-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ Vaughn Bode on Saturday 10 Oct 2009 19:07 : \____
> On Oct 10, 9:52 am, "Quantum Leaper" <lea...@xxxxxxxxxxx> wrote:
>> 7 wrote:
>> > Roy Schestowitz wrote:
>>
>> >> -----BEGIN PGP SIGNED MESSAGE-----
>> >> Hash: SHA1
>>
>> >> Security Fix Live
>>
>> >> ,----[ Quote ]
>> >>> Upper Marlboro, Md.: Hi Brian. Thanks for
>> >>> all you do to help us deal with the "wild
>> >>> west" of the Internet. I was freaked out
>> >>> by your reports on the clampi trojan -
>> >>> especially since no security software
>> >>> seems to protect against it. The main
>> >>> solution offered up - use a second,
>> >>> dedicated computer for financial
>> >>> transactions - is a non-starter for many
>> >>> in this economy. Also, if the trojan
>> >>> infects a national bank, a home user can
>> >>> become a victim even if s/he does
>> >>> everything required for safe computing.
>> >>> Besides buying a second computer (not
>> >>> gonna happen) what are some realistic
>> >>> steps that home users can take? Help!
>>
>> >>> Brian Krebs: Yeah, I hear you on the
>> >>> buying-a-second computer thing. But there
>> >>> are other options. A few chats ago, I
>> >>> recommended Live CDs as an option. The
>> >>> beauty of this approach is that you
>> >>> download a bootable Linux installation,
>> >>> burn it to a CD-Rom drive, and boot from
>> >>> the CD straight into linux. The only cost
>> >>> is the penny or so for the blank CD. The
>> >>> operating system is free, and when you
>> >>> close it down, all data/changes are
>> >>> wiped. Clean slate. Best part is you
>> >>> don't need a second computer. Take the
>> >>> CD-Rom out of the disk drive, restart,
>> >>> and you're back into Windows again.
>>
>> >>> There are literally hundreds of these
>> >>> free Live CD distributions out there. You
>> >>> can install them as your main PC if you
>> >>> want, but by default they run striaght
>> >>> from the CD. The last chat, I think
>> >>> someone suggested Puppy Linux, and I have
>> >>> to say I hadn't tried it before then, but
>> >>> I have since, and it's extremely small,
>> >>> lightweight and very fast.
>> >> `----
>>
>> >>http://www.washingtonpost.com/wp-
>> > dyn/content/discussion/2009/10/08/DI2009100801148.html
>>
>> >> NSW Police: Don't use Windows for internet banking
>>
>> > The damage caused by windummies falling prey to windump
>> > security issues are widening.
>>
>> > Apparently you can now get paid legitimately from
>> > a hacked account and send the goods off.
>> > You however have to return the money when the fraud
>> > is found out.
>>
>> > Windump OS not only reducing your chances of doing
>> > banking without fraud, but affecting that of suppliers
>> > as well of getting paid without falling to fraud.
>>
>> > The banks and card companies should make concerted efforts
>> > to ban all windump PCs from logging into their systems or
>> > making payments. If they don't want to, and it can
>> > be proven in court they didn't have an active policy,
>> > then THEY should pay for all losses.
>>
>> You know most people who get they bank and other information stolen isn't
>> from Virus. Its from Phishing and good old dumpster diving. FBI chief is
>> barred from Online banking, by his wife not because his computer was taken
>> over by some nasty old windows virus, but because he almost fell for a
>> common Phishing
>> scam.http://www.theregister.co.uk/2009/10/08/fbi_robert_mueller_commonweal...
>>
>> Which is easier for the scam to write some virus or email some scam to a few
>> million suckers?
>
> Hi Quantum Leaper, you are conveniently leaving out the part that in
> order to send out email to a few million of your closest friends, you
> need a bot-net of Windows boxes that are infected by various virus.
> Writing the phishing text is the easy part. But you knew that
> already.
The thing about botnets is, even if you find out where phishing mails come from (zombie), you don't
find the criminal. That's why zombie PCs are so much more harmful and there is also the factor which
is brute force. Then, there's E-mail harvesting which is enabled by hijacking PCs and reading
address books.
- --
~~ Best of wishes
Roy S. Schestowitz | "ASCII stupid question, get a stupid ANSI"
http://Schestowitz.com | Free as in Free Beer | PGP-Key: 0x74572E8E
Cpu(s): 22.6%us, 5.0%sy, 0.1%ni, 70.6%id, 1.3%wa, 0.0%hi, 0.4%si, 0.0%st
http://iuron.com - semantic engine to gather information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkrQ3sIACgkQU4xAY3RXLo54sQCfZ+rfXvTHn8Kz8i39X1yOD977
shcAn15NPYOKyMFbLFiXYgpsveqOGADf
=5LbB
-----END PGP SIGNATURE-----
|
|
