Your cart is empty
Visit The Shop

HNNCast 103009

HNNCast for the Last Week of October, 2009
Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories and News
PART 2: Quickies

Lead Stories:

The Internet is Full of Adminholes, TWC Customers Still Vuln., Unu Injections on Banks, Parliament and ’sorta’ barrackobama.com, News and Police Sites Swim with Swedish Fishes

News:

9k Facebook Apps Vuln., UK Guardian Claims Attack ‘Serious’ But Has No Details, Solo Extradition Stalled, Nigeria EFCC Busts Some Kung-Fu?, Vishing Small Banks, HNN Job Bank

Quickies:

Anti Phishing WG Report: finger@Avalanche, UCSniff Live Release @ToorCon, Gift Card Cloning Scam, PhonSnoop for Blackberry, Australian Booksmart; not Street Smart, FBI Banking Trojan Figures, Atheists Nailed to a T-1, Gizmodo Ad-pology, Thotcon Call For Sponsors, Zeus FDIC PDF Trick Not a Treat, BONY Employee Pulls a Ballsy One, Pro ‘Unknown’ Targets Swiss Booty

Stack of Shame:

117; Note: Now includes vulnerabilities under 30 days old.

Posted: October 31st, 2009
at 5:03am by tan

Tagged with Alan Johnson, Anti Phishing Working Group, Asterisk, Atheist Foundation, ATM, Avalanche, Bank of New York, barrackobama.com, Blackberry, BONY, Bredolab, Causes, Columbia University, DDoS, Default Password, DHS, Eagle Claw, Economic and Financial Crimes Commission, EFCC, extradition, Facebook, Farm Town, FarmVille, FAXX, FBI, FDIC, Gary McKinnon, Gift Cards, Gizmodo, Global Atheist, Guardian, HSBC, ING, iPhone, Jobs, Liberty Bank, Linksys, LivingSocial, Magdex, maleware, Movies, Nigeria, Orange France, phishing, PhonSnoop, Roosevelt University, Scotland Yard, SMC, Solo, Solvay Bank, sql injection, Swedish Police, Swiss Foreign Ministry, theharmonyguy, Thotcon, Time Warner, Toorcon, Trojan, TWC, UCSniff, UK Parliament, Union State Bank, University of Wisconson, Unu, vishing, VoIP, WiFi, YoVille, Zeus

Categories: HNNCast, podcasts

Comments: 1 comment

One Response to 'HNNCast 103009'

Subscribe to comments with RSS or TrackBack to 'HNNCast 103009'.

HNNCast for the last week of October, 2009

Lead Stories:
The Internet is Full of Adminholes
http://www.wired.com/threatlevel/2009/10/vulnerable-devices/

TWC Customers Still Vuln.
http://www.wired.com/threatlevel/2009/10/routers-still-vulnerable/

Unu Injections on Banks, Parliament and ’sorta’ barrackobama.com
http://blogs.computerworld.com/14977/obama_drupal_ing_around_whitehouse_gov_goes_open_source
http://praetorianprefect.com/archives/2009/10/the-barack-obama-donations-site-was-hacked…err-no-it-wasn’t/comment-page-1/
http://unu1234567.baywords.com/2009/10/26/barackobama-com-full-acces-sql-injection/

News and Police Sites Swim with Swedish Fishes
http://www.thelocal.se/22950/20091029/

News:
9k Facebook Apps Vuln.
http://www.readwriteweb.com/archives/how_safe_are_facebook_applications.php
http://www.softsailor.com/news/10495-facebook-password-reset-confirmation-email-comes-packed-with-bredolab-trojan-virus.html
http://threatpost.com/en_us/blogs/facebook-password-reset-spam-botnet-attack-102709

UK Guardian Claims Attack ‘Serious’ But Has No Details
http://news.bbc.co.uk/2/hi/uk_news/8324630.stm

Solo Extradition Stalled
http://business.timesonline.co.uk/tol/business/law/article6891102.ece
http://www.scmagazineus.com/Accused-hacker-McKinnon-gets-temporary-extradition-reprieve/article/156296/

Nigeria EFCC Busts Some Kung-Fu?
http://arstechnica.com/tech-policy/news/2009/10/nigeria-actually-arrests-shuts-down-online-scammers.ars
http://www.breitbart.com/article.php?id=CNG.6a8cc43eefe7559c839cd6f85e74e8f8.731&show_article=1
http://www.pointblanknews.com/os2334.html
http://www.youtube.com/watch?v=f1nKR3gYRY8

