Slashdot Mirror
New Flash Vulnerability Being Exploited In the Wild (trendmicro.com)
An anonymous reader writes: Researchers from Trend Micro report a new attack on fully-patched versions of Adobe Flash. The attacks originate from an espionage campaign run by the group known as Pawn Storm, and seem to target only government agencies. "Ministries of Foreign Affairs have become a particular focus of interest for Pawn Storm recently. Aside from malware attacks, fake Outlook Web Access (OWA) servers were also set up for various ministries. These are used for simple, but extremely effective, credential phishing attacks. One Ministry of Foreign Affairs got its DNS settings for incoming mail compromised. This means that Pawn Storm has been intercepting incoming e-mail to this organization for an extended period of time in 2015."
Really? What would be news here is if Flash DIDN'T have a vulnerability for a change...
I uninstalled Flash on my computers, and the world did not end.
https://www.youtube.com/c/BrendaEM
..........another excellent reason to use AdBlock and NoScript.
Flash not allowed to run? No Flash exploit, simple as that.
Just cruising through this digital world at 33 1/3 rpm...
You'd think they'd do something ...
No problem, I'll just put my gov't work on a home server.
Table-ized A.I.
There's no information how or if this exploit is able to break out of the sandboxes employed by Chrome and later versions of IE.
I vaguely remember you had to install that thing in order to browse retarded websites in 2008 or something.
It seems to me that Adobe Systems is no longer a well-managed company, and hasn't been since Bruce Chizen got tired of managing Adobe, which was well before he resigned in 2007. Here is a story from 2007 about that: Bruce Chizen's legacy.
This is a comment from a reader of that story who called himself Tidewind: "I might be in the minority on this, but under Bruce Chizen, I felt Adobe became, well, arrogant." That was my experience, also.
Part of the attraction of Flash has been that it is used to violate the privacy provisions of browsers. Flash can be used to generate what are called Flash-cookies, Local Shared Objects (LSOs), or Super-Cookies, which are files placed on a visitor's computer by the Flash plug-in.
(To avoid permanent tracking: In Firefox, use the BetterPrivacy add-on.)
Now Adobe is trying to make money by making its very expensive products even more expensive by charging monthly for them.
Microsoft followed that monthly business model with Office 365: Pay every day, 365 days each year, even if some of those days you don't have internet access. (Read the comments about Microsoft's other methods of abuse, such as restricting each copy to one country.)
Flash is either VERY buggy, or deliberately buggy. Possibly one way Adobe Systems makes money is by allowing vulnerabilities supplied by secret government agencies. Those agencies can spend billions of dollars of taxpayer money without public oversight.
The new software company business model is apparently "Be abusive".
I would like to see someone with some resources dump something towards creating a nice open source replacement for Flash that doesn't have all the security holes and problems of the Adobe product.
Of course the real problem is all the content sites out there that (for some idiotic reason) are relying on Flash for DRM and which cant be made to work on any flash alternative due to the US DMCA and other similar laws around the world.
I would like to see someone with some resources dump the source code of all Adobe products, that would be an interesting read!
Adobe software has been bugware for as long as I remember. Adobe Premiere was the software that taught me to hit CTRL+S every few seconds, and save a backup copy every half hour.
'Crap, Premiere just crashed again.'
'Double crap. It corrupted my save file just before it crashed.'
*sigh* I would really think those agencies would have people who are sufficiently paranoid as to not allow Flash on those computers. Or are government officials all demanding they be able to watch YouTube videos?
Flash has been a gaping series of security holes for almost 20 years now, why the hell do people keep trusting it?
Lost at C:>. Found at C.
Considering how much you say MOOOO, perhaps it's you that is the cow.
I don't trust atoms -- they make up stuff.
Flash: A reeking bottomless pit of zero-day vulnerabilities, all different.
Microsoft followed that monthly business model with Office 365 [time.com]: Pay every day, 365 days each year
Yes, but the upside is you get one day free every leap year.
It seems to me that Adobe Systems is no longer a well-managed company, and hasn't been since Bruce Chizen got tired of managing Adobe, which was well before he resigned in 2007.
"no longer"??? Adobe Reader was one of the biggest attack vectors that has ever existed in the history of the web, going back way before 2007. I kid you not, a new exploit came out month after month after month. It was ridiculous. Adobe Flash is actually slightly better in that regard, if that tells you anything.
Better known as 318230.
Uninstall flash!
100% Secure from all Flash vulnerabilities!
Large amount of internet still works!
