<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Monroe Tech</title>
	<atom:link href="http://www.monroetech.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.monroetech.com</link>
	<description>IT Computer Repair &#124; Rochester &#124; Greece &#124; Hilton &#124; Spencerport &#124; Gates &#124; New York</description>
	<lastBuildDate>Tue, 08 May 2012 23:27:26 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Thousands of Twitter Passwords Exposed</title>
		<link>http://www.monroetech.com/thousands-of-twitter-passwords-exposed/</link>
		<comments>http://www.monroetech.com/thousands-of-twitter-passwords-exposed/#comments</comments>
		<pubDate>Tue, 08 May 2012 23:27:26 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1979</guid>
		<description><![CDATA[Twitter is investigating the release of what appear to be thousands of user account passwords and e-mail addresses. &#8220;We are currently looking into the situation. In the meantime, we have pushed out password resets to accounts that may have been affected,&#8221;<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/thousands-of-twitter-passwords-exposed/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>Twitter is investigating the release of what appear to be thousands of user account passwords and e-mail addresses.<br />
&#8220;We are currently looking into the situation. In the meantime, we have pushed out password resets to accounts that may have been affected,&#8221; Twitter spokesman Robert Weeks told CNET in an e-mail. &#8220;For those who are concerned that their account may have been compromised, we suggest resetting your passwords and more in our Help Center.&#8221;<br />
The user data, so vast that it took five Pastebin pages to post, was released yesterday and blogged about on Airdemon.net, putting the number of accounts affected at 55,000 or more. It&#8217;s unclear who posted the stolen Twitter user information, and why.</p>
<p>Weeks disputed that estimate, noting that many of the passwords and accounts seemed like duplicates.<br />
&#8220;It&#8217;s worth noting that, so far, we&#8217;ve discovered that the list of alleged accounts and passwords found on Pastebin consists of more than 20,000 duplicates, many spam accounts that have already been suspended and many log-in credentials that do not appear to be linked (that is, the password and username are not actually associated with each other),&#8221; he said.</p>
<p>Credit:cnet.com</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/thousands-of-twitter-passwords-exposed/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Flashback infections in OS X systems have lessened, but are holding steady from a lack of users updating or scanning their systems.</title>
		<link>http://www.monroetech.com/flashback-infections-in-os-x-systems-have-lessened-but-are-holding-steady-from-a-lack-of-users-updating-or-scanning-their-systems/</link>
		<comments>http://www.monroetech.com/flashback-infections-in-os-x-systems-have-lessened-but-are-holding-steady-from-a-lack-of-users-updating-or-scanning-their-systems/#comments</comments>
		<pubDate>Tue, 08 May 2012 01:33:19 +0000</pubDate>
		<dc:creator>Joe Ogg</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1977</guid>
		<description><![CDATA[Following the Flashback malware and the estimates of 600,000 Mac systems being infected, security companies have been steadily tracking the communications done by the malware on infected systems. In recent weeks, the data from these monitoring efforts have suggested that despite<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/flashback-infections-in-os-x-systems-have-lessened-but-are-holding-steady-from-a-lack-of-users-updating-or-scanning-their-systems/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>Following the Flashback malware and the estimates of 600,000 Mac systems being infected, security companies have been steadily tracking the communications done by the malware on infected systems. In recent weeks, the data from these monitoring efforts have suggested that despite early reports of the malware levels sinking rapidly from efforts by Apple, news organizations, and anti-malware companies, the levels of infections appears to be remaining constant.<br />
The spread Flashback malware was facilitated by a neglected security hole in Apple&#8217;s Java runtime for OS X, and at its peak had infected around one percent of Mac systems. To tackle the spread of the malware, initially news organizations covered methods for manually removing the malware, followed by security companies issuing malware removal tools to facilitate this process. Apple then released a series of Java updates to close the vulnerability and also scan for and remove known instances of the malware.<br />
