Tech Review: Friday, August 5, 2011

http://www.shopping.hp.com/webapp/shopping/store_access.do?template_type=storefronts&landing=rts_tablet&category=rts_tablet&jumpid=em_r329_hhos_5944&aoid=105495&email=null

HP Touch Pad with Web OS $450

WOOT has it for $380

• 16 GB Storage
• 1.2 GHz Qualcomm Snapdragon dual-core AP!8060 processor
• 9.7" backlit 
• 1.3MP front-facing camera
• Wi-Fi
• Bluetooth
• Wireless charging
• WebOS
• Woot price for $380
• https://mail.google.com/mail/?shva=1#inbox/1319963c1b2ff4e4

http://www.shopping.hp.com/webapp/shopping/computer_can_series.do?storeName=computer_store&category=notebooks&a1=Category&v1=Mini&series_name=mini110_series&jumpid=in_R329_prodexp/hhoslp/psg/notebooks/Mini/mini110_series

HP Mini 110 $280 (Upgrade $320)

• Intel Atom N455 (upgrade to dual core ATOM N570)
• Graphic Media Accelerator 3150
• 1 GB Mem (upgrade to 2 GB)
• 10.1 "
• 250 GB drive
• 2.52 lbs
• Ethernet
• Webcam
• Integrated Wireless
• Bluetooth optional
• Win7 Starter 32-bit
• 1024x600

http://www.shopping.hp.com/webapp/shopping/store_access.do?template_type=series_detail&category=notebooks&series_name=dv6t_series&jumpid=in_R329_prodexp/hhoslp/psg/notebooks/promo_tile/2/lp_promo_tile2_HP_Pavilion_dv6t___731

PH Pavilion dv6t Series $600 ($1,528)

• (Win 7 Pro-64 bit)
• (Recovery DVD)
• (Dual Core Intel i5-2410M (2.3 Gz)
• (2GB Radeon 6770M GDDR5)
• (16GB Memory)

http://gcn.com/articles/2011/08/04/black-hat-apt-threat-china.aspx?s=gcndaily_050811

Flaw in advanced threats points to Chinese networks

• IP address of command and control servers in China
• Believed used in breach of RSA Security in March
• Advance Persistent Threats (APTs)
• Quietly infect systems
• remain undetected
• high-profile breaches

http://gcn.com/articles/2011/08/04/black-hat-android-apps-mobile-security.aspx?s=gcndaily_050811

Android app test demonstrates dangers for mobile devices

• 10,000 apps evaluated
• not necessarily malicious (?)
• leaky and noisy (?)
• 30% access unique equipment or subscriber identity number
• Report to server something in clear (can be read by anyone)
• definitely a privacy and security problems - Neil Daswani
• tries to get root access on device
• Short Message Service activity
• limited to a single message sent to the number of the phone installed on

http://gcn.com/articles/2011/08/03/android-hacks-rise.aspx

3 of 10 Android users now face malware attach

• trojan steal account passwords and SSN by recording phone coversations
• doubling the risk of 6 months ago - (Lookout)
• 80 to 400 number of apps in 6 months - (Lookout)
• 0.5 to 1 million user affected
• 48% malware
• repackaging
• malicious code added to legitimate app
• upgrade attach
• pub clean app, wait offer infected update
• 52% sypware
• Users transmitting sensitive data without proper encryption

http://gcn.com/articles/2011/08/04/black-hat-windows-kernel-vulnerabilities.aspx?s=gcndaily_050811

Window kernel a fertile field for vulnerabilities

• Win32K.sys from 1997 remains a fundamental component of Win architecture
• no proper authentication for changes in memory after for user-mode call backs
• 40 patches
• count much higher
• Tarjei Mandt - Norman ASA
• fundamental problem buried in an old element of he Win kernal

https://market.android.com/details?id=com.skype.raider&hl=en

Skype now does video

• 3.6 stars
• Skype is not known for good software
• who else has similar apps?
• Google?

http://www.zdnet.com/photos/gallery-photos-suggest-flowing-water-on-mars/6272308?tag=nl.e589

Life On Mars

• Melting salt water turns red

http://gcn.com/articles/2011/08/02/stuxnet-type-attack-prisons.aspx?s=gcndaily_040811

Stuxnet-style could attack prisons

• prisons use PLC
• doors
• gates
• video
• alarms
• intercoms