Re: Shopping cart other than OSCommerce? [LONG]

2010-12-09 Thread Gary Kline
On Wed, Dec 08, 2010 at 07:34:53PM -0500, Jerry wrote:
> On Thu, 09 Dec 2010 10:07:57 +1000
> Da Rock  articulated:
> 
> [snip]
> 
> > And thats why Facebook and all those social network sites are bad
> > news. What happened to anonymity on the internet? Everyone I know
> > worth their salt steers well clear of them...
> 
> "Nothing is foolproof to a sufficiently talented fool." Or as some
> say, "Make it idiot proof and someone will make a better idiot."
> 
> There is nothing inherently bad with Facebook or any of its imitators.
> The acronym "PEBKAC" accurately describes the true nature of problem.
> The inclusion of "anonymity" has nothing to do with the problem.
> 


My take on facebook--just joined--that it's an excellent way to
waste time if you want to.  Maybe reconnect with people you
haven't seen for years... .

> -- 
> Jerry ???
> freebsd.u...@seibercom.net
> 
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the Reply-To header.
> __
> 
> Everyone is entitled to be stupid, but some abuse the privilege.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
   Journey Toward the Dawn, E-Book: http://www.thought.org
  The 7.97a release of Jottings: http://jottings.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Shopping cart other than OSCommerce? [LONG]

2010-12-09 Thread Robert Bonomi
> From owner-freebsd-questi...@freebsd.org  Wed Dec  8 18:35:17 2010
> Date: Wed, 8 Dec 2010 19:34:53 -0500
> From: Jerry 
> To: FreeBSD 
> Subject: Re: Shopping cart other than OSCommerce? [LONG]
>
> On Thu, 09 Dec 2010 10:07:57 +1000
> Da Rock  articulated:
>
> [snip]
>
> > And thats why Facebook and all those social network sites are bad
> > news. What happened to anonymity on the internet? Everyone I know
> > worth their salt steers well clear of them...
>
> "Nothing is foolproof to a sufficiently talented fool." Or as some
> say, "Make it idiot proof and someone will make a better idiot."

The "formal" version is:
   "For any fool-proof system,
there exists a =sufficiently-determined= fool capable of breaking it."

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Shopping cart other than OSCommerce? [LONG]

2010-12-08 Thread Jerry
On Thu, 09 Dec 2010 10:07:57 +1000
Da Rock  articulated:

[snip]

> And thats why Facebook and all those social network sites are bad
> news. What happened to anonymity on the internet? Everyone I know
> worth their salt steers well clear of them...

"Nothing is foolproof to a sufficiently talented fool." Or as some
say, "Make it idiot proof and someone will make a better idiot."

There is nothing inherently bad with Facebook or any of its imitators.
The acronym "PEBKAC" accurately describes the true nature of problem.
The inclusion of "anonymity" has nothing to do with the problem.

-- 
Jerry ✌
freebsd.u...@seibercom.net

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

Everyone is entitled to be stupid, but some abuse the privilege.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Shopping cart other than OSCommerce? [LONG]

2010-12-08 Thread Da Rock

On 12/09/10 07:13, Karl Vogel wrote:

On Tue, 7 Dec 2010 21:23:04 -0700,
"Dale Scott"  said:
   

D>  I'll interpret that as saying a large percentage of the PHP apps vying
D>  for your attention are crap, but buyer beware. Just be careful, have a
D>  healthy level of scepticism, and keep your eyes open.

Yup.

D>  I don't know anything about Facebook other than it's PHP-based, but I'm
D>  sure we'd hear about it being hacked on a regular basis if it was.


http://www.informationweek.com/news/security/vulnerabilities/showArticle.jhtml?articleID=216403016
Microsoft and Facebook Team Up to Put the Kibosh on Koobface
Mon, 6 Apr 2009

   

... 

And thats why Facebook and all those social network sites are bad news. 
What happened to anonymity on the internet? Everyone I know worth their 
salt steers well clear of them...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Shopping cart other than OSCommerce? [LONG]

2010-12-08 Thread Jerry McAllister
On Wed, Dec 08, 2010 at 04:13:25PM -0500, Karl Vogel wrote:

> >> On Tue, 7 Dec 2010 21:23:04 -0700, 
> >> "Dale Scott"  said:
> 
> D> I'll interpret that as saying a large percentage of the PHP apps vying
> D> for your attention are crap, but buyer beware. Just be careful, have a
> D> healthy level of scepticism, and keep your eyes open.
> 
>Yup.
> 
> D> I don't know anything about Facebook other than it's PHP-based, but I'm
> D> sure we'd hear about it being hacked on a regular basis if it was.

