Spam that social media….

We all know, and expect, to see ads when we hit the movies for that latest blockbuster – the “pre-show” as it’s called, is of course advertisement and you know, and again expect, it to be around 15-20 minutes long – it’s a long running tradition and we’re generally ok with it. does it stop us from hitting the movies on a friday/saturday evening with your partner? no, most likely it wont.

We also know that web sites, blogs, forums et al contain adverts – in most cases they’re non-intrusive – in some they actually block you from entering the site proper before you either have to find a “skip this crap” link or watch it all to the end – does it stop us from visiting our favourite web sites/blogs? no, most likely it wont.

Then there’s of course the emails – we know, and still expect, to get hit with ads at some stage – either solicited or unsolicited. Some more than others. does it stop us from using email? no, most likely it wont.

Now, since this phenomenon took hold – well, say sometime last week – social media…that’s your MySpace, Facebook, LinkedIn, Twitter et al – ads are becoming more and more frequent – we still know, and still expect, there to be ads. does it stop us from using it? no, most likely it wont. However, the “owners” of these social media fads needs to spend an enormous amount of time/resources in battling spammers.

Yeps, we all have a love/hate relationship with them – in some cases the spammers are becoming more and more ingenious and are using phishing techniques to try to get hold of your account details, contact lists, friends lists et al – undermining the general “trust” your nearest contacts has in you – and i say you because more and more often, you can identify yourself with both your RL identity and your online identity. Hell, i have gaming friends that, even though knowing my real name, still calls me by my gamer tag.

So, since the connection between your identities are closely connected in many cases, hijacking your Facebook account is pretty much close to identity fraud.

We know the dangers – it’s nothing new…don’t click on links from people you don’t know/trust (insert caveat here)…don’t open that email attachment from that nice gentleman in Nigeria…those free pills and porn access links probably shouldn’t be investigated further while you wait for that download to finish.

Yet it’s still happening – very, very often at that…sometimes with malicious intent…sometimes to make a statement…but mostly, it’s done with a financial incentive in mind.

Of course, having the most secure password isn’t going to help us out much if we’re silly enough to hand it out to every person/site who asks.

Twitter is seeing a LOT of phishing and spamming going on these days – even direct messages from people you don’t follow (that’s supposedly a prerequisite). the most common one is the “mention” type spam.

Basically a list of followers are scraped using an account on Twitter – and then it just goes through that list and tweet to you and voila, since your Twitter client, in most cases, has the “mention” tweets, you’ll be seeing it.

So, we expect the ads, and in some cases the spam – are we going to stop using social media anytime soon, even knowing the dangers involved both from a “trust” and “identity” perspective?

no, most likely not….

Le PowerPack 3 de Windows Home Server est dispo

En Anglais et en Français… pour la première fois simultanément !!

Pour l’installez…. rien à faire, mais si vous êtes pressé, rendez vous dans la Console, Paramètres, Général, cliquez sur Mettre à jour.

Les nouveautés :

• intégration à Windows 7 : dans les librairies, paramètres de démarrage automatique
• indexation plus performant avec Windows Search 4
• intégration à Media Center : archivage automatique des émissions enregistrées
• amélioration de la console

Les détails sont ici : http://www.microsoft.com/windows/products/winfamily/windowshomeserver/support.mspx

Si vous voulez découvrir Windows Home server, c’est ici : http://toutwindows.com/whs_sommaire.shtml

Bonne mise à jour, la mienne est en cours…

Laurent Gébeau – www.toutwindows.Com

Keep It Simple

We all know that coding is great fun, even code design is fun, but testing and debugging are most certainly not fun. As such, we have to do what we can to lighten that burden. 

One of my underlying principles in coding is in keeping the code well structured, well laid out, and generally easy to follow, so as to make it easier to maintain, easier to debug, and just generally a better experience.

Whilst spending some time on a forum today, I came across this code which had been found elsewhere. My question tgo you is, what is wrong with the following code?

