Posted by Dirk-Willem van Gulik on Oct 14
The production versions of NSD accepts this fine ‘as is’ (FreeBSD-9.3); bind requires a bit of careful escaping.
On te wire one then sees the raw ‘binary’ — which can indeed be very raw:
000001d0 XX XX XX XX 31 28 29 20 7b 20 3a 3b 7d 3b 20 65 () { :;}; e|
000001e0 63 68 6f 20 63 76 65 2d 32 30 31 34 2d 36 32 37 |cho cve-2014-627|
000001f0 31 2c 20 63 76 65 2d 32 30 31 34 30 37 31 36 39 |1, cve-201407169|
00000200 2c…
Posted by Florian Weimer on Oct 14
* Dirk-Willem van Gulik:
More precisely, anything based on the historic BIND stub resolver code
(which is a lot) will escape certain characters while converting from
wire format to the textual representation, including “(“, *and* also
has a check (res_hnok) which refuses PTR records which do not follow
the rather strict syntactic requirements for host names.
Lack of quoting in a DNS API at this point means that essentially
arbitrary…
Posted by Henri Salo on Oct 14
Can you confirm that this should be CVE-2014-2021 and not 2013 ID, thank you.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2021 says:
“pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial
of service (out-of-bounds-read) via a crafted length value in an encrypted PDF
file.”
—
Henri Salo
In my last blog, I discussed the current disconnect —or lag—with some seniors, especially older ones, when it comes to smartphone adoption.
As research by Pew and others has suggested, the reasons many older people have lagged in adoption of smartphones seems rooted in the footprint of the device, i.e. size of the user interface and thus ease of reading, viewing and manipulation. This is evident in the rapid adoption of larger devices like tablets and e-readers – by this demographic.
In recognition of the stumbling blocks for some seniors, earlier this month AARP launched its new RealPad tablet. The $189 device, produced in partnership with Intel, includes larger text and icons. But it also smartly packages all-hour tech support and video tutorials – tools designed expressly for seniors. And it comes preloaded with an AARP app, eBook reader, email (Gmail), photo sharing, video chat, games, tools and other features like a retirement and health calculators. Additional apps will be available on Google Play.
It’s basically a tablet—about the size of an iPad mini—that runs Google Android 4.4 with a custom app launcher featuring large icons. AARP says the tablet is designed for anyone who is apprehensive about using tablets and embracing technology and going digital.
AARP specifically targets 70-million 50+-age group, who haven’t adopted tablet technology. But I think the sweet spot for this product really isn’t most Boomers, but older seniors – the generation born before 1946. As we’ve discussed before, many Boomers are plenty tech savvy – and I also would be remiss if I didn’t mention that some seniors I’ve come across are plenty tech savvy…but not all.
OK, so why should you consider it for or recommend it to the seniors in your life? I like the design concept and larger icons and readability, but more than that, I like the addition of its one-click RealQuick Fix troubleshooting feature and 24/7-tech support. (Amazon’s Kindle Fire HDX also offers 24/7 support).
In terms of security, AARP has also made a smart move: It allows, among other free downloads, “Protecting Yourself Online for Dummies.†As it says, “Don’t let news about Internet risks deter you from taking full advantage of its benefits.â€
My previous post had some of our own safety suggestions for seniors. I’m not clear on AARP’s entire security offering. We at AVG offer strong security apps on the Android platform, check out our Google Play page.
Is the RealPad the right choice for everyone over the age of 50? Probably not. But it was designed with an older adult in mind who needs a little extra care – and I applaud that.
I agree with AARP, there’s just too much value in the digital world for seniors to be shut off. Tablets and larger format smartphones can really enrich their lives. In addition to providing grandparents with a digital photo album of their grandkids and a social platform to stay connected with family and friends, it’s a ready-made platform and market for important things like health monitoring and management apps. RealPad is a great step in the right direction to address that need.
We should all be interested in addressing the needs of this market. After all, we are all likely to be seniors someday.
In this post we provide additional information on how a specially crafted PowerPoint slideshow file (.PPSX) led to the execution of a BlackEnergy dropper.
The post CVE-2014-4114: Details on August BlackEnergy PowerPoint Campaigns appeared first on We Live Security.
A hacking group has claimed that it has access to 6,937,081 Dropbox accounts with usernames and passwords, according to ZDNet. The first 400 log-in combinations were posted to Pastebin, with more to follow in return for payment in Bitcoin.
The post Dropbox denies server hack as nearly 7 million account details leak appeared first on We Live Security.
