Comments on: MySpace QuickTime Worm Follow-up http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Quicktime and Firefox vulnerability - Spyware Sucks http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-48927 Quicktime and Firefox vulnerability - Spyware Sucks Fri, 14 Sep 2007 00:00:19 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-48927 [...] completely ignored. I tried to bring the spot light on the second vulnerability one more time over here, yet nobody listened. So, I decided to post a demonstration of how a Low risk issue can be turned [...] [...] completely ignored. I tried to bring the spot light on the second vulnerability one more time over here, yet nobody listened. So, I decided to post a demonstration of how a Low risk issue can be turned [...]

]]> By: Severe vulnerability in QuickTime plugin for Firefox disclosed : Mozilla Links http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-48329 Severe vulnerability in QuickTime plugin for Firefox disclosed : Mozilla Links Wed, 12 Sep 2007 14:23:34 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-48329 [...] Read the complete disclosure at GNUCITIZEN. [...] [...] Read the complete disclosure at GNUCITIZEN. [...]

]]> By: 0DAY: QuickTime pwns Firefox | GNUCITIZEN http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-48305 0DAY: QuickTime pwns Firefox | GNUCITIZEN Wed, 12 Sep 2007 12:14:31 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-48305 [...] completely ignored. I tried to bring the spot light on the second vulnerability one more time over here, yet nobody listened. So, I decided to post a demonstration of how a Low risk issue can be turned [...] [...] completely ignored. I tried to bring the spot light on the second vulnerability one more time over here, yet nobody listened. So, I decided to post a demonstration of how a Low risk issue can be turned [...]

]]> By: Ciel http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-45890 Ciel Tue, 04 Sep 2007 19:58:15 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-45890 i get plagued by phished people everyday. even ads that are less then legal. quiet a majority of the phished people i encounter actually still have access to there account, and are unaware that some phisher is sending ads around to there friends, i would certainly hate to find out that im in trouble because a phisher was making my accouunt send ilegal ads out to everyone. all phishing sites where they ask for your login to steal dont actually say http://www.myspace.com but they usually look extremely similar. such as http://www.rnyspace.com system errors caused by a website are virtually impossible without C++. and C++ cant just be used normally like html or java in the first place. You may want to consider the possibility of a virus or major program corruption, such as quicktime is corrupted. i would just like to point out that a mac is much more insecure then a windows machine. ive worked with macs before and they are pathetic security wise. windows recieves probrably 80/100 bad hacker being the leading computer in the market, i think mac would crash and burn in windows place right now. in other words its in your best interest to have good virus protection on a mac too. i get plagued by phished people everyday. even ads that are less then legal. quiet a majority of the phished people i encounter actually still have access to there account, and are unaware that some phisher is sending ads around to there friends, i would certainly hate to find out that im in trouble because a phisher was making my accouunt send ilegal ads out to everyone.

all phishing sites where they ask for your login to steal dont actually say http://www.myspace.com
but they usually look extremely similar. such as
http://www.rnyspace.com

system errors caused by a website are virtually impossible without C++. and C++ cant just be used normally like html or java in the first place. You may want to consider the possibility of a virus or major program corruption, such as quicktime is corrupted.

i would just like to point out that a mac is much more insecure then a windows machine. ive worked with macs before and they are pathetic security wise. windows recieves probrably 80/100 bad hacker being the leading computer in the market, i think mac would crash and burn in windows place right now.

in other words its in your best interest to have good virus protection on a mac too.

]]> By: A http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-10950 A Wed, 28 Mar 2007 20:00:53 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-10950 i didnt click on any quicktime thingy. but i get an error page whenever i try to log on to myspace. i can browse but i cant click on anyones pics/ comments ect .....i get a server error/systems error page everytime. I have to go to internet cafs to log on now. I tried using a different server but still the same thing.I'm on a mac, so its very doubtful its a virus...if anyone has any clues, they would be much appreciated! i didnt click on any quicktime thingy. but i get an error page whenever i try to log on to myspace. i can browse but i cant click on anyones pics/ comments ect …..i get a server error/systems error page everytime. I have to go to internet cafs to log on now. I tried using a different server but still the same thing.I’m on a mac, so its very doubtful its a virus…if anyone has any clues, they would be much appreciated!

]]> By: Nick DImopoulos http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-2729 Nick DImopoulos Wed, 24 Jan 2007 15:48:10 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-2729 I know where to read a response - pardon my ignorance I know where to read a response – pardon my ignorance

]]> By: Nick DImopoulos http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-2728 Nick DImopoulos Wed, 24 Jan 2007 15:45:05 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-2728 I joined Myspace just over a week ago now and I got a message saying that it was found that my system had QUICKTIME PLAYER and that I neede an update in order to watch movies. I stupidly installed it thinking this message was coming from the techs at myspace. A day or so later mt windows XP shut down - blue screen saying it closed down and some figures etc. It did so a few times and then I concentrated where I was on the web when it stopped. Well it is everytime I go to Myspace site. Not necessarily into my account but even if I'm just browsing at Myspace window XP stopps with an error message. Exasperating stuff. Is there any I can do to overcome or rid me of this problem? Thanks Nick D Where can I read a response to this? Can someone email me please. I joined Myspace just over a week ago now and I got a message saying that it was found that my system had QUICKTIME PLAYER and that I neede an update in order to watch movies.

I stupidly installed it thinking this message was coming from the techs at myspace. A day or so later mt windows XP shut down – blue screen saying it closed down and some figures etc. It did so a few times and then I concentrated where I was on the web when it stopped. Well it is everytime I go to Myspace site. Not necessarily into my account but even if I’m just browsing at Myspace window XP stopps with an error message.

Exasperating stuff. Is there any I can do to overcome or rid me of this problem?

Thanks
Nick D

Where can I read a response to this? Can someone email me please.

]]> By: GNUCITIZEN » DANGER, DANGER, DANGER http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up/comment-page-1/#comment-1760 GNUCITIZEN » DANGER, DANGER, DANGER Wed, 03 Jan 2007 01:10:57 +0000 http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up#comment-1760 [...] So we changed a lot of diapers last year. Simple things we do suddenly have become very dangerous and risky. If you think that user supplied Image files are safe, think again. There were several attacks affecting social networks and a couple of very successful AJAX worms, again affecting social networks, during the last year. However, it seams that we haven’t really scratch the surface yet. [...] [...] So we changed a lot of diapers last year. Simple things we do suddenly have become very dangerous and risky. If you think that user supplied Image files are safe, think again. There were several attacks affecting social networks and a couple of very successful AJAX worms, again affecting social networks, during the last year. However, it seams that we haven’t really scratch the surface yet. [...]

]]>