Search the Community

Insecure sites relegated to Firefox Stone Age Insecure websites will be barred from using new hardware features and could have existing tools revoked, if Mozilla goes ahead with a push towards HTTPS. Webmasters that don't turn on HTTPS could be excluded from the new features list under a Mozilla initiative designed to rid the net of careless clear text gaffes, sending a "message" to developers that their web properties need to be secured, regardless of content served. Precisely which features could be held back are subject to debate, Mozilla security chief Richard Barnes says. "For example, one definition of 'new' [features] could be 'features that cannot be polyfilled'," Barnes says in a post. "That would allow things like CSS and other rendering features to still be used by insecure websites, since the page can draw effects on its own but it would still restrict qualitatively new features, such as access to new hardware capabilities. "Removing features from the non-secure web will likely cause some sites to break so we will have to monitor the degree of breakage and balance it with the security benefit." Mozilla, whose Firefox is used by a quarter of net surfers, says [PDF] existing features may be revoked but not before developers receive prior notice. The group has not yet set a date for when the "feature ban" will come into effect, but will submit proposals to the W3C WebAppSec Working Group 'soon'. It may begin with a softer slap for insecure sites - for example, by limiting the abilities of features rather than an outright block. Barnes says sites some HTTP content will be okay thanks to security features like HSTS. "It should be noted that this plan still allows for usage of the HTTP URI scheme in legacy content. With HSTS and the upgrade-insecure-requests CSP attribute, the HTTP scheme can be automatically translated to HTTPS by the browser, and thus run securely." Source

Security researcher has discovered some new features in the most dangerous Vawtrak, aka Neverquest, malware that allow it to send and receive data through encrypted favicons distributed over the secured Tor network. The researcher, Jakub Kroustek from AVG anti-virus firm, has provided an in-depth analysis (PDF) on the new and complex set of features of the malware which is considered to be one of the most dangerous threats in existence. Vawtrak is a sophisticated piece of malware in terms of supported features. It is capable of stealing financial information and executing transactions from the compromised computer remotely without leaving traces. The features include videos and screenshots capturing and launching man-in-the-middle attacks. HOW VAWTRAK SPREADS ? AVG anti-virus firm is warning users that it has discovered an ongoing campaign delivering Vawtrak to gain access to bank accounts visited by the victim and using the infamous Pony module in order to steal a wide range of victims’ login credentials. The Vawtrak Banking Trojan spreads by using one of the three ways: Drive-by download – spam email attachments or links to compromised sites Malware downloader – like Zemot or Chaintor Exploit kit – like as Angler Exploit Kit Mai multe aici: Dangerous 'Vawtrak Banking Trojan' Harvesting Passwords Worldwide - Hacker News Daca cineva detine sample rog pm.

Microsoft OneNote needs no introduction — it is feature-filled and highly coveted digital notetaking app by Microsoft that works on and syncs with all your devices: Windows, Mac, iPhone, iPad, Android, online (via any modern web browser), and Windows Phone. Previously, Microsoft OneNote was available for purchase as a standalone program. Then it was bundled with Microsoft Office. Later, OneNote was made a freemium app; some features available for free while others you had to pay for. Now, however, all features of Microsoft OneNote are available for free — forever, for everyone, and on all platforms. Get it now! Link: Free Microsoft OneNote (100% discount)

AVG Internet Security 2015 provides you with protection against viruses, malware, spam, scams, phishing, and more. Plus, it has additional features such as a firewall, internet accelerator, privacy protector, and more Link: Free AVG Internet Security 2015 (100% discount)

Can somebody tell me what's the difference between these switches? Thanks. The big difference between them is the former is '-L' while the latter is '-S'. -L means LAN Base while -S means IP Base. More product features below: WS-C3650-48FS-L Overview: PoE Switch 48 * 10/100/1000 POE+ Ethernet ports with 4 * 1G SFP uplinks Layer 2 switching with limited static routing features LAN Base IOS image with upgrade option to IP service (L-C3650-48-L-E) or IP base (L-C3650-48-L-S) Up to 9 members stacking and up to 160Gbps of stack throughput Dual redundant power supplies and fans redundant modular WS-C3650-48FS-S Overview: PoE Switch 48 * 10/100/1000 Ethernet POE+ ports with fixed 4 * 1G SFP uplinks IP base image with update option to IP service (L-C3650-48-S-E) Layer 3 routing features Up to 9 members stacking and up to 160Gbps of stack throughput Up to 40G wireless bandwidth per switch, up to 25 APs and 1000 Wireless clients for each switching entity