Sub Copy_and_Rename_To_New_Folder()
     ''MUST set reference to Windows Script Host Object Model in the project using this code!
     'This procedure will copy all files in a folder, and insert the last modified date into the file name'
     'it is identical to the other procedure with the exception of the renaming...
     'In this example, the renaming has utilized the files Last Modified date to "tag" the copied file.
     'This is very useful in quickly archiving and storing daily batch files that come through with the same name on
     'a daily basis. Note: All files in current folder will be copied this way unless condition testing applied as in prior example.
    Dim objFSO As New Scripting.FileSystemObject, objFolder As Scripting.folder, PathExists As Boolean
    Dim objFile As Scripting.File, strSourceFolder As String, strDestFolder As String
    Dim x, Counter As Integer, Overwrite As String, strNewFileName As String
    Dim strName As String, strMid As String, strExt As String
    Dim sSavePath3 As String
    Application.ScreenUpdating = False 'turn screenupdating off
    Application.EnableEvents = False 'turn events off
     'Call Show_BrowseDirectory_Dialog ' Allows the Dynmaic selection of Save Path
     'identify path names below:
    strSourceFolder = "C:\Test" 'Source path
     'strDestFolder = "C:\Test\Destination" 'destination path, does not have to exist prior to execution
     ''''''''''NOTE: Path names can be strings built in code, cell references, or user form text box strings''''''
     ''''''''''example: strSourceFolder = Range("A1")
     'below will verify that the specified destination path exists, or it will create it:
    On Error Resume Next
    x = GetAttr(strDestFolder) And 0
    If Err = 0 Then 'if there is no error, continue below
        PathExists = True 'if there is no error, set flag to TRUE
        Overwrite = MsgBox("The folder may contain duplicate files," & vbNewLine & _
        "Do you wish to overwrite existing files with same name?", vbYesNo, "Alert!")
         'message to alert that you may overwrite files of the same name since folder exists
        If Overwrite <> vbYes Then Exit Sub 'if the user clicks YES, then exit the routine..
         'Else: 'if path does NOT exist, do the next steps
         ' PathExists = False 'set flag at false
         ' If PathExists = False Then MkDir (strDestFolder) 'If path does not exist, make a new one
    End If 'end the conditional testing
    On Error Goto ErrHandler
    Set objFSO = CreateObject("Scripting.FileSystemObject") 'creates a new File System Object reference
    Set objFolder = objFSO.GetFolder(strSourceFolder) 'get the folder
    Counter = 0 'set the counter at zero for counting files copied
    If Not objFolder.Files.Count > 0 Then Goto NoFiles 'if no files exist in source folder "Go To" the NoFiles section
    For Each objFile In objFolder.Files 'for every file in the folder...
         'parse the name in three pieces, file name middle and extension.
        strName = Left(objFile.Name, Len(objFile.Name) - 4) 'remove extension and leave name only
         'strMid = Format(objFile.DateLastModified, "_mmm_dd_yy") 'insert and format files date modified into name
         'strMid = Format(Now(),"_mmm_dd_yy") 'sample of formatting the current date into the file name
        strExt = Right(objFile.Name, 4) 'the original file extension
         ' For Valeo Daily
        Dim strDate As String
         'strDate = Right(strName, 8)
         'strNewFileName = Mid(strDate, 3, 2) & "-" & Mid(strDate, 5, 2) & "-" & Mid(strDate, 7, 2) & " elec Valeo " & _
        Left(strName, Len(strName) - 9) & strExt 'build the string file name (can be done below as well)
         ' End Valeo Daily
         'strNewFileName = strName & " TET" & strExt
        strNewFileName = "09 lqd " & strName & " TRS" & strExt
         'objFile.Copy strDestFolder & "\" & strNewFileName 'copy the file with NEW name!
        objFile.Name = strNewFileName '<====this can be used to JUST RENAME, and not copy
         'The below line can be uncommented to MOVE the files AND rename between folders, without copying
         'objFile.Move strDestFolder & "\" & strNewFileName
        
