HNNCast.2010.07.23

HNNCast for the third week of July, 2010
Top Stories

• Bug Bounties, Developments in Disclosure, Stuxnet Stalks Siemans SIMATIC WinCC SCADA, PDF to Play in Sandbox, Dell Malware, Spanish Mariposa is Slovenian

News

• The Next HOPE, FREE BYRONE, U.S. Cyber Defenses Suck – but Who’s Don’t?, Jews for Cheese Lover’s Pizza?, PlayNow Shut Down, Solo – Raised Where Nobody Cares

Tool Time

• Microsoft Security Essentials, Kraken, PacketFence, NMap – Defcon Edition, TrueCrypt, Nikto 2.1.2, PDF Dissector, HaraldScan, Shell of the Future, BackTrack 4 – Defcon Edition, SploitWare

Quickies

• Baidu gets to Sue, Fake French Fun, Sail the Net Like a Pirate, Schoolgirl Spycam, Vatican, Postini, Presidential Commission: Infosec Certification Creates Dangerously False Sense of Security

Cons Call

• HacKid Con, Kiwi Con, RuxCon, Source Barcelona, Defcon 18 – Pwnies, B-Sides Las Vegas, Badge Sneak Peaks, HNN@Defcon18

Stack of Shame
THANK YOU Predram Amini
Count: 122
Turning 1 This Week:

• ZDI-CAN-533 Microsoft 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C) Discovered 2009-07-23 (363 days ago) by: surerun

HNNCast.2010.07.09

HNNCast for the first week of July, 2010
Lead Stories:

• the iTunes Blues, YouTube XSS, Pirate Bay SQL Injections, Jackpotting, Facebook Admin pwned, Cisco Live SPAM, Cyber Command Code

News:

• Disclosure Debated Again, Photo Kioskery, Cybaby, Romanian FlexiSpies, Symbian Malware, South Korean Poker Jokers, Back Track Backed to get Stacked

Tool Time:

• BinNavi, PDF Dissector, ida2sql, Deblaze, KillerBee, Ostinato, NeoPwn, Cubes, SIP Vicious, SmartCarving

Quickies:

• PAK Bugs Busted, Biden Wifi Taunter Temps Fate, Hacker Croll Update, Brit Banking Boinked by da Boys, GEXA Getsa Disgruntled Ex, PHP Attacks Continue, FBI Truely Crypt-up, Dvorsky Pulls a Palin, Another Superman III Scam, Butterflies and Octopi, I Will Never Click Again, Maine-stay for Malware, Bush gets “Hi” from Saudi Hackers, XPSP3

Cons Call:

• B-Sides Detroit, B-Sides Cleveland, B-Sides Las Vegas, CCC 2011, the NEXT HOPE, dEFFcon 18 Getaway Results, #1 Hacker Contest, DC18 Ninja Party, pwnie Award Nominations Still Open, Hacker Poker Invitational

Stack of Shame
count: 141
There is no Stack of Shame this week. ZDI seems to be split between going with CVSS2 scores or H/M/L… and went BOTH ways… Perhaps this will be worked out soon?