Vishing Small Banks
http://www.thestandard.com/news/2009/10/27/internet-phone-systems-become-fraudsters-tool
http://www.cnycentral.com/news/news_story.aspx?id=365998

HNN Job Bank
http://blogs.govinfosecurity.com/posts.php?postID=333
http://jobsearch.usajobs.gov/Search.aspx?cn=&rad_units=miles&brd=3876&pp=50&jbf574=HS*&vw=d&re=0&FedEmp=N&FedPub=Y&caller=agency.aspx&pg=1&q=cyber%20security%20or%20cybersecurity

Quickies:
Anti Phishing WG Report: finger@Avalanche
UCSniff Live Release @ToorCon
Gift Card Cloning Scam
PhonSnoop for Blackberry
Australian Booksmart; not Street Smart
FBI Banking Trojan Figures
Atheists Nailed to a T-1
Gizmodo Ad-pology
Thotcon Call For Sponsors
Zeus FDIC PDF Trick Not a Treat
BONY Employee Pulls a Ballsy One
Pro ‘Unknown’ Targets Swiss Booty
http://www.scmagazineus.com/Avalanche-the-most-prolific-phishing-group-of-2009/article/156216/
http://www.theregister.co.uk/2009/10/23/iphone_voip_sniffing_made_easy/
http://www.darkreading.com/security/vulnerabilities/showArticle.jhtml?articleID=220900404
http://www.theregister.co.uk/2009/10/22/rim_blackberry_bugging_software/
http://www.infosecurity-magazine.com/view/4750/from-pizza-delivery-to-atm-hacker-to-criminal-in-two-years/
http://voices.washingtonpost.com/securityfix/2009/10/fbi_cyber_gangs_stole_40mi.html?wprss=securityfix
http://host.madison.com/wsj/news/local/education/university/article_9e177bfa-c28b-11de-b6f5-001cc4c03286.html
http://www.smh.com.au/technology/security/cyber-attacks-smite-atheist-websites-20091021-h7ul.html
http://news.cnet.com/8301-27080_3-10385498-245.html?tag=mncol;title
http://www.theregister.co.uk/2009/10/27/gizmodo_suckerpunched_by_malware_hackers/
http://www.wired.com/threatlevel/2009/10/gawker/
http://www.thotcon.org/
http://voices.washingtonpost.com/securityfix/2009/10/nastygram_spoofed_fdic_bank_fa.html?wprss=securityfix
http://money.cnn.com/news/newsfeeds/articles/djf500/200910281833DOWJONESDJONLINE000865_FORTUNE5.htm
http://www.swissinfo.ch/eng/news_digest/Foreign_ministry_computer_network_hacked.html?siteSect=104&sid=11407423&ty=nd
http://www.theinquirer.net/inquirer/news/1559843/swiss-foreign-ministry-hacked

Stack of Shame
http://www.zerodayinitiative.com/advisories/upcoming/

tan

31 Oct 09 at 5:06 am

You must be logged in to post a comment.

/////////////////////

RT @AdobeSecurity MOAUB Adobe Flash Player and Reader vuln already fixed in June - details at http://bit.ly/9v6YC6 and http://bit.ly/aiCei2 02:51:31 PM September 01, 2010 from Twitterrific
RT @1337bot 3NV!0u$ 0f Y0uR fR!3Nd$ wh0 g07 7h3!R hNN 7$h!R7 #Defcon? N0w Y0u c4N 83 ju$7 4$ 1337 g37 Y0uR hNN 7$h!R7! http://3.ly/HNNTshirt 11:32:31 AM September 01, 2010 from web
Envious of your friends who got their HNN TShirt at #Defcon? Now you can be just as 1337 Get your very own HNN TShirt! http://3.ly/HNNTshirt 10:31:43 AM September 01, 2010 from web
Hack is Whack? SnoopDog teams with SYMC to solicit rap videos http://3.ly/HNNwhack Win a trip to LA and a free laptop. whoop. 10:07:33 AM September 01, 2010 from web
RT @abysssec MOAUB started http://www.abysssec.com/blog/2010/09/moaub-1/ today featuring cpanel and adobe flash and reader. 09:04:33 AM September 01, 2010 from Twitterrific

