INTERNET!~ I knew it was the SD card, I knew it! The Vodafone bot vector analysis I mentioned earlier this month was correct. It’s over.

The infection of microSD cards for the HTC Magic with the Mariposa information-stealing client and other strains of malware was first reported after Vodafone Spain supplied a malware-infected Android phone to a Panda worker earlier this month. [From the register]

Users get new microSD cards. Yay, but at what cost did buying the $2 phone really bring? 3,000+ phones infecting every windows machine that they come in contact with, snap. I guess that means more you have to start using Linux or scan your new phones with a Linux machine first. Hey there’s a new service, phone virus removal…

A quick analysis of the malware reveals that it is in fact a Mariposa bot client.

Every android phone *can* be plugged into any PC or Mac via USB. Under windows it works just like any other insert digital medium (CD, DVD, Flash Drive). Upon being plugged in, it opens the folder and executes the file specified in autorun.ini. This would be the vector a bot herder/malware researcher would use to launch it’s “spread” and stay infected. As long as nobody notices the files on the phones, users would just keep getting re-infected every time they plug in their phone to download their photos. One speculation that may be responsible is: “the SD card” since all that someone would need to do is put “files” in the root of the SD card for them to execute. So the question might be instead be: “How would someone slip a file onto a flash card before it’s inserted into a phone?”.

Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware.

Why did it take so long for a person to notice malware on the phone? The HTC Magic is one of the most popular smart-phones in the UK. In the US, T-mobile branded this product as the “myTouch 3G“, and that phone has a massive pop. Where is the supporting evidence on the phone? The only “proof” we have so far is a few windows screen shots. I’m intrigued by this and it will be interesting to see what comes to light. I’ll keep you updated when I hear more.

In a move to stop CPU waste from processing bloated content, Virgin Airlines has trash-canned all of their FLASH content. I commend them on this move; someone needed to start the movement. Flash is bloated. End of story. There is no standard, there is no open source, and there is no relief. As soon as you start adding flash to a site, you’ve degraded the ability of the browser.

“Apple does not support Flash because it is so buggy… Whenever a Mac crashes more often than not it’s because of Flash. No one will be using Flash…The world is moving to HTML5.” — Wired

(HAHA!). But flash has it’s place, it is the best medium to deliver video on a web page and play web-games.

Hopefully, HTML5 can fix the web game problem.

Adding my own flavor to this post:

Over the technology years, flash has been metaphorically turned into a baseball bat by business owners and web publishers. This proverbial baseball bat has been beaten across every web developer’s face (repeatedly) for the last 11 years and there hasn’t been anything that the developers can do about it. You MUST specialize in flash, to make flash.

New personal hero: Ravi Simhambhatla

He has some sweet open source ideals as well.

So hilarious but; your own hope at remaining off the web…

[thanks SD]

Wow Sony post day. Here’s a cute and fun video that disassembles and reassembles a PSP Go in stop motion. This video is all over the blog-o-spheres so I wouldn’t doubt if you have seen it.

Smack! Looks like the PS3 has finally been hacked. The ‘researcher’ supposedly bypassed the hypervisor and gained full read/write access to all the inner workings of the long un-touched gaming console beast machine known as the Playstation 3. Sony, what’s up?

The researcher named George Hotz goes by geohot. We won’t find out soon how he did it because he’s not releasing his information yet, but you can follow the updates on the researcher’s blog or his twitter.

Shouldn’t be long now, ps3. I May have to get one!

[found at hack a day]

I found a digital guitar creates electronic music and runs Gentoo linux on Hack a day. It looks really fun and I approve of this.

Don’t think “acoustic” or “electric” but “electronic”.

[misa digital]

Here’s the google techtalk about what they did to take over the botnet and analyze it (get ready its long and boring (an hour and 15 minutes) but crazy):

Protect your passwords and your intertubes!

[Reference]

Stepping into the verse’ of the known, we try to change our concept of reality with technology. It’s a very weird feeling moving your ideals into a new plane of thought. Augmented reality is such an approach that you perceive extra dimensions on-top of your physical plane. Here is a building that displays QR codes that can be used for a variety of applications (shopping, twitter updates, advertising, entertainment, etc).

The iPhone application is not in the iTunes App Store, but is available to interested parties on request. The project is a collaboration between teradadesign and Qosmo.

Imagine yourself walking around the grocery store holding your phone up to every product for up-to-date reviews. Imagine going out to a night club, pointing your phone at a person  to view their social profile (“Oh, that person like’s cheese?”). There may be a time where you browse your favorite books at the library with QR codes. You could put a QR code on the back of your transportation that links to your website. The best part about QR codes is, you don’t know what you’re going to get. It’s like finding treasure (good or bad).

[Thanks Designboom!]

The always lovable, somewhat fluffy, already trendy, Joshua Serbus, captured this beuewt’ while walking his 8 french poodles between Buffalo Lake and  Hector MN on Black Friday.