Java vulnerability - when lyric sites attack
According to anti-virus software vendor AVG, web sites are now actively exploiting the Java vulnerability Web Start disclosed at the end of last week, to infect Windows PCs. These include the popular songlyrics.com platform, from which users can download lyrics for the latest hits. The web site appears to have been hacked by criminals who have embedded a program to download malicious code from a Russian web server.
The vulnerability is not a problem in Windows alone – Unix is also affected although Java for Mac OS X is apparently not affected.
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump