Is Twitter Home To Malware?

Security outfit Trusteer has recently identified an active configuration of TorRAT targeting Twitter users. The malware launches a Man-in-the-Browser (MitB) attack through the browser of infected PCs, gaining access to the victim’s Twitter account to create malicious tweets.

Dana Tamir, Enterprise Security Director for Trusteer the malware, which has been used as a financial malware to gain access to user credentials and target their financial transactions, now has a new goal: to spread malware using the online social networking service. At this time the attack is targeting the Dutch market. But since Twitter is used by millions of users around the world, this type of attack can be used to target any market and any industry.

The attack is carried out by injecting Javascript code into the victim’s Twitter account page. The malware collects the user’s authentication token, which enables it to make authorized calls to Twitter’s APIs, and then posts new, malicious tweets on behalf of the victim.

Tamir said that the attack is particularly difficult to defend against because it uses a new sophisticated approach to spear-phishing. Twitter users follow accounts that they trust. Because the malware creates malicious tweets and sends them through a compromised account of a trusted person or organization being followed, the tweets seem to be genuine. The fact that the tweets include shortened URLs is not concerning: Twitter limits the number of characters in a message, so followers expect to get interesting news bits in the form of a short text message followed by a shortened URL. However, a shortened URL can be used to disguises the underlying URL address, so that followers have no way of knowing if the link is suspicious.

Source

Is Verizon Interested In Clearwire?

Verizon Wireless reportedly has offered $1 billion to $1.5 billion to acquire some of Clearwire’s spectrum leases, possibly complicating Sprint Nextel’s attempt to buy out the company in conjunction with its acquisition by Softbank.

Clearwire is struggling financially but owns broad swaths of spectrum, the lifeblood of wireless networks. The April 8 bid from “Party J,” which Clearwire disclosed in a Securities and Exchange Commission filing on Friday, is the latest in a series of offers for its spectrum licenses. Unnamed people familiar with the matter identified “Party J” as Verizon Wireless, according to a report in The Wall Street Journal.

Clearwire is a key part of a complicated set of possible transactions that could make a much stronger competitor out of Sprint, the country’s third-largest mobile operator. Sprint already owns roughly half of Clearwire and is bidding about $2.2 billion to buy the rest of its stock. That deal depends on Softbank’s planned $20.1 billion offer for 70% of Sprint, which is still undergoing regulatory review.

Clearwire holds 150MHz of spectrum or more in most major markets of the U.S. Verizon would buy only a portion of that spectrum. “Party J offered to acquire Clearwire spectrum leases generally located in large markets,” Clearwire said in the Friday filing, a proxy statement to shareholders on the Sprint buyout bid. The proposed gross price of $1 billion to $1.5 billion would be reduced by what Clearwire pays for the leases, which could be substantial, according to Clearwire’s filing. The company said it would discuss the offer with “Party J” and Sprint.

Source

EPIC Wants Biometric Data From The FBI

The Electronic Privacy Information Center (EPIC) has pressed the US Federal Bureau of Investigation (FBI) for access to its database of US citizens’ biometric data.

EPIC already tried to get access twice last September, and now it is trying again. It said that it has sent repeated freedom of information act requests regarding the database, and that the FBI has failed to respond. Now it has filed a lawsuit for access (PDF).

It warned that the Next Generation Identification system (NGI) is a massive database that “when completed, [will] be the largest biometric database in the world”.

The NGI will use CCTV systems and facial recognition, and it includes DNA profiles, iris scans, palm prints, voice identification profiles, photographs, and other “identifying information”.

The FBI has an information page about the NGI, and there it said that photographs of tattoos are also included and that the system is designed to speed up suspect detection and response times.

“The NGI system will offer state-of-the-art biometric identification services and provide a flexible framework of core capabilities that will serve as a platform for multimodal functionality,” it said.

“The NGI Program Office mission is to reduce terrorist and criminal activities by improving and expanding biometric identification and criminal history information services through research, evaluation, and implementation of advanced technology”.

In its lawsuit EPIC said that the NGI database will be used for non law enforcement purposes and will be made available to “private entities”.

EPIC said that it has asked the FBI to provide information including “contracts with commercial entities and technical specifications”.

It said that so far it has received no information from the FBI in response to its requests.

Source

Blackberry Plans New Tablet

BlackBerry plans to roll out a larger tablet and two phone-tablet combos, or phablets, over the next year, according to a leaked road map presentation slide.

The three devices will run the BlackBerry 10 mobile operating system, which powers the Z10 smartphone and the upcoming Q10, which features a physical qwerty keyboard, according to the slide, which first appeared over the weekend on Twitter as @BB10Leaks.

BlackBerry officials didn’t comment on the road map. However, in comments to analysts last Thursday, CEO Thorstein Heins said repeatedly that the company will introduce more BlackBerry 10 devices this year, though he didn’t indicate what form factors the products would feature.

