Local Lawmaker Wants To Stop The State's Four-Year-Long Practice. Today, a Sacramento lawmaker showed how you could go to the Secretary of State's the web page where, until today, the state was selling your personal information for only $6 -- the cost of lunch.
read more | digg story
Sunday, September 16, 2007
fwknop-1.0 released: strongly authenticate to your closed Linux Firewall
Single Packet Authorization (SPA) is basically port knocking on steroids, and fwknop is the best supported and feature-rich implementation available today. I never worry about zero-day vulnerabilities in my SSH daemon while I'm running fwknop. This is the production-ready release of fwknop; use fwknop with iptables in a default-drop stance.
read more | digg story
read more | digg story
Pirate Party Launches High-Capacity Darknet
The Swedish Pirate Party has launched a commercial, high-capacity darknet, on an unprecedented scale and bandwidth. This service lets anybody send and receive files anonymously without being tracked or traced, and can pump data well over 10 megabits per second.
read more | digg story
read more | digg story
Spaf Writes More On Passwords And Myth
Eugene Spafford has written more about passwords to some of the comments made in response to his recent post about passwords.
read more | digg story
read more | digg story
Take the Zone Alarm Pepsi Challenge!
Interesting comparison of what 10 regular home PC users think when presented with the new Zone Alarm warning message in relation to blocking 180 Solutions software, as opposed to the old one. 180 might've been better off leaving well alone...
read more | digg story
read more | digg story
Free, Anonymous OpenID for You
OpenID is getting popular day by day and generating lot of discussion with varied response. I thought it would be a good idea to have a password-less/ anonymous OpenID that one can use. It is ready for you to use. No signup required. Just use http://www.jkg.in/openid/anything as your OpenID.
read more | digg story
read more | digg story
How the myspace SWF hack worked
As the title says, this is how the myspace SWF hack/hijack worked. There's no ads, and this isn't a blog - just a page I quickly made explaining what I found about the hack, also note that I didn't create the hack. I just found it interesting :)This is hosted on a random free host, which may die at any point - offers of hosting are welcome!
read more | digg story
read more | digg story
GoDaddy trashes Seclists.org
"I'm in the market for a new registrar. One who doesn't immediately bend over for any large corporation who asks." So says Seclists.org owner Fyodor, aka Gordon Lyon, speaking of GoDaddy.
read more | digg story
read more | digg story
2007: The year of the 9,999 vulnerabilities?
A look at the National Vulnerability Database statistics will reveal that the number of vulnerabilities found yearly has greatly increased since 2003. An average increase of 48% since 2002 indicates that breaking 10,000 vulnerabilities in 2007 is a real possibility, and may be problematic for some vulnerability tracking systems.
read more | digg story
read more | digg story
Zango Myspace partner still pushing their videos in Myspace
A few weeks ago, Zango Adware was being pushed via Myspace - after an outcry, the vids were pulled and you'd assume the affiliates account was cancelled. However, not only is the guy pushing Zango Adware from a new website, he is still installing from the old site too - the page is just not linked to. Something stink here? Yep.
read more | digg story
read more | digg story
Zyprexa Memos Leaked using Tor
The internal Ely Lilly memos have been leaked to the intenet using Tor. The anonymous post also launched a distributed netroots campaing organized around the 'zyprexakills' tag.
read more | digg story
read more | digg story
Reporting Vulnerabilities is for the Brave
The risks associated with reporting vulnerabilties are discussed in this recent CERIAS weblogs post. In the end, the author decides that the risks are too great, and decides that in the future, he will stay safe by staying quiet. Was this the right decision, or is reporting an issue regardless of the risks a moral necessity?
read more | digg story
read more | digg story
Interesting thing you can find with Google code search
Google launched a new code search feature today. People are already starting to use it to find username/passwords and other secure information.
read more | digg story
read more | digg story
HD DVD Encryption Hacked!