         'End If 'where conditional check, if applicable would be placed.
         ' Uncomment the If...End If Conditional as needed
        Counter = Counter + 1
    Next objFile 'go to the next file
     'MsgBox "All " & Counter & " Files from " & vbCrLf & vbCrLf & strSourceFolder & vbNewLine & vbNewLine & _
    " copied/moved to: " & vbCrLf & vbCrLf & strDestFolder, , "Completed Transfer/Copy!"
     'Message to user confirming completion
    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects
    Exit Sub
NoFiles:
     'Message to alert if Source folder has no files in it to copy
    MsgBox "There Are no files or documents in : " & vbNewLine & vbNewLine & _
    strSourceFolder & vbNewLine & vbNewLine & "Please verify the path!", , "Alert: No Files Found!"
    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects
    Application.ScreenUpdating = True 'turn screenupdating back on
    Application.EnableEvents = True 'turn events back on
    Exit Sub 'exit sub here to avoid subsequent actions
ErrHandler:
     'A general error message
    MsgBox "Error: " & Err.Number & Err.Description & vbCrLf & vbCrLf & vbCrLf & _
    "Please verify that all files in the folder are not currently open," & _
    "and the source directory is available"
    Err.Clear 'clear the error
    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects
    Application.ScreenUpdating = True 'turn screenupdating back on
    Application.EnableEvents = True 'turn events back on
End Sub
Sub FolderExists()
    Dim FSO
    Dim folder As String
    folder = "G:\Marketing\Market Price Guides\1Valeo Power Summaries"
    Set FSO = CreateObject("Scripting.FileSystemObject")
    If FSO.FolderExists(folder) Then
        MsgBox folder & " is a valid folder/path.", vbInformation, "Path Exists"
    Else
        MsgBox folder & " is NOT a valid folder/path. ", vbInformation, " Invalid Path"
    End If
End Sub

That is a rhetorical question as I will tell you what is wrong with it. It is over-commented that is what is wrong with it, grossly over-commented.

Even allowing for the fact that many of the comments were probably added because it was being posted as a response in an Excel forum, they are totally self-defeating to my mind.

 Let’s look at in detail …

Sub Copy_and_Rename_To_New_Folder()
''MUST set reference to Windows Script Host Object Model in the project using this code!
'This procedure will copy all files in a folder, and insert the last modified date into the file name'
'it is identical to the other procedure with the exception of the renaming...
'In this example, the renaming has utilized the files Last Modified date to "tag" the copied file.
'This is very useful in quickly archiving and storing daily batch files that come through with the same name on
'a daily basis. Note: All files in current folder will be copied this way unless condition testing applied as in prior example.

A relatively standard practice, say what it does. But what a lot of words to say it, many of which I feel could have been dispensed with a meaningful procedure name.

 The library reference comment may be the only bit of this I find useful, but even that is relatively obvious from the following variable declarations.

    Application.ScreenUpdating = False 'turn screenupdating off
    Application.EnableEvents = False 'turn events off

The code says it all, no need for any comments here.

     'Call Show_BrowseDirectory_Dialog ' Allows the Dynmaic selection of Save Path
     'identify path names below:

Presumably, this is some old version  code … so remove it.

    strSourceFolder = "C:\Test" 'Source path

The name of the variable tells you all you need to know.

     'strDestFolder = "C:\Test\Destination" 'destination path, does not have to exist prior to execution
     ''''''''''NOTE: Path names can be strings built in code, cell references, or user form text box strings''''''
     ''''''''''example: strSourceFolder = Range("A1")
     'below will verify that the specified destination path exists, or it will create it:

Old code again, but even here what does the comments within say, it explained nothing to me

    On Error Resume Next
    x = GetAttr(strDestFolder) And 0
    If Err = 0 Then 'if there is no error, continue below

This is obvious, , no need for any comments here.

        PathExists = True 'if there is no error, set flag to TRUE

The code is clear, no need for any comments here. The only comment that would help IMO is an explanation of what PathExists is used for, but the name tells you that.

        Overwrite = MsgBox("The folder may contain duplicate files," & vbNewLine & _
        "Do you wish to overwrite existing files with same name?", vbYesNo, "Alert!")
         'message to alert that you may overwrite files of the same name since folder exists

Good idea, add a  comment that essentially repeats the message.

        If Overwrite <> vbYes Then Exit Sub 'if the user clicks YES, then exit the routine..

Totally pointless comment.

         'Else: 'if path does NOT exist, do the next steps
         ' PathExists = False 'set flag at false
         ' If PathExists = False Then MkDir (strDestFolder) 'If path does not exist, make a new one

Old code, but again with obvious comments.

