July 2007

You are currently browsing the articles from IT Security Top Headlines written in the month of July 2007.

Vidoop visual grid as a replacement for password authentication

Passwords are entered according to image categories you choose. The images rotate, hence passwords will change all the time.

source

Written by pinolobu on July 16th, 2007 with no comments.
Read more articles on news.

Subsidised liquid fuel detected via nanotags

The Borneo Post reported on 31 May 2007 that the Sarawak State goverment hopes to save RM750 million this year as more companies in illegal possession of subsidised diesel are caught via nanotag detection system.

But what is it and how does it work?

Developed in the US, a chemical marker that is added to diesel consignments before leaving oil terminals. Every 8,000 litres of subsidised diesel is doped with a 25ml vial of the chemical. Doped diesel cannot be differentiated by visible means. Its low concentration level is akin to one second in 15 years. No amount of mixing subsidised diesel with those that are not ‘tagged’ will affect the results.

To detect the presence of nanotags in a diesel sample, another chemical is used. It is drawn into a syringe containing the diesel sample - the presence of nanotags would turn the diesel sample either white or pink in colour.

Normal diesel stored in tanks, which have previously contained nanotag doped diesel, would not be tested positive, because the sensitivity of the chemical has been adjusted to ensure that containers used to store both ‘tagged’ and ‘non-tagged’ diesel will not give contradicting results.

It seems to be very effective. According to the newsreport, since its implementation in Sept 2006, more than 60 per cent of industrial sites have tested positive for illegal possession of subsidised diesel. That’s more than half!
As an indication of the size of the matter: in Malaysia there are 4,000 approved fuel distributors, and there are a total of 10,000 factories.

Apparently nanotag techology are also applied in this way in India, Brazil and of course the US.

source

Written by pinolobu on July 15th, 2007 with no comments.
Read more articles on case studies.

Google acquires Greenborder: next move towards Google OS?

Google acquired security company Greenborder for an undisclosed amount on 11th May 2007. Probably Google antivirus is on its way and could make make its entrance on the next Google pack. Some people say it’s another chess move on the long journey towards knocking Microsoft Windows off the OS pedestal.

source 

Written by pinolobu on July 4th, 2007 with no comments.
Read more articles on news.

YouTube used to spread virus

No, you won’t get viruses simply by viewing videos via youtube’s website, but rather the person who uploaded the video could use the video page to trick you into going to another website and infecting yourself. news.com reported on 2nd July 2007 that a Grand Theft Auto Hood Life mod video is being used to do this.

Chris Boyd (Director of Malware Research at FaceTime Security Labs) said:

- the graphics in the mod are of low quality: the images used in the video are at least 20 years old and definitely not in the same leagues as graphics in the game, but amazingly more than 50 people have downloaded it.

- once the file is downloaded and installed, your PC will hang (freeze). Upon rebooting the PC, the virus will be activated.

Apparently, this is the 2nd time youtube has been used to distribute malware. Last month, the Zlob adware trojan horse was distributed via fake video links. It appears as porn adware, then installs to try find and steal data. It was reported that the only way to deal with the risk to wait for YouTube’s tech support to delete the links, which could take hours, and hours means plenty of time for damage to be done.

source

Written by pinolobu on July 4th, 2007 with no comments.
Read more articles on news.