Your best source of information and news about drivers, vista and windows vista on the internet

Vista ARTICLES TOP 50 Spyware Virus Vista SOFT Vista HELP

Yahoo Messenger

You are currently browsing the articles from MS Windows Vista Compatible Software matching the category Yahoo Messenger.

Where’s the Party? Hackers Found in Social Networking Sites

Engage with a social networking site such as MySpace or Facebook, and you will undoubtedly change the way you spend your time online. Every time you visit and interact, you will leave a trace behind.  You will expand your digital footprint. As you do this, you will acquire an online identity.Your digital profile will be born.

However unassuming or grand your digital profile is, however private or public, you can be certain of one thing:  Your nuggets of information can be turned against you by hackers with malicious motives.

The tables have turned.  2006 was the year that cyber criminals shifted their attention from e-mail to web traffic.  In that year, the ScanSafe Annual Global Threat Report noted an increase in spyware of 254 percent.  The motives shifted as well.  Over 65 percent of web virus attacks in 2006 aimed at gaining a financial benefit from unsuspecting users.  Displaying technical prowess or causing online chaos was no longer the main driving factor for attacks.

It is little wonder that social networking sites, with attention grabbing headlines that by turns praise and condemn the social changes they are helping bring about, are gaining the attention of hackers looking to spread their malware.

The so-called Web 2.0 provides a grand platform from which to launch attacks.  Social network sites, wikis, blogs, chat, RSS feeds, and instant messaging are, by their open nature, fertile ground for the distribution of malware. The more freely users interact and contribute content, the more information hackers have that can be used against them.

To limit your exposure and avoid being a target, it is wise to refrain from posting information that could make you vulnerable.  This includes what others may be posting on you as well, for example, hobbies, addresses, memberships, routines, schedules, finances, employment – the possibilities are extensive.  Only post information that you feel comfortable with anyone seeing since once you do so, you will not be able to fully retract it.  Even if you remove it from a site, saved or cached versions may still exist elsewhere in the digital universe.

Just as it is important to be critical about what you post, it is also important to be critical about what you consume.  Since much of Web 2.0 content is updatable by the public, it is possible for a hacker to embed links that send users to corrupt sites where they can be tricked into other scams.  By blending with the crowd of users, hackers and cyber criminals can work underground.

Just how widespread is malware in the open Web? The ScanSafe Threat Center has found that up to one in every 600 social networking pages hosts malware.  As the number of pages continues to rise exponentially, so does the potential for malware to spread.

Dan Nadir of ScanSafe told E-Commerce Times in a recent article that many traditional security solutions are not sufficiently capable in the dynamic Web 2.0 environment.  What is required is a proactive solution, a type of real-time Web URL check.

Web pages that appear to be legitimate, can introduce malware and spyware into a network.  The challenge is to tell the legitimate from the corrupt, and it’s not always easy.  Often there’s no way to know one from another. According to Paul Henry of Secure Computing, in some cases hackers are corrupting legitimate technologies for their own gain.  For example, even HTTPS connections, which are meant to be encrypted and secure, can be used by hackers to transmit malware.

Social networking sites pose special challenges for corporations seeking to protect sensitive data and intellectual property.  According to the Reuters news agency, a July poll commissioned by Britain’s Evening Standard newspaper showed that more than two-thirds of London businesses have banned or limited employee access to Facebook and MySpace.  The clamp down comes as the sites have begun catering to professionals.  But while some believe that the sites are distracting and don’t belong in a work environment, others see them as powerful networking tools that can help the business.

Whichever side you favor, be aware that online social networking is a powerful tool and, should you choose to join, be sure to stay safe by checking a site’s privacy policy and letting common sense dictate how you participate.

Written by bardissi on October 4th, 2007 with no comments.
Read more articles on Yahoo Messenger and Spyware & Malware and Lavasoft and Facebook and Non-Profits and Student Computing and Home Computer Support and Non-Profit Technology and Network Infrastructure and myspace and Business Computer Support.

Yahoo Fixes Another Buffer Overflow Vulnerability in Messenger

Severity: Medium

30 August, 2007

Summary:

Late yesterday, Yahoo released an update that fixes a security vulnerability affecting any version of Yahoo! Messenger installed before August 29, 2007. By enticing a Yahoo! Messenger user into visiting a malicious Web page, an attacker can exploit this new flaw to execute code on that user’s computer, and possibly gain full control of it. If you use Yahoo! Messenger in your network, or suspect that your users have installed it, either remove it or install the latest version.

Exposure:

Yahoo! Messenger is one of the many Instant Messaging applications that allow users to send real-time, pop-up messages to each other over the Internet. Instant Messaging is popular enough that your users might have installed the Yahoo! Messenger client on a company computer whether or not your policy authorizes it.

Yesterday, Yahoo released an advisory describing a buffer overflow vulnerability in an ActiveX control that ships with all previous versions of Yahoo! Messenger. The buffer overflow flaw lies specifically in the ActiveX control called YVerInfo.dll. By tricking one of your Yahoo! Messenger users into visiting a maliciously crafted Web page, an attacker could exploit this flaw to execute code on your user’s computer, with your user’s privileges. If the user has local administrative privileges, the attacker could gain total control of the user’s machine.

If you read WatchGuard Wire, you may remember our post about a similar vulnerability in Yahoo! Messenger, caused by a flaw in a webcam ActiveX control. Yahoo fixed that flaw as well, last week. By installing this Yahoo! Messenger update, you fix both this new vulnerability and that older one.

Solution Path:

Even if your organization does not officially endorse the use of unsecured Instant Messaging, employees sometimes persist in trying to sneak Instant Messaging software onto company machines. If you suspect some of your users have installed Yahoo! Messenger, consider forwarding a warning about this vulnerability to all the users on your network. If your company policy does call for the use of Instant Messaging, you should download and install the latest version of Yahoo! Messenger (8.1.0.419).

For All Users:

This attack travels as normal-looking HTTP traffic, which you need to allow so your network users can access the World Wide Web. Therefore, installing the Yahoo update is your best solution.

Status:

Yahoo has released an update to fix this vulnerability.

References:

Secunia’s Yahoo! Messenger Security Advisory

Written by bardissi on August 31st, 2007 with no comments.
Read more articles on Watchguard and Non-Profits and Yahoo Messenger and Student Computing and Non-Profit Technology and Windows XP and Business Computer Support and Home Computer Support and Windows Vista.