Sony sells their waterproof "Walkman" mp3 players inside a water bottle

  Sony sells their waterproof mp3 players inside a water bottle
  
                                                      Video: Sony 'The Bottled Walkman' by DraftFCB via StopPress  
Sony sells their waterproof "Walkman" mp3 players inside a water bottle. You can buy these mp3 players like everywhere, because sony sells these trough internet and vending machines. That's just great, I like this idea of advertising. Very clever and for me it sounds/looks great (At least in that video). Currently only vending machines in New Zealand are providing Sony's products. I am sure that you can find "Walkman" mp3 players still online and even from your local electronic store.

Likes Or Lies? How perfectly honest businesses can be overrun by Facebook spammers

  
Many of us are trusting. We like to believe the best in people – in their honesty, integrity, and good intentions. For society to function, this is an inherently necessity of the majority.
But after writing an article describing the loss of organic Facebook reach, I was tuned in to an even more shocking situation that completely explains the massive growth in likes some readers reported on their Pages.
One of the reasons I love writing, and often still love reading comments, is that through my articles, I learn more about the world from others with experiences that run parallel to mine.
After my plunging Facebook organic reach piece ran, a reader who wishes to remain anonymous (for reasons that will hopefully become clear as I continue) pointed me to a baffling Facebook situation that, over the past couple of years, has spiraled out of control.
Let’s start at the beginning.

Monitoring your likes and interests

In September of 2013, my anonymous source (who we will call “Bob” for the sake of simplicity), seemed to have his popular Facebook Page, along with friends whose pages share the same general interest, added to the international Page Suggestions list.
What are Page Suggestions? In 2013, Facebook started to push its “Suggested Posts” or “Suggested Pages” ads and links to news feeds with the attempt to allow users to follow other brands that followed their similar interests.

Let’s say you, a Facebook user, is a noted fan of cakes and baking. Page Suggestions look at those interests, and you and anyone who has “cakes” or “baking” in their likes or is following a group along those topics is going to see pages that match the topic. For Bob, his Page was almost guaranteed to show up in his particular interest set.
On the surface, this is a cool concept, but like a lot of cool Internet ideas, it was exploited.

An unprecedented growth

Almost immediately following their addition to these “International Page Suggestions” lists, Bob and his friends noticed their pages taking off at a ridiculous rate.
“[At first it was] 500 or 1,000 likes per day, then eventually up to 15,000 likes per day,” Bob said. “The growth was awesome at first and it seemed like we were connecting with a whole new audience.”
On the surface, Page Suggestions was working exactly as they were intended. Thousands of people who could and should like a brand if they knew it existed were finally being exposed to it! This granted access to a massive new audience, and a chance to really grow a business beyond expectations.

But it wasn’t all roses and sunshine. “After a couple of months I started to see a noticeable downturn in audience quality,” Bob said. “Despite good engagement numbers.”
If you read my article on Facebook Engagement, I briefly touch on our promoted posts getting likes and comments that appeared to be out of left field. This is much the same situation that Bob noticed on his pages, but on a much larger and slightly different scale.

Too good to be true

Bob decided to do some digging. It didn’t make sense that his engagement levels had not changed despite thousands of additional fans.

I started looking at some of these profiles, [and] the folks who were commenting [were doing so in] total gibberish. 99 percent of these commenters (and about 70 percent of the overall population [of the] increase on my page) are from India, Thailand, Pakistan, and Egypt.
In fact doing some more analysis, I realized a huge component of the fan increase was coming from those places, comments or no. If you check out their profiles you’ll realize they usually use some fake component of a name, a photo that isn’t theirs, and they have a massive volume of page likes by comparison to any other account activity.