The three new devices shown in the slide include a BlackBerry 10 tablet with a widescreen aspect ratio, as well as a “U10″ phone-tablet, which some call a phablet, and an “R10″ phablet with a physical qwerty keyboard.

The slide indicates that the B10 tablet will ship in the third or fourth quarter, while the two phablets will be released later, with the U10 shipping at the end of the year and the R10 in spring of 2014.

There are no specifications on the slide, but the devices appear to be shown roughly in proportion to one another, with the phablets appearing to be wider than the existing Z10 and Q10 smartphones.

BlackBerry already has a 7-in. tablet called the PlayBook that is more square in shape than the widescreen look of the B10 in the slide. Some analysts and bloggers said it’s possible that BlackBerry is developing a competitor to the various 9-to-11-in. tablets already on the market, including many Android tablets, as well as the 9.7-in. iPad.

“BlackBerry wants to be a full-line competitor, particularly for business users, so they have to have a full line of products to compete head-on with Apple and Android, primarily Samsung,” said Jack Gold, an analyst at J.Gold Associates. “I would expect any viable competitor to establish a full line of products touching on all the various preferences of the marketplace, which includes smartphones, phablets and tablets.”

Gold couldn’t confirm whether any of the details in the leaked slide were accurate, but he noted that it doesn’t appear to include the mid-priced smartphones that Heins and other executives have hinted that BlackBerry may launch over the next few quarters.

The PlayBook tablet first went on sale in April 2011, running on what BlackBerry then called the BlackBerry Tablet OS, based on QNX. BlackBerry later said it would merge that tablet operating system into BlackBerry 10. The company also released a major update to the PlayBook tablet operating system in February 2012.

The first release of the PlayBook was criticized for not having native email.

Analysts are not sure that BlackBerry can keep up with production demand for so many new devices that depend on a relatively constrained supply chain for displays and other components. But to boost its global smartphone market share, currently at less than 10%, BlackBerry will need a product lineup with a variety of options.

Source

LinkedIn Beefs Up

LinkedIn has re-tooled its search engine with changes designed to make it easier for members to find information on the business networking site, whose volume of content has increased and grown more diverse in recent years.

Launched in 2003, LinkedIn initially focused on giving professionals a place to feature their resumes and career bios, as well as connect with peers and colleagues, but the site has progressively become more interactive and houses a much larger repository of data beyond individual profiles.

For example, almost 3 million companies have set up corporate pages, more than 1.5 million groups have been created, the site features a jobs section, and individuals and publishers are able to post and share comments and links to articles.

So it’s not surprising for LinkedIn to focus on improving its search engine, which fielded 5.7 billion queries last year.

LinkedIn members have until now had to run separate queries for groups, companies, jobs and other professionals, but that’s changing with the upgraded search engine.

“Now, all you need to do is type what you’re looking for into the search box and you’ll see a comprehensive page of results that pulls content from all across LinkedIn including people, jobs, groups and companies,” Johnathan Podemsky, a LinkedIn product manager, wrote in a blog post on Monday.

Users can still segment results, so as to see only job results, for example.

The LinkedIn search engine is also gaining auto-complete and suggested-searches functionalities to help people fine-tune query terms. In addition, the search engine will log members’ search queries and “learn” from them in order to deliver more relevant results.

It will also be possible for users to save search queries and be alerted about new or changed search results. The advanced search option has also gained more search filters, including location, company and school.

However, the search engine still doesn’t include content from the company’s SlideShare site, which about 60 million monthly visitors use to upload, share, rate and comment on primarily slide presentations, but also documents, videos and webinars.

Also, the search improvements are being applied to the main site, not to the mobile apps, although doing so is something the company is looking into, according to a spokeswoman.

LinkedIn started to roll out the new search features on Monday, and expects to finish delivering them to every member worldwide in the coming weeks.

As of the end of 2012, LinkedIn had topped 200 million registered members located in more than 200 countries.

Source

Facebook Goes DRAM

Facebook has come up with a data cache which runs on flash memory instead of DRAM. Dubbed McDipper it saves money while still delivering higher performance than disk.

The system is a Facebook-built implementation of the popular memcached key-value store the only difference is that runs on flash memory rather than pricier DRAM. Memcached is the open-source key-value store that caches frequently accessed data in memory so applications can access and serve it faster than if it were stored on hard disks.

Facebook runs thousands of memcached servers to power its various applications. The only downside is that it is expensive. McDipper can handle working sets that had very large footprints but moderate to low request rates. It provides up to 20 times the capacity per server and still supports tens of thousands of operations per second.

According to Gigaom, Facebook has deployed McDipper for a handful of these workloads. This has reduced the total number of deployed servers in some pools by as much as 90 per cent while still delivering more than 90 per cent of get responses with sub-millisecond latencies.

Source

LG Buys webOS From HP

Hewlett-Packard has sold some of the rights to its webOS mobile operating system to LG Electronics for use in smart TVs manufactured by the South Korean electronics giant.

