Wednesday, April 1, 2009

Never Talk to Strangers

Saw this article on The Electric New Paper, Singapore this morning

Facebook face-off
Man: Woman & friends left me with big bill at bar Woman: We did it because he was a show-off

In summary, Mr Ong Jian Zhao, 21, was browsing through some facebook profiles and decided to sent a message Miss Chloe Yoong, 21.

After some time, Miss Chloe Yoong arrange a meeting session with Mr Ong with some of her friends.

Mr Ong turn up and at the end of the meeting session, Miss Chloe Yoong left the session and subsequently her friends left too. Mr Ong was the last man standing in the bar and has to foot the big bill of $213 on behalf of the people he hardly knew.

Click on the link above to read the full aticle.


From my perspective,

I still remember when we were young, our parents would tell us not to speak to any stangers. Although it is good to socialize, but isn't it better to meet up with someone alone rather then a big group of people who you hardly knew?

It was also stated in the article that

"Mr Lim said they had decided to leave Mr Ong to settle the bill because he had implied that he wanted to pay for the drinks.

He said: 'When he came over, he kept bragging about how well he was doing and how well-off he was.

'It is ridiculous that he is asking us for the money back.'

Miss Yoong added that in their exchanges on Facebook, Mr Ong said he had planned to treat her to a drinking or clubbing session."

This is a lesson for everyone out there not to meet up with strangers and not to brag around about how good you are. You will never know what kind of people you will actually meet.

Nothing is free in this world, do not expect something in return for something you did.

Microsoft put up a bounty of $250,000!!!

Microsoft put up a bounty of $250,000 to anyone who could help identify those behind Conficker.

Click here for the whole news.

Conficker Virus

Saw this article this morning.

Conficker: What Happens After April 1?

The article is a summary of what the Conficker virus does as well as a speculations of what is going to happen in the upcoming future.

For users who are infected with the virus, there is a post by me (CIT Virus Alert - Conficker Virus on April 1) on how to remove the virus as well as how to protect your system.

HAPPY APRIL FOOLS' DAY

Wishing Happy April Fools' Day to everyone out there reading this blog.

Tuesday, March 31, 2009

CIT Virus Alert - Conficker Virus on April 1

I received an email from CIT stating that:

"The Singapore Computer Emergency Response Team (SingCert), a unit of Infocomm Development Authority of Singapore which identifies information-security threats and hacking attacks, warned of the latest variant of the Conficker worm, known as Conficker.C, may “become active on April 1”.

The Conficker is one of most sophisticated malicious program created and has the ability to ask for new instructions from a pool of 500 remote servers tomorrow although the exact nature of the activity that will occur tomorrow is not known at this time."

Below are some details of the virus.

From Microsoft TechNet,

About Conficker

On October 23, 2008, Microsoft released a critical security update, MS08-067, to resolve a vulnerability in the Server service of Windows that, at the time of release, was facing targeted, limited attack. The vulnerability could allow an anonymous attacker to successfully take full control of a vulnerable system through a network-based attack, the sort of vectors typically associated with network "worms." Since the release of MS08-067, the Microsoft Malware Protection Center (MMPC) has identified the following variants of Win32/Conficker:


*Also known as Conficker B++

**Also known as Conficker.C and Downadup.C

What Happens on April 1, 2009?

Systems infected with the latest version of Conficker will begin to use a new algorithm to determine what domains to contact. Microsoft has not identified any other actions scheduled to take place on April 1, 2009. It is possible that systems with the latest version of Conficker may be updated with a newer version of Conficker on April 1 by contacting domains on the new domain list. However, these systems could be updated on any date before or after April 1 as well using the "peer-to-peer" updating channel in the latest version of Conficker.

Protecting PCs from Conficker

  1. Apply the security update associated with MS08-067. View the security bulletin for more information about the vulnerability, affected software, detection and deployment tools and guidance, and security update deployment information.
  2. Make sure you are running up-to-date antivirus software from a trusted vendor, such as Microsoft's Forefront Client Security or Windows Live OneCare. Antivirus software may also be obtained from trusted third parties such as the members of the Virus Information Alliance.
  3. Check for updated protections for security software or devices, such as antivirus, network-based intrusion detection systems, or host-based intrusion prevention systems. The Microsoft Active Protection Program (MAPP) provides partners with early access to Microsoft vulnerability information. For a list of partners and links to their active protections, please visit the MAPP Partners page.
  4. Isolate legacy systems using the methods outlined in the Microsoft Windows NT 4.0 and Windows 98 Threat Mitigation Guide.
  5. Implement strong passwords as outlined in the Creating a Strong Password Policy whitepaper.
  6. Disable the AutoPlay feature through the registry or using Group Policies as discussed in Microsoft Knowledge Base Article 967715. Microsoft released Security Advisory 967940
    NOTE: Windows 2000, Windows XP, and Windows Server 2003 customers must deploy the update associated with Microsoft Knowledge Base Article 967715 to be able to successfully disable the AutoRun feature. Windows Vista and Windows Server 2008 customers must deploy the security update associated with Microsoft Security Bulletin MS08-038 to be able to successfully disable the AutoRun feature. to notify users that the updates to allow users to disable AutoPlay/AutoRun capabilities have been deployed via automatic updating channels.

