Comments on: Operation “Aurora” Hit Google, Others

By: Incidentresponder

Incidentresponder — Thu, 13 Oct 2011 13:19:30 +0000

It’s no wonder things don’t ever get fixed. We can’t even get the correct info! As “ARealIncidentResponder” stated below the actual folks who found this aren’t even mentioned (for good reason actually) point is that until info within the security field is shared more openly atleast WITHIN the field then these things will continue to happen, propagate cause a whole host of problems. It doesn’t help when alot of supposed security news sources have alot of way wrong info whether intentionally of not!

By: Flavio Blanco

Flavio Blanco — Tue, 29 Jun 2010 15:30:03 +0000

I d like to hear more about antihacker101s comments. Can he provide better facts to support his conclusions, of being part of a botnet? What tools are helping his fight? What technical advice can he pass along to detect worms that arent the decoys, botnets and more. While I have often suspected some compromize of hardware firmware or motherboard chips is occuring, what evidence does he have to support this? How can we recognize this kind of infection? Whats the fix, flashing the bios? What about deep hard disk sector infections that seemingly survive reformats? Seen any of that?

By: Mike

Mike — Mon, 21 Jun 2010 20:17:34 +0000

I love how all the “leading” security firms such as the one this site promots has to scramble but my “firewall” has been able to block this exploit since 2006.

By: pander

pander — Tue, 11 May 2010 16:51:22 +0000

Ok we know the problem right? And we seem to know some of the fixes, correct? Now I want to know, as do most business-minded folks, how do we profit from this threat? Seems as though “decoys” can be valuable, as is unmined gold ore. But I wonder if they (decoys)can be used to reverse-infect the Chinese or any other origin? This may not be a cure. But it sure would be fun to know we scrambled their eggs for once, and we burned down their kitchens to do it! lol

By: smith

smith — Wed, 28 Apr 2010 07:14:38 +0000

Hey folks,
Thanks a lot for sharing such a nice and informative article, i had gone through the article and also the comments posts and i agree with the views of KARL. he had mentioned a very good views.

By the way for more information on Security Courses check this link: http://www.eccouncil.org/certification.aspx

By: Open Source GPL WordPress Themes

Open Source GPL WordPress Themes — Thu, 08 Apr 2010 15:16:06 +0000

We need security indeed, but unfortunately we still need Windows more. I try switching to other OS but it always make me come back to Windows. Sadly isn\’t?

By: webcertain

webcertain — Thu, 18 Mar 2010 12:13:43 +0000

Surely Windows is a flawed system, but I found that AVG is a good antivirus. It also has lots of free products, and it’s easy to use. Worth a try!

By: SimonR

SimonR — Thu, 18 Feb 2010 16:44:57 +0000

@Hindsight. Not sure anyone is expecting perfection. I run a dev org and at least we make an effort to run some reasonable security checks before we release. We also beleave in continuous improvement, not cutting corners. I will have to say that the focus/importance placed on security is really driven by the culture of the org. I can say from experience that security is more important in orgs that focus on customer satisfaction vs. org that focus on the next big sale.

By: Rotundo Pierluigi

Rotundo Pierluigi — Thu, 11 Feb 2010 13:44:43 +0000

I think we have to reengineer the way to look at operating systems now…

–
Rotundo Pierluigi

By: antihacker101

antihacker101 — Wed, 03 Feb 2010 08:35:31 +0000

false security is all that is happening. i been fighting the botnet longer than anyone. not only was it being built in my machines(and other hardware and servies), but i just learned that i am the command and control center of the botnet. i have info on the worm and hackers.
if you want to really make a secure full working detectory, you need the info i have. example. the worm loves decoys. conficters were made detectable on purpose. the main worm gets in by injecting radio packets into a stream that is picked up by chips on the motherboard and also a hardware exploit from your network connection.

the main work hijacks what it refers to as global.
the worm works in layers. they keep monitoring eachother. the hackers are not the main hackers. the original hackers attempted to remove the worm a week after april first after i succeeded in sending a message to a comunity site revealing the source. it backfired and used kid hackers(given info) to set authoritys away from them. parts of the main worm just started to get addressed in novemeber. the hacker did something to the worm nov 17 by altering display/lan/audio drivers and then the ports used changed to port 445 instead of the normal high ports(linked as commands using parsing injections).