Breaking News

A Fair(y) Use Tale August 5, 2010
[…]
log2timeline July 1, 2010
Looks pretty neat… for free… …a tool that could take timeline analysis to a new level. That is to create a single tool that could parse various artifacts found on a suspect drive and include them in the timeline, a some sort of super timelining… via log2timeline. […]
The Irrelevancy of Industry Accepted Malware Testing Standards June 30, 2010
I have to say that DannyQuist has it right. The AV industry is not real world and not effective. The fact remains that the AV industry is about selling signatures, not about preventing malware from infesting your PC. The fact that they can take a finger print of what they’ve found “in the wild” is [...] […]
NeoPwn Mobile Pentesting June 29, 2010
We are proud to announce that we are finally approaching a beta release of the first BackTrack Mobile operating system for the Nokia N900! The release will be public shortly before the Blackhat and Defcon conferences in July 2010. via NeoPwn Mobile Pentesting – First Ever Network Auditing Distribution for a Mobile Phone Platform. […]
Dark Tangent’s Tamper Evident Contest RULES June 16, 2010
This looks like a really cool contest – other cons take note. There are all sorts of variations on this theme – who’s going to do the counterfeiting competition? I know one year HOPE held one with their badges – whether they realized it or not – LOL. I suppose counterfeit DEFCON badges would be… [...] […]
THE CYBER WAR THREAT HAS BEEN GROSSLY EXAGGERATED (Washington DC) | Intelligence Squared US June 15, 2010
Interesting debate – it starts off all over the road but eventually gets to the point – that even though our new Cyber Czar talks about making us more secure, the policies he is pushing are not secure software, and not about shaking up an industry that perpetuates the problem. Instead they’re about establishing power [...] […]
UK Met Police Using ENF Analysis for Forensics June 9, 2010
So audio forensic techniques have only been around since Watergate and haven’t really progressed since then… until now. It would be very interesting to read up on the details but it appears that the “grid” has a fingerprint that constantly changes. It appears there is also a way to find this signature in an audio [...] […]
DHS May Merge Infrastructure Protection and Cybersecurity Units June 8, 2010
Seems reasonable to me – get them all in 1 “room” so the talented one can get their hands into more stuff. Telecom is way behind and needs some infusion of critique like they can get from web app testers. Your automated telephone attendant systems for example – it’s like they were invented before we [...] […]
Billionaire Polluters Defacement June 8, 2010
A quick looksie into this shows we’re talking Cross Site Scripting (XSS) here… http://energiser.bp.com/login/index.php?lang= + trigger, + iFrame of content to display Which is why this is up on XSSED.NET I guess – LOL. You can visit the archive and follow the actual link to see the site is STILL VULNERABLE. Found by: holisticinfosec Past XSS finds by holist […]
Android App Aims to Allow Wiretap-Proof Cell Phone Calls « The Firewall – Forbes.com May 25, 2010
On Tuesday, an independent hacker and security researcher who goes by the handle Moxie Marlinspike and his Pittsburgh-based startup Whisper Systems launched free public betas for two new privacy-focused programs on Google's Android mobile platform: RedPhone, a voice over Internet protocol (VoIP) program that encrypts phone calls, and TextSecure, an app […]
Fuzzdb Beta Release April 20, 2010
Web Fuzzing Discovery and Attack Pattern Database – A comprehensive set of fuzzing patterns for discovery and attack during highly targeted brute force testing of web applications. This is especially useful for many filter bypass type exploits. Identical encoding sequences have been observed to bypass filters for more than one application. Examples can be ob […]
Spotlight: Cyber Terrorism Roundtable April 19, 2010
OK, so it’s from 2007 but given the recent news around Google/China and the push by Uncle Sam reaching the point that “return fire” in “cyber space” is the “rule of engagement”, this is still very timely. Great stuff from Marcus… Spotlight: Cyber Terrorism Roundtable with Sami Saydjari, Marcus Ranum, Dean Turner and hosted by Nicole [...] […]
Congress questions Keth Alexander April 16, 2010
Let’s hope we ALL get to ‘return fire’ and that this ‘right’ is not limited to the military and DHS. …One of the major themes of Thursday’s hearing was questioning where the Cyber Command would fit within the traditional military chain of command and when and how Alexander and his team of computer whizzes would launch [...] […]
Navy cyber leader expects proactive capabilities this year April 10, 2010
As much as we at HNN balk at all the cyber warfare talk out there, here’s some solid thinking that applies to just about everyone. When the the Lower Colorado River Authority finally notices people are trying to login to their site – but only because one of the IPs resolved to China… that’s just [...] […]
Researcher Releases ‘Qubes’ Hardened OS April 7, 2010
It’s been far too long since we’ve seen an effort like this. First there was multix; then there was OpenBSD; now, hold on to your qubes – LOL. Pretty exciting stuff. Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide [...] […]

