Security firm RSA attacked using Excel-Flash one-two sucker punch

RSA attacked using Flash vulnerability
It has emerged that the underlying cause of RSA's SecurID gaffe was the recently-reported zero-day vulnerability found in Adobe's Flash Player.

The exploit, which used specially-crafted Flash embedding in Excel spreadsheets, was first reported on March 15 and has since been fixed. RSA was hacked sometime in the first half of March when an employee was successfully spear phished and opened an infected spreadsheet. As soon as the spreadsheet was opened, an advanced persistent threat (APT) -- a backdoor Trojan -- called Poison Ivy was installed. From there, the attackers basically had free reign of RSA's internal network, which led to the eventual dissemination of data pertaining to RSA's two-factor authenticators.

The attack is reminiscent of the APTs used in the China vs. Google attacks from last year -- and indeed, Uri Rivner, the head of new technologies at RSA is quick to point out that that other big companies are being attacked, too: "The number of enterprises hit by APTs grows by the month; and the range of APT targets includes just about every industry. Unofficial tallies number dozens of mega corporations attacked [...] These companies deploy any imaginable combination of state-of-the-art perimeter and end-point security controls, and use all imaginable combinations of security operations and security controls. Yet still the determined attackers find their way in."

What we'd like to know, though, is whether the attack on RSA was caused by Adobe's lackadaisical approach to patching Flash -- or was it the other way around? Was it the RSA attack that first brought the zero-day vulnerability to Adobe's attention?

Security firm RSA attacked using Excel-Flash one-two sucker punch originally appeared on Download Squad on Wed, 06 Apr 2011 06:55:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/06/security-firm-rsa-attacked-using-excel-flash-one-two-sucker-punc/

MICROS SYSTEMS NINTENDO COMMSCOPE NANYA TECHNOLOGY INTERNATIONAL BUSINESS MACHINES (IBM) VOLT INFORMATION SCIENCES IBASIS

Barnes & Noble offers to repartition Nook Tablet storage, concedes you may need more than 1GB

Nook Tablet
Are you one of the many infuriated with Barnes & Noble over how it partitioned the storage on the Nook Tablet -- leaving you just 1GB for you own files? Well, it looks like the company has learned from its mistakes. While only about 5GB is free to load with apps and media on the new 8GB model, just 1GB of that is reserved for Nook Store content. B&N is also offering to retroactively fix the 16GB boondoggle as well. If you visit a brick and mortar shop starting March 12th, a support rep will gladly help you repartition the internal storage, freeing up more than just one of the 13 available gigabytes for personal use. Having to bring it to the store is a bit of pain, but we suppose it's better that getting stuck with 12GB of Angry Birds and e-books.

Barnes & Noble offers to repartition Nook Tablet storage, concedes you may need more than 1GB originally appeared on Engadget on Wed, 22 Feb 2012 09:38:00 EDT. Please see our terms for use of feeds.

Permalink Android Police, Liliputing  |  sourceBarnes & Noble  | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/86qwrIGEDjo/

LINEAR TECHNOLOGY RF MICRO DEVICES RADISYS FAIR ISAAC AUTODESK SRA INTERNATIONAL IRON MOUNTAIN INORATED

LG Optimus 3D Max is a slimmer sequel, world's first phone with 3D video editing

We're not sure if the world was anxiously awaiting a follow-up to LG's Optimus 3D (the AT&T Thrill 4G here in the states), but here it is: the LG Optimus 3D Max -- or Optimus 3D Cube, depending on your country. The latter's been announced for Korean carrier SK Telecom, with the former rolling out to Europe later. The Optimus 3D Max is slightly thinner than its predecessor at 9.6mm vs. the Thrill 4G's 11.9mm, with a faster 1.2GHz dual-core CPU and 16GB of storage built-in, confirming most of the rumors we'd heard previously. According to LG, it will also be the world's first that can handle 3D photo and video editing right on its glasses-free 4.3-inch screen, all shot by the dual 5MP cameras mounted on the back. It also has NFC baked in to support the new LG Tag+ stickers that change the phone's settings when swiped, just like the Optimus LTE Tag. It's scheduled for release in early March with Android 2.3, but we're promised an Ice Cream Sandwich makeover soon after launch, just like its cousin, the Optimus Vu. Check out the full list of specs after the break and expect to us to get a firsthand look when Mobile World Congress kicks off on the 27th.

Update: It looks like it'll also arrive in Europe with a new name; the Optimus 3D Max. Check the full English PR release below.

Continue reading LG Optimus 3D Max is a slimmer sequel, world's first phone with 3D video editing

LG Optimus 3D Max is a slimmer sequel, world's first phone with 3D video editing originally appeared on Engadget on Tue, 21 Feb 2012 22:40:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments


Source: http://feeds.engadget.com/~r/weblogsinc/engadget/~3/G-iXyEnl6vU/

IDT CDW SUN MICROSYSTEMS TRIMBLE NAVIGATION LIMITED SPANSION HARRIS SIEMENS

Banshee music player now works in Windows, supports Amazon MP3 downloads

A few moments ago, version 2 of the Banshee music player for Linux was released, bringing with it a whole slew of new features, and the addition of an official -- but alpha-quality -- Windows build. The Mac OS X build of version 2 is due later today.

The most notable new feature is support for the Amazon MP3 store -- you can buy and download music from within Banshee -- but unfortunately it's only available in the Linux build at the moment (OS X and Windows support are planned, however). There have also been some significant improvements to artist, album, and queue interactions -- and yes, you can finally right click a track, album or artist and select 'play after' to insert it into the queue.

Beyond actual playback, the user interface has been tidied up -- it now looks a whole lot smarter -- and the Ubuntu One Music Store and SoundMenu extensions have been made official. For a complete list of changes, additions and bug fixes, check the change log.

When Windows support initially appeared in February, we found it rough around the edges and fraught with stability issues. With version 2, Banshee for Windows is still a bit unstable, but it's shaping up to be a good alternative to Winamp, iTunes, or whatever other music library manager you use. It's almost as attractive as its GNOMEish brother, too!

Download Banshee 2 for Linux and Windows (Mac OS X coming soon)

Banshee music player now works in Windows, supports Amazon MP3 downloads originally appeared on Download Squad on Wed, 06 Apr 2011 11:35:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/04/06/banshee-music-player-now-works-in-windows-supports-amazon-mp3-d/

QUALCOMM FEI COMPANY THQ BHARTI AIRTEL FAIRCHILD SEMICONDUCTOR INTERNATIONAL IDT CDW

Altaro Hyper-V Backup beta launched, only 250 places available

hyper-vbackupbeta
This one's for the sysadmins in the audience: Altaro, makers of our favorite "time machine for Windows" back solution, OopsBackup, have just announced a new product entering beta called Hyper-V Backup.

It's a backup solution for virtual machines running on Microsoft's Hyper-V virtualization solution. If that sentence just seemed like a bunch of buzzwords crammed together, Hyper-V backup is not for you. But, if you actually use Hyper-V and are hankering for a good backup solution, Altaro might be worth checking out.

The beta run is limited - Altaro are looking for just 250 testers. All participants will get a free license key to the final, production version. So if you're interested in helping test Hyper-V Backup, get yourself over to Altaro now and join the beta.

Altaro Hyper-V Backup beta launched, only 250 places available originally appeared on Download Squad on Wed, 02 Mar 2011 05:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/03/02/altaro-hyper-v-backup-beta-launched-only-250-places-available/

HON HAI PRECISION IND INTEL QUANTA COMPUTER ANIXTER INTERNATIONAL SALESFORCE COM STANDARD MICROSYSTEMS DIRECTV GROUP

Watch Steve Jobs' Life In a Facebook Timeline (Updated) [Steve Jobs]

Someone built a Facebook timeline with the life of Steve Jobs. It's quite nice to go through it and look at his life in this format, rather than having to suffer through Isaacson's rushed out prose. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/dcHlCY_gJ_c/watch-steve-jobs-life-in-a-facebook-timeline

HEWLETT PACKARD CO TIBCO SOFTWARE ACER SYBASE TECHNITROL NII HOLDINGS FIDELITY NATIONAL INFORMATION SVCS

Brand New iTunes Store on the Way? [Rumors]

