Your cart is empty
Visit The Shop

March 10, 2010 - TIFF CVE-2010-0188: Fixed?
March 10, 2010 - FDIC: Clueless on MFA and ACH
March 10, 2010 - Mariposa Botnet Malware Found On Vodafone HTC Magic
March 10, 2010 - LifeLock Will Pay $12 Million to Settle Charges
March 8, 2010 - Microsoft Security Intelligence Report volume 7 (January - June 2009)
March 6, 2010 - Solera Partners with Security Nightmare
March 6, 2010 - Fault-Based Attack of RSA Authentication
March 4, 2010 - Regulators Revisit E-Banking Security Guidelines
March 4, 2010 - Mariposa held 800,000 identities
March 4, 2010 - Homeland Security is recruiting new cyber-warriors
March 4, 2010 - Microsoft wants to tax you for their slop
March 4, 2010 - SCADA Devices on Verizon and Other Wireless Networks
March 4, 2010 - Old Heartland Breach: New Fraud
March 1, 2010 - TicketMaster protocols bypassed, 1mil tickets nabbed
March 1, 2010 - DoD Embraces Hacker Cert to Protect US

Archive for the ‘Harvard University’ tag

HNNCast020510

Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories & News
PART 2: Quickies

HNNCast for the first week of February, 2010
Lead Stories

Pushdo Pushing Poopoo, Google Bug Bounty, iPhone OTAP Flaw, House Probes GovTrends, Bogus Charges for Bogus MACs, NOTRAX – yea right

News

Temp Dasvidanya to Dovaya, RX for HoRrors 2221, Blackhat DC Wrap-Up, Po-po Go Offline for Conficker

Quickies

Taxes-Death-and-Maleware, Biometrics Beat (by a girl), Humbolt Hacked, Iowa Gaming Commission Gets Got, Twitter Gets Proactive, Navy Cyber C&C, StopBadware Goes Pro, Twitter Password Warning, Cons Call

Stack of Shame

Count: 152
Turning 2 This Week:
- ZDI-CAN-298 IBM , EMC High 2008-02-07, 727 days ago Discovered by: Sebastian Apelt (sebastian.apelt@siberas.de)
- ZDI-CAN-294 IBM High 2008-02-07, 727 days ago Discovered by: Sebastian Apelt (sebastian.apelt@siberas.de)
- ZDI-CAN-288 IBM High 2008-02-07, 727 days ago Discovered by: Anonymous

Posted: February 6th, 2010
at 11:37pm by tan

Tagged with "South Korea", 10th Fleet, amazon, Äôs Berkman Center for Internet and Society, biometric, Blackhat DC, botnet, Bug Bounty, bug market, cable modem modders, Cablehack.net, certificates, Chicago, China, Chromium, CIA, Conficker, Connection String Parameter Pollution, CSPP, Cyber Command, Data Accountability and Trust Act, DDoS, Defcon 18, Defcon.org, DerEngle, electron microscope, EMC, Esther Dyson, fingerprint scanning, Ft. Meade, Google, Greater Manchester Police, H.R.2221, Hacking the Cable Modem, Harvard University, Humbolt State University, IBM, IE, Infineon, Interior Ministry, Iowa Racing and Gaming Commission, iPhone, Japan, Kaspersky, maleware, Massmodz.com, Matthew Delory, Microsoft, Mozilla, Naval Cyber Command, Naval Network Warfare Command, Notrax, Novaya Gazeta, Oklahoma, OTAP, password, paypal, Pokercon, Pushdo, RSA, Ryan Harris, San Francisco, SDLC, SecureStar, Security B-Sides, ShmooCon, smartphone, SSL, stopbadware, TCN-ISO.NET, Thomas Swingler, Thotcon, Torrent, Trojan, Twitter, US Navy, Verizon, Vint Cerf, virus, Washington DC, wiimodder, ZDI

Categories: HNNCast, podcasts

Comments: 1 comment

HNNCast012210

Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories & News
PART 2: Quickies

HNNCast for the third week of January, 2010
Lead Stories

Google, Baidu, NetSol

News

Prime4Pwnage, MiFi Holes, Firewall? What Firewall, From Each According to Their Abilities*, Brian Austin Green Don’t Twitter