During the time of these infections, security companies set up sinkhole servers and other techniques to monitor the network traffic from the Flashback infections, and determine how many unique computers had been infected with the malware. Following the peak of the malware infection on August 6, initial reports from the anti-malware efforts suggested the infection rates had dropped significantly, with the number of infected Macs decreasing to a reported low of 30,000 in 10 days. However, despite these claims the malware has remained active, and adjustments have had to be made to these numbers.<br />
Following the reports of success at tackling the malware, security company Dr. Web revealed errors in the malware estimation calculations and suggested that the number of infected systems was in fact much higher. Security companies followed this news with more conservative estimates that suggested a more shallow fall in the malware, to an estimated 140,000 systems in late April.<br />
Despite the higher numbers, the number of malware infections did fall from its peak, though while some have hoped the number to fall far lower, the malware appears to have fallen to a revolving infection rate of just over 100,000 Mac systems. In a new report by Intego, the company claims that in the past week it has observed the following numbers from its sinkhole operation:<br />
04/30/2012 &#8211; 102,769 infected Macs<br />
05/01/2012 &#8211; 96,948 infected Macs<br />
05/02/2012 &#8211; 103,779 infected Macs<br />
05/03/2012 &#8211; 121,826 infected Macs<br />
05/04/2012 &#8211; 102,375 infected Macs<br />
05/05/2012 &#8211; 118,593 infected Macs<br />
05/06/2012 &#8211; 113,909 infected Macs<br />
Intego notes that these numbers are only the active infections it monitors on a day-to-day basis, and is not the total number of Macs infected. The malware is only active when a user logs in and thereby suggests that this activity difference reflects a steady state variance in when people are using their Macs, which will revolve as Macs are used more in some parts of the world than at others. Therefore the total number of infected systems will likely be much higher at around the 140,000 of previous recent estimates.<br />
Intego further notes that despite the initial impact in the malware&#8217;s activity by community efforts, the numbers appear to no longer be declining and show indications that they may even be increasing. Intego speculates the reason for this is that a small percentage of users have not taken any effort to either update their systems, but it may be more than just updating. Apple has only offered updates and malware removal options for OS X 10.6 and above (its supported versions). However, this malware will infect systems with older versions of OS X, so even if the older versions have been kept up to date, they will be left vulnerable without Apple issuing a proper Java fix. Not only can they still contain the malware, but they also will be subject to new infections by any of its variants.<br />
Overall, the trend from the malware since it was found is that its infection rates have dropped, but that the decline has leveled off. Since many people will not update, upgrade, or otherwise address the problem, is unlikely that we will see this number decrease rapidly in the near future. For this steady state of infected users, it is far more likely that the infections will decline as they replace their Macs for newer models over the next few years. Even then, if these users upgrade their systems and migrate their data to new Macs, the malware installations will migrate with them and potentially continue to function.</p>
<p>Credit: cnet.com</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/flashback-infections-in-os-x-systems-have-lessened-but-are-holding-steady-from-a-lack-of-users-updating-or-scanning-their-systems/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apple launches 5.1.1 update to its iOS platform IPad IPhone</title>
		<link>http://www.monroetech.com/apple-launches-5-1-1-update-to-its-ios-platform-ipad-iphone/</link>
		<comments>http://www.monroetech.com/apple-launches-5-1-1-update-to-its-ios-platform-ipad-iphone/#comments</comments>
		<pubDate>Tue, 08 May 2012 01:29:49 +0000</pubDate>
		<dc:creator>Joe Ogg</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1975</guid>
		<description><![CDATA[The company&#8217;s iOS 5.1.1 update comes with bug fixes for AirPlay video playback and the &#8220;Unable to purchase&#8221; error message popping up after users buy something from their device. In addition, Apple fixed a bug that prevented the new iPad from<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/apple-launches-5-1-1-update-to-its-ios-platform-ipad-iphone/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>The company&#8217;s iOS 5.1.1 update comes with bug fixes for AirPlay video playback and the &#8220;Unable to purchase&#8221; error message popping up after users buy something from their device. In addition, Apple fixed a bug that prevented the new iPad from switching between 2G and 3G networks.<br />
