LukeW: Design Considerations for Web-based Applications::
The onset of the World Wide Web (WWW) began with a massive transfer of into Web terms and supplemented with additional guidelines that emerge from the Web . Exploit the similarities in the basic functionality of all weblications.
http://www.lukew.com/resources/articles/web_applications.htmlHOME |
One of the largest Web site exploits/compromises ever has hit the Web, with more than 10,000 compromised computers redirecting unsuspecting visitors to sites hosting malicious software payloads.
Most of the compromised sites -- 78 percent in total -- are in Italy but it is spreading around the world, according to Paul Ferguson, network architect with antivirus vendor Trend Micro. The compromised sites aren't the usual suspects, like porn, music swapping or piracy, but are legitimate sites for news, entertainment or information.
Mobile Web 2.0, Mobile Widgets, Microlearning and Intertwingularity::
Widgets (both Web and Mobile) are ideally poised to exploit Microcontent As networks emerge (the Internet, MySpace, facebook) - hierarchies break down.
http://www.slideshare.net/MicrolearningOrg/mobile-web-20-mobile-widgets-microlearning-and-intertwingularityHOME |
Because so many computers were hit at once, he suspects the bad guys behind it found a way to automate distribution of the payload.
This hack involves more than 10,000 compromised sites, meaning some manner of automating the process of distributing the code was done, said Ferguson.
The compromised sites examine the visitor's system and determine what if any vulnerabilities exist on the system. They are then redirected to a computer with a malicious payload that takes advantage of the unpatched system.
Investment Strategies to Exploit Current Macroeconomic Trends ::
Note the massive $13+ cash dividend per share dividend declared last year. although trading opportunities will surely emerge throughout this period. The Market Oracle is a FREE Financial Markets Forecasting & Analysis web-site.
http://www.marketoracle.co.uk/Article5584.htmlHOME |
muellis blog::
The next guy talked about Exploit Toolkits for the Web. Probably due to the massive amount of food and beer, I couldn't sleep .. By actually blocking access, you might risk people demanding newer stuff and a big market emerges.
http://blogs.gnome.org/muelli/HOME |
"For systems that are completely patched, they are pretty much not at risk, but there are millions of consumers out there not [fully patched]," Ferguson told internetnews.com. "It used to be we could tell customers only go to Web sites that are trusted. Unfortunately in this situation, that advice doesn't hold water because it's so broad."
As if 10,000 compromised Web sites isn't enough, victims are redirected to sites hosting a new and improved version of WebAttacker, a do-it-yourself malware kit that makes it relatively easy to build exploits, Trojans, keyloggers and other malicious software.
While most of the compromised Web sites are in Italy, Ferguson said most of the sites hosting WebAttacker are in the U.S. However, Trend Micro has not been able to reach the site administrators and has enlisted the help of law enforcement, so those sites owners will be receiving a visit from their local authorities shortly.
End users should ensure they have patched their computer fully, and for extra security, consider a redirect blocker, which is available for Firefox. Antivirus software will catch the malicious payload being sent by the sites hosting WebAttacker, but as Ferguson points out, all it takes is a minor change to that code and antivirus programs might not recognize them.
Trend Micro's ongoing effort to track the exploits can be found on its blog.
The compromise is reminiscent of the iframe redirect hack that was embedded into the homepage of Dolphin Stadium, the home arena of the Miami Dolphins football team and host to the most recent Super Bowl. A redirect would send visitors to the site, which saw inordinate traffic due to the Super Bowl, to a site that served up known compromises in Windows.
 probabilities of a human birth
 Human Psychological Wellbeing
|
Massive Web Exploit Emerges