Systems and software flaws: who is most vulnerable?

The publisher of software and security solutions for businesses GFI has developed a list of vulnerabilities for operating systems and software. In a blog post he points increased flaws and the fact that all publishers are concerned even if the list is not exhaustive. The analysis is based on the flaws identified by the NVD (National Vulnerability Database) of the US government.

The figures show that 2014-seems been a difficult year for software vendors who have to tackle to fill many gaps. From 4258 in 2010 and with a shy evolution in the following years, we move to 7038 vulnerabilities identified in 2014.

However, it appears that increasing the number of vulnerabilities considered important more measured. The number is still below the 2010 figures. On the other hand we can see that flaws are detected primarily in software (83%) and then in operating systems (13%) while the problem directly related to hardware are lower (4%).

Concerning Apps, browsers are the most targeted according to the list, Mozilla Firefox is doing better even if the number of faults is important. GFI says that browsers are top of the list for years because it's the most popular means of access to spread malware.

The list is as surprising about operating systems, including the division of OS versions. Mac OS X was down list and Microsoft Server 2008 and Windows 7 took the first places. The trend has been reversed and Mac OS X and Apple iOS are now top of the list while Microsoft systems seem to have known less difficulty.

The non-exhaustive figures do not say it is safer to use a particular system or application over another. However, they give two very important information for user: no one is immune to whatever the system and updates that correct these faults are a good way to guard against security problems.

Read More

Google wants Firefox users back & Dump Yahoo

In November 2014, Firefox decided to make Yahoo! the default search engine in the US instead of Google. The Mountain View company launched in January against the attack to recover lost surfers.

When the American users surfing on Firefox go to the page of Google, short messages are displayed in the address bar. The first states that "Google is faster" and proposed to make it the default search engine while a second invites users to make Google their home page.

The Mountain View company has also tweeted a small link to encourage "Firefox fans who love research with Google" to return to their favorite search engine.

This links to a page explaining how to proceed. This page is available in English but not only. It is found in French, Spanish, Russian ... to convince a maximum of Internet users, the United States and other countries to come back to Google.
This offensive is more understandable when we know that in one year the Google search engine lost 4% of market share ... largely in favor of Yahoo !.

Read More

Windows 10 conference to follow in live video

The press and media have been invited by Microsoft to follow an event that should teach us a little about Windows 10 on 21 January. Microsoft also offers to all those who wish to follow the conference live via a web page.

Microsoft's next operating system is already in the hands of testers for a few months, but it was only an early stage of development. The Technical Preview of Windows 10 is somewhat equivalent versions of "Alpha" software and should get more information on a more complete version, but still stamped Preview, on this occasion.

A special page Windows 10 Story was set up, it recalls the time and date of the conference, on 21 January at 9:00 PT, that is to say, at 18:00 Paris time. It is also from this page, that it is possible to watch the confernce live.

On his Microsoft blog also indicates that several personalities will be attending whose CEO Satya Nadella.

There is no indication if a new version of Windows 10, as a "Consumer Preview" more oriented public, will be issued on the day of the presentation.

Read More

We can hack passwords by... filming users

Imagine that you are in a cafe with your tablet. You enter the secret code to reach one of your favorite online services. You are using a software anti-spyware protection. There is no risk for anyone to see what you type, is not it? Error! Five security researchers have recently shown that it is possible to guess the letters which a user types just by filming a few meters, and this with basic equipment such as a webcam or a smartphone.

Indeed, scientists have developed a method of image analysis that allows them to identify with sufficient precision the place where the fingers landing on the touch screen then, by comparison with a pre-established scrim, to infer the characters. And that, whatever the angle of shooting.

Researchers carried a series of tests in "natural environment". At a distance of two meters, the detection is made with 100% success. This rate down to 80% between three and four meters, then becomes 50% beyond.

How to protect themselves against this type of attack? Easy, say the researchers, it is necessary to systematize the use of virtual keyboards where the location of the keys is random, as it already exists on some banking applications. Well, of course, to write a text, it is not convenient, but to enter a password that is acceptable.

Below, The analysis of five researchers:

Read More