It looks like someone finally did it! "BackupHDDVD is a tool to decrypt a AACS protected movie that you own, so you can play it back later usingan HDDVD player software."
read more | digg story
read more | digg story
Eon8 - a Summary
Nice rundown of what Eon8 was all about, some of the after-effects and (of course) screenshots of the (sadly inevitable) hack attempts on the site.
read more | digg story
read more | digg story
Pirate Party Launches High-Capacity Darknet
The Swedish Pirate Party has launched a commercial, high-capacity darknet, on an unprecedented scale and bandwidth. This service lets anybody send and receive files anonymously without being tracked or traced, and can pump data well over 10 megabits per second.
read more | digg story
read more | digg story
Hardening OpenSSH with Single Packet Authorization
SSH is a critical service for encrypted connectivity, but even OpenSSH occasionally has security vulnerabilities. It is risky to allow arbitrary IP addresses to connect to your SSH daemon, but if I'm on travel how can I still gain access if all connections are silently dropped by my firewall? Single Packet Authorization (SPA) provides an answer.
read more | digg story
read more | digg story
Now my mom can surf the web again
A new company siteadvisor.com has a new approach to preventing spam and spy-ware. They support Firefox and IE and are also making their database available under the Creative Commons license.
read more | digg story
read more | digg story
How I Hacked Your LinkSys Router Which You Probably Bought at Best Buy
In a world where we all shop at the same stores and buy the same wireless equipment it is very easy to unintentionally hijack someone’s wireless connection. Here's how this guy did it - by accident....
read more | digg story
read more | digg story
How to mathematically crack a Masterlock combination pad-lock
This guy shows you have you can break the combination of any Masterlock pad-lock. He uses math to bring down the possible number of combinations from 64,000 to 100.
read more | digg story
read more | digg story
How to: Set Up an Offshore Banking Account
Do you want to impress women by shredding a bank statement? For some guys an offshore bank account may sound like something out of a James Bond film or maybe a clever way for an arms dealer to conduct business, but for the most part, banking offshore is about saving on tax dollars.
read more | digg story
read more | digg story
Whitedust.net Announces The First Annual Black And White Ball
Whitedust.net, the leading online source of unbiased and uncut security information, today announced the first annual Black & White Ball. Presented in a unique two track format, The Ball will run for 4 days the first two bringing the latest in hacker techniques and attacks, the last two presenting the cutting-edge of security defence mechanisms.
read more | digg story
read more | digg story
The first "hacker world war"...
An interesting summary of the first "Hacker world war" which took place in 2001. It appears Ebaum vs ytmnd.com was *not* the first online cyber-jihad, as we can see. Links to a lot of archived defacements and some good background info, too.
read more | digg story
read more | digg story
How to generate a wallet-sized paper backup of important phone numbers
Reliance on cellphones means we rarely remember the numbers we dial frequently. Here's a trick for creating a wallet-sized paper hard-copy of your important numbers so you still have the important ones when your phone is inaccessible.
read more | digg story
read more | digg story
Phishers Defeat 2-Factor Authentication
Phishers have now started phishing for the two-factor token ID from victims. The most interesting part is that these tokens only give you one minute to log in to the bank until that key will expire. The phishers employ a man-in-the-middle attack against the victim and Citibank to log in via php and conduct money transfers immediately when
read more | digg story
read more | digg story
Spyware Warriors in the Digital Underground (Podcast)
FTA: "Wayne Porter and Chris Boyd (aka PaperGhost) get paid to spend their days infiltrating rings of real life cyber criminals,all the while risking they’ll get caught by the thieves themselves.How must it feel to gather evidence on such bottom-feeders and then turn it over to States’ Attorney General’s offices and/or Federal Authorities?"
read more | digg story
read more | digg story
Instant Messaging E-Commerce Exploits
A Botnet's been found that installs remote admin tools on an infected PC, then attempts to run a file that queries e-commerce databases and steals personal info like credit card info. They're also using commercially available apps to do a lot of this stuff. From the article.."Comersus Cart, CactuShop, CCBill and others" (may be vulnerable).
read more | digg story
read more | digg story
21 Firefox vulnerabilities reported today. Either update or install Opera.
Multiple vulnerabilities reported today at Secunia. Some of these bugs are critical. Check it out.
read more | digg story
read more | digg story
Subscribe to:
Posts (Atom)