Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Walled Gardener (Score 1) 126

They're still doing a piss poor Job of Tending it.

Searched for 7zip and openoffice on the app store, got fake apps that directs you to a site full of scam ads. Can't get it to show up in the html5 web store though, so I guess it's a start.

if you have windows 8, go to the store and report them. it's the only way MS will act on this.

Comment Switching to Libreoffice? (Score 1, Insightful) 190

I not sure how switching from Openoffice to Libreoffice is going to solve their problems. I know that Libreoffice has better compatibility and all, and I use it, but it's still rough to use vs MS Office.

The example I use the most is Mail Merging. It's stupid proof in MS Office, but in Libreoffice it's a literal pain in the rear to do, especially if a Spreadsheet is involved.

Comment It took this long to get noticed? (Score 1) 188

Hell, I noticed it almost a month after the Store Debuted.

As I said in the AV is Dead Article, I tell our customers "Don't download or install anything" and I mean it. The windows store is like the wild west. They do no QA on the content and refuse to remove obvious scam acts. Hell, MS in many cases doesn't even host the files, they post a button that says "Get App From Publisher" that leads to a third party site where you can "download" the file. That's just stupid.

The other thing that really needs to get drilled home from this is that Open Source Software is getting totally Hosed by scammers forking Code or distributing installers and the community needs to find a solution that is acceptable with OSS Practices. 77zip (not 7zip. 7zip is the legitimate one. 77zip is the adware infested one.) is an excellent example of what happens when OSS and Scams collide. VLC media player has been ripped off so much it's downright scary to do searches for it. Libreoffice and Openoffice (as well as VLC, 7zip, ETC) are constantly installer repackaged to install Adware garbage. Hell, even SourceForge is doing it to Filezilla and other OSS Apps hosted on their site. There's a ton of malware infested fake chrome's out there. Hell, It's getting to the point where I'm seeing chromium installed on PC's and all it does is download and execute rogue apps in the background with no user intervention whatsoever. They're just using it as a specifically coded malware platform which can be installed even on guest level accounts.

User Journal

Journal Journal: AV is Dead

First, let me start off with the Notion that All Antivirus sucks. Regardless of the brand, or the Reputation, If you gave me an hour or less and a windows PC with any Antivirus app on the market on it, pay or free, I will give you an infected box. So why does this happen?

Comment AV is dead. (Score 5, Insightful) 331

First, let me start off with the Notion that All Antivirus sucks. Regardless of the brand, or the Reputation, If you gave me an hour or less and a windows PC with any Antivirus app on the market on it, pay or free, I will give you an infected box. So why does this happen?

1) Hot, Fresh, Just for you! This is not just a slogan you see on McDonalds made to order burgers anymore. Today's Virus Obfuscation techniques are so fast and random, that when you activate an payload dropper (whether it be a Flash, Java, Website, Browser exploit or even a Trojan installer) The Payload that you get will only be statistically seen only once. You and only you will get that version of the virus even though it's using a well known virus kit that would be detected if it was not obfuscated. This technique is the reason why no AV firms detect the Fake antivirus variants or FBI Warnings or cryptolockers of the past even though all of the major codebases were detected by most AV Firms.

2) I'm an Necessary App! People need me to change their search engine, hijack their DNS, spy on them, and pop up ads randomly all over the screen and websites! Read the Slashdot Journal link for some insight on how adware gets on people's PC. Let me make something clear here. Adware is a Virus When a customer comes into my shop and has something like Conduit searchprotect, or Wajam on their machine, I tell them that's a virus because it is. They didn't want it, they got it and it's doing things they don't want. Sounds like a virus to me, yet just about every AV Firm ignores these and lets them gleefully install because they're afraid of getting sued by one of these companies so instead they make guidelines to let them slip through. The first AV I find that reliably removes all Adware as well as viruses without me having to manually remove them or fallback to a removal tool (like ADWCleaner, which is now starting to miss stuff as of late) I will sell in my store.

3) In Soviet Russia, Trojan Exploits You! This Journal link has been on my sig for years now, and is the primary reason why AV doesn't work anymore. This week alone I had no less then three of my customers Directly call Fake Support Scammers because their PC / Printer / Camera didn't work, and they called the phone number on the first link (The Ads) they saw when they searched for "(PC / Printer / Camera) Support" and if you're letting the bad guys in to physically touch your own box you're already screwed and no AV on earth is going to save you.

Right now, I'm telling people three things:

1) Install MSE All AV sucks, The only question is how much do you want to pay for something that sucks. MSE is free, at least blocks most of the ultra bad stuff and doesn't pop up ads of any kind so it's what I install.

2) Install Adblock on all browsers I install Adblock Plus on any machine that leaves the store. if you're going to infect yourself chances are an Ad is going to lead you there. Blocking the ads blocks most of the infection vectors off the bat.

