Thursday, August 11, 2011

Tech Review: Wednesday, August 10, 2011

Maylong M-250 7" $100
Maylong M-250 Tablet PC

http://www.maylonggroup.com/M-250_MID.htm

  • 7 "
  • Resistive
  • Stylus
  • Android 2.2

Android Tablets . Net
Android Tablet Forum

Nice site on Android Tablets









Friday, August 05, 2011

Tech Review: Friday, August 5, 2011

http://www.shopping.hp.com/webapp/shopping/store_access.do?template_type=storefronts&landing=rts_tablet&category=rts_tablet&jumpid=em_r329_hhos_5944&aoid=105495&email=null

HP Touch Pad with Web OS $450
WOOT has it for $380

HP TouchPad Wi-Fi 16GB



HP Mini 110 $280 (Upgrade $320)

Product image


  • Intel Atom N455 (upgrade to dual core ATOM N570)
  • Graphic Media Accelerator 3150
  • 1 GB Mem (upgrade to 2 GB)
  • 10.1 "
  • 250 GB drive
  • 2.52 lbs
  • Ethernet
  • Webcam
  • Integrated Wireless
  • Bluetooth optional
  • Win7 Starter 32-bit
  • 1024x600


PH Pavilion dv6t Series $600 ($1,528)

Product image


  • (Win 7 Pro-64 bit)
  • (Recovery DVD)
  • (Dual Core Intel i5-2410M (2.3 Gz)
  • (2GB Radeon 6770M GDDR5)
  • (16GB Memory)

Flaw in advanced threats points to Chinese networks

  • IP address of command and control servers in China
  • Believed used in breach of RSA Security in March
  • Advance Persistent Threats (APTs)
    • Quietly infect systems
    • remain undetected
    • high-profile breaches

Android app test demonstrates dangers for mobile devices


  • 10,000 apps evaluated
  • not necessarily malicious (?)
  • leaky and noisy (?)
  • 30% access unique equipment or subscriber identity number
  • Report to server something in clear (can be read by anyone)
  • definitely a privacy and security problems - Neil Daswani
  • tries to get root access on device
  • Short Message Service activity
    • limited to a single message sent to the number of the phone installed on

3 of 10 Android users now face malware attach


  • trojan steal account passwords and SSN by recording phone coversations
  • doubling the risk of 6 months ago - (Lookout)
  • 80 to 400 number of apps in 6 months - (Lookout)
  • 0.5 to 1 million user affected
  • 48% malware
    • repackaging
      • malicious code added to legitimate app
    • upgrade attach
      • pub clean app, wait offer infected update
  • 52% sypware
  • Users transmitting sensitive data without proper encryption

Window kernel a fertile field for vulnerabilities



  • Win32K.sys from 1997 remains a fundamental component of Win architecture
  • no proper authentication for changes in memory after for user-mode call backs
  • 40 patches
  • count much higher
  • Tarjei Mandt - Norman ASA
  • fundamental problem buried in an old element of he Win kernal


Skype now does video

Skype


  • 3.6 stars
  • Skype is not known for good software
  • who else has similar apps?
    • Google?


Life On Mars

newtonflow02.jpg



Stuxnet-style could attack prisons



  • prisons use PLC
    • doors
    • gates
    • video
    • alarms
    • intercoms








Thursday, August 04, 2011

Tech Review: Thursday, August 4, 2011

Web Operating System (WOS)




Web Operating System (WOS)

A term for describing internet scale distributed computing.


Liz Cornwell

The above artical is from 2009, but it is better than a poke in the eye.

Top 5 WOSs.

  1. icloud
  2. Glide OS 3.0
  3. G.HO.ST
  4. Jolicloud
  5. EYEOS

How The New 'Protecting Children' Bill Puts You At Risk







  • nothing to do with pornography
  • opposed by over 30 civil liberties and consumer advocacy organizations
  • forces ISPs to retain 
    • customer names, 
    • address, 
    • phone numbers, 
    • credit card numbers, 
    • bank account numbers and 
    • dynamic IP address for
  • 1.5 years
  • ISP snooping bill
  • fails to note that this would be an effective tool against child porno, which is a favorite habit of most pedophiles.


  • Android Trojan
  • records conversations

  • Where was the application?  
    • In the Android Market? 
    • In the wild? 
  • Why on earth would someone want to record a bunch of conversations?  
    • Doesn't make sense. 
      • Is this something malicious, 
      • a developer mistake, or 
      • marketing gone awry?
  • Author says "Best defense ... is to pay attention to the permissions..."   

Forrester: U.S. debt ceiling showdown will affect IT spending


  • 2011 IT forecast growth drops from 7.4 to 5.5
  • 2012 IT forecast growth drops from 10.4 to ?

CNET 100 Android apps: Winners, in pictures


  1. Google Maps
  2. Dolphin Browser HD
  3. Lookout Mobile Security
  4. SoundHound
  5. Read It Later
  6. Google Voice
  7. Google
How do I see the 100?

How Digital Detectives Deciphered Stuxnet, the Most Menacing Malware in History




  • Iran
  • 800 to ?
    • 1000 and 2000 in a few months
  • most complex malware ever written
  • first real cyberweapon
  • zero-day exploit
  • looks like US/Israel

Ematic 2GB MP3 Video Player with 1.5" Screen



  • $25
  • 2 GB
  • FM tuner/recorder
  • 1.5 " display
  • voice recorder
  • Plays
    • MP4
    • AVI
    • MP3
    • JPEG
  • E-book







Tuesday, August 02, 2011

Tech Review: Tuesday, August 2, 2011


Which cities have the fastest broadband?


18 cities in the US ranked in the top 100 of the world.

Riverside - 7.8 megabits/sec
Rhode Island - 894 kilobits/sec 
Idaho - 318 kilobits/sec (slowest)

Japan - 13.2 megabits/sec


Lenovo IdeaPad K1 tablet: First impressions

02 Home screen.JPG

  • Android Honeycomb 3.1 (3.2 is current)
  • 10" screen
  • Nvidia Tegra 2 dual-core processor
  • two cameras
  • doesn't wake on press of physical home button
  • 1.65 lbs

Where did all the Mac malware go?



The top five Linux desktop vendors



China's young designers create products that merge tradition and innovation


  • American born Aric Chen is running at state sponsored magazine to highlight Chinese architecturegraphics, and products.
Aric Chen, creative director, Beijing Design Week



Skype + Facebook = critical security vulnerability


  • Really a security hole in the newest release of MS Skype.


Software Protection Initiative

  • From DOD
  • Lightweight Portable Security (LPS)
  • Any intel-base Mac or PC
  • Accredited for LPS-Remote Access
  • Mark Clute has played with it

Encryption Wizard

  • Encryption Wizard
  • Run on anything that runs Java v1.5
  • DOD
  • Mark Clute recommended it

ARCHOS 70 7" Touchscreen Tablet PC: $229


  • Capacitive multi touch
  • Android 2.2
  • Webcam

Home




  • compromise a legit web site
    • Usually Wordpress
  • Introduces PHS scripts in sites' source code
  •  Scripts monitor Google trend queries
  • Create artificial web pages containing content
  • Detects Google crawlers and deliver content
  • Pics end up in image search database
  • Exploit happens when user clicks thumbnail
  • Google use iFrame
  • PHP script checks if user came from Google results page
  • redirect to another compromised site.

Netflix