|
|
A Ben-Gurion University of the Negev (BGU) researcher has developed a new technique that could provide virtually 100 percent protection against cyberattacks launched through internet videos or images, which are a growing threat. You mean my extensive collection of cat videos could be a problem?
|
|
|
|
|
Kent Sharkey wrote: You mean my extensive collection of cat videos could be a problem?
No, they're just an indicator of a problem...
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Litter-ly yes. They can claws all sorts of problems - and that only scratches the surface.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
Phys.org wrote: "Hackers like videos and pictures because they bypass the regular data transfer systems of highly secure systems, and there is significant space in which to implant malicious code."
..might be due to the fact that an image is never executed.
..and then he goes on about steganography, where these malicious codes are hidden in an image. Which is only dangerous if there is an application on your computer that can actually decode that information and execute it.
Kent Sharkey wrote: Preliminary experimental results show that a method based on a combination of Coucou Project techniques results in virtually 100 percent protection against cyberattacks,
Read more at: any other place outside Phys.org
Because all cyberattacks are done using images and video's? Come on, this is someone looking for money trying to sell a solution to a non-problem.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
|
|
The first one is a bug in the browser.
Technet wrote: An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. [...] In all cases, however, an attacker would have no way to force users to visit these Web sites. Instead, an attacker would have to persuade users to visit the Web site, typically by getting them to click a link in an e-mail or Instant Messenger request that takes users to the attacker's Web site.
Viewing a JPG using MS Paint does not execute code.
So, these two cases are 100% of all cyberattacks? 
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
modified 14-Mar-17 11:31am.
|
|
|
|
|
Preview of images in outlook?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
100% of all cyberattacks?
With those kind of claims, I'd be selling miracle-water 
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
|
|
|
|
|
If you don't mind... I prefer miracle whiskey 
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Eddy Vluggen wrote: So, these two cases are 100% of all cyberattacks?
No.
I'm not trying to defend the cyber-security snake-oil salesman; I'm just pointing out that images can (sometimes) be used to execute code, if the conditions are right.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Richard Deeming wrote: I'm not trying to defend the cyber-security snake-oil salesman; I'm just pointing out that images can (sometimes) be used to execute code, if the conditions are right.
Yes, if the conditions are right. And in that case any stream of bytes is suspect, not just "images".
Bastard Programmer from Hell
If you can't read my code, try converting it here[^]
|
|
|
|
|
I thought everyone renamed entensions on downloaded files to '.exe' and looked for Easter eggs!
Sudden Sun Death Syndrome (SSDS) is a very real concern which we should be raising awareness of. 156 billion suns die every year before they're just 1 billion years old.
While the military are doing their part, it simply isn't enough to make the amount of nukes needed to save those poor stars. - TWI2T3D (Reddit)
|
|
|
|
|
IBM’s X-Force Threat Intelligence group said today that one of the key findings from its forthcoming Threat Intelligence Index for 2017 is that spam volume grew dramatically throughout 2016, bringing with its host of new malicious attachments harboring banking Trojans and ransomware. And no, present company is not included
|
|
|
|
|
Being someone who follows the apparently radical and unheard-of security method of not opening spam, this will make a huge difference to my lifestyle.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
I run an Exchange environment here. This article is spot on. I started seeing my logs FULL of these new TLD's. And they all followed a common pattern. I am receiving 3-4 spams a seconds from .US for example, every one comes from a different IP address, and they are obviously the exact same source. I built my own tarpit servers to deal with them, but now, I have been using Fail2ban on my edge firewalls to blackhole the entire /24 subnet the second I get a spam from a .US domain.
In the past year, 100% of traffic from the new TLD's has been spam. Millions and millions of spams. Not one single message was legit. So now we blackhole all the TLD's besides the usual ones.
Spammers are a plague. They must have some kind of depraved childhood and horrific parenting. I just don't get it. We need to round them up, along with the telemarketers, take them 15 miles out to the ocean, and sink them.
|
|
|
|
|
Basildane wrote: We need to round them up, along with the telemarketers, take them 15 miles out to the ocean, and sink them.
You've just created a new spam category - whatever sinks your boat.
If you have an important point to make, don't try to be subtle or clever. Use a pile driver. Hit the point once. Then come back and hit it again. Then hit it a third time - a tremendous whack.
--Winston Churchill
|
|
|
|
|
Is anyone here *not* surprised about how following the incredible success of .info and .biz a decade ago the new TLDs all turned into dumpsterfires?
I've seen exactly 1 useful site in them ever, a gaming one that went from name.xyz to name.trade (with the latter being a good description of what it does).
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
A large part of the blame is on the domain registrars who are "dumping" these domains for 99 cents. Namecheap.com, are you listening, bastards?
This .US attacker has been flooding my servers for 2 years, relentlessly. Registering new domains on Namecheap.com every 2 hours. It's obviously automated. The new domains show up like clockwork and are random words. As fast as he makes up new ones, I blackhole them. In fact, they are blackholed in 600ms. But they keep coming. I just looked at the logs and they are STILL coming right now. It's been 2 years now, could be longer, but that's as long as my logs go back.
|
|
|
|
|
Scientists have invented a new technology entitled “lip motion password” (lip password) which utilizes a person’s lip motions to create a password. Fffffffffffffffascinating
|
|
|
|
|
Nice... as far as you don't get punched in your mouth or an lip herpes or things like that.
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
High-paid positions are now available in the NSA for developers who are hearing impaired.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Even higher paid positions for hackers who can lip read.
|
|
|
|
|
No way I'll kiss my monitor . . . not even to log onto CP.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
)
