Tag Archives: spyware

改用沒有 FairShare 版本的 JavaScript Errors Notifier

在「Chrome Devtools Tips & Tricks」這邊看到介紹 Google Chrome 的 DevTools 用法說明,但讓我注意到文章最下面提到的兩個工具,其中提到了 JavaScript Errors Notifier 這個工具: JS Error Notifier (non-“spyware” version) creates a popup each time a Javascript error is printed to the console. Unfortunately, the main version of this extension submits … Continue reading

Posted in Browser, Computer, GoogleChrome, Murmuring, Network, Programming, Security, Software, WWW | Tagged , , , , , , , , , , | 1 Comment

Mac 版的 Java 安裝 Ask Toolbar...

在「Oracle has just given you another reason not to install Java on your Mac」這篇看到 Mac 版的 Java 居然會試著安裝 Ask Toolbar: Oh my god,這太厲害啦~ Adware is malware with a legal team. — InfoSec Taylor Swift (@SwiftOnSecurity) January 14, 2015 還是想貼一下這則 tweet...

Posted in Computer, Murmuring, Network, Security, Software | Tagged , , , , , | Leave a comment

Comodo 的 PrivDog 更厲害:直接關掉 CA Certificate 檢查

感覺接下來的整個月會拿有無窮無盡的 Superfish-like 新聞,下次如果出現 NSA 或是 GCHQ 已經在用這些漏洞的話也不太意外就是了:「Adware Privdog worse than Superfish」。 PrivDog 是 Comodo 發行的 adware,比起 Superfish 更厲害,直接把 CA Certificate 的檢查關掉: It will turn your Browser into one that just accepts every HTTPS certificate out there, whether it's been signed … Continue reading

Posted in Computer, Murmuring, Network, Security, Software, WWW | Tagged , , , , , , , , , , , | Leave a comment

聯想與 Superfish 的法律訴訟,以及後續的發展...

在「Download.com and Others Bundle Superfish-Style HTTPS Breaking Adware」這邊看到的 tweet,講的相當經典,把他找出來: Adware is malware with a legal team. — InfoSec Taylor Swift (@SwiftOnSecurity) January 14, 2015 文章裡面提到,Superfish 這種插入 CA root certificate 的軟體攔截 HTTPS 內容,不僅僅是 Superfish,這根本是目前免費軟體的「趨勢」,包括了十大裡面的前兩名: Two of the top ten downloads on … Continue reading

Posted in Computer, Murmuring, Network, Security, Software | Tagged , , , , , , , , , , , , | 2 Comments

聯想對 Superfish 的新聞稿、反安裝說明,以及影響的機器列表

Update:參考「聯想與 Superfish 的法律訴訟,以及後續的發展...」。 上一篇「聯想在筆電上安裝 Adware」由於被證實每一台機器都是一樣的 CA key,所以這把 key 將可以拿來攻擊這些電腦。 各家的 Spyware/Adware/Malware 清除軟體都把 Superfish 納入了: Looks like Redmond invoked the nuclear option on Superfish > RT @FiloSottile: GO MICROSOFT pic.twitter.com/5fpSDS9VLq — Kenn White (@kennwhite) February 20, 2015 聯想官方的新聞稿中裡面有受到影響的機器列表:「LENOVO STATEMENT ON SUPERFISH」。 … Continue reading

Posted in Browser, Computer, Firefox, GoogleChrome, IE, Murmuring, Network, OS, Security, Software, Windows | Tagged , , , , , , , , , , , | Leave a comment