Critical Adobe PDF Vulnerability: Disable JavaScript!

No relief appears to be in sight as far as Adobe product vulnerabilities this year. Here is hope that 2010 proves better for Adobe security.

In the meantime, however, there is yet another vulnerability in Adobe Reader and Adobe Acrobat 9.2, including all earlier versions, being actively exploited in the wild. although the exploit is actively being used by attackers, at this time the number of attacks are limited. This is expected to change within the next few weeks.

All users of Adobe Reader and Adobe Acrobat 9.2 are strongly encouraged to incorporate the suggested workaround by disabling JavaScript in Adobe PDF Reader/Acrobat:

Click: Edit -> Preferences -> JavaScript and uncheck Enable Acrobat JavaScript

For home use, you may wish to replace Adobe Reader with an alternate PDF reader. Other options are available at http://pdfreaders.org/.

Update: Adobe PSIRT announced plans to issue an update to Adobe Reader and Acrobat by January 12, 2010. In addition, the official Security Advisory was posted at Adobe - Security Advisories: APSA09-07

References:

• Adobe Product Security Incident Response Team (PSIRT): New Adobe Reader and Acrobat Vulnerability
• Threatpost: How to mitigate Adobe PDF malware attacks
  
• National Vulnerability Database (NVD): (CVE-2009-4324)
• ZDNet.com: Adobe confirms PDF zero-day attacks. Disable JavaScript now

Clubhouse Tags: Clubhouse, Security, Updates, Vulnerabilities, Adobe

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Facebook Privacy

As announced last summer, the Facebook privacy policy has been updated. Unfortunately, when Facebook members are presented with the update, the default entry is “Everyone”. As those of us who spend time in the security arena are well aware, people tend to miss or click past pre-checked settings. I suspect Facebook advertisers are hoping that will be the case with the recent changes.
Following are screen copies of what is presented to Facebook members.
1) Privacy Announcement



2) Update Privacy Settings



3) Confirmation

There are other issues relating to your privacy that most Facebook members are unaware of as well. It has to do with applications accessing your settings -- you know, the Mafia, Farmville, What animal is your spirit guide, What is your ruling plane, Quizes, and all the rest that show up as invitations.

As Bill Pytlovany explains, it is not only the games. When you take a quiz, or even donate to “Causes” you are providing access your personal information. When your friend allows an application, they give away all your information too. See Facebook Simplifies Sharing your Personal Info and Who Gets Your Personal Information on Facebook? and then lock down your Facebook profile settings by clicking on “Settings” (located at the top, right corner of the page). Select“Privacy Settings” in the drop-down menu and consider changing the settings from Everyone to a more modest approach such as Friends of Friends.

You can also change the access that specific Applications have to your information. Click Applications in the bottom left corner of the Facebook page and select "Edit Applications". Review the various permissions provided to applications in the drop-down menu identified as "Show".




Facebook Information:

• An Open Letter from Facebook Founder Mark Zuckerberg
• Facebook’s Privacy Policy

References:

• Bits from Bill: Who Gets Your Personal Information on Facebook?
• Bits from Bill: Facebook Simplifies Sharing your Personal Info
• PC World: “Facebook Privacy Changes Go Live, Beware of ‘Everyone’"
• SunbeltBLOG: “Everyone” may not be your friend

Clubhouse Tags: Clubhouse, Security, Privacy, Information

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Introducing WinPatrol PLUS Family Pack

Just in time for the Holidays, BillP Studios introduced the WinPatrol PLUS family Pack! The PLUS Family Pack license is valid for immediate family. As a result, for only $49.95 you can upgrade to WinPatrol PLUS and use the same PLUS code on your desktop, laptop, your spouse's computer, as well as your children(s) computer.

Stuck on gift ideas for your sister, brother or best friend? A WinPatrol PLUS Family Pack license is the gift that keeps on giving. It isn't a subscription, it is good for life.

As Bill Pytlovany explained,

"This is a limited offer but I hope it will make the holidays brighter especially for those of you with large families."

Click here to Order

WinPatrol works on all Microsoft Windows Operating systems.

Clubhouse Tags: Security, Microsoft, Windows 7, Windows Vista, Windows XP, Family, WinPatrol, Information

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...