Interesting.   Looks like most of these depend on the bad judgement
of the user to respond to phishing and similar attacks rather than
a flaw in the php code.- though once the user makes the mistake
they [unknowingly] allow the attack to insert malware.

jerry
  
  

>
> http://www.informationweek.com/news/security/vulnerabilities/showArticle.jhtml?articleID=216403016
>Microsoft and Facebook Team Up to Put the Kibosh on Koobface
>Mon, 6 Apr 2009
> 
>Microsoft and Facebook are working together to protect users from the
>Koobface worm.  Koobface spreads through Facebook and MySpace social
>networking sites and infects users who run vulnerable versions of
>Windows.  It steals login information so it can hijack accounts and spam
>users' contact lists.
> 
>The spam usually contains a link to what is billed as a video, but users
>who click the link are told they must download a program to watch the clip.
>If users agree to the download, their machines become infected with 
> malware.
>Microsoft has added Koobface to its Malicious Software Removal Tool (MSRT),
>which removed nearly 200,000 instances of Koobface from more than 133,000
>computers in two weeks.
>
> 
>http://www.theregister.co.uk/2009/05/15/facebook_phishing_scam/
>
> http://technology.timesonline.co.uk/tol/news/tech_and_web/article6294169.ece
>Another Phishing Attack Targets Facebook Users
>Fri, 15 May 2009
> 
>Users of the social networking site Facebook have been subjected to another
>phishing attack.  The attackers gained access to the social networking
>site by using legitimate user accounts and then directing the contacts
>of the compromised accounts to websites containing malicious software.
>The attackers ostensibly gained access to the initial accounts by 
> exploiting
>easy-to-guess passwords.
>
> 
>
> http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1356896,00.html
>IT Managers Feel Pressured to Relax Security Policies
>Wed, 20 May 2009
> 
>According to a recent survey of 1,300 IT managers, 86 percent said
>they were being pressured by company executives, marketing departments,
>and sales departments to relax web security policies to allow access to
>web-based platforms such as Google Apps.  Nearly half of respondents said
>some employees bypass security policies to access services like Twitter
>and Facebook.  More than half of the respondents noted that they lacked the
>means to detect embedded malicious code and prevent URL redirect attacks.
>
> 
>http://www.theregister.co.uk/2009/08/07/twitter_attack_theory/
>Attack on Twitter and Facebook Was a "JoeJob"
>6-10 Aug 2009
> 
>The denial-of-service attacks that hobbled Twitter and Facebook last week
>were not conducted through botnets, but instead were the result of a spam
>campaign aimed at a taking out accounts that belong to a pro-Republic of
>Georgia blogger.
>
> 
>
> http://www.scmagazineus.com/Facebook-to-modify-privacy-practices-after-investigation/article/147556/
>
> http://technology.timesonline.co.uk/tol/news/tech_and_web/article6812783.ece
>Facebook Will Strengthen Privacy Practices
>27-28 Aug 2009
> 
>In response to an investigation launched by Canada's Office of the Privacy
>Commissioner, Facebook has agreed to give users more control about the
>information they share with third-party applications.  The applications 
> will
>be required to get permission from users for every category of personal
>information they want to access.  In addition, users will have the option
>to deactivate or to even to delete their accounts.  If users delete their
>accounts, all information belonging to that user will be deleted from
>Facebook servers.
>
> 
>
> http://www.computerworld.com/s/article/9138780/Facebook_Captchas_broken_?source=rss_security
>Spammers Break Facebook CAPTCHA
>Thu, 1 Oct 2009
> 
>Malware purveyors have managed to break the Facebook CAPTCHA (completely
>automated public Turing test to tell computers and humans apart), allowing
>them to automate the creation of Facebook pages.  The malicious pages are
>being used to send links to malicious websites that promote scareware.
>The pages all have the same photograph, but have diffe

Re: Shopping cart other than OSCommerce? [LONG]

2010-12-08 Thread Karl Vogel
>> On Tue, 7 Dec 2010 21:23:04 -0700, 
>> "Dale Scott"  said:

D> I'll interpret that as saying a large percentage of the PHP apps vying
D> for your attention are crap, but buyer beware. Just be careful, have a
D> healthy level of scepticism, and keep your eyes open.