Cleaning Systems of Conficker

Manually download the Windows Malicious Software Removal Tool (MSRT) onto uninfected PCs and deploy to infected PCs to clean infected systems.

Conficker Timeline

  • On November 21, 2008, the MMPC identified Worm:Win32/Conficker.A. This worm seeks to propagate itself by exploiting the vulnerability addressed in MS08-067 through network-based attacks. The MMPC added signatures and detection to Microsoft Forefront, Microsoft OneCare, and the Windows Live OneCare Safety Scanner on the same day.
  • On November 25, 2008, the MMPC communicated information about Worm:Win32/Conficker.A through their weblog.
  • On December 29, 2008, the MMPC identified the second variant, Worm:Win32/Conficker.B, and added signatures and detection to Microsoft Forefront, Microsoft OneCare, and the Windows Live OneCare Safety Scanner on the same day.
    NOTE: Worm:Win32/Conficker.B can be successful against systems that have applied the security update associated with MS08-067.
  • On December 31, 2008, the MMPC communicated information about Worm:Win32/Conficker.B through their weblog.
  • On January 13, 2009, the MMPC included the ability to remove both Worm:Win32/Conficker.A and Worm:Win32/Conficker.B in the January 2009 release of the Windows Malicious Software Removal Tool and communicated information about this through their weblog.
  • On January 22, 2009, the MMPC provided consolidated technical information about Worm:Win32/Conficker.B on their weblog.
  • On February 12, 2009, the Microsoft Security Response Center (MSRC) released information about domains that Conficker-infected systems try to connect to. Microsoft also announced information on a partnership with technology industry and academic leaders designed to disable domains targeted by Conficker.
  • On February 12, 2009, Microsoft announced a U.S. $250,000 reward for information that results in the arrest and conviction of those responsible for illegally launching the Conficker malicious code on the Internet. Microsoft's reward offer stems from the company's recognition that the Conficker worm is a criminal attack. Microsoft wants to help the authorities catch the criminals responsible for it. Residents of any country are eligible for the reward, in accordance with the laws of that country, because Internet viruses affect the Internet community worldwide.
  • On February 20, 2009, the MMPC provided technical information about Worm:Win32/Conficker.C on their weblog.
  • On March 27, 2009, the MMPC provided more details about the new P2P functionality in Worm:Win32/Conficker.D on their weblog.
This is an image from wikipedia on the Conficker virus. Click on the picture below for a bigger clearer view.

Thursday, February 19, 2009

Gastric Flu

Something just came into my mind when I saw the email that Prof. was down with a gastric flu. I suppose it is quite a common problem nowadays as a few of my friends was down with gastric flu recently.

Well, did some research and hope this post will build an awareness of what to do if you or me happen to have the problem.

What is Gastric Flu?
Inflammation of digestive tract, usually caused by a virus transmitted by personal contact resulting in acute diarrhoea.

How to get infected?
  • Caused by contaminated food or water
  • By specific food which produce an extreme allergic reaction
  • By a sudden change in diet (abroad, for example)
  • By any illness or drug which alters natural balance of bacteria in gut.
Symptoms includes (normally lasting 1-6 days (fewer than 10 days)):
  • Nausea and vomiting
  • Diarrhea
  • Loss of appetite
  • Abdominal pain
  • Abdominal cramps
  • Bloody stools
  • Fainting and Weakness
Do you know?
  • It is also common for river swimmers to become infected during times of rain as a result of contaminated runoff water. The incidence is 1 in 1,000 people.
  • Inadequate treatment of gastroenteritis kills 5 to 8 million people per year, and is a leading cause of death among infants and children under 5.
Basic Common Treatment?
Well, the most common treatment is to hydrate yourself regular to replace the lost fluid in your body. This also prevents dehydration.


*Got the above information from Wikipedia. Do search there for more information on gastric flu.

If nothing goes well, visit your nearby GP immediately for treatments and antibiotics.

Good News?

Saw these two feeds on my Google Reader.
  1. Lower EZ-Link bus and train fares from April
  2. Pump prices down by 3 cents for all grades of petrol
Are these good news to the Singaporeans Public Transport Commuters as well as Vehicles Owners?

Well, personally for me, it does benefit me in some ways. Upon calculation, I can save up to about $100 per month once they starts the adjustments.

As for the vehicles owners, I don't own one, but I believe that it will benefit them to a certain extend too.

Any comments ladies and gentlemen out there?