Security Warning: CHANGE YOUR GMAIL PASSWORD IMMEDIATELY IF YOU HAVE EVER USED G-Archiver

RED ALERT!

If you have ever used G-Archiver to archive/backup your Gmail data. Change your Google account password immediately before it is too late. The software was found sending user's login ID and passwords back to the author secretly without user's permission.

Read this post for details. I tried to verify the claim by downloading one version here (the official one is down). My anti-virus software prompted me for an Infostealer.Geemarc virus when I try to extract the zip file, and you may be interested in the advisory for the virus updated on 10th March 2008. Also checked out the scan result of the installer from VirusTotal. Seems that it's a quite well-know fact now and doesn't need any further verification anymore.

So, you can see how malicious programmers could hurt you now. Only trust those trustworthy please!

Recovering files from EXT3 filesystem

As you may already know, unlike EXT2, recovering deleted files from EXT3 used to be as hard as making use of data craving techniques on the raw data.

Here comes a good news. Carlo Wood has developed a EXT3 file (and directories too) recovery tool to recover his accidentally rm -rf deleted home directory containing 3GB of data, and he would like to share this useful tool with all of us. Up to my understanding, the tool make use of the journals to make this "impossible" task possible.

Don't hesitate to read his article for detailed explanation on the EXT3 filesystem and the recovery tool.

CAPTCHA Brusted!

The CAPTCHA of three popular free mail service provider were brusted recently (or not recently)!

Here are the detailed analysis from WebSense Security Labs, really worth reading:
Google's CAPTCHA busted in recent spammer tactics
Streamlined anti-CAPTCHA operations by spammers on Microsoft Windows Live Mail

I cannot find the analysis for Yahoo's, but here's the news article:
Yahoo's CAPTCHA Broken...Is a Spam Tsunami in the Offing?