A New Twist to the Adobe Vulnerability

first_imgTags:#Adobe#NYT#web Stevens created a PDF which exploits the vulnerability not within the main document information, but rather, its metadata. Using this technique, he was able to crash Windows Explorer by doing the following:Selecting a vulnerable PDF document within the folderViewing thumbnails of a folder containing a vulnerable PDF document.Hovering the mouse over a vulnerable PDF document“Under the right circumstances, a Windows Explorer Shell Extension will read the PDF document to provide extra information, and in doing so, it will execute the buggy code and trigger the vulnerability. Just like it would when you would explicitly open the document,” Stevens explained. Stevens proof of concept caused Explorer to crash, however, someone with dubious intentions can exploit the vulnerability to potentially do anything they like on your system. Adobe acknowledged this vulnerability in all versions of Adobe Reader on February 19, 2009 and categorized it as a critical issue. An update is expected next week for Reader 9 and Acrobat 9. Unfortunately, Adobe’s advice to disable JavaScript is useless when it comes to this new twist and therefore we recommend you take John Paczkowski’s advice from a few weeks ago: AdobeAcrobatUninstall.exeNote: Stevens has produced a short video showing how these vulnerabilities can be triggered; we’ve embedded it below. Top Reasons to Go With Managed WordPress Hosting If you think it is safe to download PDF documents and view them once Adobe finally releases its patch next week, think again. Didier Stevens, an IT security consultant last week demonstrated that simply viewing the folder containing compromised PDF documents within Microsoft’s Windows Explorer is enough to launch the exploit.It appears that this is due to Adobe’s shell extension for Windows Explorer which allows the malicious code to be invoked in three ways; when hovering over a PDF document, single clicking on a PDF document, or viewing the thumbnail.Adobe Acrobat Reader installs a shell extension, which is code that is executed by Explorer to retrieve metadata (from a PDF file in this instance). The Adobe shell extension adds this extra data so that users can see details about a file at a glance in Windows Explorer. Details such as Title, Author, Subject, Size and thumbnail image; details that typically occur in tooltips. Related Posts lidija davis Why Tech Companies Need Simpler Terms of Servic… A Web Developer’s New Best Friend is the AI Wai… 8 Best WordPress Hosting Solutions on the Marketlast_img read more

Free Slurpees and Operation Chill

first_imgAs the weather continues to heat up, July 11 (7/11) is a great day to chill out. Yesterday was once again 7-Eleven Day—which meant a FREE Slurpee for anyone who visited the store. (Did you get yours?) But this year, one of loss prevention’s prominent executives is taking it to another level, appearing on the daily Fox and Friends morning show.Mark Stinde, MBA, LPC, vice president of asset protection for 7-Eleven, flew to New York City this week to stop by the Fox and Friends studio and talk about the company’s popular summertime initiative, Operation Chill.Operation Chill started 23 years ago as a way to help local law enforcement officers connect and interact with their communities in a positive way. When the temperatures heat up, kids head outside to ride bikes, play sports, visit the pool, meet friends and have fun. This provides a great opportunity for local police officers to meet kids where they are and have positive interactions with them. Enter Operation Chill, a program sponsored by 7-Eleven that provides law enforcement officers with free Slurpee drink coupons to kids caught doing good deeds and making responsible choices. This year, 7-Eleven has announced that more than 1.4 million Slurpee coupons will be issued to 1,100 police and sheriff’s departments nationwide. Most will be distributed during the summer months and back-to-school season.- Sponsor – In the Fox and Friends segment,  Stinde shares a bit about the history and benefits of Operation Chill. “Since 1995, we’ve given out 21 million coupons,” he said. Check out the clip below—and don’t forget to nab your free Slurpee today.Watch the latest video at foxnews.com Stay UpdatedGet critical information for loss prevention professionals, security and retail management delivered right to your inbox.  Sign up nowlast_img read more

Skype Unveils Video Calls for Select Android Devices

first_imgTags:#Microsoft#mobile#NYT#web Related Posts The Rise and Rise of Mobile Payment Technology dan rowinski What it Takes to Build a Highly Secure FinTech …center_img Why IoT Apps are Eating Device Interfaces Role of Mobile App Analytics In-App Engagement Skype has released a new update of its Android application that will bring video calls to a select batch of devices. Skype video calls will be available on the Google Nexus S, HTC Desire S, Xperia Neo and the Xperia Pro with more devices to be added to the list eventually.The rollout of video calling on Android for Skype is limited because of the system requirements. A phone must have a front-facing camera (of course) and be running version 2.3 (Gingerbread) or higher. As more devices upgrade to Gingerbread, the more will be able to take advantage of Skype video chat. Can Skype remain relevant in the mobile ecosystem as services like Pinger, Google Plus/Talk, Facebook and others become more prevalent?The iOS version of Skype has had video calling for some time. But it is much easier for developers to create an app for the iPhone than it is for Android. The argument is longstanding – there is one set of specifications for an iPhone, there are dozens for Android. That number is smaller than the 312 (or so) total Android devices available worldwide because not all of them have a front-facing camera, but new Android devices like the Motorola Atrix and Samsung Galaxy II are more than capable of handling the bandwidth and processor requirements of video chat.Skype is following in the list of companies that have recently made previously unavailable apps accessible to a limited set of devices. Netflix and Hulu Plus finally came to Android in limited rollouts, with promises of more devices to be added later.Qik Video Connect also allows for video calls over Android. Qik allows for video calls between Android and iOS devices, as well as users on computers. Qik was bought by Skype for $100 million in January.last_img read more

Students attend Delhi University’s first open day session

first_imgThe board results are expected any time now and admission season has begun. In accordance with this, Delhi University held its first open day session on May 21. Two sessions were conducted on Thursday, which were attended by over 700 students and parents.The students were once again told that they should give more importance to their choice of course rather than college. The university has 61 colleges which offer a total of 60,000 seats.The open day sessions are conducted to provide information about the university to students and their parents, and also to answer all possible queries that they might have. The changes in the eligibility criteria have created confusion amongst the students. They were unclear about the admission process regarding sports category registrations, extra-curricular quota, hostel facilities, entrance tests and percentage point deduction for subjects.The Sports category registrations and fitness trials have become centralised this year. The best of four criteria, including one language and three academic subjects is the same as previous years. The entrance exams for most courses have been discontinued for most courses, but the tests will be conducted for Bachelor in Business Economics (BBE) and Bachelor in Finance and Investment (BFI).Also, this year onwards mathematics will be a compulsory subject for B.Com (Hons.), Economics (Hons.) and various management programmes.The students applying under the reserved categories, such as child of war widow, Jammu and Kashmir migrant, etc. have been advised by the university to apply through the regular format as well, as the seats under these quotas are extremely limited.advertisementThe university is also helping students with their queries online at the official website, www.du.ac.in.last_img read more