Apple&#8217;s iOS 5.1.1 update comes just a couple of months after the company revealed iOS 5.1. That update delivered a host of new bug fixes, a few interface tweaks, and even a hint that the next iPhone could come with 4G LTE support. Some reports suggested the operating system version also improved the platform&#8217;s battery life.<br />
iOS 5.1.1 is available now as a free download. Current iOS 5 users can head over to their General > Software Update pane to install the new software.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/apple-launches-5-1-1-update-to-its-ios-platform-ipad-iphone/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>THE NYS ELECTRONIC EQUIPMENT RECYCLING REUSE ACT</title>
		<link>http://www.monroetech.com/the-nys-electronic-equipment-recycling-reuse-act/</link>
		<comments>http://www.monroetech.com/the-nys-electronic-equipment-recycling-reuse-act/#comments</comments>
		<pubDate>Mon, 07 May 2012 21:44:03 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[News Blog]]></category>
		<category><![CDATA[computer]]></category>
		<category><![CDATA[county]]></category>
		<category><![CDATA[DEC]]></category>
		<category><![CDATA[electronics]]></category>
		<category><![CDATA[monitor]]></category>
		<category><![CDATA[Monroe]]></category>
		<category><![CDATA[RCR&R]]></category>
		<category><![CDATA[recycling]]></category>
		<category><![CDATA[Rochester]]></category>
		<category><![CDATA[Waste]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1973</guid>
		<description><![CDATA[THE NYS ELECTRONIC EQUIPMENT RECYCLING REUSE ACT The New York State Electronics Recycling Reuse Act requires electronics manufacturers who currently sell Covered Electronics Equipment in the state of New York to provide for a FREE, convenient and environmentally compliant electronic recycling<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/the-nys-electronic-equipment-recycling-reuse-act/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>THE NYS ELECTRONIC EQUIPMENT RECYCLING REUSE ACT</p>
<p>The New York State Electronics Recycling Reuse Act requires electronics manufacturers who currently sell Covered Electronics Equipment in the state of New York to provide for a FREE, convenient and environmentally compliant electronic recycling program for all consumers throughout the state.</p>
<p>By law, the following Covered Electronic Equipment (CEE) can be recycled for FREE:</p>
<p>Computers / Laptops / CRT Monitors / LCD Monitors / Televisions / Keyboards Mice / Fax Machines/ Scanners / Small Copiers and Printers / VCRs / Portable Digital Music Players / DVD Players / Digital Converter Boxes / Cable or Satellite Receivers / Electronic or Video Game Consoles / Cell Phones and Small Scale Servers weighing less than 100 lbs)</p>
<p>Items which are NOT COVERED under the NYS law include:<br />
Batteries, Fluorescent Lamp Material, Typewriters, Tape Media and Oversized Items</p>
<p>Exceeding 100 Lbs. (for example: Large Copiers Large Printers, Etc.)</p>
<p>Monroe Tech is proud to be listed with the DEC as a registered E-waste collection location in Monroe County for computer, electronics, monitor, TV, stereo, printer, laptop, desktop, CRT monitor, LCD monitor and more.</p>
<p>Monroe Tech is also proud to be a part of the RCR&amp;R Alliance Network of recyclers in Monroe County.</p>
<p>If you have any questions about recycling, or how we can help, please call us anytime at 585-392-TECH(8324)</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/the-nys-electronic-equipment-recycling-reuse-act/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>It&#8217;s real: Infected users get warning about July 9 &#8216;Internet Doomsday&#8217;</title>
		<link>http://www.monroetech.com/infected-users-get-warning-about-july-9-2012-internet-doomsday/</link>
		<comments>http://www.monroetech.com/infected-users-get-warning-about-july-9-2012-internet-doomsday/#comments</comments>
		<pubDate>Fri, 04 May 2012 14:44:50 +0000</pubDate>
		<dc:creator>Joe Ogg</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1961</guid>
		<description><![CDATA[If you see this message pop up on your computer screen in the days, weeks and months ahead, don&#8217;t panic: It&#8217;s legitimate and it&#8217;s meant to warn you about malware that could hurt your computer. &#8220;Your computer has DNS settings that<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/infected-users-get-warning-about-july-9-2012-internet-doomsday/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>If you see this message pop up on your computer screen in the days, weeks and months ahead, don&#8217;t panic: It&#8217;s legitimate and it&#8217;s meant to warn you about malware that could hurt your computer.</p>
<p><img src="http://www.monroetech.com/wp-content/uploads/2012/05/doomsday.png" alt="July 9 Internet Doomsday DNS warning" title="July 9 Internet Doomsday DNS warning" width="545" height="56" class="alignleft size-full wp-image-1962" /></p>