Unlike Amazon.com, which is both ugly and hard to use, the iTunes Store is only the latter. Behind all that Apple sheen is a hellish shopping labyrinth—but a makeover might be coming soon. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/VQSOh4NtCUU/brand-new-itunes-store-on-the-way

INFOSYS TECHNOLOGIES RESEARCH IN MOTION YAHOO JACK HENRY and ASSOCIATES NOKIA DISCOVER FINANCIAL SERVICES GOOGLE

Add playback hotkeys to Amazon Cloud Player with a Chrome extension

Sure, Amazon's Cloud Player works -- as long as you're in the U.S. or willing to do some tinkering -- but it's fairly simplistic at the moment. There are plenty of features missing which we'd like to see added -- but since Cloud Player is a Web app we don't have to wait for Amazon!

Google Chrome users, for example, can add playback hotkeys with an extension called keyMazony. Once installed, you'll have keyboard control of your Amazon Cloud Player queue. keyMazony commands will work as long as you're in the same Chrome window as Cloud Player, even if its tab doesn't have focus. The key combinations are customizable as well -- just make sure you don't set up a combo that conflicts with another extension or Chrome's built-in keyboard shortcuts.

Add playback hotkeys to Amazon Cloud Player with a Chrome extension originally appeared on Download Squad on Thu, 31 Mar 2011 11:30:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/03/31/add-playback-hotkeys-to-amazon-cloud-player-with-a-chrome-extens/

YAHOO JACK HENRY and ASSOCIATES NOKIA DISCOVER FINANCIAL SERVICES GOOGLE NOVELLUS SYSTEMS SYNNEX

Google holds back on open-sourcing Honeycomb, heralds massive shift for Android

Android Honeycomb
Google, in an interesting but not entirely unexpected twist, will not be open-sourcing Android 3.0 Honeycomb for the foreseeable future.

Historically, Android is usually open-sourced via the Android Open Source Project (AOSP) a few days or weeks after the code is finalized. While this departure from the norm won't affect OEMs like HTC and Motorola that have access to internal builds of Android, small-time developers will likely have to wait months before rolling their own distributions.

As to why Google is holding back Honeycomb, its reasons are actually rather rational. Honeycomb, while originally intended to run on all mobile form factors, is only ready for deployment on tablets. "To make our schedule to ship the tablet, we made some design tradeoffs," says Andy Rubin, the head of Google's Android group. "We didn't want to think about what it would take for the same software to run on phones. It would have required a lot of additional resources and extended our schedule beyond what we thought was reasonable. So we took a shortcut."

In other words, Google wants to prevent OEMs and homebrew developers like Cyanogen from rolling their own smartphone versions of Honeycomb -- it doesn't want to see the same bitter-tasting tabletified bastardization that occurred with Android 2.1 and 2.2 last year.

Continue reading Google holds back on open-sourcing Honeycomb, heralds massive shift for Android

Google holds back on open-sourcing Honeycomb, heralds massive shift for Android originally appeared on Download Squad on Fri, 25 Mar 2011 07:00:00 EST. Please see our terms for use of feeds.

Permalink | Email this | Comments

Source: http://downloadsquad.switched.com/2011/03/25/google-holds-back-on-open-sourcing-honeycomb-heralds-shift-android/

AMKOR TECHNOLOGY INSIGHT ENTERPRISES CANON TIBCO SOFTWARE PLANAR SYSTEMS SES BT GROUP

How One Man Made a Double-Lens Camera Out of LEGO and Old Binoculars [Lego]

With the breakneck speed at which new DSLRs are released, photography seems to have traded a bit of its soul for the pursuit of ever more megapixels. So, Carl-Frederic Salicath of Norway has taken a step back from the digital revolution and has built his own working retro 120mm-film camera. Here's how. More »


Source: http://feeds.gawker.com/~r/gizmodo/full/~3/jY0qoav8bb0/how-one-man-made-a-double-lens-camera-out-of-legos-and-old-binoculars

NVIDIA SHAW COMMUNICATIONS ON SEMICONDUCTOR SAIC TERADATA QUANTUM SATYAM COMPUTER SERVICES