Archive for the ‘security’ Category

Don’t Change Your Password!

Wednesday, October 14th, 2009

Yes that’s right, normally we’d advice people to change their password regularly however twitter users are being advised by Twitter NOT to amend their passwords, usernames or e-mail addresses.

 

Twitter is investigating an issue with users becoming locked out of the service after changing their email address or username, or resetting their passwords.

 

Of course this will be very concerning for security experts around the world, it would be the perfect time to launch a password stealing/phishing attack on Twitter, as the normal advise (change your password) will at this time be counterproductive.

 

We will update you when this issues is sorted.

Posted via email from scottherbert’s posterous

If you use an MS passport account (eg hotmail) change your password NOW!

Monday, October 5th, 2009

It appears that at least 10,000 @hotmail @msn and @live accounts have been compromised, a list of theses accounts including passwords was posted to pastebin.com a site commonly used by developers to share code samples.

The list runs alphabetically from Ar thro Bl which suggests that there are more out their.

This was reported to Microsoft immediately in the UK and US by neowin and they are currently awaiting feedback on the situation.

Fundamentally if you have a Microsoft account (hotmail, live, msn, Zune etc) we strongly recommend you change not only your password by your security question as well.

hat tip to neowin and the BBC

First test for 301works as Cli.gs goes off line

Monday, October 5th, 2009

The much hyped URL Shortening archiving service 301works will have their first big test soon. As the shortening service Cli.gs goes off line (assuming it’s not another Tr.im). Their blog has just announced that “On Sunday, 25 Oct 2009 at 12:00:00 GMT, the service will stop accepting new short URLs and will stop logging analytics”.

The service (301works) is supposed to archive the links of URL shortening services in order to prevent a whole host of links going down when (as if) as service shuts up shop, and was started jointly by a group of URL shortners in order to give a degree of consumer confidence in their services.

However the organisations web site still has “Coming Soon” image on its web site, and some in the industry are worried that it may not be ready in time to prevent Cli.gs links vanishing.

All this has me thinking, that will I currently use bit.ly for everything, I may install a service like phul that runs on my servers and so will be running for as long as I am, if you know of any PHP, Python or Ruby scripts that do the job, let me know in the comments section.

Now you can serve an injunction via twitter

Thursday, October 1st, 2009

A UK court has allowed the right-wing political blogger Donal Blaney to serve an injunction on a Twitter user who uses the name of his blog and his photo.

Mr Blaney decided to use Twitter after a recent case in Australia where Facebook was used to serve a court order.

The blogger, who is also a lawyer and owns the firm serving the order, said that he thought that it was the first time Twitter had been used to deliver a court order.

The injunction – known as the Blaney’s Blarney Order – is due to be served at 1930 BST and will include a link to the text of the full court order.

The only problem is it looks like twitter have baned the wrong user. They appear to have banned http://twitter.com/Donal_Blarney and left the fake http://twitter.com/blaneysblarney up.

Oops….

Now there is less excuse not to use something other than IE

Tuesday, September 22nd, 2009

I’ve complained a number of times about the attitude of some web professionals towards throes who are stuck using IE6 (or 7 or for that matter 8). The convert or your a moron attitude, will always fail to win converts, especially when the people your calling morons have no choose about what browsers they are stuck using.

Thankfully people are starting to lesion and start thinking how throes people who are stuck using old out-of-date browsers can still access high performance websites like Google wave.

First their was the “Hay IT” campaign which still used the same bully boy tactics but at least was targeting the right people.

Now Google have released Chrome Frame a plug in for IE 6, 7 or 8 on the PC (If your using Linux or a Mac and are using IE… then maybe you are a moron… as your default browser will be better) that will allow you to experience the power of a standards complaint web browser without having to upgrade yours.

Chrome Frame won’t over write IE and the Chrome engine is only called if a special meta tag is found on the web page, and it’s unknown if throes IT departments who won’t allow users to use a good browser will allow people to install Chrome Frame, but at least it’s a step in the right direction.