Twitter
RSS

Archive for July 17th, 2010


New virus targets industrial secrets

IDG News Service - Siemens is warning customers of a new and highly sophisticated virus that targets the computers used to manage large-scale industrial control systems used by manufacturing and utility companies.

Siemens learned about the issue on July 14, Siemens Industry spokesman Michael Krampe said in an e-mail message Friday. “The company immediately assembled a team of experts to evaluate the situation. Siemens is taking all precautions to alert its customers to the potential risks of this virus,” he said.

Security experts believe the virus appears to be the kind of threat they have worried about for years — malicious software designed to infiltrate the systems used to run factories and parts of the critical infrastructure.

Some have worried that this type of virus could be used to take control of those systems, to disrupt operations or trigger a major accident, but

Read the rest

Read More...

Malware exploiting x86 machine code redundancy

Every AV product on the market in these days is furnished with an emulator which provides a safe sandbox for running executables files, before they get loaded and executed in the proper environment. By definition an emulator will never be exactly like ‘the real thing’, and malware authors continually try to exploit this fact in order to evade detection.

In that sense x86 machine code is not helpful for us, since it allows certain assembly instructions to be encoded in different ways. A nice list of some of these tricks can be seen here .

While analyzing in IDA the dropper component of a pretty famous rootkit, it was quite obvious that something weird was going on.

Courtesy of the square bracket at the end of the mov disassembly listing I could notice that
the SIB byte ( 0

Read More...

The H Week – openSUSE 11.3, OpenSolaris Board threats and Linux 2.6.35′s file systems



The H Week Logo


In the last week, the final version of openSUSE 11.3 and Scala 2.8.0 were released and the OpenSolaris Governing Board threatened to dissolve. The H published a new edition of the Kernel Log on what’s coming in Linux 2.6.35, Google confirmed that the Android Market now has 70,000 apps and Microsoft released a beta for Service Pack 1 for Windows 7 aimed at IT professionals.

Featured

This week, The H published another edition of the Kernel Log on what’s coming in Linux 2.6.35, where Thorsten Leemhuis took an in depth look at file systems and storage.

Open Source

The openSUSE Project released version 11.3 of their popular Linux distribution, the OpenSolaris Governing Board (OGB)

Read the rest

Read More...

The five stages of Facebook grief

Computerworld - Facebook has a huge problem. No, it’s not privacy, security, application spam or even horrible P.R. from the upcoming movie, “The Social Network.” These are short-term annoyances for the company, but not existential threats.

Here’s the real problem: Facebook‘s social network can’t mirror the actual social networks, or social groups, that people have. Because of that, users are beginning to notice a curious effect: The more you use Facebook, the less usable it becomes.

It turns out that our feelings about Facebook aren’t static. They’re evolving in a way that will eventually lead many of us to quit and find something else — or at least minimize use.

Facebook is structured on the false assumption that you have one social network. But nobody has one social group.

A nine-year-old has at least two — parents and peers.

Read the rest

Read More...