en/avg-r...

+ AVG ARL: The latest release version of the AVG Rescue CD GNU/Linux (ARL) with daily updated virus database,
latest alpha or beta version of the ARL and all the resources needed to build the ARL from scratch. Releases are signed!
https://share.avg.com/arl

+ Avira:
https://www.avira.com/en/downl...

+ BitDefender:
http://download.bitdefender.co...

+ Comodo Rescue Disk (CRD):
https://www.comodo.com/busines...

+ Dr.Web LiveCD:
http://www.freedrweb.com/lived...

+ F-Secure:
https://www.f-secure.com/en/we...
https://www.f-secure.com/en/we...

+ Kaspersky:
http://support.kaspersky.com/f...
http://support.kaspersky.com/v...
http://forum.kaspersky.com/ind...

As with all antivirus products, please read the greedy EULAs before proceeding.

Re:Regin by jones_supa · 2014-11-24 22:56 · Score: 1 · on Regin Malware In EU Attack Linked To US and British Intelligence Agencies

As far as I know, it's a Windows-only malware. There's some technical details in F-Secure's blog. Of course a Linux or FreeBSD version could also be created, as there is plenty of vulnerabilities in those operating systems too.

Re:Yeah right by mimino · 2014-11-23 01:21 · Score: 1 · on Great Firewall of China Blocks Edgecast CDN, Thousands of Websites Affected

Oh yes. The company I work for provide computer and information security solutions. We help people fight for digital freedom. We educate how to detect and remove spyware from PCs. We provide ways to reach information that is otherwise censored. Check it out - https://f-secure.com/freedome. We're blocked in China.

Re:Why isn't sandboxing standard practice? by 1u3hr · 2014-08-13 01:47 · Score: 4, Insightful · on A Look At Advanced Targeted Attacks Through the Lens of a Human-Rights NGO

People have been asking that FOR 20 FUCKING YEARS
===========
http://www.f-secure.com/v-desc...
Virus:W32/Concept
Virus:W97M/Concept also known as Word Prank Macro or WW6Macro - is a macro virus which has been written with the Microsoft Word v6.x macro language. It has been reported in several countries, and seems to have no trouble propagating in the wild.

WM/Concept used to be extremely widespread during 1995-1997.
===========
I remember back in 2000, my boss asking "How do I run this "I Love You" macro someone sent me?"

Word macros were cool and useful, until Microsoft decided it was clever to embed them in the document.

And they did the same fucking thing with "Windows Media"
And USB autoexec

Always prioritising some gimmicky shit that allowed advertisers to push crap over security, and allowed any asshole to take over your PC by getting you to open a document or media file.
.

Re:Good for them by arglebargle_xiv · 2014-08-06 18:38 · Score: 3, Informative · on Xiaomi Arrives As Top Smartphone Seller In China

Doesn't matter what country you pick you're going to be spied on

With the Xiaomi this is especially the case, it sends a pile of private information on you back to Beijing, China. So it's not just the generic spooks, it's also the manufacturer who's spying on you.

Antivirus LiveCDs - boot and scan your system by Anonymous Coward · 2014-07-20 09:58 · Score: 0 · on Critroni Crypto Ransomware Seen Using Tor for Command and Control

+ AVG:
http://www.avg.com/us-en/avg-r...

+ AVG ARL: The latest release version of the AVG Rescue CD GNU/Linux (ARL) with daily updated virus database,
latest alpha or beta version of the ARL and all the resources needed to build the ARL from scratch.
Releases are signed!
https://share.avg.com/arl

+ Avira:
https://www.avira.com/en/downl...

+ BitDefender:
http://download.bitdefender.co...

+ Comodo Rescue Disk (CRD):
https://www.comodo.com/busines...

+ Dr.Web LiveCD & LiveUSB:
http://www.freedrweb.com/livec...
http://www.freedrweb.com/liveu...

+ F-Secure:
https://www.f-secure.com/en/we...
https://www.f-secure.com/en/we...

+ Kaspersky:
http://support.kaspersky.com/f...
http://support.kaspersky.com/v...
http://forum.kaspersky.com/ind...

Antivirus LiveCDs - boot and scan your system by Anonymous Coward · 2014-07-20 09:58 · Score: 0 · on Critroni Crypto Ransomware Seen Using Tor for Command and Control

+ AVG:
http://www.avg.com/us-en/avg-r...

+ AVG ARL: The latest release version of the AVG Rescue CD GNU/Linux (ARL) with daily updated virus database,
latest alpha or beta version of the ARL and all the resources needed to build the ARL from scratch.
Releases are signed!
https://share.avg.com/arl

+ Avira:
https://www.avira.com/en/downl...

+ BitDefender:
http://download.bitdefender.co...

+ Comodo Rescue Disk (CRD):
https://www.comodo.com/busines...