    End If 'end the conditional testing

Totally pointless comment.

    On Error Goto ErrHandler
    Set objFSO = CreateObject("Scripting.FileSystemObject") 'creates a new File System Object reference

The code tells you that.

    Set objFolder = objFSO.GetFolder(strSourceFolder) 'get the folder

The code tells you that.

    Counter = 0 'set the counter at zero for counting files copied

The code tells you that, the only news here it is a files counter, so just say that if anything.

    If Not objFolder.Files.Count > 0 Then Goto NoFiles 'if no files exist in source folder "Go To" the NoFiles section

The code tells you that, res-state what the code says.

    For Each objFile In objFolder.Files 'for every file in the folder...

The code tells you that, basic usage of For.

         'parse the name in three pieces, file name middle and extension.

Some might find this useful, I wouldn’t, the code says it.

        strName = Left(objFile.Name, Len(objFile.Name) - 4) 'remove extension and leave name only

Anyone familiar with filenames should get this, although it would be better to use a technique that allows for variable extension types.

         'strMid = Format(objFile.DateLastModified, "_mmm_dd_yy") 'insert and format files date modified into name
         'strMid = Format(Now(),"_mmm_dd_yy") 'sample of formatting the current date into the file name

Look at that, some of the code has been commented out, rendering a previous comment incorrect.

        strExt = Right(objFile.Name, 4) 'the original file extension

I repeat my earlier comment on this.

         ' For Valeo Daily

I have absolutely no idea what this means, so it only serves to confuse me.

        Dim strDate As String
         'strDate = Right(strName, 8)
         'strNewFileName = Mid(strDate, 3, 2) & "-" & Mid(strDate, 5, 2) & "-" & Mid(strDate, 7, 2) & " elec Valeo " & _
        Left(strName, Len(strName) - 9) & strExt 'build the string file name (can be done below as well)
         ' End Valeo Daily
         'strNewFileName = strName & " TET" & strExt
        strNewFileName = "09 lqd " & strName & " TRS" & strExt

As before, a lot of old code commented out, adding tgo the confusion, reducing the readability.

         'objFile.Copy strDestFolder & "\" & strNewFileName 'copy the file with NEW name!
        objFile.Name = strNewFileName '<====this can be used to JUST RENAME, and not copy
         'The below line can be uncommented to MOVE the files AND rename between folders, without copying
         'objFile.Move strDestFolder & "\" & strNewFileName          
        
         'End If 'where conditional check, if applicable would be placed.
         ' Uncomment the If...End If Conditional as needed

This could be useful comments, but I would assume that any decent coder could work this out if they need to do it. Since when do we add code, commented out, to cater for other situations?

        Counter = Counter + 1

    Next objFile 'go to the next file

Totally unnecessary comment.

     'MsgBox "All " & Counter & " Files from " & vbCrLf & vbCrLf & strSourceFolder & vbNewLine & vbNewLine & _
    " copied/moved to: " & vbCrLf & vbCrLf & strDestFolder, , "Completed Transfer/Copy!"
     'Message to user confirming completion

Old code again, presumably.

    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects

Comment only says what the code says.

    Exit Sub

NoFiles:
     'Message to alert if Source folder has no files in it to copy
    MsgBox "There Are no files or documents in : " & vbNewLine & vbNewLine & _
    strSourceFolder & vbNewLine & vbNewLine & "Please verify the path!", , "Alert: No Files
Found!"

Comment only says what the code says.

    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects

Comment only says what the code says.

    Application.ScreenUpdating = True 'turn screenupdating back on
    Application.EnableEvents = True 'turn events back on
    Exit Sub 'exit sub here to avoid subsequent actions

The code says it all, no need for any comments here.

ErrHandler:
     'A general error messagee
    MsgBox "Error: " & Err.Number & Err.Description & vbCrLf & vbCrLf & vbCrLf & _
    "Please verify that all files in the folder are not currently open," & _
    "and the source directory is available"
    Err.Clear 'clear the error
    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing 'clear the objects

Comment only says what the code says.

    Application.ScreenUpdating = True 'turn screenupdating back on
    Application.EnableEvents = True 'turn events back on

The code says it all, no need for any comments here.