Try it today! :D
go to russin wed site
http://syria.crap/
Keep your shit-spam to yourself, asshole.
Just cruising through this digital world at 33 1/3 rpm...
See subject: HOWEVER, we haven't seen all the "ins-&-outs" of that yet either - give it time! Bet it shows glaring vulnerabilities too (despite the state of modern computer science being what it is, one HELL of a LOT better than it was when I started it in 1981 but, men made it - men, screwup!).
Sad truth coming from experience over decades in the art & science of computing here on that above. We're not 100% guaranteed solid in LOTS of things out there now.
On HTML5 - I've tried it in IE11 "latest/greatest patched" etc. - et al, it plays ok - as good as Flash - & I'd wager it's had time & early base design vs. issues that plague flash till it's ultimate dying day... most likely. We tend to learn from our mistakes & build better, next time.
(Only thing I really *REALLY* wonder about HTML5 is, is IF "the infamous they" using it for 'nefarious' purposes, ala tracking & what-not/what have you...)
APK
P.S.=> Honestly? I thought they'd have ALL of Windows "bugs/security issues" gone by 2013-2014 outside @ the latest... hasn't happened yet - same point as above... apk
I already have a russian bride. Thanks though.
Really? By definition, a zero-day exploit would affect fully patched versions of anything. Duh! If they had time to patch it to fix the exploit, it wouldn't be zero-day any more, would it!
What's her hurry?
Does anything but ads actually use Flash in this day and age? I haven't had it installed for several years!
And maybe too unpleasant to look at so moo boy stays in mommy's basement where it's safe and dark.
Adobe software has been bugware for as long as I remember.
Indeed it is, but the real fault lies with Microsoft and their shoddy OS security that allows trivial privilige escalation. A rouge application running as a standard user should not be about to install malware at its cousins. Flash running within IE (or another browser) should not be able to escape that threat and do it's own thing. All of this is the fault of the application hooking into flash run-time blobs and the underlying OS that fails the most elementary protection protocols.
I am surprised...not that there's another Flash exploit, but that people still use flash.
See subject: "... I shall fear no Flash, for thou art with me" -> APK Hosts File Engine 9.0++ SR-2 32/64-bit http://start64.com/index.php?o...
* :)
That, & Psalm 23:4...
APK
P.S.=> ... & no troll downmods can affect me as you can see either, ala the last time I posted this -> http://tech.slashdot.org/comme... as I can merely easily repost it, again, nullifying your PUNY abused downmods - lol!
... apk
"Based on our analysis, the Flash zero-day affects at least Adobe Flash Player versions 19.0.0.185 and 19.0.0.207."
Does this Flash Zero-Day work on OS or Linux?
Given that Adobe, while being the major vector of insecurity on the web, has never even been lashed with a wet noodle by the Feds, one can only conclude they are given cover for exactly this.
It's almost as funny as the US public still believing their elected officials are actually in control of the organs of state security (thems wit everbodys skeletons).
Can adblock+ do 16 things hosts do 4 speed, security & reliability:
1.) Protect vs. malicious sites (past ads)
2.) Protect vs. fastflux botnets + stop C&C talkback
3.) Protect vs. dynamic dns botnets + stop C&C talkback
4.) Protect vs. DGA botnets + stop C&C talkback
5.) Protect vs. downed DNS (for reliability)
6.) Protect vs. DNS redirect poisoning
7.) Protect vs. trackers
8.) Protect vs. spam
9.) Protect vs. phish
10.) Protect vs. caps
11.) Get you past dns blocks
12.) Keep you off dns request logs
13.) Speed up surfing by adblocks & hardcoded fav. sites
14.) Work on anything webbound multiplatform.
15.) Easily controlled data
16.) Do all that & block ads better vs. addons more efficiently in cpu cycles + memory usage
* ANSWER ="NO" on ab+ doing it as well or @ ALL + hosts = already on every device natively.
APK
P.S.=> Ab+ does less than hosts & less efficiently - hosts do MORE w/ less + Hosts start w/ the IP stack before REDUNDANT inefficient addons BEGIN to operate (as 1st resolver).
---
Ab+'s 128mb memory inefficiency http://cdn.ghacks.net/wp-conte... (hosts consume 3-11mb using my program initially).
---
ClarityRay defeats it dumping addons in use in browsers via native browser methods!
---
Ab+'s paid to not do its job by default http://www.businessinsider.com... & ABP bought out adblock http://www.theregister.co.uk/2...
