<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: “Aurora” Exploit In Google Attack Now Public</title>
	<atom:link href="http://blogs.mcafee.com/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public</link>
	<description></description>
	<lastBuildDate>Tue, 29 Nov 2011 07:51:20 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: default_dev</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3949</link>
		<dc:creator>default_dev</dc:creator>
		<pubDate>Sat, 23 Jan 2010 06:22:33 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3949</guid>
		<description>Well, for one thing, it seems to be free speech activists/journalists whose gmail accounts were sneaked on... If it is other that the Government, they went to huge lengths to incriminate it...</description>
		<content:encoded><![CDATA[<p>Well, for one thing, it seems to be free speech activists/journalists whose gmail accounts were sneaked on&#8230; If it is other that the Government, they went to huge lengths to incriminate it&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kakrat</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3948</link>
		<dc:creator>kakrat</dc:creator>
		<pubDate>Tue, 19 Jan 2010 12:07:34 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3948</guid>
		<description>Why attack originated from China must be done by a Chinese, or Chinese Gov?

As far as I know many sites in China were not sufficiently protected, and servers of those sites can be exploited by any one from any country to mount the attack.

It looks to me that someone seeem eager at jumping to the conclusion that the attacker is a Chinese or Chinese gov</description>
		<content:encoded><![CDATA[<p>Why attack originated from China must be done by a Chinese, or Chinese Gov?</p>
<p>As far as I know many sites in China were not sufficiently protected, and servers of those sites can be exploited by any one from any country to mount the attack.</p>
<p>It looks to me that someone seeem eager at jumping to the conclusion that the attacker is a Chinese or Chinese gov</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3947</link>
		<dc:creator>John</dc:creator>
		<pubDate>Mon, 18 Jan 2010 21:08:57 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3947</guid>
		<description>Whitelisting? That\&#039;s not the solution to zero day attacks. McAfee, Norton, AVG, Trend - they\&#039;re all the same. Thank goodness I have BluePoint Security - its cloud based approach prevents zero day attacks from ever happening and no patches are needed! If you want the best tool in antivirus computer safety, you definitely need BluePoint Security.</description>
		<content:encoded><![CDATA[<p>Whitelisting? That\&#8217;s not the solution to zero day attacks. McAfee, Norton, AVG, Trend &#8211; they\&#8217;re all the same. Thank goodness I have BluePoint Security &#8211; its cloud based approach prevents zero day attacks from ever happening and no patches are needed! If you want the best tool in antivirus computer safety, you definitely need BluePoint Security.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Secure Web Proxy</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3946</link>
		<dc:creator>Secure Web Proxy</dc:creator>
		<pubDate>Mon, 18 Jan 2010 19:06:39 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3946</guid>
		<description>After reading the attacking mechanism, just realized that users can be protected if they are using &lt;a href=\</description>
		<content:encoded><![CDATA[<p>After reading the attacking mechanism, just realized that users can be protected if they are using &lt;a href=\</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: tim</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3945</link>
		<dc:creator>tim</dc:creator>
		<pubDate>Sun, 17 Jan 2010 18:13:05 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3945</guid>
		<description>found it more ironic that someone in G was using IE so that their internal G desktop/laptop was compromised.</description>
		<content:encoded><![CDATA[<p>found it more ironic that someone in G was using IE so that their internal G desktop/laptop was compromised.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: citizen</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3944</link>
		<dc:creator>citizen</dc:creator>
		<pubDate>Sun, 17 Jan 2010 13:42:30 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3944</guid>
		<description>What is \\ ?

It gets added to quotation marks when escaping text to enter it into a database. It is called escaping and it prevents SQL injections.

I guess Mcaffe is doing it the wrong way and that\&#039;s why we see \\ characters added to the text.

\&#039;\&#039;\&#039;  &lt;- you should see three quotation marks.</description>
		<content:encoded><![CDATA[<p>What is \\ ?</p>
<p>It gets added to quotation marks when escaping text to enter it into a database. It is called escaping and it prevents SQL injections.</p>
<p>I guess Mcaffe is doing it the wrong way and that\&#8217;s why we see \\ characters added to the text.</p>
<p>\&#8217;\'\&#8217;  &lt;- you should see three quotation marks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: abdel</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3943</link>
		<dc:creator>abdel</dc:creator>
		<pubDate>Sun, 17 Jan 2010 13:33:17 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3943</guid>
		<description>@Cynic

Not only Google was hacked, over 30 other companies were in the attack. Google is the one taking action by pulling out from China.

Google Chrome and Firefox are pretty good.</description>
		<content:encoded><![CDATA[<p>@Cynic</p>
<p>Not only Google was hacked, over 30 other companies were in the attack. Google is the one taking action by pulling out from China.</p>
<p>Google Chrome and Firefox are pretty good.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sandro Littke</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3942</link>
		<dc:creator>Sandro Littke</dc:creator>
		<pubDate>Sun, 17 Jan 2010 10:05:17 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3942</guid>
		<description>Does McAfee meanwhile offer updated signatures to identify and block that JavaScript-based exploit at client endpoints?</description>
		<content:encoded><![CDATA[<p>Does McAfee meanwhile offer updated signatures to identify and block that JavaScript-based exploit at client endpoints?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: aussiebear</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3941</link>
		<dc:creator>aussiebear</dc:creator>
		<pubDate>Sun, 17 Jan 2010 07:55:35 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3941</guid>
		<description>Internet Explorer =&gt; \</description>
		<content:encoded><![CDATA[<p>Internet Explorer =&gt; \</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mort furd</title>
		<link>http://blogs.mcafee.com/corporate/cto/%e2%80%9caurora%e2%80%9d-exploit-in-google-attack-now-public/comment-page-1#comment-3940</link>
		<dc:creator>mort furd</dc:creator>
		<pubDate>Sun, 17 Jan 2010 00:31:26 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com?p=1859#comment-3940</guid>
		<description>Please comment as to whether McAfee has updated their anti-virus software to protect against this attack.</description>
		<content:encoded><![CDATA[<p>Please comment as to whether McAfee has updated their anti-virus software to protect against this attack.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