   Yup.

D> I don't know anything about Facebook other than it's PHP-based, but I'm
D> sure we'd hear about it being hacked on a regular basis if it was.

   
http://www.informationweek.com/news/security/vulnerabilities/showArticle.jhtml?articleID=216403016
   Microsoft and Facebook Team Up to Put the Kibosh on Koobface
   Mon, 6 Apr 2009

   Microsoft and Facebook are working together to protect users from the
   Koobface worm.  Koobface spreads through Facebook and MySpace social
   networking sites and infects users who run vulnerable versions of
   Windows.  It steals login information so it can hijack accounts and spam
   users' contact lists.

   The spam usually contains a link to what is billed as a video, but users
   who click the link are told they must download a program to watch the clip.
   If users agree to the download, their machines become infected with malware.
   Microsoft has added Koobface to its Malicious Software Removal Tool (MSRT),
   which removed nearly 200,000 instances of Koobface from more than 133,000
   computers in two weeks.
   

   http://www.theregister.co.uk/2009/05/15/facebook_phishing_scam/
   http://technology.timesonline.co.uk/tol/news/tech_and_web/article6294169.ece
   Another Phishing Attack Targets Facebook Users
   Fri, 15 May 2009

   Users of the social networking site Facebook have been subjected to another
   phishing attack.  The attackers gained access to the social networking
   site by using legitimate user accounts and then directing the contacts
   of the compromised accounts to websites containing malicious software.
   The attackers ostensibly gained access to the initial accounts by exploiting
   easy-to-guess passwords.
   

   
http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1356896,00.html
   IT Managers Feel Pressured to Relax Security Policies
   Wed, 20 May 2009

   According to a recent survey of 1,300 IT managers, 86 percent said
   they were being pressured by company executives, marketing departments,
   and sales departments to relax web security policies to allow access to
   web-based platforms such as Google Apps.  Nearly half of respondents said
   some employees bypass security policies to access services like Twitter
   and Facebook.  More than half of the respondents noted that they lacked the
   means to detect embedded malicious code and prevent URL redirect attacks.
   

   http://www.theregister.co.uk/2009/08/07/twitter_attack_theory/
   Attack on Twitter and Facebook Was a "JoeJob"
   6-10 Aug 2009

   The denial-of-service attacks that hobbled Twitter and Facebook last week
   were not conducted through botnets, but instead were the result of a spam
   campaign aimed at a taking out accounts that belong to a pro-Republic of
   Georgia blogger.
   

   
http://www.scmagazineus.com/Facebook-to-modify-privacy-practices-after-investigation/article/147556/
   http://technology.timesonline.co.uk/tol/news/tech_and_web/article6812783.ece
   Facebook Will Strengthen Privacy Practices
   27-28 Aug 2009

   In response to an investigation launched by Canada's Office of the Privacy
   Commissioner, Facebook has agreed to give users more control about the
   information they share with third-party applications.  The applications will
   be required to get permission from users for every category of personal
   information they want to access.  In addition, users will have the option
   to deactivate or to even to delete their accounts.  If users delete their
   accounts, all information belonging to that user will be deleted from
   Facebook servers.
   

   
http://www.computerworld.com/s/article/9138780/Facebook_Captchas_broken_?source=rss_security
   Spammers Break Facebook CAPTCHA
   Thu, 1 Oct 2009

   Malware purveyors have managed to break the Facebook CAPTCHA (completely
   automated public Turing test to tell computers and humans apart), allowing
   them to automate the creation of Facebook pages.  The malicious pages are
   being used to send links to malicious websites that promote scareware.
   The pages all have the same photograph, but have different user names.
   Facebook is taking steps to identify the rogue pages and disable them.
   

   http://www.wired.com/epicenter/2010/01/facebook-email/
   Rogue Marketers Can Mine Your Info on Facebook
   Ryan Singel
   Tue, 5 Jan 2010

   A marketer can take a list of 1,000 e-mail addresses, either legally or
   illegally collected -- and upload those to Facebook through a dummy
   account -- which then lets the user see all the profiles created using
   those addresses.  Given Facebook's ubiquity and most people's reliance