<p>&#8220;Your computer has DNS settings that mean you probably have the DNS Changer malware. Please visit http://www.opendns.com/dns-changer for help fixing your DNS. You may lose access to the Internet after July 9th, 2012 if you don&#8217;t fix this. For additional information regarding the DNS changer malware, please visit the <a href="http://www.fbi.gov/news/stories/2011/november/malware_110911">FBI&#8217;s website</a>. DNS Changer warning provided by Cloudflare.&#8221;</p>
<p>What does this all mean? Well, number one.. believe it; it&#8217;s real. Your computer is infected with a virus that causes some web sites you visit to be redirected by the author of the virus. Have your computer cleaned by a qualified professional as soon as you can, or starting July 9th, your internet connection will go dark. </p>
<p>Who is behind this? The FBI, a company called OpenDNS and a company called Cloudflare. What the FBI has done is &#8216;hijacked&#8217; the addresses that the virus authors use and then worked with the 2 aforementioned Internet service companies to show the warning message. You only see the message if your computer is being redirected to that site. So.. If you see it, you&#8217;re infected. </p>
<p>The reason for the warning is that the FBI has already shut down the primary server hosting this malware. But if they shut it down now, anyone infected will lose their connection immediately. So in a sense, the FBI is keeping the malware server (it&#8217;s been cleansed) on life support to give people time to fix their machines. </p>
<p>Interesting stuff. You can read more about this by reading a joint press release from OpenDNS and Cloudflare <a href="http://www.marketwatch.com/story/cloudflare-and-opendns-join-forces-to-help-internet-users-affected-by-dnschanger-malware-2012-05-03">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/infected-users-get-warning-about-july-9-2012-internet-doomsday/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows 8 Won&#8217;t Include Media Center Automatically</title>
		<link>http://www.monroetech.com/windows-8-wont-include-media-center-automatically/</link>
		<comments>http://www.monroetech.com/windows-8-wont-include-media-center-automatically/#comments</comments>
		<pubDate>Fri, 04 May 2012 02:06:00 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1955</guid>
		<description><![CDATA[One of the new changes that Microsoft is introducing to it&#8217;s upcoming operating system is that Windows Media Center will only be available as an upgrade. Microsoft announced today that it is &#8220;making Windows Media Center available in Windows 8.&#8221; But&#8230;<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/windows-8-wont-include-media-center-automatically/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>One of the new changes that Microsoft is introducing to it&#8217;s upcoming operating system is that Windows Media Center will only be available as an upgrade.</p>
<p>Microsoft announced today that it is &#8220;making Windows Media Center available in Windows 8.&#8221; But&#8230; this is actually a half truth.<br />
The tech company is taking a number of steps to make sure Windows 8 supports Media Center just like in Windows 7. However, it&#8217;s changing Media Center&#8217;s integration into Windows. Rather than shipping it with Windows 8 &#8212; as it has done in the last two versions of Windows &#8212; users now have to buy the Media Center separately as an upgrade.<br />
&#8220;Given the changing landscape, the cost of decoder licensing, and the importance of a straight forward edition plan, we&#8217;ve decided to make Windows Media Center available to Windows 8 customers via the Add Features to Windows 8 control panel (formerly known as Windows Anytime Upgrade),&#8221; Microsoft wrote in a blog post today. &#8220;Windows Media Player will continue to be available in all editions, but without DVD playback support.&#8221;</p>
<p>Users interested in Media Center have a couple of choices. If they buy Windows 8 Pro, they can they purchase Windows 8 Media Center Pack to have full integration with DVD playback, broadcast TV recording and playback, and VOB file playback. If they have just Windows 8, they can buy the Windows 8 Pro Pack to get Media Center. Microsoft has yet to announce the cost for Windows 8 and the upgrades; it did say, however, that the Media Center Pack pricing will be &#8220;in line with marginal costs.&#8221;<br />
The separate pricing issue aside, Microsoft also said today that with the Media Center it is focusing on a &#8220;comprehensive video and audio platform for developers to build engaging and differentiated apps.&#8221; The apps will use decoders specialized for system reliability, battery life, and performance. In addition, playback will include YouTube video, Netflix video, Amazon audio/video, Hulu video, MP4 video, and more.</p>
<p>Credit: cnet</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/windows-8-wont-include-media-center-automatically/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IPO could value Facebook at up to $96 billion</title>
