Welcome, Guest.
Please login or register.
Advertising is Evil
Forum Login
Login Name: Create a new account
Password:     Forgot password

Darkshade Forum    General Boards    News  ›  Advertising is Evil
Users Browsing Forum
No Members and 1 Guests

Advertising is Evil  This thread currently has 1 views. Print Print Thread
1 Pages 1 Recommend Thread
Diddly
March 23, 2010, 8:32pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
It's gotten to a point where it's just not safe to browse the web.  You no longer even have to click on an ad to become infected, and it doesn't even need to be a suspicious looking ad.  Legitimate web sites are playing these ads that infect your computer.  Sites like New York Times, Yahoo, Fox, and yes, even some Google pages!
http://news.cnet.com/8301-27080_3-20000898-245.html?tag=newsLeadStoriesArea.1



Attachment: images_8485.jpg
Size: 3.87 KB



Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message
Hawkeye
May 19, 2010, 3:41pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
I was just going back over older posts to see what I missed while off on parental leave.

Wouldn't anti-virus software negate this problem?


Logged Offline
E-mail E-mail Private Message Private message Reply: 1 - 13
Diddly
May 19, 2010, 4:03pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
Antivirus prevents some malware, but not all.  It's also a losing battle, since some of these things change their signature hourly.  How often does your antivirus update?    Remember to factor in the time for the antivirus authors to discover, fix, test, and issue a new patch.


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 2 - 13
Hawkeye
May 19, 2010, 5:01pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
Google alerts you to sites which troll for information or have malicious software attributed to them.  Would that work in a case like this?


Logged Offline
E-mail E-mail Private Message Private message Reply: 3 - 13
Diddly
May 19, 2010, 5:10pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
Again, it's a race.  You have to hope Google knows about it before you stumble across it.


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 4 - 13
Hawkeye
May 20, 2010, 2:37pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
OK, how about anti-virus software that would monitor these malicious ads and block them before they load?  Would that work?


Logged Offline
E-mail E-mail Private Message Private message Reply: 5 - 13
Diddly
May 20, 2010, 2:56pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
Is this a time travelling anti-virus?  How does it know something is malicious until some real person identifies it as malicious?


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 6 - 13
Hawkeye
May 20, 2010, 5:24pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
Am I wrong in thinking that to have your computer infected with a virus something needs to be uploaded to your computer?  The article mentioned something about a JavaScript code.  Could that not be recognized and aborted?  That way a real person does not have to identify it as malicious.


Logged Offline
E-mail E-mail Private Message Private message Reply: 7 - 13
Diddly
May 20, 2010, 6:24pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
A LOT of web sites would be absolutely useless if you turned off javascript.


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 8 - 13
Hawkeye
May 20, 2010, 8:51pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
It wasn't Javascript itself, but, according to the article, a part of javascipt something called "JSrontexi."


Logged Offline
E-mail E-mail Private Message Private message Reply: 9 - 13
Diddly
May 25, 2010, 12:43pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
All I'm saying is there is no "sure-fire" way to avoid malware (virus/trojan/worm/adware).  Every precaution you take reduces the risk, but never assume your computer can't get infected.


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 10 - 13
Hawkeye
May 25, 2010, 6:28pm Report to Moderator Report to Moderator

Noble
Posts: 1,055
I wasn't suggesting anything was sure-fire, I was just pointing out that something could be developed to help against this type of malware.


Logged Offline
E-mail E-mail Private Message Private message Reply: 11 - 13
Diddly
May 25, 2010, 7:30pm Report to Moderator Report to Moderator

Noble
Posts: 1,231
According to the article, this particular trojan searches for vulnerabilities in whatever can interpret the javascript (Adobe Reader, Flash Player, etc).  So, to stop this particular trojan, if it's embedded in a file, antivirus may be able identify it.  If it's on the web, you'd need some kind of anti-virus scanner that watches your TCP stream.  As far as I know, none do.  For that delivery method, you'd need to have all the exploitable apps patched sufficiently to close the vulnerabilities before they can be exploited.

In all of these cases, it requires the fore-knowledge of (a) what the attacking script attacks and how it does it, and for the antivirus (b) a "signature" that catches this exact attack and ones like it.

My point was that the attackers will ALWAYS be ahead of the defenders, since clairvoyant software hasn't been invented.  So while this particular attack from the article (JS:whatsit or whatever Avast named it) can be stopped, it doesn't mean you're suddenly safe from all trojan-embedded advertisements.  We can't possibly know all the ways malicious code will manifest.


Currently Reading:Next in Queue:
When Heavens CollideRed Mars - Kim Stanley Robinson
Logged Offline
E-mail E-mail Private Message Private message Reply: 12 - 13
Hawkeye
May 27, 2010, 12:23am Report to Moderator Report to Moderator

Noble
Posts: 1,055
I don't disagree with you.  I just thought there would be a way to protect against these types of things.  Though, as you said, they change all the time.


Logged Offline
E-mail E-mail Private Message Private message Reply: 13 - 13
1 Pages 1 Recommend Thread
Print Print Thread

Darkshade Forum    General Boards    News  ›  Advertising is Evil