What Bob was experiencing here has been reported before, but it has been normally linked to purchasing post promotion. In an article on Search Engine Journal from 2012 (back when promoted posts were young), Jake Filan noticed “profiles hadn’t had updates in more than a month, and a handful actually had no profile info at all, but these same accounts were extremely active, on a daily basis in some cases, at Liking Facebook pages.
“A pervasive red flag was that these profiles did not seem to have any discernible connection or affinity for the Facebook pages being advertised.”
When you do a little research on something called “like farming,” you’ll see what’s going on.
“What I discovered is that an increasing number of underpaid, downtrodden denizens in these developing tech nations get micropayments to do it, usually a dollar per thousand likes,” Bob said.
But you’re now probably wondering… why? What is there to gain? Bob did not pay anything, so why are these thousands of random profiles liking his page?

Slipping under the spam radar

On the surface, it makes more sense to see this behavior when money is involved, but that isn’t the case here. To explain what is happening, let’s bounce back to the aforementioned Page Suggestions.
In an attempt to avoid Facebook’s bot/spam detection, these “like farmers” diversify likes into Pages they have not been paid to target, or who aren’t paying to reach more eyes. It’s a much more clever way to slip under the Facebook spam radar, as the behavior appears natural and organic.
The simplest way to do this diversification of Page likes is to use Facebook’s own “Page Suggestions” feature.
“While this is probably more frustrating for me than for people whose Pages aren’t in the good graces of Facebook’s page suggestions, the worst part is that people who actually pay for ads and promotions are still victimized by this same practice,” Bob lamented.
“It means anyone who clicks ‘Boost Post’ and pays for reach, unless they block those countries listed above or intentionally target them out, are getting 80 pecent ripped off.”

What was thought to really only be linked to Facebook ads is actually a much larger problem, filling legitimate and popular Pages with an increasing percentage of spam and bots.

Selling likes or lies?

The business of selling likes and selling contest entries is a seedy, dark one indeed. As reported by the Daily Dot, author Cody Permenter goes into detail on how these sweat-shop like businesses set up and run.
“For a fee, [businesses] would deliver votes for any online competition you can imagine, from Facebook contests (where you’re asked to like a page to enter) or generic sweepstakes that only require you to fill out a form,” Permenter wrote.
There are a range of businesses set up to do this, and their fees range in price per 1,000 likes or contest entries. One of those businesses clearly states the nature of what they do on their on Facebook page, but Facebook doesn’t seem like they have noticed nor care. This particular company, 99 Enterprises, is still up and running.
“It’s a pretty frustrating situation which I’m powerless to stop,” Bob continued. “I could turn off page suggestions to my page, but then I risk losing the legit fans I’ve gained through the page suggestions process – probably totaling about 150,000 people. Certainly nothing to smirk at.”
Bob believes that one day, Facebook will recognize the problem and purge the fake profiles. But by that time, Bob worries that the sudden spam fan decrease will actually end up damaging his page.
“The outward appearance to my real fans will be that I bought a s**tload of fake likes, which isn’t the case and will be severely damaging to the social media aspect of my business,” he said. “And those people who actually paid for the reach, without knowing, actually did buy fake likes!
“In the meantime all I can do is target out those countries in my posts, and try to increase authentic engagement via the comments section.”
Unfortunately, due to Facebook’s limitation on organic reach, this strategy is much hampered compared to just a few months ago. It’s an almost no-win situation.

How does one get added to an international suggested pages list?

It’s not entirely clear. What is for certain is that if you have “Page Suggestions” enabled on your Page’s profile, you are eligible for this treatment.
Facebook will likely look at pages that have good original content and high engagement for the treatment, but there does not appear to be a surefire way to be selected.
Of the group of four friends, including Bob, their pages grew from anywhere between 30,000 likes and, in one extreme case, over a million. But just looking at their page stats tells the story: countries known for this type of “like farming” business are right at the top.

In addition to all this, Bob noted he saw an enormous increase in what is known as “share for share” or “s4s” requests hitting his site.
These bots/spammers can make themselves more difficult to find by continuing to diversify their likes and friends. That appears to be the strategy here. Whatever the case, it’s a headache for page moderators, who will have to spend more time gleaning the spam off their pages.

