Viruses Are Spreading — Is My Chumby Next?

Alistair Croll, Friday, February 15, 2008 at 9:16 AM PT Comments (2)

Folks over at SANS have warned of a recent antivirus update that blocks access to servers and generates lots of false positives. One system administrator at a large financial services firm told us, on condition of anonymity, that the new Trend Micro pattern file took down 300 systems within his organization.

“A pattern file caused slower performance for users attempting to access large files,” was all Christina Sarracino, a media contact at Trend, would tell us. So it’s unclear why people are reporting that the patch affected Oracle and Domino servers. Trend also wouldn’t explain what kinds of testing their patches undergo before release (though as a security firm, that’s probably a good thing.) Trend fixed the problem, which existed in a patch released on Feb. 12, with two patch updates later that day.

In the face of computer security threats, the world has automated all its security, from antivirus checking to spyware scanning to OS updates. And each of us has dozens of computing devices around us every day, from iPhones to Internet Tablets to game consoles. The bad guys have a lot more connected devices in which to hide their code.


Back in January, Marcus Sachs of the Internet Storm Center told The Register that “trying to (infect a product) all the way back at the factory…would be pretty hard to do.” Well, it didn’t take long. Late last month, Insignia, a maker of digital picture frames, announced that some of its frames had been infected with a virus in the manufacturing process.

Today the San Francisco Chronicle is reporting on a particularly nasty piece of malware that runs on frames and is designed to harvest personal data. Many of the higher-end frames connect to the Internet to pull photos down from photo-sharing sites, so they’re a good target too.

Is my Chumby next?

Rating: 46% Thumbs Up Thumbs Down

2 comments so far

February 15th, 2008
10:12 AM PT
Grant said:

“Trend also wouldn’t explain what kinds of testing their patches undergo before release (though as a security firm, that’s probably a good thing.)”

Why might that be? To me it sounds like you endorse security through obscurity, and we all know how silly that is.

February 15th, 2008
10:50 AM PT

I agree (and would have liked them to be a bit more forthcoming.) But I imagine they get hundreds of wannabe script-kiddies trying to socially engineer their PR people, so they’re probably more trained than most not to divulge anything.

Security through obscurity is daft.

Leave a Comment

Get the comments RSS feed, instant notification of new comments

Most Comments

Sequoia Rings the Alarm Bell: Silicon Valley Is in Trouble
Om Malik, October 8, 149 comments
We Have Completed $4.5 Million in New Funding
Om Malik, October 6, 96 comments
Inside Details of Sequoia Capital’s Doomsday Meeting With its Companies
Om Malik, October 9, 53 comments
Wholesale Internet Bandwidth Prices Keep Falling
Om Malik, October 7, 20 comments
Mystery Mobile VoIP Technology Available Next Month?
Stacey Higginbotham, October 10, 15 comments

Highest Rated

Inside Details of Sequoia Capital’s Doomsday Meeting With its Companies
Om Malik, October 9, 70%
Why Digg Should Buy StumbleUpon
Om Malik, October 7, 133%
Lijit Launches Publisher Ad Network
Om Malik, October 7, 56%
Venture Firms Pull Back, But Not for Long
Stacey Higginbotham, October 9, 64%
The MMO Post-Launch Period: Do’s and Don’ts
Thord Daniel Hedengren, October 7, 55%
Close
E-mail It