+ Dr.Web LiveCD & LiveUSB:
http://www.freedrweb.com/livec...
http://www.freedrweb.com/liveu...

+ F-Secure:
https://www.f-secure.com/en/we...
https://www.f-secure.com/en/we...

+ Kaspersky:
http://support.kaspersky.com/f...
http://support.kaspersky.com/v...
http://forum.kaspersky.com/ind...

The actual report by Guppy06 · 2014-03-04 18:23 · Score: 1 · on F-Secure: Android Accounted For 97% of All Mobile Malware In 2013

http://www.f-secure.com/static...

The content of interest here starts on page 22.

It'd be nice if TFA actually included a link. Or even cited the fucking source of the graphics they lifted.

Re:Has anybody seen the actual "evidence"? by hydrofix · 2014-01-09 03:03 · Score: 5, Insightful · on Security Experts Call For Boycott of RSA Conference In NSA Protest

I was also skeptical when I first saw the news articles (like this one) that said that RSA had published a statement where they supposedly refuted the existence of that NSA deal. The existence of the deal was originally broken by Reuters in this article, where they cite "two sources familiar with the contract" as their sources. But then, after more in-depth analysis of the RSA blog post where they supposedly "denied" the existence of the deal, it was revealed that actually RSA neither denied nor acknowledged that such deal existed in their statement. They are just using general wording to give an impression, that they would certainly never do such thing. But they are not directly denying the existence of the deal.

Now, thinking logically, it's pretty damn clear that they would have denied that such a deal was ever made, if they were in the position of making such a claim. But given they don't directly deny the claims presented by Reuters, it would seem a much more logical explanation that the deal indeed was made, and RSA just went into damage control mode after the publication of the Reuters article. Lying to the public would have meant more damage if Reuters would have later been able to present the actual paper of the deal, so I suppose we can take their lack of directly denying this deal's existence as an admission of sorts. This is also the reason why speakers are canceling their appearance in the conference ("Your company has issued a statement on the topic, but you have not denied this particular claim.")

So, I think we have grounds to believe that there is actually quite much truth to the original story by Reuters. As they say, the deal was "handled by business leaders rather than pure technologists". I am pretty sure that this is a yet-another example of a major manager-level f*ck up. Tech companies very often have all the expertise on the technical personnel level, while managers are a "necessary evil" who often have much fewer insight into the technical field where the company actually operates. Of course, anyone with even the slightest idea of how the IT security field functions, would never ever endanger their company's credibility (at least for such little reward as $10 million), because deals like this tend resurface in the public sphere sooner or later. All we can assume that someone in the management made a very major f*ck-up and made this secret deal with NSA without much consulting from the technical folks. But I am pretty sure that now that this deal has surfaced in the public sphere, it will end up costing RSA a great deal more in lost sales than what the "business leaders" anticipated they could gain in short term from making the deal with NSA.

Re:malware = local by toygeek · 2014-01-02 13:37 · Score: 4, Interesting · on Backdoor Discovered In Netgear and Linkys Routers

This is exactly what happened with Apple a couple of years ago. The DNS Changer virus

http://www.f-secure.com/v-descs/trojan_osx_dnschanger.shtml

It infected OSX machines and logged in the users router using the biggest "back door": admin/password. Then it changed to some DNS servers in Russia, and any device on the network was getting redirected to death to all sorts of sites.

Yes, this is a big back door, but no bigger than the admin/password admin/admin default credentials that 99% of people never changed. Thankfully, these days the routers come with better defaults.

Re:NSA's relationship to AV companies by oji-sama · 2013-11-23 22:06 · Score: 1 · on NSA Infected 50,000 Computer Networks With Malicious Software

Or perhaps F-Secure. http://www.f-secure.com/weblog/archives/00002636.html

The real lesson here by Solandri · 2013-11-10 06:32 · Score: 2 · on Brazil Orders Google To Hand Over Street View Data

Don't collect the data on your own. Have your users collect it for you, then secretly take it from their phones. That way if the government has a problem with it, you can just say, "We didn't collect any data, all these people did. They just agreed to share it with us by clicking on an OK button."

Re:Remember the old adage... by Solandri · 2013-11-01 07:52 · Score: 2 · on Microsoft, Apple and Others Launch Huge Patent Strike at Android

the weirdest part is? /. is such a YRO crowd that you think they would be outraged at all the privacy invasion stuff that google does, but instead there is this love and forgiveness. I think mostly because it sounds like a cool place to work and gives free stuff like gmail (hint: it's not free). oh and they support "open source" (but not really).

It makes perfect sense. Google is completely up-front about it. They tell you they'll give you a service for free, but in exchange they'll mine your content for data and show you ads based on that data. If you take them up on their offer but later change your mind, you're free to leave at any time, and they even make it easy for you to extract your data (unlike other services like Quickbooks or Facebook).