---
Ab+ adds complexity in a slower mode of operations (usermode = more messagepassing overhead vs. hosts in kernelmode).
---
AdBlock's SLOWER vs. hosts: http://superuser.com/questions...
---
What's best?
APK Hosts File Engine 9.0++ SR-2 32/64-bit http://start64.com/index.php?o...
MalwareBytes' hpHosts Admin (MalwareBytes employee) hosts & recommends it http://hosts-file.net/?s=Downl... & MalwareBytes = BEST antivirus http://www.av-test.org/en/news...
&
It's safe per 57 antivirus programs in BOTH its 64-bit model https://www.virustotal.com/en/...
+
a 32-bit model too https://www.virustotal.com/en/...
... apk
Have fun maintaining that host file you idiot. Routers beat hosts file, so your whole deal falls apart because your network stack still gets involved with hosts. Blocking this stuff on the router means it never even gets on your network, no wasted cycles. But again, this means you will spend the rest of your life maintaining this growing hosts file or block list, when adblock and other browser plugins do this, and update it, for you. That said, since adblock has been sold and no one will say to whom, and this nonsense of "Acceptable ads", I wouldn't recommend using and trusting it for much longer. But I'd still suggest that over whatever crap you are spamming on each and every thread even remotely close to this subject. Gee... I wonder if you might be on the payroll for this "application" that requires administrator permissions to merely update your host file. No thanks.
Yup, having to continually spam your questionable software makes it less questionable. Said no one, ever.
What has a pink/red color got to do with the application, anyhow? Perhaps you meant 'rogue?' I don't know if it is always you but this seems to be a common one for ACs. Well, I finally got bored enough to point it out. While maybe not you, 'alot' is not a word and there's a difference between fewer and less.
"So long and thanks for all the fish."
Of course the real problem is all the content sites out there that (for some idiotic reason) are relying on Flash for DRM and which cant be made to work on any flash alternative due to the US DMCA and other similar laws around the world.
It works great for DRM! Since I uninstalled flash, I not only don't copy their content (which I already didn't), I don't even view it! Problem solved.
See subject & tell us - How're they doing lately being exploited so much? How many folks have routers that can take up to 3,800,960++ entries of KNOWN BAD ads, sites/servers, botnets, etc. - et al (that are threats online)??
ANSWER = NOT TOO MANY - & you're asking folks SPEND MORE MONEY + "Bolt on 'MoAr'" instead of using what they already natively have... lol, blowing added electricity too.
* Trying to "move the goalposts"?
APK
P.S.=> Too bad it's not working after the above... lol - however, there's NO getting around how much + HOW BADLY routers are & have been exploited the past few years now... apk
Moving the goalposts changing to routers is evidence you can't validly technically prove apk wrong here http://slashdot.org/comments.p...
Now Windows and OS X ignore the hosts file.
APK is going to have to find something productive to do.
Unless you play games, or need DRM content, you might be okay.
https://www.youtube.com/c/BrendaEM
I use both. Neither ignores hosts on adblocking, blocking botnets or malware from bad sites. What you smoking?
If others post on adblock apk's free to inform them of facts from reputable sources and he does. Nobody proves him validly technically wrong.
You trying to move the goalpost against apk wasn't successful was it Rob McDonald http://tech.slashdot.org/comme... He creamed you for it.
"Yup, having to continually spam your questionable software" - by Rob MacDonald (3394145) on Wednesday October 14, 2015 @09:36AM (#50725231)
See subject: Better than what you can't disprove validly vs. AlmostALLAdsBlocked -> http://tech.slashdot.org/comme...
LMAO!
---
(Then you tried "moving the goalposts" to routers & I smoked you on that too -> http://tech.slashdot.org/comme... )
* :)
---
Keep "Bolting on 'MoAr' illogically when I use what I already have natively doing the job & MORE by far vs. AlmostALLAdsBlocked above, for FAR LESS resources consumed...
APK
P.S.=> So - per my subject above: What's questionable about this data Rob McDonald (other than your questionable limited skills in computing)?
MalwareBytes' hpHosts Admin (MalwareBytes employee) hosts & recommends it -> http://hosts-file.net/?s=Downl... & MalwareBytes = BEST antivirus per this VERY recent testing of them all http://www.av-test.org/en/news...
&
It's safe proven by 57 antivirus programs recently in BOTH its 64-bit model https://www.virustotal.com/en/...
+
In its 32-bit model too https://www.virustotal.com/en/...