		<link>http://www.monroetech.com/ipo-could-value-facebook-at-up-to-96-billion/</link>
		<comments>http://www.monroetech.com/ipo-could-value-facebook-at-up-to-96-billion/#comments</comments>
		<pubDate>Fri, 04 May 2012 01:38:27 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1953</guid>
		<description><![CDATA[Facebook has set a price range for its initial public offering of $28 to $35 per share, according to a regulatory filing, valuing the company at up to $96 billion and setting the stage for the biggest Internet IPO yet. The<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/ipo-could-value-facebook-at-up-to-96-billion/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>Facebook has set a price range for its initial public offering of $28 to $35 per share, according to a regulatory filing, valuing the company at up to $96 billion and setting the stage for the biggest Internet IPO yet.</p>
<p>The IPO, expected this month, would raise up to $13.6 billion, of which nearly half would go to existing shareholders including company founder and CEO Mark Zuckerberg. The company will raise about $5.8 billion, assuming a midrange price of $31.50 a share, according to the company&#8217;s filing with the Securities and Exchange Commission.</p>
<p>The preliminary price range would value the company at $77 billion to $96 billion, according to Reuters. That would be far higher than the previous record Internet IPO, which was Google, valued at $23 billion when it went public in 2004.</p>
<p>An IPO at the high end of the range would value Facebook at virtually the same level as Amazon.com, which has a market capitalization of about $103 billion. Facebook had net income of $1 billion on revenues of $3.7 billion last year, compared with Amazon&#8217;s earnings of $631 million on total sales of $48 billion.</p>
<p>&#8220;People are going to be very comfortable with this valuation,&#8221; Sam Schwerin of Millennium Technology Value Partners told Reuters. He said the price was conservative and predicted underwriters &#8220;will walk the range up.&#8221;</p>
<p>The firm, which owns Facebook shares worth roughly $200 million, is not selling any in the IPO.</p>
<p>Facebook had revenue of just over $1 billion in the latest quarter, up 30 percent from year-ago levels, although profits were down because costs were sharply higher.</p>
<p>A total of 337.4 million shares will be sold in the offering, about 12 percent of the total outstanding.</p>
<p>Zuckerberg, 27, who will continue to dominate the company with 57.3 percent of the voting power under the company&#8217;s two-class stock system. He could enjoy a $1 billion payday if the company goes public at the $35 level, because he is selling 30 million shares. His remaining stake of 503 million shares would be worth about $17.6 billion at that level.</p>
<p>Many analysts had expected Facebook to price its IPO even higher, at around $40 a share. Max Wolff, an analyst at Greencrest Capital Management, said Facebook had likely toned down the price range for the closely watched public offering because of the current subdued market mood.</p>
<p>“It feels to me that as market sentiment gets less bright, people are getting more nervous,” he told CNBC.</p>
<p>However, the Facebook IPO is still “a very big deal in every sense of the term,” he added, so it’s important for the 33 underwriting banks involved in the deal to see it go well.</p>
<p>The social media juggernaut, which plans to list its stock on Nasdaq under the ticker &#8220;FB,&#8221; is wrapping up its prospectus with regulators and may begin its &#8220;roadshow&#8221; as soon as Monday, according to reports. During the roadshow, management will give potential investors a presentation touting its business.</p>
<p>Facebook’s roadshow will reportedly span New York, Boston, San Francisco, Chicago, Baltimore and possibly Los Angeles over eight or nine days. Based on that time frame, Facebook, the world’s largest social network, would be ready to go public in mid-May.</p>
<p>If all goes well, Facebook&#8217;s stock would price May 17 and make its public debut May 18, The Associated Press reported.</p>
<p>Credit : msnbc</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/ipo-could-value-facebook-at-up-to-96-billion/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google spy case shows why you need to encrypt your  Wi-Fi</title>
		<link>http://www.monroetech.com/google-spy-case-shows-why-you-need-to-encrypt-your-wi-fi/</link>
		<comments>http://www.monroetech.com/google-spy-case-shows-why-you-need-to-encrypt-your-wi-fi/#comments</comments>
		<pubDate>Fri, 04 May 2012 01:29:04 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1951</guid>
