Remove/ Get Rid of Trojan.Win32.Bazon.a Virus Thoroughly
Reviewed by 0x000216
on
Monday, June 09, 2014
Rating: 5
RHAinfoSec XSS Challenge - 2
Update: The results are announced here.
Welcome readers,
After a tremendous response with our first XSS challenge, we decided to make your lives a bit harder this summer by launching another XSS challenge. Like always, our challenges always challenging and based upon real world scenarios and the key to solving it mostly rely upon the ability to think outside the box.
The challenge is based upon a a strong blacklist based protection, beware that the challenge may be very hard for you unless you don't understand the right injection context.
Challenge Rules/Goals
- The challenge goal is to execute alert(1) inside the browser.
- Your payload must render javascript inside modern browsers.
- The XSS protection header has been set to 0, which would turn off your client side XSS filter.
Challenge Link
Special thanks to Mr Prakhar Prasad, for deploying the challenge. Alex Infuhr for beta testing and ideas with the challenge.
Hints/Tips
- If all you can do is ">
, then our humble apologies this challenge is not for you.
- The WAF can be very hard, if you don't know how to properly reverse engineer filter rules.
- You could refer to my "XSS Filter evasion Cheat sheet" for ideas on cracking this challenge.
- Automated scanners won't help here as often time they fail at producing context based payloads.
Submissions
Sumbit your vector to rafayhackingarticles@gmail.com or prakhar@prakharprasad.com, or you could DM on my twitter @rafaybaloch, once you have cracked this challenge.
RHAinfoSec XSS Challenge - 2
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Delete/ Remove TrojanClicker:Win32/Clikug.C Virus and Protect the PC
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Apps To Track Lost / Stolen Android Devices
If you have forget your android while travelling or someone stolen your android mobile phone you do not need to worry if you have one of these application installed in your device. You can track your mobile phone with the apps term and condition. I like to advice within purchasing your Android mobile install these awesome apps for protecting your device.
Where’s My Droid
Where’s My Droid is a pure Find my Phone app to help you locate your phone. When your smartphone goes missing, sending a code via text will make the phone ring (even when set in silent mode) while another text code sends you the GPS coordinates of the phone. Alternatively, you can remotely control your phone by connecting it to the Commander option, a web-based interface. Where’s My Droid also offers a Pro version which lets you take pictures with the camera (you might be able to take a snapshot of the perpetrator), remote lock the phone rendering it impenetrable or remote wipe the app to save your data from misuse.
Plan B
If you had not install any tracking app before your Android device was stolen or misplaced, Plan B will be a lifesaver. Plan B is an Android app from Lookout Labs which locates your smartphone using cell towers and GPS, then sends the location of your smartphone to your Gmail Inbox. In some smartphones, Plan B can enable the GPS on the phone then update you with its location every 10 minutes. For phones with no such support, you can text ‘location’ from another phone, and details of the missing phone’s location will be sent to your email. In the absence of a data connection, the software will send its location via SMS instead.
Lookout Security Anti-Theft
Lookout Security & Antivirus gives Android users peace of mind keeping phones and tablets safe and secure. By going to lookout.com, users can find their lost device on a Google Map, have their device make a loud noise even if it’s on silent, or if their battery dies, users can see the last location where they had their device. If someone tries to steal or unlock your device, you’ll receive an email with the picture and location info of the person who tries to steal it. Lookout Security & Antivirus will protect all your personal data so know one sees it.
Seek Droid
Seek Droid is an app that lets users find their Android phone or tablet. Users can locate their phone using GPS and find the accurate location, and it will be placed on Google Maps. Other features include being able to lock the phone, wipe, it, or wipe the SD.
Android Lost Free
This app is not only perfect for finding your lost phone, it will also torment the thief (something which we’re sure they fully deserve). You can activate (via SMS or the Web) the alarm to ring with a flashing screen, enable and disable the GPS, data and Wi-Fi connection, remote wipe the SD card, and get their latest call list.Once the SIM card is changed, you will be informed via email. This app can be used even after you have lost your smartphone due to its remote install feature and is hidden from the launcher to prevent uninstallation.
Prey Anti-Theft
Prey is an anti-theft app developed by Fork Ltd. Prey lets users track and locate a lost or stolen Android phone. Users will receive detailed reports on who has their device and where they can find it. Lock your device and trigger the alarm even if your phone is on silent.
Bitdefender Anti-Theft
Bitdefender is an anti-theft app developed by Bitdefender. Bitdefender Mobile security blocks the latest malware, spyware, Trojans, and other threats. Misplaced or stolen phone? Send SMS commands, lock, geo-locate, sound an alarm, and wipe your Android device from any internet connection.