End Sub
Sub FolderExists()
    Dim FSO
    Dim folder As String
    folder = "G:\Marketing\Market Price Guides\1Valeo Power Summaries"
    Set FSO = CreateObject("Scripting.FileSystemObject")
    If FSO.FolderExists(folder) Then
        MsgBox folder & " is a valid folder/path.", vbInformation, "Path Exists"
    Else
        MsgBox folder & " is NOT a valid folder/path. ", vbInformation, " Invalid Path"
    End If
End Sub

Now I am ready to accept that I am in a minority ( a minority of only two that I know of), but I generally find comments to be of no use, and I fully expect the standard police to be down on me for my views. The code above shows all of the bad usages of comments that I come across,

•        comments that just repeat what the code says
•        too much verbiage in the comments
•        comments that try so hard to be clear, they are incomprehensible
•        meaningless comments
•       out of date comments

and so on.

But worse of all, and my biggest gripe against comments is that they make the code so hard to read. When I am debugging, I am reading the code, I am looking back at what has happened, I am looking forward at what is about to happen, and those comments just get in the way. If they were helpful in other ways, then ..., but they rarely are.

Let’s be honest, how many of us really find other people’s comments helpful, and with our own they usually only tell us what we can read from (our own) code. And of course, out of date comments are not only unhelpful, they can be mis-leading, and lead to errors. But of course, we are all excellent of keeping the documentation up to date aren’t we. 

So my advice, ditch the comments, if you can’t read the code, leave it alone.

I have re-cut that code above without comments, and with better spacing. I am not saying it is perfect, or the best way, it is just a way that I find better. I have ditched all the comments, none gave me anything, and I think the code is now ready for debugging.

As an aside, I have a routine that strips comments from code, which I wrote so I copuld strip those forum postings where comments gets in the way.

Sub Copy_and_Rename_To_New_Folder()
    Dim objFSO As New Scripting.FileSystemObject, objFolder As Scripting.folder, PathExists As Boolean
    Dim objFile As Scripting.File, strSourceFolder As String, strDestFolder As String
    Dim x, Counter As Integer, Overwrite As String, strNewFileName As String
    Dim strName As String, strMid As String, strExt As String
    Dim sSavePath3 As String

    Application.ScreenUpdating = False
    Application.EnableEvents = False

    strSourceFolder = "C:\Test"
    On Error Resume Next
    x = GetAttr(strDestFolder) And 0
    If Err = 0 Then

        PathExists = True
        Overwrite = MsgBox("The folder may contain duplicate files," & vbNewLine & _
        "Do you wish to overwrite existing files with same name?", vbYesNo, "Alert!")
        If Overwrite <> vbYes Then Exit Sub
    End If
    On Error Goto ErrHandler

    Set objFSO = CreateObject("Scripting.FileSystemObject")
    Set objFolder = objFSO.GetFolder(strSourceFolder)

    Counter = 0
    If Not objFolder.Files.Count > 0 Then Goto NoFiles

    For Each objFile In objFolder.Files

        strName = Left(objFile.Name, Len(objFile.Name) - 4
        strExt = Right(objFile.Name, 4)
        Dim strDate As String
        strNewFileName = "09 lqd " & strName & " TRS" & strExt
        objFile.Name = strNewFileName '
        Counter = Counter + 1
    Next objFile

    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing

    Exit Sub

NoFiles:
    MsgBox "There Are no files or documents in : " & vbNewLine & vbNewLine & _
    strSourceFolder & vbNewLine & vbNewLine & "Please verify the path!", , "Alert: No Files Found!"

