Tuesday, March 31, 2009

iPhone OS 3.0 beta 2 now available

by Jason D. O'Grady

Apple has posted iPhone OS 3.0 beta 2 (build 7A259g) in the iPhone Dev Center. The download is only available to registered iPhone developers and weighs in at 2.13GB.

According to Ars Technica the second public developer build of iPhone 3.0 contains minor updates, bug fixes and no new functionality. Sources tell Ars that Apple is warning developers to avoid its tethering and MMS features because they “are not supported, and should not be used.”

As with the the previous developer build (7A238j) Apple warns:

Devices updated to iPhone 3.0 beta can not be restored to earlier versions of iPhone OS. Devices will be able to upgrade to future beta releases and the final iPhone OS 3.0 software.

Also it’s wise to avoid the temptation to install an unlicensed version of iPhone 3.0 as it has been known to turn your iPhone into an iBrick.

Conficker worm is no April Fool's joke

I have an apple and I don't know if it will be affected like most PCs will be. I don't think I have anything to worry about since their security is much better than PCs. I do have a lot of friends though who are freaking out about the Conficker worm and will not even be getting online tomorrow.

By McNelly Torres | South Florida Sun-sentinel

Cyber security experts are warning that a new variation of Conficker, a fast-spreading computer worm also known as Downadup, could attack millions of computers on Wednesday -- April Fool's Day.

Personal computers and laptops already infected with Conficker could automatically be linked to the servers operated by the hackers.

Esteban O. Farao, a consultant with Enterprise Risk Management, a Miami security consulting company, said the worm is not destroying files or stealing data, but it has the capability to do so.

"The main concern about this worm is that it is capable of downloading additional code from the hacker's Web site or through a peer-to-peer connection," Farao said. "Consequently it can bring more functionalities or receive instructions."

Experts say it's unknown whether the worm will cause havoc or merely turn out to be an April's Fool prank. But people can protect their computers by using security software.

Howard Schmidt, a former White House cyber security adviser, said computer users need to download an application of Microsoft software to detect and disable the worm.

Experts also advise keeping your security applications and operating systems updated.

"The most interesting thing about this worm is that every time someone finds out a way to get rid of the worm, it reinvents itself with more rigor and better technology," Schmidt said.

Authorities have not identified the culprits behind the worm or their intentions. Microsoft has offered a $250,000 reward to bring the Conficker creator to justice.

The Conficker worm, which has infected 10 million computers outside the United States, is a program that exploits weaknesses in Microsoft's Windows operating system including Windows XP, Windows Vista, Windows Server 2003 and Windows Server 2008.

The worm surfaced last November in computers on weak networks such as those in coffee shops, airport or offices. The second variation can spread via shared networks, including removable drives such as USB devices.

This worm also blocks infected systems from downloading new security software or receiving updates for security software. After attacking, it connects to a server where it receives instructions to propagate and gather personal information. Conficker creates a back door in the system where the worm can download and install additional programs.

Albert Whale, owner of ABS Computer Technology Inc., a Pittsburgh company that offers computer consulting services, said experts think the hackers are making money by getting information to send spam or attack people they don't like.

"Hackers spend 24 hours a day perfecting their craft," Whale said. "People don't even spend an hour a week securing their computers."

Staff researcher Barbara Hijek contributed to this report.

Wednesday, March 25, 2009

Conficker worm come April 1

In an event that hits the computer world only once every few years, security experts are racing against time to mitigate the impact of a bit of malware which is set to wreak havoc on a hard-coded date. As is often the case, that date is April 1.

Malware creators love to target April Fool's Day with their wares, and the latest worm, called Conficker C, could be one of the most damaging attacks we've seen in years.

Conficker first bubbled up in late 2008 and began making headlines in January as known infections topped 9 million computers. Now in its third variant, Conficker C, the worm has grown incredibly complicated, powerful, and virulent... though no one is quite sure exactly what it will do when D-Day arrives.

Thanks in part to a quarter-million-dollar bounty on the head of the writer of the worm, offered by Microsoft, security researchers are aggressively digging into the worm's code as they attempt to engineer a cure or find the writer before the deadline. What's known so far is that on April 1, all infected computers will come under the control of a master machine located somewhere across the web, at which point anything's possible. Will the zombie machines become denial of service attack pawns, steal personal information, wipe hard drives, or simply manifest more traditional malware pop-ups and extortion-like come-ons designed to sell you phony security software? No one knows.

Conficker is clever in the way it hides its tracks because it uses an enormous number of URLs to communicate with HQ. The first version of Conficker used just 250 addresses each day -- which security researchers and ICANN simply bought and/or disabled -- but Conficker C will up the ante to 50,000 addresses a day when it goes active, a number which simply can't be tracked and disabled by hand.

At this point, you should be extra vigilant about protecting your PC: Patch Windows completely through Windows Update and update your anti-malware software as well. Make sure your antivirus software is actually running too, as Conficker may have disabled it.

Microsoft also offers a free online safety scan here, which should be able to detect all Conficker versions.

Sony Bravia LCD HDTV, Logitech Harmony Advanced Universal Remote, Lenovo IdeaPad laptop

A Sony 32-inch Class BRAVIA KDL-32M4000 LCD HDTV, a Logitech Harmony 510 Advanced Universal Remote Control, and a Lenovo IdeaPad laptop. Here are Gadget Gal’s daily deals for Wednesday, March 25:

1. Woot is offering a great deal today on the Sony 32-inch Class BRAVIA KDL-32M4000 LCD HDTV. Normally $749.99, Woot is dropping the price down to $479.99. The deal is for today only, so hurry.

[read the review] [find the deal]

2. Get the Logitech Harmony 510 Advanced Universal Remote Control from Amazon.com today for only $47.99. The remote normally costs $99.99, saving you a whole 52 percent off of the original price.

[read the review] [find the deal]

3. You’ve got some time on this one, but you can get the Lenovo IdeaPad S10e 4187 - Atom N270 1.6 GHz - 10.1-inch TFT for $299.99 after mail-in rebate from OnSale.com until April 30, 2009. The laptop includes features such as 1GB memory, 160GB SATA HDD + 4GB SSD, QuickStart technology, 10.1 LED, camera, and Windows XP Home. Find it a few dollars cheaper at CostCentral.com for $297.40.