Thursday, July 22, 2010

Noscript (Firefox extension)

Noscript is a Firefox extension that stops Javascript (a major target for security flaws) from running without permission, blocking exploits such as click jacking and XSS; white listing feature lets the user select named sites that can run scripts. Can be a bit intrusive but worth it for the security-conscious.

Dell warns of malware on PowerEdge server motherboards

Dell is apparently warning customers that "a small number" of its PowerEdge R410 server motherboards may contain malicious software. "The potential issue involves a small number of PowerEdge server motherboards sent out through service dispatches that may contain malware," according to post on a Dell support forum. "This malware code has been detected on the embedded server management firmware."

Dell's response came after a customer wrote about being contacted by a service technician trying to schedule an appointment to cleanse a server of malware. Dell said that it did not believe the issue would impact its customers. "To date we have received no customer reports related to data security," according to the post.

Non-Windows OSes are not affected, and the malware is not present on the new motherboards shipped with PowerEdge systems, Dell said.

The company said it has assembled a customer list and is contacting customers through letters. Dell representatives contacted in London on Wednesday morning did not have an immediate comment.