Your cart is empty
Visit The Shop

HNNCast021910

HNNCast for the Third Week of February, 2010

Lead Stories

Reality Shockwave: Government to Intrude Further and Ask for More Money, Russian Porno Prankster Faces 2 Years in the Pokey, Floyd Landiself in Trouble Over Drug Tester Breach, Badware BSOD Bug Fixed Faster than MS Responds, The Big Filmowski – the Dudes Abide

News

Google:CanSec as K-12:Ivy League, Cash Grass or *ss – Nobody Passes for Free, Logic Bomb Blows 800 Boxes, Would You Like Some Identity Theft with that Shake Mate?

Quickies

European PIN Bypass, Twitter Grader Fails with Grace, Acrobatics Are Unsafe Kids, Georgia Compromises, Conficker Burrows through Leeds to Middlesex, Paint Me Vuln, the Weekly Cons Call

Stack of Shame

Count: 149
Turning 1 Year Old This Week:
- ZDI-CAN-438 Cisco High 2009-02-24, 360 days ago Discovered by: Anonymous
- ZDI-CAN-434 RealNetworks High 2009-02-24, 360 days ago Discovered by: Anonymous , Hossein Lotfi

Posted: February 21st, 2010
at 12:45am by tan

Tagged with "Credit card", "Dan Kaminsky", #cybershockwave, 0day, Acrobat, Adobe PDF, Alureon, APEX Online Learning System, Australia, authentication, billboard, botnet, Broward School District, BruCon, BSOD, Bug Bounty, Cambridge university, CanSecWest, Card Skimming, Chip and PIN, Chrome, Cisco, City of Norfolk, Columbia, Conficker, data breach, Defcon 18, DHS, drug testing, Filmowisko.net, Floyd Landis, Foundation for the Protection of Audiovisual Creativity, Georgia, Google, grades, HD Moore, Hossein Lotfi, HubSpot, IOActive, JPEG, Kneber, Leeds HNS, Logic Bomb, maleware, Manchester Police Department, McDonald's, metasploit, Microsoft, MitM, Moscow, MS10-015, Open Security Foundation, operation cyber shockwave, OPFOR, OSF, OSVDB, Paint, passwords, Perth, porn, POS, pwn20wn, Quahog Con, rapidshare, Real Networks, Russia, Safari, ScanSafe, Security B-Sides Boston, Source Boston, teacher, Twitter Grader, wargame, West Middlesex University Hospital, ZDI, Zero Day Initiative, Zeus

Categories: HNNCast, podcasts

Comments: 1 comment

One Response to 'HNNCast021910'

Subscribe to comments with RSS or TrackBack to 'HNNCast021910'.

HNNCast for the Third Week of February, 2010

Lead Stories
Reality Shockwave: Government to Intrude Further and Ask for More Money
http://bipartisanpolicy.org/events/cyber2010
http://politics.theatlantic.com/2010/02/_recreating_a_s_ituation.php

Russian Porno Prankster Faces 2 Years in the Pokey
http://en.rian.ru/society/20100216/157897499.html

Floyd Landiself in Trouble Over Drug Tester Breach
http://www.sbnation.com/2010/2/15/1311355/floyd-landis-arrest-warrant-hacker-french-judge-tour-de-france

Badware BSOD Bug Fixed Faster than MS Responds
http://blogs.technet.com/mmpc/
http://www.networkworld.com/news/2010/021610-hackers-update-rootkit-causing-windows.html

The Big Filmowski – the Dudes Abide
http://torrentfreak.com/three-arrested-as-police-swoop-on-rapidshare-link-forum-100216/

News
Google:CanSec as K-12:Ivy League
http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010

Cash, Grass or *ss – Nobody Passes for Free
http://www.sun-sentinel.com/news/broward/fl-school-computer-hackers-021210-20100211,0,7957216.story

Logic Bomb Blows 800 Boxes
http://www.krebsonsecurity.com/2010/02/time-bomb-may-have-destroyed-800-norfolk-city-pcs/

Would You Like Some Identity Theft with that Shake Mate?
http://www.examiner.com/x-6458-Boston-Information-Security-Examiner~y2010m2d13-EFT-Point-of-Sales-Hackers-Net-50-Million

Quickies
http://www.bbc.co.uk/blogs/newsnight/susanwatts/2010/02/new_flaws_in_chip_and_pin_syst.html
http://www.hubspot.com/blog/bid/5594/One-Lesson-From-The-Twitter-Grader-Screw-up-OAuth-Rocks
http://www.scansafe.com/downloads/gtr/2009_AGTR.pdf
http://blog.sucuri.net/2010/02/georgia-government-sites-hacked-and.html
http://blog.sucuri.net/2010/02/colombia-government-sites-hacked-and.html
http://www.theregister.co.uk/2010/02/18/conficker_nhs/
http://www.microsoft.com/technet/security/bulletin/ms10-005.mspx
http://blogs.zdnet.com/security/?p=5508
http://cansecwest.com/
http://quahogcon.org/2010/02/14/dan-kaminsky-to-give-keynote-at-quahogcon/
http://blog.brucon.org/2010/02/brucon-2010-call-for-papers.html
http://datalossdb.org/incident_highlights/45-open-security-foundation-advisory-board-call-for-nominations
http://www.sourceconference.com/index.php/en/boston2010/sb2010-schedule
http://www.securitybsides.org/BSidesBoston

Stack of Shame
http://www.zerodayinitiative.com/advisories/upcoming/

tan

21 Feb 10 at 1:02 am

You must be logged in to post a comment.

