Hackers hid malware in CCleaner software

On Thu, 21 Sep 2017 09:24:47 -0500, Char Jackson
wrote:

On Thu, 21 Sep 2017 10:40:47 +0100, "p-0''0-h the cat (coder)"
wrote:

On Thu, 21 Sep 2017 10:13:48 +0100, "David B."
wrote:

On 21-Sep-17 10:07 AM, p-0''0-h the cat (coder) wrote:
On Thu, 21 Sep 2017 00:01:16 -0500, Char Jackson
wrote:

On Wed, 20 Sep 2017 23:49:34 +0100, "p-0''0-h the cat (coder)"
wrote:

On Wed, 20 Sep 2017 17:26:56 -0500, Char Jackson
wrote:

On Wed, 20 Sep 2017 17:18:13 -0000 (UTC), Blake Snyder
wrote:

On Wed, 20 Sep 2017 17:11:36 -0000 (UTC), in
news
---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

I thought I removed the errant VPN server but I realized that there was a
duplicate because there it TCP and UDP based configuration files.

So I disabled both the TCP and UDP VPN config file for the VPN server that
adds that Avast sig and header.

I can't promise the *next* VPN service won't do it but 99 out of 100 don't
add that line so most of the time this will work.

Each day there are another hundred servers that get added while another
hundred are deprecated so the list fluctuates daily.

This is a new free VPN server (just added today) so we'll see what it does.

Pretty hard to believe that a VPN server, which typically operates at
OSI Layer 3, would add (or remove) *anything* in the Layer 7 payload.

There's more to the story here. If this so-called VPN server is able to
muck around at Layer 7 for Usenet posts, what else is it doing to your
other traffic? I'd steer far, very far, from that kind of service. VPN
server, they ain't.

Meethinks it's a proxy server list.

VPN Gate clearly doesn't advertise it that way, but I think you're
right. Since the actual VPN servers are just a loose assortment of
privately owned servers running VPN software, there's no telling what
else they do to passing traffic.

I'm tempted to set one up myself, just to see what kind of goodness
passes through on a daily basis. I could free up about 20TB of drive
space to use as temp storage until I can run scripts to find the good
stuff.

On the other hand, nah, forget it.

The bottom line is if you need to use a VPN use a company you pay. With
payment you have a legal contract, and with that the ability to sue.
Pick someone who likely fears being sued and having their reputation
tarnished. So a long time player with a good reputation is ideal. Check
the service they offer in particular retention of log files and AVOID
like the plague any company that even suggests operating outside of the
law. I'd also look for a company that targets business at least as much
as individuals. Businesses are more likely to sue and sue hard if
shenanigans are uncovered.

You only need to use a little imagination to realise quite what you
could do if you had criminal or state surveillance intent.

IAWTP

The same can probably be said about newsservers! ;-)

It depends on the T&Cs of exactly what they offer of course but sure if
they offer privacy and anonymity and deletion of log files after a
lawful period etc and they fail to deliver you have greater recourse to
law with a contract. Proving loss might be more difficult. The service
is more limited and wanting to pay for legal recourse in this case is
unlikely. The fact is though that companies are more likely to work
within the law and provide what they contract to do. There are plenty of
honest people around. No guarantees though, ever. Set up your own
service if you want to approach that.

Don't think I didn't notice the nym shift. One false move and my itchy
paw will descend.

Nym shift? That was just David (resident stalker, but trying to play
nice for now) chiming in.

Well I have these filtered. The term Nym was a little sloppy.

Author: David B
Author: David B.
Author: David B.
Author:

and this one is

David B.

I might be a bit out of date a.k.a too lazy to plonk sooner.

I'm expecting the usual favour to be asked in a mo. My paw is ready.

Sent from my iFurryUnderbelly.

--
p-0.0-h the cat

Internet Terrorist, Mass sock puppeteer, Agent provocateur, Gutter rat,
Devil incarnate, Linux user#666, ******* hacker, Resident evil, Monkey Boy,
Certifiable criminal, Spineless cowardly scum, textbook Psychopath,
the SCOURGE, l33t p00h d3 tr0ll, p00h == lam3r, p00h == tr0ll, troll infâme,
the OVERCAT [The BEARPAIR are dead, and we are its murderers], lowlife troll,
shyster [pending approval by STATE_TERROR], cripple, sociopath, kook,
smug prick, smartarse, arsehole, moron, idiot, imbecile, snittish scumbag,
liar, total ******* retard, shill, pooh-seur, scouringerer, jumped up chav,
lycanthropic schizotypal lesbian, the most complete ignoid, joker, and furball.

NewsGroups Numbrer One Terrorist

Honorary SHYSTER and FRAUD awarded for services to Haberdashery.
By Appointment to God Frank-Lin.

Signature integrity check
md5 Checksum: be0b2a8c486d83ce7db9a459b26c4896

I mark any message from »Q« the troll as stinky