		<description><![CDATA[Does your home or business Wi-Fi network require a password to use it? If it doesn&#8217;t, then Google may have recorded your Internet traffic, according to a report released this month by the Federal Communications Commission. Google won&#8217;t turn over the<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/google-spy-case-shows-why-you-need-to-encrypt-your-wi-fi/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>Does your home or business Wi-Fi network require a password to use it?</p>
<p>If it doesn&#8217;t, then Google may have recorded your Internet traffic, according to a report released this month by the Federal Communications Commission.</p>
<p>Google won&#8217;t turn over the data it gathered from Wi-Fi networks in the United States, but in other countries, Google snooped on Wi-Fi networks and recorded details of email logins, medical information, sexual preferences and even evidence of extramarital affairs.</p>
<p>The FCC report was first revealed last week by the New York Times, which provided a heavily redacted version of the document. On Friday, Google gave the Los Angeles Times a version in which only individual names were blacked out.</p>
<p>The report says a single Google engineer, as part of an independent side project, wrote software that saved data captured from unencrypted Wi-Fi networks.</p>
<p>However, if the software encountered encrypted data, such as would be found on a password-protected network, it did not record the information.</p>
<p>Somehow, that side project, which Google insists only a few employees knew about, became part of the basic software in Google Street View cars roaming across North America and Western Europe.</p>
<p>Such recording of private information may be a violation of federal wiretapping law. The FCC was not able to determine culpability because the unnamed engineer, identified in the FCC report only as &#8220;Engineer Doe,&#8221; invoked his Fifth Amendment right against self-incrimination.</p>
<p>Instead, the FCC slapped Google with an $25,000 fine — the maximum allowed — because &#8220;(f)or many months, Google deliberately impeded and delayed the [FCC Enforcement Bureau's] investigation.&#8221;</p>
<p>How it was supposed to work<br />
As Google&#8217;s Street View cars drive around America photographing streets, the specially modified cars also scan around for commercial and home Wi-Fi networks. Hackers call that &#8220;war driving.&#8221;</p>
<p>Computers on the cars record the name and location of each network they encounter, and add them to a database of known Wi-Fi networks for Google Maps similar other location services to use.</p>
<p>A smartphone or tablet uses such a database to locate itself if it can&#8217;t get location data from cellphone towers or Global Positioning System satellites.</p>
<p>You can try it yourself: Turn off your smartphone&#8217;s GPS and cellular service, but leave Wi-Fi on, or use a Wi-Fi-only tablet.</p>
<p>Open the Google Maps or Bing Maps app, and you&#8217;ll see that the app still knows where you are. That&#8217;s because it knows the physical location of the Wi-Fi network you&#8217;re connecting to.</p>
<p>Collecting Wi-Fi network names isn&#8217;t against the law. The network names are &#8220;public&#8221; in the same way that your home address is public if anyone can see the house number from the street, or that your car&#8217;s license plate is public if the car is parked in your driveway. </p>
<p>Again, try it yourself: Open your smartphone&#8217;s Wi-Fi settings menu and watch it as you walk down a suburban or city street. You&#8217;ll see many Wi-Fi network names appear, and then disappear, as you move into and out of their coverage areas.</p>
<p>Google doesn&#8217;t link the collected Wi-Fi network names to individual people, although such ties would be easy to figure out in many cases. As with much personal data aggregated by companies such as Google, Apple or Facebook, the information is &#8220;anonymized.&#8221;</p>
<p>What it wasn&#8217;t supposed to do<br />
The FCC report says Engineer Doe crossed the line when he designed software for the Google Street View cars that automatically connected to Wi-Fi networks that weren&#8217;t password-protected.</p>
<p>The cars were no longer just wardriving. By hopping onto the unencrypted networks without authorization, they were also &#8220;piggybacking.&#8221;</p>
<p>Even worse, Engineer Doe wrote the software to capture snippets of whatever was being transmitted on those networks — the FCC report calls it &#8220;payload data&#8221; — in the hope that maybe Google would be able to use that data someday as long as it was properly anonymized.</p>
<p>That&#8217;s as if you, while using your smartphone to check out the names of the different Wi-Fi networks in your neighborhood, decided to also try to connect to each and every one of those networks; eavesdrop on all the Web surfing, email traffic and instant-messenger chats that were being transmitted wirelessly; and then save whatever you found.</p>