    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing

    Application.ScreenUpdating = True
    Application.EnableEvents = True

    Exit Sub 'exit sub here to avoid subsequent actions

ErrHandler:
    MsgBox "Error: " & Err.Number & Err.Description & vbCrLf & vbCrLf & vbCrLf & _
    "Please verify that all files in the folder are not currently open," & _
    "and the source directory is available"
    Err.Clear 'clear the error

    Set objFile = Nothing: Set objFSO = Nothing: Set objFolder = Nothing

    Application.ScreenUpdating = True
    Application.EnableEvents = True
End Sub

Sub FolderExists()
    Dim FSO
    Dim folder As String

    folder = "G:\Marketing\Market Price Guides\1Valeo Power Summaries"
    Set FSO = CreateObject("Scripting.FileSystemObject")

    If FSO.FolderExists(folder) Then

        MsgBox folder & " is a valid folder/path.", vbInformation, "Path Exists"
    Else

        MsgBox folder & " is NOT a valid folder/path. ", vbInformation, " Invalid Path"
    End If
End Sub

New IE 6/7 vulnerabilities and exploit code (977981)

Microsoft is currently evaluating this new vulnerability and zero-day exploit code has been published.  Please be careful at all websites and move to IE8 if possible as it's more secure. Many AV products have implemented protection.

Microsoft Security Advisory 977981 - IE 6 and IE 7
http://isc.sans.org/diary.html?storyid=7633

QUOTE: Microsoft has released Security Advisory 977981.  It details vulnerabilites in Internet Explorer 6 and 7 on various operating systems.  The advisory does not provide any patches or new versions at this point, but does provide several recommendations for mitigation.

Microsoft Security Advisory (977981)
Vulnerability in Internet Explorer Could Allow Remote Code Execution
http://www.microsoft.com/technet/security/advisory/977981.mspx

IE6 and IE7 0-Day Reported
http://isc.sans.org/diary.html?storyid=7624
http://www.symantec.com/connect/blogs/zero-day-internet-explorer-exploit-published

Configuration Manager with Jason Lewis : System Center Updates Publisher (SCUP) 4.5 now supports WSUS 3.0 SP2

FabulaTech USB over Network v4.2

Given what I’ve been seeing since the release of version 4.2 of FabulaTech’s USB over Network software, I’m recommending that users stick with version 4.1 or even earlier. I’ve had multiple unexplained hard crashes that have no other apparent explanation. When FabulaTech releases a new version, I’ll do some serious load testing before I implement it in production. Stay tuned.

Charlie.

Nexus SC: The System Center Team Blog : Service Manager Beta Process Management Pack Now Available

Newly found blog: Deploy Windows 7

Want to Get Paid to Shop

Kevin Holman's OpsMgr Blog : Writing monitors to target Logical or Physical Disks

Comparing Monitor Information Reporting to Community Monitor Information Scripts

Free Software Foundation Comes to an Agreement with PayPal

The Free Software Foundation has thanked PayPal for resolving a problem with its terms and conditions when applied to free software projects. PayPal is often used as a convenient way for free software projects to receive donations, but the FSF recently found that PayPal had added a proprietary software license to its User Agreement. The FSF felt it couldn't agree to those terms and contacted PayPal to see if some other arrangement could be made.

PayPal not only excepted the FSF from the provisions of the proprietary licence, but has told the FSF that it will be updating its user agreement "to ensure that the free software community can continue to receive and make payments without having to accept a proprietary license".

http://www.h-online.com/open/news/item/Free-Software-Foundation-comes-to-an-agreement-with-PayPal-867264.html

10 good things about Snow Leopard for IT admins

While Apple didn’t promise much in the way of marquee features with Mac OS X 10.6, there are still plenty of under-the-hood changes and minor additions and enhancements in Snow Leopard to absorb. That’s especially true if you work in IT.

1. A decent Cisco VPN client
2. Automated creation of iChat Jabber accounts
3. Automated account creation for Mail
4. Far better Portable Home Directory Syncing options
5. The Finder Sidebar finally works with Single sign-on
6. Change your password via a Web page
7. Push e-mail and calendaring
8. Mobile Access Server
9. Resizable panes in Workgroup Manager
10. AppleScript-Objective C

http://www.computerworld.com/s/article/9137448/10_good_things_about_Snow_Leopard_for_IT_admins

BitDefender and Auslogics Partner to Bundles Their Software

Well, they've bundled their security software with unwanted Ask/IAC Toolbar/Search Assistant and now the two bundles one another.  Is that how to give protection nowadays? To bundle with unnecessary stuff or  while others push their product via TrialPay?  It's annoying.  Why not fix the FPs and product issues instead of focusing in bundling this and that?

