FTC Finalizes Facebook Settlement over Privacy

The U.S. Federal Trade Commission today announced it had finalized its settlement with Facebook, which is now subject to biennial privacy audits for the next 20 years and requires its nearly 1 billion users opt in to any future privacy policy changes. The settlement announcement follows news that...

WordPress G-Lock Double Opt-in Manager 2.6.2 SQL Injection

============================================================================ WordPress G-Lock Double Opt-in Manager Plugin SQL Injection version the admin-ajax will run the ajaxbackend eventually, and then all subscribers will be deleted, even though u r only a subscriber user!!!...

WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection

source: https://www.securityfocus.com/bid/54767/info G-Lock Double Opt-in Manager plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Mozilla Weighing Opt-In Requirement for Web Plugins

Mozilla is developing a feature in Firefox that would require some user interaction in order for Flash ads, Java scripts and other content that uses plugins to play. In addition to easing system slowdowns, the opt-in for Web plugins is expected to reduce threats posed by exploiting security...

Path Reverses Course After Revelation That App Uploads User Contacts

After a researcher discovered that any person who decides to download the Path app onto their mobile device is unknowingly sending their address book to a server belonging to the social network and photo-sharing service without prior notification, the company has released a new version of the app...

Google to Allow Users to Opt Out of WiFi Location Mapping System

Google, which has faced a pile of criticism over its privacy policies and practices, especially as they relate to wireless and mobile devices, says it is changing the way that it maps people’s wireless access points in its efforts to provide accurate location information. The company said it is n...

Report: FTC Nears Deal with Facebook For Opt-In Privacy Changes

The deal will settle an FTC case alleging privacy violations on the social network by forcing users to opt in to any changes to default privacy settings, according to a report in the Wall Street Journal. The FTC inquiry dates back more than two years, and followed changes to the default privacy...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...

Mobile Devices Key To Facebook's New Log-In Approval Feature

Facebook is implementing a new opt-in, two-factor verification security feature they are calling log-in approval. The new feature will require users to enter a unique, one time code, which Facebook will send via SMS whenever a user tries to access his or her account from a new and/or unrecognized...

Unfixed XSS vulnerability at www.canoncamerashop.com

Security researcher SeeMe, has submitted on 02/11/2011 a cross-site-scripting XSS vulnerability affecting www.canoncamerashop.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Google And Mozilla To Make "Do Not Track" Stages !

SAN FRANCISCO AFP - Mozilla and Google, on Monday took steps to give people privacy online, but most everyone said obstacles remain to create simple "Do not follow the software buttons for web browsing . Mozilla has proposed the addition of a signal of its popular Firefox browser that allows user...

Google Releases Permanent Opt-Out Extension For Chrome

Google has delivered a new tool that enables Chrome users to permanently opt out of ad-tracking cookies in the company’s browser. The new extension gives users the ability to make their choices about not being tracked by online advertisers permanent, at least in Google Chrome. The move by Google ...

Microsoft Unveils Enhanced Security Features for Internet Explorer 9

Microsoft has detailed new security features for Internet Explorer 9 IE9 that will help users prevent sites from tracking their activity across browsing sessions. The new feature, set to launch with the first release candidate of IE9 early next year, uses a list to control which third-party...

Microsoft Adds Tracking Protection to IE 9

Microsoft has pushed out a new release candidate of Internet Explorer 9 that includes two new privacy protections designed to enable consumers to prevent tracking by some Web sites. The new IE 9 release candidate has two separate, but related, technologies aimed at giving users more control over...

Google Overhauls Privacy Policy

Google is planning to overhaul its main privacy policy in an effort to make the document more readable and usable for normal people. In addition, Google also is eliminating privacy policies for some of its individual products and services, which it deemed redundant. The shift by Google is a prett...

ardeaCore 2.2 Remote File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

ardeacore 2.2 - Remote File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Opencatalogue 1.024 Local File Include Vulnerability

Exploit for php platform in category web applications ==================================================== Opencatalogue 1.024 Local File Include Vulnerability ==================================================== + Opencatalogue 1.024 Local File Include Vulnerability...

Openfoncier 2.00 Remote / Local File Inclusion

============================================================== Openfoncier 2.00 RFI/LFI Multiple File Include Vulnerability ============================================================== + Openfoncier 2.00 RFI/LFI Multiple File Include Vulnerability...

Gunter Ollmann on Opt-In Botnets and Targeted Attacks

Dennis Fisher talks with Gunter Ollmann, VP of research at Damballa, about the new generation of hacktivism and opt-in botnets, as well as the trend toward targeted attacks in corporate environments. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...