<p>&#8220;Using the code that Engineer Doe developed, Google collected payload data from unencrypted Wi-Fi networks in the United States between January 2008 and April 2010,&#8221; the report says. &#8220;During that period, Street View cars driving in the United States collected a total of approximately 200 gigabytes of payload data — 200 billion bytes of information.&#8221;</p>
<p>The FCC demanded that Google let it look at the collected payload data, which Google had accumulated at a data center in Oregon. Google argued that it didn&#8217;t have to.</p>
<p>The FCC dropped the matter because Google had already handed over samples of payload data gathered from Wi-Fi networks in Canada, France and the Netherlands to those countries&#8217; governments. That sample data was enough to show that Google, whether by design or not, seriously compromised unsuspecting citizens&#8217; privacy.</p>
<p>In Canada, an investigation by the Office of the Privacy Commissioner found that the payload data revealed &#8220;the full names, telephone numbers and addresses of many Canadians&#8221; as well as &#8220;complete email messages&#8221; and &#8220;the contents of cookies, instant messages and chat sessions.&#8221;</p>
<p>The OPC said it was &#8220;troubled to have found instances of particularly sensitive information, including computer login credentials (i.e. usernames and passwords), the details of legal infractions and certain medical listings.&#8221;</p>
<p>A French investigation found login credentials, too, including to porn and dating sites, plus data that indicated the sexual preferences of individuals living at specific addresses.</p>
<p>The French also found &#8220;an exchange of emails between a married woman and married man, both looking for an extramarital relationship.&#8221;</p>
<p>There was enough information in the emails to reveal the first names, email addresses and physical addresses of the would-be adulterers.</p>
<p>What you can learn from this<br />
It may never be clear whether the collection of private data was an accident, as Google insists it was, or part of the overall design.</p>
<p>What&#8217;s clear is not only that Google got caught, but that what Google did wasn&#8217;t hard to do.</p>
<p>If you&#8217;re running an unencrypted, password-unprotected Wi-Fi network, almost everything you do on that network can be eavesdropped upon by someone with a laptop, smartphone or tablet within 300 feet of your wireless router. </p>
<p>If you&#8217;re using an older wireless router with Wired Equivalent Privacy encryption, you might as well be transmitting unencrypted. WEP encryption is notoriously easy to crack.</p>
<p>Hackers snooping on unprotected or poorly protected Wi-Fi networks have been responsible for some of the biggest cyberheists in recent history, including numerous thefts from Seattle-area businesses from 2006 to 2011 and the 2007 TJX Companies data breach, which exposed 45 million credit-card numbers.</p>
<p>Everyone who runs a Wi-Fi network, whether at home or in the office, needs to be using one of the two Wi-Fi Protected Access encryption standards.</p>
<p>If your wireless router was made before 2005, check to see whether it can run WPA and turn it on. If not, get a new router.</p>
<p>You may not have anything to hide — no affairs, no incriminating emails. If your Wi-Fi network is properly encrypted, you may not have to worry whether you do.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/google-spy-case-shows-why-you-need-to-encrypt-your-wi-fi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>First Known Android Drive By Download Found</title>
		<link>http://www.monroetech.com/first-known-android-drive-by-download-found/</link>
		<comments>http://www.monroetech.com/first-known-android-drive-by-download-found/#comments</comments>
		<pubDate>Fri, 04 May 2012 01:25:11 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1949</guid>
		<description><![CDATA[Drive-by downloads have long been the bane of PC security. The attacks, which infect machines whose users happen to land upon corrupted websites, have lately begun to plague Macs as well. On Wednesday, Lookout Mobile Security of San Francisco announced a<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/first-known-android-drive-by-download-found/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>Drive-by downloads have long been the bane of PC security. The attacks, which infect machines whose users happen to land upon corrupted websites, have lately begun to plague Macs as well.</p>
<p>On Wednesday, Lookout Mobile Security of San Francisco announced a mobile-malware milestone : the first known Android drive-by download.</p>
<p>The malware, which Lookout has named &#8220;NotCompatible,&#8221; uses code hidden in websites whose operators have no idea they&#8217;ve been hacked.</p>
<p>Android users who visit such sites will be prompted to install an app that purports to be a security update or Android patch — but only if they&#8217;ve previously set their device&#8217;s permissions to allow installation of apps from unknown sources.</p>