/////////////////////

RT @AdobeSecurity MOAUB Adobe Flash Player and Reader vuln already fixed in June - details at http://bit.ly/9v6YC6 and http://bit.ly/aiCei2 02:51:31 PM September 01, 2010 from Twitterrific
RT @1337bot 3NV!0u$ 0f Y0uR fR!3Nd$ wh0 g07 7h3!R hNN 7$h!R7 #Defcon? N0w Y0u c4N 83 ju$7 4$ 1337 g37 Y0uR hNN 7$h!R7! http://3.ly/HNNTshirt 11:32:31 AM September 01, 2010 from web
Envious of your friends who got their HNN TShirt at #Defcon? Now you can be just as 1337 Get your very own HNN TShirt! http://3.ly/HNNTshirt 10:31:43 AM September 01, 2010 from web
Hack is Whack? SnoopDog teams with SYMC to solicit rap videos http://3.ly/HNNwhack Win a trip to LA and a free laptop. whoop. 10:07:33 AM September 01, 2010 from web
RT @abysssec MOAUB started http://www.abysssec.com/blog/2010/09/moaub-1/ today featuring cpanel and adobe flash and reader. 09:04:33 AM September 01, 2010 from Twitterrific

Breaking News

A Fair(y) Use Tale August 5, 2010
[…]
log2timeline July 1, 2010
Looks pretty neat… for free… …a tool that could take timeline analysis to a new level. That is to create a single tool that could parse various artifacts found on a suspect drive and include them in the timeline, a some sort of super timelining… via log2timeline. […]
The Irrelevancy of Industry Accepted Malware Testing Standards June 30, 2010
I have to say that DannyQuist has it right. The AV industry is not real world and not effective. The fact remains that the AV industry is about selling signatures, not about preventing malware from infesting your PC. The fact that they can take a finger print of what they’ve found “in the wild” is [...] […]
NeoPwn Mobile Pentesting June 29, 2010
We are proud to announce that we are finally approaching a beta release of the first BackTrack Mobile operating system for the Nokia N900! The release will be public shortly before the Blackhat and Defcon conferences in July 2010. via NeoPwn Mobile Pentesting – First Ever Network Auditing Distribution for a Mobile Phone Platform. […]
Dark Tangent’s Tamper Evident Contest RULES June 16, 2010
This looks like a really cool contest – other cons take note. There are all sorts of variations on this theme – who’s going to do the counterfeiting competition? I know one year HOPE held one with their badges – whether they realized it or not – LOL. I suppose counterfeit DEFCON badges would be… [...] […]
THE CYBER WAR THREAT HAS BEEN GROSSLY EXAGGERATED (Washington DC) | Intelligence Squared US June 15, 2010
Interesting debate – it starts off all over the road but eventually gets to the point – that even though our new Cyber Czar talks about making us more secure, the policies he is pushing are not secure software, and not about shaking up an industry that perpetuates the problem. Instead they’re about establishing power [...] […]
UK Met Police Using ENF Analysis for Forensics June 9, 2010
So audio forensic techniques have only been around since Watergate and haven’t really progressed since then… until now. It would be very interesting to read up on the details but it appears that the “grid” has a fingerprint that constantly changes. It appears there is also a way to find this signature in an audio [...] […]
DHS May Merge Infrastructure Protection and Cybersecurity Units June 8, 2010
Seems reasonable to me – get them all in 1 “room” so the talented one can get their hands into more stuff. Telecom is way behind and needs some infusion of critique like they can get from web app testers. Your automated telephone attendant systems for example – it’s like they were invented before we [...] […]
Billionaire Polluters Defacement June 8, 2010
A quick looksie into this shows we’re talking Cross Site Scripting (XSS) here… http://energiser.bp.com/login/index.php?lang= + trigger, + iFrame of content to display Which is why this is up on XSSED.NET I guess – LOL. You can visit the archive and follow the actual link to see the site is STILL VULNERABLE. Found by: holisticinfosec Past XSS finds by holist […]
Android App Aims to Allow Wiretap-Proof Cell Phone Calls « The Firewall – Forbes.com May 25, 2010
On Tuesday, an independent hacker and security researcher who goes by the handle Moxie Marlinspike and his Pittsburgh-based startup Whisper Systems launched free public betas for two new privacy-focused programs on Google's Android mobile platform: RedPhone, a voice over Internet protocol (VoIP) program that encrypts phone calls, and TextSecure, an app […]
Fuzzdb Beta Release April 20, 2010
Web Fuzzing Discovery and Attack Pattern Database – A comprehensive set of fuzzing patterns for discovery and attack during highly targeted brute force testing of web applications. This is especially useful for many filter bypass type exploits. Identical encoding sequences have been observed to bypass filters for more than one application. Examples can be ob […]
Spotlight: Cyber Terrorism Roundtable April 19, 2010
OK, so it’s from 2007 but given the recent news around Google/China and the push by Uncle Sam reaching the point that “return fire” in “cyber space” is the “rule of engagement”, this is still very timely. Great stuff from Marcus… Spotlight: Cyber Terrorism Roundtable with Sami Saydjari, Marcus Ranum, Dean Turner and hosted by Nicole [...] […]
Congress questions Keth Alexander April 16, 2010
Let’s hope we ALL get to ‘return fire’ and that this ‘right’ is not limited to the military and DHS. …One of the major themes of Thursday’s hearing was questioning where the Cyber Command would fit within the traditional military chain of command and when and how Alexander and his team of computer whizzes would launch [...] […]
Navy cyber leader expects proactive capabilities this year April 10, 2010
As much as we at HNN balk at all the cyber warfare talk out there, here’s some solid thinking that applies to just about everyone. When the the Lower Colorado River Authority finally notices people are trying to login to their site – but only because one of the IPs resolved to China… that’s just [...] […]
Researcher Releases ‘Qubes’ Hardened OS April 7, 2010
It’s been far too long since we’ve seen an effort like this. First there was multix; then there was OpenBSD; now, hold on to your qubes – LOL. Pretty exciting stuff. Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide [...] […]