McAfee Antivirus & Security
It comes as a 7-day free trial but to keep it on your phone, it’s a $30/year subscription. For that sum, you get the regular anti-theft protection, antivirus protection, plus data backup and restore functions.
AVG AntiVirus
It can locate your lost or stolen phone via Google Maps and lock your device to protect your privacy via a text message. If your phone or tablet is stolen or missing, you can also set a lock screen message to help the locator find you and make your device ring even when it’s on silent mode.Like it ? Share it.
Apps To Track Lost / Stolen Android Devices
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
NEW VILLAGE VOICE COLUMN UP...
...about the Bergdahl affair and the self-evident bad faith and bullshit the brethren have brought to it. I can't even be outraged, really; once you know their formula, and them, you kind of expect they'd perform a similar routine if presented with ham sandwich or a basket of puppies.
UPDATE. Commenters note that some of the factoids repeated as gospel by the brethren are being challenged, let us say, by events and expert witnesses: For example, the insistence that the five trained Talibani were super-villains whom Obama only let go because he wants them to grow stronger and destroy America has been contradicted by a Gitmo prosecutor ("When I saw the names of the five individuals, when they were reported last weekend, my first reaction was, ‘Who are they?’... I think [the Administration] struck a pretty good deal"), as well as by a former CENTCOM chief, among others. I wouldn't say this proves that there was nothing wrong with the deal -- I don't want to get into the game of refuting one set of unbuttressed assertions with another -- but it does remind those of us still in possession of common sense that a house built on bullshit may not survive a brisk summer rain.
UPDATE 2. I would say this Marc A. Thiessen headline marks the all-time low --
UPDATE. Commenters note that some of the factoids repeated as gospel by the brethren are being challenged, let us say, by events and expert witnesses: For example, the insistence that the five trained Talibani were super-villains whom Obama only let go because he wants them to grow stronger and destroy America has been contradicted by a Gitmo prosecutor ("When I saw the names of the five individuals, when they were reported last weekend, my first reaction was, ‘Who are they?’... I think [the Administration] struck a pretty good deal"), as well as by a former CENTCOM chief, among others. I wouldn't say this proves that there was nothing wrong with the deal -- I don't want to get into the game of refuting one set of unbuttressed assertions with another -- but it does remind those of us still in possession of common sense that a house built on bullshit may not survive a brisk summer rain.
UPDATE 2. I would say this Marc A. Thiessen headline marks the all-time low --
Is Obama considering surrendering to the Taliban?-- but experience has taught us that as far as these guys are concerned, the barrel has no bottom.
NEW VILLAGE VOICE COLUMN UP...
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
FIFA's unfair catenaccio on World Cup's IP
![]() |
| Is it? |
“The FIFA Rights Holders will only invest in the 2014 FIFA World Cup™ if they are provided with this exclusivity for the use of the Official Marks … Thus, any unauthorised use of the Official Marks not only undermines the integrity of the FIFA World Cup™ and its marketing programme, but also puts the interests of the worldwide football community at stake”.
The Manual starts by defining FIFA’s trade mark portfolio and declaring full-scale war on those who dare to sail too close to the World Cup’s wind:
“The Official Marks are protected in Brazil and territories around the world by trade mark registration and/or copyright laws and/or other laws of intellectual property such as unfair competition or passing off . Such laws collectively protect FIFA against the unauthorised use of both identical reproductions of the Official Marks and also confusingly similar variations and modifications”.
Also protected is the event’s mascot, the nice aardvark platypus minotaur pokemon animal on the right. His name is Fuleco -- a portmanteau of the words "Futebol" ("Football") and "Ecologia" ("Ecology") [shouldn’t it be FuTeco, asks Merpel?].
If the trade mark rights claimed above sound more than reasonable, it’s hard to say the same for a bunch of further signs mentioned in the Manual, on the distinctiveness of which this Kat would not bet any more than on the next World Cup taking place in Qatar. Take, for instance, Fuleco’s natural habitat (left), which FIFA refers to as the World Cup’s “official look element”. It certainly looks fancy and creative enough to access copyright protection, but could it really play a distinctive role in connection with goods and services?
Similar concerns might also arise regarding other word marks that FIFA proudly declares to be its own property. The IPKat is referring to expressions like “World Cup”, “World Cup 2014”, “Copa do Mundo” [“world cup” in Portuguese], “Mundial 2014” and “Copa 2014” [“Cup 2014]”. A monopoly on such descriptive and generic expressions may be unfair, and this is even more true if one thinks that this very year the World Cup/Copa do Mundo/Mundial takes place for a number of secondary other sports such as basketball, alpine skiing, boulderingand diving-- the winners of which would likely be awarded with a Copa in the year 2014.