<p>PC, Mac or iOS users won&#8217;t notice anything wrong, as the infected code is set to respond only to Android devices.</p>
<p>SecurityNewsDaily visited one infected site using an Android tablet that allowed &#8220;unknown sources&#8221; apps. The tablet promptly downloaded something called &#8220;com.Security.Update,&#8221; which we can be pretty certain is a Trojan horse, malware that pretends to be something benign.</p>
<p>We did not install the app. Neither should you, if you come across anything that downloads without your permission. In that respect, Android apps have an advantage over PC users, who often have no option to refuse installation of malware from a drive-by download.</p>
<p>We did a Google search for the malicious code Lookout provided, and found only two sites. One belongs to a country club in Montana, while the other is a, ahem, &#8220;men&#8217;s interest&#8221; blog featuring well-endowed (but clothed) young ladies.</p>
<p>(For the technically minded, the sites are infected with an iframe that redirects all browsers to a site called &#8220;gaoanalitics.info.&#8221; Android browsers will continue to a site called &#8220;androidonlinefix.info,&#8221; which triggers the app download.)</p>
<p>SecurityNewsDaily will be contacting the sites&#8217; administrators to let them know they&#8217;re infected.</p>
<p>It&#8217;s not clear what the malware does, but Trojans will often open a &#8220;backdoor&#8221; into a system that will allow cybercriminals to remotely install all sorts of malware, such as spyware, keyloggers, botnet controls or information-stealers.</p>
<p>If you&#8217;re an Android user, you need to do two things to protect yourself from such threats. First, set your device to not allow installation from &#8220;unknown sources.&#8221; Second, install some sort of Android anti-virus software.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/first-known-android-drive-by-download-found/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>new variant of Flashback Mac Virus Making Rounds</title>
		<link>http://www.monroetech.com/new-variant-of-flashback-mac-virus-making-rounds/</link>
		<comments>http://www.monroetech.com/new-variant-of-flashback-mac-virus-making-rounds/#comments</comments>
		<pubDate>Tue, 24 Apr 2012 12:51:13 +0000</pubDate>
		<dc:creator>Chris</dc:creator>
				<category><![CDATA[Tech Blog]]></category>

		<guid isPermaLink="false">http://www.monroetech.com/?p=1946</guid>
		<description><![CDATA[A new variant of Flashback, the malware found earlier this month to be infecting hundreds of thousands of Macs, has spawned a new variant, security researchers announced today. The new variant &#8212; dubbed Flashback.S &#8212; &#8220;is actively being distributed in the<p class="style_for_slide3 read_more_style"><a class="more_btn" href="http://www.monroetech.com/new-variant-of-flashback-mac-virus-making-rounds/">Read the Rest...</a></p></p>]]></description>
			<content:encoded><![CDATA[<p>A new variant of Flashback, the malware found earlier this month to be infecting hundreds of thousands of Macs, has spawned a new variant, security researchers announced today.</p>
<p>The new variant &#8212; dubbed Flashback.S &#8212; &#8220;is actively being distributed in the wild,&#8221; taking advantage of a Java vulnerability that Apple has already patched, security company Intego said in a statement. The new variant installs itself on the user&#8217;s home folder without a password and then deletes all folders and files from the Java cache folder to mask its presence.</p>
<p>At its height, the original Flashback, which was designed to grab passwords and other information from users through their Web browser and other applications, was estimated to be infecting more than 600,000 Macs. However, the researchers did not indicate what this new variant was specifically designed to do or how many computers might be infected.</p>
<p>The original malware typically installed itself after a user mistakes it for a legitimate browser plug-in while visiting a malicious Web site. The malware would then collect personal information and send it back to remote servers.</p>
<p>While more than half a million Mac worldwide were thought to be infected by the original malware at the beginning of April, software maker and security firm Symantec last week lowered its estimate of machines that still have the malware to 140,000.</p>
<p>The lowered estimates were due in part to Apple&#8217;s release of software patches and software tools that both detect and remove the malware. Additionally, ahead of those official tools, Symantec and security firms F-Secure and Kaspersky released their own detection and removal software.</p>
<p>Credit: Cnet.com</p>
]]></content:encoded>
			<wfw:commentRss>http://www.monroetech.com/new-variant-of-flashback-mac-virus-making-rounds/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