Hmmm? apk
"I wonder if you might be on the payroll for this "application" that requires administrator permissions to merely update your host file" - by Rob MacDonald (3394145) on Wednesday October 14, 2015 @09:32AM (#50725207)
See subject: I wrote it - There's no other way to update hosts programmatically vs. using admin privelege stupid.
---
"this means you will spend the rest of your life maintaining this growing hosts file or block list, when adblock and other browser plugins do this, and update it, for you" - by Rob MacDonald (3394145) on Wednesday October 14, 2015 @09:32AM (#50725207)
AlmostALLAdsBlocked+ bought out adblock-> http://www.theregister.co.uk/2...
&
NEITHER blocks all ads due to bribery not to & to be crippled by default -> http://www.businessinsider.com...
AT LEAST HOSTS WORK FULLY RATHER THAN BEING A 'SOULED-OUT" SHELL OF AN APPLICATIONS like "AlmostALLAdsBlocked"
(& hosts do FAR MORE for FAR LESS resources consumed and they do it all faster too...)
---
"Routers beat hosts file" - by Rob MacDonald (3394145) on Wednesday October 14, 2015 @09:32AM (#50725207)
Yea? Routers beat hosts @ being EXPLOITED -> http://www.theregister.co.uk/2...
How many MORE of those EXPLOITS IN ROUTERS happening this year ALONE do I need to crush you some more on that very note??
(Just ask & "ye shall receive"... as I am fairly sure I can come up with ~ 1/2 dozen++ or more easily)
APK
P.S.=> It has been a PLEASURE utterly knocking the snot out of you easily... apk
It's how you can tell who has been around long enough to have played rogue.
It's like I mentioned "Sanford and Son" today in another part of the internet. Someone else asks "What's Sanford and Son"? LOL.....okay, this person says they're from the US so I must assume they're about 15 years old.
Don't mention Nethack. Or Zork. I'm not even sure if half the people who play Fallout actually played the first two. I stopped gaming around the time of my enjoyment of the Fallout 2 game. It was awesome. I've not really gamed since but I remember (and played) Rogue. Or, ahem... Rouge... *sighs* Yes, yes I played the French word for Red. I dunno what people do with their spare time but it doesn't appear to be learning new things or improving themselves. I'm glad I'm not a people.
"So long and thanks for all the fish."
https://www.gnu.org/software/g...
Stallman called it...
Can adblock+ do 16 things hosts do 4 speed, security & reliability:
1.) Protect vs. malicious sites (past ads)
2.) Protect vs. fastflux botnets + stop C&C talkback
3.) Protect vs. dynamic dns botnets + stop C&C talkback
4.) Protect vs. DGA botnets + stop C&C talkback
5.) Protect vs. downed DNS (for reliability)
6.) Protect vs. DNS redirect poisoning
7.) Protect vs. trackers
8.) Protect vs. spam
9.) Protect vs. phish
10.) Protect vs. caps
11.) Get you past dns blocks
12.) Keep you off dns request logs
13.) Speed up surfing by adblocks & hardcoded fav. sites
14.) Work on anything webbound multiplatform.
15.) Easily controlled data
16.) Do all that & block ads better vs. addons more efficiently in cpu cycles + memory usage
* ANSWER ="NO" on ab+ doing it as well or @ ALL + hosts = already on every device natively.
APK
P.S.=> Ab+ does less than hosts & less efficiently - hosts do MORE w/ less + Hosts start w/ the IP stack before REDUNDANT inefficient addons BEGIN to operate (as 1st resolver).
---
Ab+'s 128mb memory inefficiency http://cdn.ghacks.net/wp-conte... (hosts consume 3-11mb using my program initially).
---
ClarityRay defeats it dumping addons in use in browsers via native browser methods!
---
Ab+'s paid to not do its job by default http://www.businessinsider.com... & ABP bought out adblock http://www.theregister.co.uk/2...
---
Ab+ adds complexity in a slower mode of operations (usermode = more messagepassing overhead vs. hosts in kernelmode).
---
AdBlock's SLOWER vs. hosts: http://superuser.com/questions...
---
What's best?
APK Hosts File Engine 9.0++ SR-2 32/64-bit http://start64.com/index.php?o...
MalwareBytes' hpHosts Admin (MalwareBytes employee) hosts & recommends it http://hosts-file.net/?s=Downl... & MalwareBytes = BEST antivirus http://www.av-test.org/en/news...
&
It's safe per 57 antivirus programs in BOTH its 64-bit model https://www.virustotal.com/en/...
+
a 32-bit model too https://www.virustotal.com/en/...
... apk