Another chapter of FIFA’s trade mark claims concerns geographical venues of the event. As per the IP Manual, FIFA’s exclusive rights include expressions such as “Brazil 2014” and, in general, any sign constituted by the “name of one of the cities hosting the tournament + the number 2014” -- eg “Rio 2014”, “Sao Paolo 2014”, “Fortaleza 2014”, etc. [see all World Cup host cities here].
They actually mean it. In Europe, for instance, FIFA has managed to register a Community “Brazil 2014” trade mark in connection with a wide number of classes, not even remotely related to the World Cup goods and services. Due to trade marks like that, eg, the Brasil 2014 Green Energy and Biogas Exposition could run into troubles should they decide to provide “refining of oil; services for the treatment of oil and used lubricants; generation of gas and electricity” in class 42, also covered by a FIFA Community trade mark. This doesn't look much like fair play.
![]() |
| Does it ring a bell? |
The declared enforcement approach does not seem less pretentious. Irrespective of a trade mark’s distinctive function, for instance, the IP Manual alleges that simply writing “Brazil 2014” with a standard font and with no device element on a t-shirt would be the subject of legal proceedings as leading consumers to establish an unlawful association with FIFA’s tournament.
![]() |
| In-store decorations |
Additionally, a significant part of the IP Manual deals with uses of FIFA’s IP on the internet.
The world is moving, and some global players have started adopting IP strategies based on sharing instead of hopeless enforcement as a way of creating value [one famous example was recently reported on this weblog here]. Needless to say, this is not an option for FIFA, whose IP Manual solemnly declares that “FIFA’s official logos, symbols and other graphic trade marks may not be used on any social media platform”. This Kat senses that busy times are coming for FIFA’s IT lawyers all around the world.
As to URLs, FIFA takes the view that its trade marks may be legitimately used only inasmuch as they come after the main domain name – eg, would be fine, while FIFA would consider infringing.
In FIFA’s opinion, World Cup trade marks “may not be used as hyperlinks or shortcuts on the Internet”. This sounds quite extreme too. Even if it is true that reproducing original device signs on a website might amount to copyright infringement, non-original expressions like “Football World Cup” could hardly access the same protection -- and, in any case, how could trade mark law prevent non-distinctive uses of FIFA’s marks in a website, whether or not they serve as hyperlinks? Finally, special rules govern the use of the FIFA.COM logo (right), which “may only be used on a website as a hyperlink to the homepage of the official website www.FIFA.com”, and only subject to specific PRIOR approval by FIFA, the IP Manual explains.“Catenaccio” [“the bolt”, in English], is the name of a tactical system that the Italian team Triestinafirst adopted in 1947, when it was coached by the visionary manager Nereo Rocco. Those who confuse football with entertainment are used to perceive catenaccio as a basic, silly and purely defensive strategy consisting of putting all the team’s effort into depriving the opponent of any chance to score and renouncing all of the magic, movement and poetry that football can offer. On the contrary, catenaccio is the noble art of football par excellence. It requires an effective organisation of backline defence and much creative imagination in designing light, quick, and futuristic counter-attacks. Catenaccio is about adapting oneself to a world that can’t always be as we want. Life is a metaphor of football. FIFA should know.
A hearty katpat goes to the football passionate Revital Cohen for alerting this Kat to FIFA’s psychedelic manual.
Common people here.
Catenaccio and parking the bus here.
Total unnecessary production here.
Common people here.
Catenaccio and parking the bus here.
Total unnecessary production here.
FIFA's unfair catenaccio on World Cup's IP
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
AIPPI Report: Are you sitting comfortably? Mellor QC recounts soft IP's 2013 "unfinished business"
![]() |
| The AmeriKitten transfixed by the summer rain against her window pane |
On a rainy June afternoon last week, raincoat-clad IP lawyers and AIPPI members made their ways to the offices of Allen & Overy, to hear James Mellor QC’s round up of the big ‘soft IP’ judgments of last year. Joined on stage by His Honour Judge Hacon, Mr Mellor QC took the audience through some ‘unfinished business’ and noted some take home points from the rest of 2013. The AmeriKat is grateful to A&O's eloquent trainee, Rachel Fitzgerald, who with pen in hand summarized Mellor's round-up for the Kat's readers. Rachel reports:
"Turning first to the landmark CJEU exhaustion decision in UsedSoft (C-128/11)(the ‘unfinished business’ from the AIPPI round-up of 2012 cases, and the facts of which you can be reminded of in this earlier Kat post), Mr Mellor QC noted a willingness on the CJEU’s part, to categorically ignore the Software Directive’s express reference in Article 5 to ‘specific contractual provisions’, in favour of looking at the transaction as a whole. This meant that, despite express provisions in Oracle’s licences granting for “an unlimited period, a non-exclusive, non-transferable user right”, because it was decided that the original licencing arrangement constituted a sale under Article 4(2), the distribution right had been exhausted, and the licensee of the ‘spare’ licence capacity, (i.e. the second acquirer), was a lawful acquirer under Article 5(1). In this decision (which has been labelled by many a ‘results based decision’), it clearly did not matter to the CJEU that the original licence was non-transferable. Furthermore, it was made it clear that Article 4(2) is not limited to tangible copies, but applies equally to intangible copies, including where the copy is sold as corrected and updated by the copyright holder.