The marketplace is full of lies, deception and spam, and Facebook could easily find them. Just look at this Facebook Group dedicated to buying, selling and exchanging likes for pages. It’s not even hidden or discreet.
Facebook will need to do something about this by increasing the strictness behind their process for finding bots and spammers. It appears at this point that if a bot/spam page likes a good enough variety of pages and comments occasionally (even if the comments are complete gibberish), it’s enough to slip by unnoticed.
Facebook early on admitted to over 83 million profiles on their site to being likely fake, and those are only the profiles they know about.

Top image credit: Shutterstock/iurii

Article Credit: TheNextWeb
Article link 

Jaron Schneider Facebook Pages’ Updated Organic-Reach-Crushing Algorithm, And What it Means for You

As many of you who have your own photography pages probably already noticed, Facebook drastically changed their Pages organic reach algorithm on December 3, 2013. We have been living with the changes for a month, analyzing the effects on our brand and how it affects you, and the news isn’t good. With dramatic decreases in reach and engagement, our Facebook community is not nearly what it was. So what can you do about your own Pages?
Let’s first take a look at what the changes have done across the board, not just on Fstoppers. In a recent study by Ignite which included 21 brand pages of different sizes and across industries, they found a decline of “44% on average, with some pages seeing declines as high as 88%. Only one page in the analysis had improved reach, which came in at 5.6%.” That’s abysmal.
As we all know, Facebook wants us, and has wanted us, to pay to access the fans that some of us out there, including Fstoppers, have spent years fostering and growing (at Facebook’s continued insistence that fostering growth was pivotal). Though we weren’t happy about having to pay, we did understand it. We were ok with reaching most of our readers and paying to reach them all. That seemed fair.
Back before December 3, on average we organically reached about 42% of the Fstoppers followers. That’s pretty darn good. The ones that did not reach that many were perhaps less interesting articles, and then there were the hugely popular pieces that virally shared over hundreds of thousands of people, unpaid. That was also awesome, especially considering that there has been research that shows that organic content leads to better buying actions than paid reach. That also makes sense. None of us really LOVE being advertised to.
Let’s look at that Ignite study again, and see how bad the reach decline is for other brands:

Huge, huge declines. This is what Fstoppers has seen in the past month:
• 73% average drop in reach since December 3 (with the greatest drop at an astonishing 95%)
• 86% drop in engagement (likes, comments, shares)
• 7.4% average reach to followers, down from 42%
What’s most upsetting about the data from our Fstoppers account is who we are no longer reaching: our most engaged readers. According to a study by Forrester and Google-owned Wildfire, engaged users are a brand’s best customers (kind of a no-brainer if you think about it). They are the most likely to click and purchase. But our data has shown those engaged users no longer see our pages, and instead it appears those who now engage with our brand (the scant few) were not part of that “most engaged” group.
So not only is everything down, and down a considerable amount, but the people we would prefer to reach have almost no chance of seeing what we post.
So we should pay, right, in order to reach those people? Not necessarily. We have been shocked with the kind of interaction our posts have when we pour money into them. A vast number of the likes and comments come from completely left field.

Click through rate takes a dive, and we have lost thousands in what appears to be a Facebook black hole. Not to mention, the cost of paying to play is… well, it’s a lot.

To add salt to the wound, the amount of page moderation now required has dramatically increased. We have seen a large influx of spam on our page wall and in our page posts, increasing the time we need to spend on cleaning and maintaining our Facebook presence, yet receiving nearly no yields for the labor.
So what does this all mean? It means we are forced to diversify. Our Twitter is pretty awesome, and you can chat there directly with both me and Patrick. But also, we will be pouring a more concerted effort into our Google Plus. If you want to get updates from us, and we know many of you do because thousands of you treated your Facebook like a true news feed from us for breaking news and education, I suggest liking us both on Facebook and Google Plus, and trying to check Google Plus more frequently. G+ will only get better if we all contribute, and given that Facebook seems to get worse and worse for business as the months wear on, we’re basically given no choice but to jump ship, or at least share between the sites equally.
So back to my original question on what you can personally do? Help grow Twitter and G+, at least until Facebook realizes how they’re squeezing us here isn’t best for their bottom line. But if they don’t change, it’s really not worth the effort anymore.
As we put more effort into our other social channels, we will track those results and let you know how things look over the next couple months. Hopefully we can work together to find a solution that benefits everyone.


