I just took a look at their site, which I thought must be amazing for that kind of money, and I found this: <meta name="ICBM" content="52.48002, -1.902805"> What exactly Birmingham City Council up to!? Perhaps the money is going someplace a bit more nefarious.

I have the same name as a Canadian hockey player, though unintentionally, and virtually every result for my name on Google is for him. If your name is common enough and you practice information control over yourself you can almost completely avoid being in Google's system. The real problem is that youths are willing to give out vast amounts of personal information, partially because they don't realize the value of such information and partially because they are stupid kids.

Are you sure you aren't confusing symmetric and asymmetric crypto keys? I don't think 128 bit has ever been considered unbreakable for asymmetric keys, 1024-2048 has been the standard for asymmetric since I have known about it. For symmetric, 128 bit is still considered secure and is still the standard for AES, although many applications are moving to 256 bit.

Pfft, that's only pseudo random data, why settle when you can get true random data.

https://www.fourmilab.ch/hotbits/secure_generate.html
https://www.random.org/passwords/

I for one am glad they aren't policing internet interactions in gaming, the last thing I want is game companies being forced to attempt to censor every bad word to kowtow to the ESRB for an M rating. As for all the companies that already attempt to do it, good luck with your stupid useless endeavor.

Fu(K!ng n0o85!!1

The link goes to on nimp, don't click it.

Wouldn't the malware have to already be running on the computer to do that?

I still buy CD's as well, but it's mainly due to a lack of quality online downloads. When you buy a game at a store or on Steam you get exactly the same game, but buying a lossy mp3 isn't the same as ripping a CD to FLAC. If there were some decent online retailers of lossless audio I would probably buy from there.

I mean any malware author. Code execution vulnerabilities in non-executable file formats like images or documents can get through email and intrusion detection systems much more easily than exe's.

I still very much doubt it, for the simple reason that if this was indeed a publicly known vulnerability that required no javascript and could be executed by opening an image file every hacker and their grandma would be using it right now. Those sorts of exploits are very valuable to malware authors.

I really wish you would upload a sample someplace because I have never heard of anything like this. The last widely exploited image file based exploits that I know of was the ANI and WMF vulnerabilities, and those have been patched a while ago.

Uhh, what? I have no idea what this "JPG exploit" your talking about is. Conflicker spreads through the MS08-067 RPC vulnerability, removable media, and shared folders; nothing to do with IE or jpegs.

Actually Malwarebytes is free, the paid version just gives you "realtime protection, scheduled scanning, and scheduled updating".

It appears that he did from the screenshots. You can see in the background his desktop has that sort of "OMG YOUR INFECTED, BUY OUR PRODUCT" type text that rouge AV products use to scare people.

At least they had him use a decent anti-malware program. I generally find symantec products to be more of a virus than most viruses, that crap is hard to get rid of once it's installed and doesn't detect much of anything.