Classifieds

Software Engineer – ExtraHop Networks June 16, 2010
Do you want to solve problems instead of sitting through meetings? Do you work better as part of a small, focused team? Do you want to feel a sense of ownership in what you do and make a real impact? So do we. We are looking for individuals who love technology, appreciate elegant solutions to hard problems, and want [...] […]
Python / Django – Satchmo (Deer Park, Long Island, NY) June 16, 2010
Exciting start-up is looking for an experienced Python/Django developer…. experience required: Python / Django – Satchmo html/CSS/ html5 and Javascript/jQuery Experience developing with Web Services (REST, SOAP, etc) Our current project is an audible Tweet platform: http://ShoutOmatic.com allowing your voice to be “heard” within your facebook status updates. […]
Mobile Developer Magazine is looking for mobile device or application hackers… June 8, 2010
* If you are interested in contributing to our team please send an email to contact [at] mobilenewsmedia.net * […]
Ultimate Hacker Sticker Collection on eBay April 18, 2010
Anyone that supports 501(c)(3) not-for-profit organizations that promote security. “Huh?!” you say? All proceeds of this auction are being donated to the Open Security Foundation (OSF), maintainers of the Open Source Vulnerability Database and the DatalossDB project. Anyone who likes stickers should bid. Bosses, get them for your employees. Security types, g […]
Developer Wanted: FreshBooks April 18, 2010
Job Description: Enterprise Software Developer - FreshBooks – Toronto, ON FreshBooks is looking for an experienced Enterprise Software Developer to help build out our world-class invoicing platform. Thousands of people use FreshBooks every day to manage their businesses — tracking time, billing and getting paid more easily and more reliably. Your role is to […]
Developer Wanted: FreshBooks April 18, 2010
Job Description: Software Developer - FreshBooks – Toronto, ON Love the fast-paced and creative environment of a start-up, but could do without the stress and chaos? FreshBooks has been around for more than five years now and has a fanatical fan base of over 900,000 people who use our groundbreaking Web 2.0 application. Whatever “Web 2.0″ means. We [...] […]
HELP WANTED: Java/Ruby/Django Developer March 8, 2010
Aftershock is looking for great developers to join our team. http://www.aftershocksf.com/ Web Application Developers: Java, Ruby on Rails, or Django About Aftershock: We make software for mobile devices, we’ve launched 2 apps that made it into the Top 5 of the iTunes App Store. We’ve launched more than 10 apps that have been downloaded cumulatively more than […]
HELP WANTED: HNNCast January 17, 2010
It’s a regular thing for us to decide we need specific help or for us to receive offers of help in areas we have no immediate need for. Hacker News Network is still at a stage where things are VERY tight. The burglary of Space Rogue’s car during his move took all the equipment we [...] […]
Hackers for Charity – Help us get video content! December 8, 2009
The Plea from HFC What I need is for a small army of people to swarm the net in search of training courses (Office, Graphics packages, just about anything). We need to: Find sites that offer training If free, search for a terms of use prohibiting downloading If terms restrict downloading, send an email explaining what we’re doing and ask [...] […]

Avatars by Sterling Adventures

Site last updated August 29, 2010 @ 10:49 pm; This content last updated May 16, 2010 @ 6:50 pm

Your cart is empty
Visit The Shop

HNNCast 103009

One Response to 'HNNCast 103009'

Leave a Reply

HNN IS SPONSORED BY…

/////////////////////

FOLLOW

Breaking News

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

Classifieds

HNN MERCHANDISE

Your cart is emptyVisit The Shop

HNNCast 103009

One Response to 'HNNCast 103009'

Leave a Reply

HNN IS SPONSORED BY…

/////////////////////

FOLLOW

Breaking News

Log In

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

Classifieds

HNN MERCHANDISE

Your cart is empty
Visit The Shop