Source: FS (Fstoppers)

Snapchat user accounts vulnerable to Brute-Force Attack

            Snapchat user accounts vulnerable to Brute-Force Attack

Snapchat, a Smartphone application that lets users share snapshots with friends is catching fire among teenagers. It was first hacked in December when 4.6 million Snapchat users were exposed in a database breach.

Later, the denial-of-service attack and CAPTCHA Security bypass were discovered by other researchers within last two-three weeks. Snapchat has no Vulnerability Reward Program, but still many penetration testers are working hard and free of cost to make the application more secure by disclosing flaws.

Interestingly, this is not the end of vulnerabilities, Mohamed Ramadan, a security researcher with Attack-Secure from Egypt, has spotted a new vulnerability on Snapchat that allow an attacker to brute-force login credentials of the users. Brute-force is a process of trying multiple passwords against a username until you get a correct password.

"This vulnerability allows anyone who knows your SnapChat email to brute force your account’s password without any protection from snapchat side, there is no lockout. Limited tries or even Captcha." he said in a blog post.

Video Demonstration: http://www.youtube.com/watch?v=GEstRt6CecA

He found this security flaw late in 2013, reported it to Snapchat's Security Team and they took 2 Months to fix the flaw. However, vulnerability has been fixed; but users are recommended to use Strong passwords always.

The security flaws doesn't mean that SnapChat is losing its reputation in the market as security issues are common in every app we use today, and moreover it is the popularity and easiness of the app that Facebook offered $3 Billion to purchase it but the SnapChat CEO rejected the offer.


Source: THN

iOS vulnerability allows to disable 'Find My iPhone' without password

iOS vulnerability allows to disable 'Find My iPhone' without password

Smartphone manufacturers are adding ways for owners to track and manage their phones if they ever get lost or stolen. Find My iPhone is a service that comes with every iOS device that allows you to track your iPhone, whether it was lost or stolen.

Normally, the iPhone requires a password if you want to deactivate “Find My iPhone”, but it isn’t entirely perfect and thieves are now smart enough to disable 'Find My iPhone' on devices running iOS 7.0.4 and lower version, without having to enter a password.

The exploit was discovered and demonstrated security researcher 'Bradley Williams' and performing a successful bypass means you won’t be able to locate, make sound and wipe out.

The vulnerability could put the devices at risk, and the exploitation method involves a few simple steps that involve making changes in the iCloud settings, even if they don’t know the password.

Steps to hack 'Find My iPhone':

1. Navigate to iCloud in the settings.
2. Select your account.
3. Change the password to an incorrect one, then taps Done.
4. When display 'wrong password' warning, Tap OK and then tap Cancel.
5. Reselect your account.
6. Empty the description field and then press Done.

You will notice Find My iPhone is now toggled off.

 

 

 

 

The exploitation also requires physical access to the device, and then only works if the user hasn't set a passcode or enabled the iPhone 5S fingerprint-based Touch ID system and hackers are not able to reproduce it iOS 7.1 beta version, that means the flaw will be fixed in the next iOS update, which is expected to hit the devices in March.

Users are recommended to activate Apple’s device Lock system, which blocks a thief from erasing and re-activating a stolen phone unless they enter your Apple ID and password.

 

Source: THN 

Google Chrome added pop-up warning to prevent users from Browser hijacking

GOOGLE, one of the most trusted brands continuously trying to keep its products more robust and secure for keeping its users safe.

