[jsfg_cinti] Tech Note: Wikipedia used to spread malicious code

Dear JSFG folks,

Here's some distressing news that you should be aware
of.  The popular, online, user-created Wikipedia has
been used to "spread malicious code.  See the details
in the article excerpt below.

While Wikipedia is popular, since it is user-created
and virtually anyone can create/edit the articles
without review (except by other contributors who may
or may not be subject matter experts) it is subject to
error, misinformation and bias.  

In addition to the current security risk posed by use
of Wikipedia, there have been several scandals
involving Wikipedia wherein individuals have been
smeared (notably John Seigenthaler, founding editorial
director of USAToday) and false information about them
inserted into Wikipedia. In my opinion Wikipedia
should not be used as a primary reference source and
should not be considered a reliable source of
information.  

On the other hand, the well respected British
scientific journal Nature found that for scientific
information Wikipedia was "not markedly less accurate"
than Encyclopedia Brittanica.  So perhaps it is
reasonable to use Wikipedia for scientific and
technical information while not using it for any other
purpose.

There are authoritative alternatives that are
available through the Public Library of Cincinnati and
Hamilton County and I will shortly post information on
how JSFG members may access those alternatives.

Regards,
Lance Feldman

----------------------------------------
Article URL:  http://tinyurl.com/yemfuu or
http://news.zdnet.com/2100-1009_22-6132733.html?tag=nl.e550

Wikipedia used to spread malicious code
By  Tom Espiner,  ZDNet (UK)
Published on ZDNet News: November 6, 2006, 6:34 AM PT

A Wikipedia page has been used by hackers in an
attempt to spread malicious code.

The entry for the MSBlast worm in the German version
of the popular online encyclopedia was altered to
include false information about a new version of the
Lovesan/MSBlast worm, with links to a supposed fix,
according to Sophos. The fix was actually a piece of
malicious code, the antivirus vendor said in a notice
published Friday. 
...
----------------------------------------




 
____________________________________________________________________________________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail.
http://new.mail.yahoo.com
You can unsubscribe from the list by sending email to 
jsfg_cinti-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field. 

Web archive: http://www.freelists.org/archives/jsfg_cinti 

Questions to:  jsfg@xxxxxxxx

Other related posts: