HNNCast.2011.02.25

HNNCast for the last week of February, 2011

Top Story
Two Minutes of Hate, Two Weeks of FUD, Too Long Behind Bars

News
HB Gary’s Fake Friends, Cenzic Can’t DO so they patent and SUE, We R All Up in Yer Musics

T00l T1m3
updated: Mod Security, Nikto, Seccubus, SAMHAIN, THICKNET, Autologon

new: Volatility, Splunk for OSSEC, NiX, inSSIDer

NetWitness Note

Quickies

Celebrity Twits: Kim Kardassian, BBC World News
Cyber Mumbo Jumbo, Cyber UL
Defacements: Voice of America, Avira
Med School Compromise, Dutch Banking DDoS, MFA No Panacea, ODDJOB, CyberFool Index, Patch Time

Con Fu
X’d CaliberCon, PST CFP, DC19 CFP

Stack of Shame

count: 54 (-4)

10 (-2) OVERDUE! ; 2/4/11 (-21):
>ZDI-CAN-830 Novell [RISK=10] (245 days) – thanks Stephen Fewer (Harmony Security)
>ZDI-CAN-767 Microsoft [RISK=10] (323 days) thanks: Anonymous
>ZDI-CAN-733 Apple [RISK=10] (338 days) thanks: Anonymous
>ZDI-CAN-713 Sun Microsystems [RISK=10] (348 days) thanks: Anonymous
>ZDI-CAN-691 Apple [RISK=10] (365 days) thanks: wushi (team509)
>ZDI-CAN-672 Microsoft [RISK=10] (386 days) thanks: Moti Joseph
>ZDI-CAN-244 Borland [RISK=10] (462 days) thanks: Anonymous
>ZDI-CAN-543 Microsoft [RISK=10] (566 days) thanks: Peter Vreugdenhil
>ZDI-CAN-533 Microsoft [RISK=10] (580 days) thanks: surerun
>ZDI-CAN-348 RealNetworks [RISK=10] (973 days) thanks: Matteo Memelli (ryujin)

HNNCast.2010.11.05

HNNCast for the first week of November, 2010
Top Stories:
Herding Sheeps, OS X AV, Bug Bounties, Operation Payback Again

News:
Adopey Again and Again, SSD Sets Records, Big Trouble all Over Asia, Resurgency in 2600, CSAW Awards

T00lT1m3:
Evilgrade gets A+, Exploring Cloud Storage with Azure, Maltego OSX, TSK Update, Lots of Updates, Process hacker, VMMap, Duck-Duck-g00se, USB Attack Stick

Quickies:
Undead Botnet, Elementary Mistake, the Temptation of the Terminated, Home Office Catches Up, IE Uber 0day, LinUSSR, Poontang and Popcorn, Dopier than Doping, Backward Offer by Black Belt, US Cyber Command is Fully Operational

ConFu:
Shmerverpocalypse, Th0t (probably) Gone, Club Hack, Source, Hash Days

Stack of Shame:
count: 165 (-9)
97 up for release on 2/4/2011 (-7)
91 days until 2/4/2011

Birthdays
:

ZDI-CAN-407 SCO 2008-11-10 Discovered by: Anonymous
ZDI-CAN-405 IBM CVSS: 10 2008-11-10 Discovered by: Anonymous

HNNCast.2010.07.23

HNNCast for the third week of July, 2010
Top Stories

• Bug Bounties, Developments in Disclosure, Stuxnet Stalks Siemans SIMATIC WinCC SCADA, PDF to Play in Sandbox, Dell Malware, Spanish Mariposa is Slovenian

News

• The Next HOPE, FREE BYRONE, U.S. Cyber Defenses Suck – but Who’s Don’t?, Jews for Cheese Lover’s Pizza?, PlayNow Shut Down, Solo – Raised Where Nobody Cares

Tool Time

• Microsoft Security Essentials, Kraken, PacketFence, NMap – Defcon Edition, TrueCrypt, Nikto 2.1.2, PDF Dissector, HaraldScan, Shell of the Future, BackTrack 4 – Defcon Edition, SploitWare

Quickies

• Baidu gets to Sue, Fake French Fun, Sail the Net Like a Pirate, Schoolgirl Spycam, Vatican, Postini, Presidential Commission: Infosec Certification Creates Dangerously False Sense of Security

Cons Call

• HacKid Con, Kiwi Con, RuxCon, Source Barcelona, Defcon 18 – Pwnies, B-Sides Las Vegas, Badge Sneak Peaks, HNN@Defcon18

Stack of Shame
THANK YOU Predram Amini
Count: 122
Turning 1 This Week:

• ZDI-CAN-533 Microsoft 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C) Discovered 2009-07-23 (363 days ago) by: surerun

HNNCast.2010.06.25

HNNCast for the last week of June 2010
Top Stories

• Ali Wants to Do, Pump and Dump Bot, Get N3k3d or the GIFs go Public, Another Forum Bust, Too ilLEGATT to Quit, Baaaahd Goat

News

• We’ve All Got H0lez, a No-No from Lenovo, Embarxssed, Designed to Fail… on Purpose, a Real Turkey of a Move, POS for Alarm

Tool Time

• THC IPv6 Attack Toolkit, VASTO, Pwnage Tool, iPhone Password Breaker, L0phtCrack, HTTPS Everywhere

Quickies

• Civil Cyber War, Hungry Hungary Po-pos, Crime Bit Down Under, Bhutan Patch Predicament, ACL Needs Better ACLs, Tweets For Turks, Naidu Boo-boo, 1 Ringy Dingy, Sploit Stores DoSsed

Cons Call

• Conf Con, PacSec, HacKid Con, B-Sides Ottawa, B-Sides LV, Pokercon/Hackers Poker Invitational Tournament, CannonBall Run, Mohawkcon

Programming Note: No HNNCast for the 4th of July weekend!


Stack of Shame
Count: 142
BIRTHDAYS:

• Turning 1 Yr Old:
  • ZDI-CAN-509 from RealNetworks = HIGH RISK by: Anonymous 2009-06-25
  • ZDI-CAN-508 from RealNetworks = HIGH RISK by: Anonymous 2009-06-25
  • ZDI-CAN-506 from RealNetworks = HIGH RISK by: Anonymous 2009-06-25
  • ZDI-CAN-490 from RealNetworks = HIGH RISK by: Anonymous 2009-06-25
• Turning 2 Yr Old:
  • ZDI-CAN-348 from RealNetworks = HIGH RISK by: Matteo Memelli aka ryujin 2008-06-25