Classifieds

Software Engineer – ExtraHop Networks June 16, 2010
Do you want to solve problems instead of sitting through meetings? Do you work better as part of a small, focused team? Do you want to feel a sense of ownership in what you do and make a real impact? So do we. We are looking for individuals who love technology, appreciate elegant solutions to hard problems, and want [...] […]
Python / Django – Satchmo (Deer Park, Long Island, NY) June 16, 2010
Exciting start-up is looking for an experienced Python/Django developer…. experience required: Python / Django – Satchmo html/CSS/ html5 and Javascript/jQuery Experience developing with Web Services (REST, SOAP, etc) Our current project is an audible Tweet platform: http://ShoutOmatic.com allowing your voice to be “heard” within your facebook status updates. […]
Mobile Developer Magazine is looking for mobile device or application hackers… June 8, 2010
* If you are interested in contributing to our team please send an email to contact [at] mobilenewsmedia.net * […]
Ultimate Hacker Sticker Collection on eBay April 18, 2010
Anyone that supports 501(c)(3) not-for-profit organizations that promote security. “Huh?!” you say? All proceeds of this auction are being donated to the Open Security Foundation (OSF), maintainers of the Open Source Vulnerability Database and the DatalossDB project. Anyone who likes stickers should bid. Bosses, get them for your employees. Security types, g […]
Developer Wanted: FreshBooks April 18, 2010
Job Description: Enterprise Software Developer - FreshBooks – Toronto, ON FreshBooks is looking for an experienced Enterprise Software Developer to help build out our world-class invoicing platform. Thousands of people use FreshBooks every day to manage their businesses — tracking time, billing and getting paid more easily and more reliably. Your role is to […]
Developer Wanted: FreshBooks April 18, 2010
Job Description: Software Developer - FreshBooks – Toronto, ON Love the fast-paced and creative environment of a start-up, but could do without the stress and chaos? FreshBooks has been around for more than five years now and has a fanatical fan base of over 900,000 people who use our groundbreaking Web 2.0 application. Whatever “Web 2.0″ means. We [...] […]
HELP WANTED: Java/Ruby/Django Developer March 8, 2010
Aftershock is looking for great developers to join our team. http://www.aftershocksf.com/ Web Application Developers: Java, Ruby on Rails, or Django About Aftershock: We make software for mobile devices, we’ve launched 2 apps that made it into the Top 5 of the iTunes App Store. We’ve launched more than 10 apps that have been downloaded cumulatively more than […]
HELP WANTED: HNNCast January 17, 2010
It’s a regular thing for us to decide we need specific help or for us to receive offers of help in areas we have no immediate need for. Hacker News Network is still at a stage where things are VERY tight. The burglary of Space Rogue’s car during his move took all the equipment we [...] […]
Hackers for Charity – Help us get video content! December 8, 2009
The Plea from HFC What I need is for a small army of people to swarm the net in search of training courses (Office, Graphics packages, just about anything). We need to: Find sites that offer training If free, search for a terms of use prohibiting downloading If terms restrict downloading, send an email explaining what we’re doing and ask [...] […]

Avatars by Sterling Adventures

Site last updated August 29, 2010 @ 10:49 pm; This content last updated May 16, 2010 @ 6:50 pm

Your cart is empty
Visit The Shop

HNNCast021910

One Response to 'HNNCast021910'

Leave a Reply

HNN IS SPONSORED BY…

/////////////////////

FOLLOW

Breaking News

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

Classifieds

HNN MERCHANDISE

Your cart is emptyVisit The Shop

HNNCast021910

One Response to 'HNNCast021910'

Leave a Reply

HNN IS SPONSORED BY…

/////////////////////

FOLLOW

Breaking News

Log In

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

Classifieds

HNN MERCHANDISE

Your cart is empty
Visit The Shop