Piloyd worm running amok in China

There are a huge number of news stories in Chinese and a few in English on the Web today about a worm that apparently is spreading rapidly in China. The Inquirer is quoting the National Computer Virus Emergency Response Centre in Tianjin, China, saying that Worm_Piloyd.B is spreading rapidly, that it infects exe, html, and asp files and blocks attempting to fix them. The centre’s English web page seems to be about a week behind, so, we couldn’t get the original notice.

The Inquirer said Piloyd probably was being used to expand a botnet.

Western AV companies have listed detections for the malware since last summer or fall. Names include:

AVG: Worm/Generic.AOFP
F-Secure: Worm.Generic.90951
Kaspersky: Net-Worm.Win32.Piloyd.g
Microsoft: TrojanDownloader:Win32/Jadtre.A
Sophos: W32/Autorun-ASW
Sunbelt: Trojan-Downloader.Win32.Sfn!cobra (v)
Symantec: Adware.Lop
TrendMicro: WORM_STRAT.GEN-3

http://www.theinquirer.net/inquirer/news/1563029/china-warns-virus

http://sunbeltblog.blogspot.com/2009/11/piloyd-worm-running-amok-in-china.html

State of Mozilla, Foundation, Thunderbird, Jetpack, Camino, Add-ons manager, and more…

Learn more on the status of the following in http://blog.mozilla.com/about_mozilla/2009/11/24/state-of-mozilla-foundation-thunderbird-jetpack-camino-add-ons-manager-and-more/

State of Mozilla report
Mozilla Foundation: November update
Facebook Mozilla Security quiz
Thunderbird 3 and accessibility
Component directory lockdown in Firefox 3.6
Jetpack for Learning deadline
Camino 2.0 released
Help the Camino project
Redesigning Firefox’s add-ons manager
New localization metrics reports
Optimized Firefox Support start page
Upcoming events
Developer calendar
About about:mozilla

Announcement of partnership with CERT.PT

From Secunia Blog:

Secunia is proud to announce a partnership with the Portuguese CERT, www.cert.pt.

For information in Portuguese, please refer to CERT.PT

CERT.PT translated the Secunia Personal Software Inspector to Portuguese as part of Secunia's big localisation project with the Secunia PSI.

Now CERT.PT will do an effort to ensure that even more Portuguese users  install and use the Secunia PSI. Patching is the best way to eliminate vulnerabilities and ensure that you are not open to exploits. Patching is more important than having an Anti-Virus program and a personal firewall. Remember that the criminal needs only one unpatched program - one vulnerability - to compromise the system.

http://secunia.com/blog/67/

LinkedIn wedges open API door

LinkedIn has opened its platform to developers who are prepared to try and pass a rigorous application process.

Previously the business-oriented social networking site only offered a select bunch of partners access to its Web 2.0 platform, which many use as a CV hub and biz man stalking tool.

LinkedIn, which claims about 50m users, said in a blog post yesterday that it opened up code to developers to allow them to mix its API into their own social networking sites.

The company has launched a developer website that coders will be required to sign up to and request a key to allow access to the platform.

http://www.theregister.co.uk/2009/11/24/linkedin_opens_api/

Negative Cashback from Bing Cashback

In a recent post that Microsoft made me take down, I wrote about some security holes in Bing Cashback.  While technical flaws are somewhat interesting to me, most Bountii users don't really care about them.  Starting today, I’ll write about some non-technical flaws in Bing Cashback.

My biggest problem with Bing Cashback is a hidden "feature" that I’m calling "negative cashback."

More with updates on the issue in http://bountii.com/blog/2009/11/23/negative-cashback-from-bing-cashback/

NFL player David Clowney is Twitter-hacked

David Clowney is not unusual in being a 24-year-old who is hooked on Twitter.

No, what makes David Clowney stand out from the crowd is that he's a talented American football player, who appears for the New York Jets. And now, like other celebrities before him, his Twitter account has been hacked.

What is perhaps bizarre is that although David Clowney has acknowledged the hack on his Twitter account, he hasn't deleted the (somewhat fruity) postings made by the hacker.

http://www.sophos.com/blogs/gc/g/2009/11/24/nfl-player-david-clowney-twitterhacked/