LG has agreed to acquire the source code, webOS engineering team and other assets from HP, in a deal announced on Monday. LG will also license HP patents related to webOS and cloud technology, the companies said.

Financial terms of the deal weren’t disclosed.

HP acquired the mobile operating system, along with device maker Palm, in February 2010. HP used the OS on its short-lived TouchPad device, which debuted in mid-2011 then disappeared weeks later.

HP announced a new tablet, the US$169 Slate 7, on Sunday. The Slate 7 will run the Android operating system.

LG will lead the Open webOS and Enyo open-source projects as part of the deal, the company said. HP will retain ownership of all of Palm’s cloud computing assets, including source code, talent, infrastructure and contracts.

HP said it will also continue to support Palm users.

LG will use the technology to expand the Web capabilities of its smart TVs, said Sam Chang, LG vice president and general manager of innovation and Smart TV, in an interview.

LG bought the webOS assets in part for the engineering team, which includes user experience engineers, he said. The webOS engineers who remained at HP — the companies aren’t saying how many there are — are to join LG’s Silicon Valley labs.

Source…

Microsoft Raises Office Price

Microsoft has quietly increased prices of Office for the Mac as much as 17% and stopped selling multi-license packages of the application suite.

The move puts Office for Mac 2011 on the same pricing schedule as the new Office 2013 for Windows. The price increases and the disappearance of the multi-license bundles also makes Microsoft’s Office 365, a software-by-subscription deal the company has aggressively pushed, more competitive with traditional “perpetual” licenses.

It’s not clear when Microsoft raised prices. The oldest search engine cache Computerworld found with the new prices was Feb. 2, so the company boosted them before then, likely on Jan. 29, the day it launched Office 2013 and Office 365 Home Premium. Microsoft did not mention the changes to Office for Mac in its press releases that day, or otherwise publicize the move on its Mac-specific website.

The single-license Office for Mac Home & Student now costs $140, a 17% increase from the previous price of $120. Office for Mac Home & Business, an edition that adds the Outlook email client to Home & Student’s Excel, PowerPoint and Word, runs $220, or 10% higher than the older $200 price.

The new prices are identical to those of Office 2013 for Windows, as are the percentage increases.

Buyers can still find Office for Mac 2011 at the older, lower prices, however. Although Microsoft has boosted prices on its online store — as has Apple’s e-store, which also sells the suite — other retailers have not yet joined them.

Source

LinkedIn DropS BWP API

LinkedIn has shut off its API access to “Bang With Professionals,” a Web service that was intended to facilitate more, say, intimate connections among users of the business-oriented social networking site.

The service was designed to allow LinkedIn users to anonymously search for people in their LinkedIn network who would be interested in meeting up for casual sex.

“We all had a good laugh,” the founders of Bang With Professionals said on last Friday on the website, less than a month after its launch. “We all knew it was a matter of time before our API key was revoked.”

LinkedIn said it shut off API (application programming interface) access for the free site, which was intended to work on all desktops and mobile devices, because it violated the social network’s terms of use in a manner that was “inconsistent with the goals of our developer program.”

Among other things, API access isn’t allowed for any application that contains or displays adult content.

Data about the site’s 6,000 subscribers is safe and all their user IDs have been deleted, the founders said. The only thing that remains now is the site’slanding page.

The origins of Bang With Professionals are not unique in the fast-paced social networking landscape. The site was built “by two guys in three days,” the landing page says. The total launch cost was US$57: $40 for stock images, $12 for the domain name and $5 for an account on the server CloudFlare.

The Twitter handle for the site has since been deactivated, but at press time, the Bang With Professionals blog on Tumblr was still accessible.

Source

HP Looks Beyond Windows

Hewlett-Packard has announced the availability of its latest Pavilion laptop with Google’s Chrome OS as the PC maker attempts to improve laptop sales by offering an alternative to the Windows OS.

The Pavilion 14 Chromebook has a 14-inch screen and runs on a dual-core Intel processor. The laptop is roughly 21 millimeters thick, and weighs 1.8 kilograms. It offers just over four hours of battery life, said David Conrad, director for product management at HP’s consumer products group.

The laptop is expected to ship on Monday in the U.S. starting at $329.99. The company did not immediately provide worldwide availability information.

HP wanted to widen its product offerings and the new Chromebook is targeted at those who do most of their computing on the Web, Conrad said.

“It’s really about choice. We have a very wide offering,” Conrad said. “We think the time is right for an additional choice for people to have a gateway to their Google digital lifestyle.”

The laptop has only 16GB of solid-state drive storage, but will offer 100GB of free Google Drive storage for two years.

The Chromebook has the same design as HP’s other PC offerings, which mostly run on Windows and have standard-capacity hard drives. But, with a lot of data moving to the cloud, the Chromebook provides a different usage model.

“We see this as another device to be used around the house. It’s easily managed,” Conrad said.

Source…

« Previous Page — Next Page »