The YRO crowd isn't against both sides of a party mutually agreeing to enter an agreement. They're against one side doing something not disclosed in the agreement, or changing it without the consent of the other party. They're not against you willingly giving up your personal info, they're against the other party giving it away without your consent or knowledge.

say what you will about apple, but at least your relationship with them is clear. you buy a product from them, and you own a product. no selling of your info. no things that can be taken away (igoogle, reader). it's regular old business. I prefer that.

You seriously believe that? How do you think Apple built up its own wifi map database so quickly? By lifting GPS and wifi data from people's iPhones.

Google had the opportunity to do the same thing Apple did - simply lift the GPS and wifi data from Android phone users. But instead they chose the extra expense of doing it themselves to avoid violating their users' privacy. They paid to send out their own cars to every corner of the Earth to (along with taking StreetView photos) record wifi SSIDs (and got themselves into trouble when they recorded more than just the SSIDs - which btw they self-reported to the EU after the EU asked them to investigate).

I like Google because they're up-front about what they do. I'm not crazy about some of their data collection, but because they're up-front about it I can take steps to avoid/thwart it when I think they take it too far. I am in control. Totally different from Apple and Microsoft which have a history of doing things I don't like nor approve of with my data (I include Microsoft because I make a unique email alias for every company where I sign up for something, and so far the only one to get lots of spam is microsoft@mydomain.com).

Re:Detriment caused by Solandri · 2013-06-21 06:56 · Score: 1 · on Google Avoids Fine Over Street View WiFi Snooping, Ordered To Delete Data

I've seen it written that Google themselves blew the whistle on this issue, but I don't know that for a fact myself (the origins of its discovery are missing details).

Sort of. It went down like this:

Random conspiracy theorists to the EU: Google is eavesdropping on wifi communications while driving around taking Street View pics!
Google: We are not eavesdropping.
EU: Hmm, are you sure you're not eavesdropping?
Google: We're not. See, we can prove it.
Google: ...
Google: Ok, we checked our records and it turns out we did eavesdrop on wifi communications. But it was accidental!
EU: I'm investigating.
US: Me too!

It was a request from German regulators which got Google to do its initial internal investigation. But following that investigation Google self-reported that it had violated EU law, instead of trying to cover it up. That's largely why I don't have a problem with these no-fine or small-fine "don't do it again" judgments against Google. It's not like other violations where the company claims all along that it did nothing wrong. Google already admitted they screwed up; they're just saying that it was an accidental screw-up not an intentionally malicious one.

c.f. Apple which basically did the same thing to build their wifi map database - pulled location and wifi data off of iPhones without notifying iPhone owners. But they just denied everything (the only way you know they did this was because they soon dropped their licensing contract with their wifi map provider), attributing it to an erroneous configuration setting. And pretty much got away with it because they didn't willingly provide regulators with evidence to make a case of it as Google has done.

While you don't want the type of mistake Google made to go unpunished, you also don't want the punishment to be so harsh as to create a big incentive for companies to cover this sort of stuff up in the future. It's easier for everyone if they self-report this stuff.

Re:Question already answered by jbmartin6 · 2013-01-14 11:01 · Score: 2 · on "Red October" Espionage Malware Campaign Uncovered

Just for fun, here's F-Secure's rebuttal: http://www.f-secure.com/weblog/archives/00002482.html

This is for the drones, right? by fustakrakich · 2012-10-28 04:50 · Score: 1 · on Researchers Develop Surveillance System That Can Watch & Predict

Better watch out

Re:Submitter here... by Bill,+Shooter+of+Bul · 2012-10-22 05:54 · Score: 1 · on Ask Slashdot: How Can I Protect My Android Devices From Hackers?

If you have friends with specialized tools to detect this kind of thing... did you consider asking one of them to take a look at your device and/or recommend a security app?

I'm one of the doubters. I don't think you were hacked. But check out the major Anti virus companies products, I'm sure they would love to take your money and give you the peace of mind you've been lacking.

http://www.f-secure.com/en/web/home_global/mobile-security
http://us.norton.com/norton-mobile-security/
https://www.mcafeemobilesecurity.com/products/android.aspx

Re:You want ad-blocking, not AV by ozgood · 2012-09-24 09:39 · Score: 3, Interesting · on Ask Slashdot: Actual Best-in-Show For Free Anti Virus?

You don't even need to run an .exe. The RSA hack a while ago was social engineered with an excel exploit. http://www.f-secure.com/weblog/archives/00002226.html

Free F-Secure FOR LINUX Antivirus! by Anonymous Coward · 2012-07-22 18:50 · Score: -1 · on Fake Password Reset E-mail Hits 7,500 Black Hat Registrants

Free F-Secure FOR LINUX Antivirus!