A recap on hyperlinking and communication to the public came next, in light of the Svensson decision (C-466/12), where it was held that while provision of clickable links to protected works is an act of communication to the public, the communication must be directed at a new public in order to fall within Article 3(1) of the InfoSoc Directive. Hyperlinks to protected works made freely available on the internet do not infringe the copyright subsisting in the protected works, unless the hyperlink gives users a method by which they can circumvent access restrictions to the work (e.g. subscription access), because then the work is being made available to a new public, i.e. consumers not considered by the copyright holder. Mr Mellor QC thought that the decision was fair, but warned that the judgment highlights the possibility that the “long arm of digital copyright extends to end users who may re-tweet material including links etc. without having the ability to check whether they may be infringing copyright”.
After referring those of us keen to understand the distinction between trade evidence and expert evidence to the Rihanna judgment ([2013] EWHC 1945), Mr Mellor QC addressed whether the Court of Appeal interpreted the “average consumer” correctly in the Interflora v Marks & Spencer judgments ([2012] EWCA Civ 1501 and [2013] EWCA Civ 319). In Interflora I, Lewison LJ held the “average consumer” in cases of trade mark infringement is conceptually different from the substantial proportion of the public test in passing off, and (perhaps incorrectly) assumed that to pinpoint the “average consumer” means to take a statistical view of the results. In an attempt to rectify this point, Mr Mellor QC referred the audience to the Gut Springenheide case (Case C-210/96) and the Court’s decision that “the national court must take into account the presumed expectations which it evokes in an average consumer who is reasonably well informed and reasonably observant and circumspect”. This notion of the average consumer as a reasonable consumer rids us of the vulgarity of a statistical calculation of the average, while at the same time allowing to exclude outliers. Mr Mellor QC pointed out that following this more useful interpretation of who the “average consumer” is, there is perhaps very little difference between the tests for passing off and likelihood of confusion after all.
Another issue in Interflora II was raised: the use of surveys as evidence in trade mark infringement cases. According to Lewison LJ, whether survey evidence should be admitted at all, comes down to whether the court is satisfied that the evidence is (a) likely to be of REAL value; and (b) that the likely value of the evidence justifies the cost (bold caps courtesy of Lewison LJ). Inevitably, this assessment will mean that survey evidence is not as useful as it may have once been, but as Sir Robin Jacob said in his judgment in the same case, the survey is not completely dead, as it is still “possible to conduct fair surveys and they may indeed lead to witnesses of value”.
Mr Mellor QC rounded off the evening by sneaking in a 2014 offering. In the Betty Boop trade mark judgment handed down by by Mr Justice Birss in February ([2014] EWHC 439), it was held that A.V.E.L.A. had infringed UK and Community Trade Marks and committed acts of passing off. The judgment (which topically makes a distinction between three classes of average consumer), makes for an interesting read in itself, but for a reminder of the juicy bits, the IPKat post from February can be found here.
The AmeriKat sadly had to duck out of the closing of Mellor's remarks, but she did note that gone seem to be the days when there used to be innumerable references and decisions to and from the CJEU in trade mark cases that practitioners would have to grapple with (copyright references are of course a different story!). Nowadays, things seem to have calmed down a little bit, with a handful of key decisions in 2013 to digest. However, that does not mean to say all is well and resolved in the non-patent IP world. For example, that knotty issue of evidence in trade mark proceedings seems to be a prime candidate for some further attention from the English courts in 2014. Watch this space!
AIPPI Report: Are you sitting comfortably? Mellor QC recounts soft IP's 2013 "unfinished business"
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
New version of Linux Kernel available.
Linux Kernel 3.15 was released.
Some of the top features of the Linux 3.15 Kernel
- EFI mixed mode support.
- Faster suspend and resume times.
- Open-source graphics driver improvements.
- AVX-512 and RDSEED extension support.
- Sony DualShock 4 controller support.
New version of Linux Kernel available.
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5
Reviewed by 0x000216
on
Sunday, June 08, 2014
Rating: 5