3) Don't Download or Install anything. There is no safe place I can direct people to download files without getting some sort of Adware Virus. This is easier to tell users rather than pay attention to what you download. (See #3 to understand) If they protest, go to your PC, go to ask.com with your adware blocker turned off, type in any program you would think they would download (I use VLC Media player. It never fails to show me adware links) and have them pick the download link, when they get it wrong (chances are they will) download the file and send it to virustotal.com. chances are one of the scanners will detect the Adware dropper from the fake site, Then drill it home about not downloading anything.

4) Another alternative OS isn't going to save you This ancient Journal entry Explains why. Coupled with the other two Journal entries it should paint a pretty good picture that at this point in time, the user itself is the greatest threat, and if you read #3 you know you cant (legally) patch stupid. While an alternative OS (like Linux, OSX or even Chrome OS) can minimize exposure, it does not eliminate it and it will get worse as the OS gets more popular. You also still have a user in control and the Computer user laws apply. I've seen viruses for all three above listed OS'es (yes even Chrome OS. There are some nasty Chrome extensions out there and they infect all of you're logged in chrome Browsers)

Comment Re:Only 17 months to go... (Score 1) 138

When new, standards-compliant IE becomes more widespread, people can just remove the code for supporting bad old IE altogether.

No they can't because they never Kill old IE. Even on their life cycle chart, they are supporting 3 Different Versions of IE, so devs have to code for the lowest common denominator (IE9) or force users away from IE altogether. Chances are it's going to get worse once Windows 7 goes into extended support and they quit updating IE for it as well.

They need to Support 1 IE Version across all supported mainstream and extended platforms. If they did that instead of using IE as some BS Excuse to get people to Upgrade Windows, maybe they wouldn't bleed so much browser market share.

Submission + - Microsoft to drop support for older versions of Internet Explorer (msdn.com)

An anonymous reader writes: After January 12, 2016, only the most recent version of Internet Explorer available for a supported operating system will receive technical support and security updates. For example, customers using Internet Explorer 8, Internet Explorer 9, or Internet Explorer 10 on Windows 7 SP1 should migrate to Internet Explorer 11 to continue receiving security updates and technical support.

Submission + - Synolocker 0 Day Ransomware puts NAS files at risk.

Deathlizard writes: Have a Synology NAS? Is it accessible to the internet? If it is, You might want to take it offline for awile. Synolocker is a 0 day ransomware that once installed, will encrypt all of the NAS's files and hold them for ransom just like Cryptolocker does for windows PC's. The Virus is currently exploiting an unknown vulnerability to spread. Synology is investagating the issue.

Comment Secure Recycle it. (Score 1) 113

1) You won't Get dick for parts (unless you part it our yourself, and basically only the screens, battery and speakers are worth any cash)

2) The potential crook gets just about everything he would need to make your life a living hell in either ID theft or flat out harassment.

There are recycle depots that will shred the system board to verify secure data destruction. It might cost a little, but it's better than paying to monitor your credit score for a few years.

User Journal

Journal Journal: Customer Service in a Nutshell

Imagine Customer Service as the Early Space Program.

You have Astronauts and you have Monkeys.

Astronauts have problem solving skills that can ultimately sink or swim a mission. They hear orders from mission control but can offer suggestions or even take direct action based on spacecraft feedback if necessary for overall success. They're the guys you send to the moon and back to get moon rocks.

Comment Customer service in a nutshell. (Score 1) 401

Imagine Customer Service as the Early Space Program.

You have Astronauts and you have Monkeys.

Astronauts have problem solving skills that can ultimately sink or swim a mission. They hear orders from mission control but can offer suggestions or even take direct action based on spacecraft feedback if necessary for overall success. They're the guys you send to the moon and back to get moon rocks.

Monkeys see a red light on a console initiated from mission control, which corresponds with pressing a red button on the console. If they press the red button when the red light is on, they get a banana. if they press the button when the light is off, or press any other button when not instructed to, they get shocked. This continues with multiple lights corresponding to multiple buttons to get the desired result. In no way does the monkey have any say so in the control of the spacecraft lest he gets shocked.

Most CSR tier 1 centers consists of Monkeys. The keyword to tell is if you hear "I'm sorry" or "Thank you" a lot. They're saying that cause their screen says to say it. Usually a robot like script reading session follows the keywords. the "Shock or Banana" is the Feedback call / Survey you get after calling one of these CSR's. you vote 1 he gets schocked (fired) and if you vote 10 he gets a banana (paycheck)

CSR tier 2's Still have monkeys but a Astronaut may be lurking around somewhere. The Astronaut is going to sound like a normal human being. he may converse with you outside of the issue at hand. he may skip a few steps to get to the actual problem if he feels that he can without causing issues. This is who you dream of as a CSR. A human with real problem solving skills.

Tier 3 Consists of mostly astronauts. Getting here takes some time but it's your best bet to get your issue resolved.

Just Remember that you have to go through the Zoo first before you can get to NASA.

Slashdot Top Deals

"What man has done, man can aspire to do." -- Jerry Pournelle, about space flight

Working...