Google honors vulnerability hunters under its Bug bounty program and not only that, the company also offer a huge amount of reward to hackers in 'Pwnium' hacking competition for finding critical vulnerability.

Google Chrome, Browser from Google product family, has been added with a new feature that it will warn the user whenever browser’s setting get altered by any malware.

Browser hijacking is the modification of browser's settings, and the term "hijacking" is used when the changes performed without the user's permission. A browser hijacker may replace the existing home page, error page, or search page with its own. These are generally used to force hits to a particular website, increasing its advertising revenue i.e. Click jacking and Adware.

A hijacker uses malicious software to change your internet security and registry settings to gain control over what and how your browser displays web content.
"So, you're trying to download a free screensaver or a game or something else you really want. But later you find out that the game came bundled with a malicious program that's trying to hijack your browser settings. You're not the only one having this problem, in fact, it's an issue that's continuing to grow at an alarming rate," Google said on its official blog.
Browser Hijacking is one of the top issues reported on browser forum. But from now, Windows chrome users will be prompted to reset the browser setting to factory default if the browser senses any sort of hijacking.
Users are free to opt whether to choose Reset and skip the option prompted based on their settings. The feature of the resetting chrome browser is not new, you can manually reset all the settings, plugins, and extensions to the default factory setting just by:

chrome://settings > Show Advanced Settings > 'Reset browser Setting'

Once you reset the browser, it’ll disable all extension, theme or app you would have installed on it. You can enable apps manually visiting chrome://extensions/ page. You may require restarting the browser for enjoying enabled apps.

Source: THN

Gameover Malware, variant of ZeuS Trojan uses Encryption to Bypass Detection

The year begins with the number of new variants of malware that were discovered by various security researchers. The new variants are more complex, sophisticated and mostly undetectable.

Two years back in 2012, the FBI warned us about the ‘GameOver’ banking Trojan, a variant of Zeus financial malware that spreads via phishing emails. GameOver makes fraudulent transactions from your bank once installed in your system with the capability to conduct Distributed Denial of Service, or DDoS, attack using a botnet, which involves multiple computers flooding the financial institution’s server with traffic in an effort to deny legitimate users access to the site.

But that wasn't the end; a new variant of the same family of banking Trojan has been discovered by researchers that are being delivered by cyber criminals to users’ machines, making it easier for the banking malware to evade detection and steal victim’s banking credentials.

Malcovery's Gary Warner explains the behavior of the new variant of GameOver Zeus malware that uses Encryption to bypass perimeter security, in a blog post.

Gary Warner warned that, to get this job done the malware has been working along with other malware called 'UPATRE' via Social Engineering techniques.

New version of GameOver malware has encrypted its ‘.EXE’ file to a non-executable format i.e. ‘.ENC’ file, so that the malware which spreads via spam e-mails and malicious attachments can avoid being spotted by firewalls, IDS, Web filters and other security defenses.

To Spread it at large scale, spam campaign using ‘Cutwail’ botnet, which is designed to look like an official correspondence from banks or some government agencies that trick user to open the attached .zip file.

Gary Warner explains that, “These .zip files contain a small .exe file whose primary job is to go out to the Internet and download larger, more sophisticated malware that would never pass through spam filters without causing alarm, but because of the way our perimeter security works, are often allowed to be downloaded by a logged in user from their workstation.”

Boldizsár Bencsáth, from the CrySys Lab in Hungary, has explained the encryption method in his blog post on Sunday, "The droppers sent out through emails are pretty small, around 10-18 KB. These droppers have an obfuscation layer, so hard to directly analyze them."

In the new model, the .zip file attached to the email has a new version of UPATRE malware that first downloads the .ENC file from the Internet, then Decrypt it and relocate it with a new file name, then causing it both to execute and to be scheduled to execute in the future, Warner writes.
Keep your anti virus up to date.

 

Source: THN