* TV-14: Brief Mild Nudity

Quickies

Back Track 4, D-Link Timely Fix, NMap 5.2, HoneyNet Challenge, Exeter Reloaded, Solo Threats, Berkman Internship
Cons Call: NullCon, AthCon, SchmooCon, the Next Hope
KEVIN FREE Aniversary

Stack of Shame

Count: 135
Real POPs (FIXES) 6 off the stack
IBM now dominates the Bottom of the Stack
HP still the Bottom Dweller

Posted: January 24th, 2010
at 6:50am by tan

Tagged with "Adobe Reader", "Kevin Mitnick", "Network Solutions", 90210, Advanced Persistent Threat, anti-Israeli, AthCon, Australia, authentication by-pass, Back Track Linux, backdoor, Baidu, Berkman Center for Internet and Society, billboard, Brian Austin Green, Brian Krebs, Canvas, CCC, CCTV, China, cross-site request forgery, D-Link, DDoS, defacement, DNS, Espionage, Exeter University, FBI, firewall, forensic challenge, France, FREE KEVIN, Garden Ring Road, Gary McKinnon, Germany, Google, GPS, HaCKed by C W komando, Harvard University, honeynet project, Honker Union, HP, IBM, iDefense, IE, Immunity, India, internal threat, invalid pointer reference, Iranian Cyber Army, KrebbsonSecurity.com, Legic, Li Yinan, Megan Fox, metasploit, Mifi, Moscow, nmap, Novatel, Nullcon, palestinian, porn, Prime, Real Networks, Schmoocon, Solo, Sprint, the Next HOPE, Tsumo Shimamora, Turkey, Twitter, Verizon, virus, zero-day

Categories: HNNCast, podcasts

Comments: 1 comment

<img src="/images/sbutt-twitter.gif" border="0">

RT @th3j35t3r Second video of enhanced XerXeS attack against jihadists - bit.ly/90IaQd 12:25:32 PM March 12, 2010 from Twitterrific
Turkey arrests 23 'militant' hacker suspects. Attempts to take down 'Code Attack Team' http://tr.im/Rzf2 08:10:15 AM March 12, 2010 from Tweetie
RT @th3j35t3r releases 2nd video of enhanced XerXeS attack- http://bit.ly/90IaQd -read it and well...weep cuz it's not just Apache now 07:10:07 PM March 11, 2010 from Twitterrific
Attrition.org's list of Certified Pre-0wned products http://bit.ly/9IZP5j <- more complete than ThreatPosts 06:37:23 AM March 11, 2010 from Tweetie
RT @aestetix: 2600 Magazine presents The Next HOPE: Call for Projects and Art (Hotel Penn, NYC, July 16-18 2010): http://tr.im/Rm48 05:36:40 PM March 10, 2010 from Twitterrific

TOP OF THE STACK (NEW)

ZDI-CAN-689: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]
ZDI-CAN-702: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]
ZDI-CAN-711: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]

RECENTLY POPPED OFF (FIXED)

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability March 11, 2010
This vulnerability allows remote attackers to remove arbitrary XML files on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. […]
ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability March 11, 2010
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. […]
ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability March 9, 2010
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Hewlett-Packard Performance Insight. Authentication is not required to exploit this vulnerability. […]

WEBSITE READERSHIP

Countries	Visits	Pageviews
United States	13726 (54)	24740 (58)
Canada	1283 (5)	1950 (5)
United Kingdom	1233 (5)	1907 (4)
Germany	857 (3)	1336 (3)
India	575 (2)	833 (2)
France	462 (2)	740 (2)
Australia	383 (2)	556 (1)
Sweden	329 (1)	476 (1)
Italy	326 (1)	444 (1)
Brazil	324 (1)	446 (1)

Total Countries:	162
Total Visits:	25432
Total Pageviews:	42845

HACKER INTEREST

Search the PopSci Archives March 8, 2010
OK – For a minute there I was thinking Google was trying to confuse me – do I love them or hate them? Now I realize they’re profitting off their platform, it’s Popular Science that’s giving us the content. An awesome development! [Popular Science] partnered with Google to offer our entire 137-year archive for free browsing. [...] […]
DIY USB oscilloscope March 6, 2010
Here’s a USB oscilloscope project from a few years back. It’s easy to build on a single-sided PCB and very cheap because it uses just a handful of parts. At the center, an ATtiny45 microcontroller uses its ADC capabilities for the two traces and also handles the USB connectivity. The internal oscillator is used and [...] […]
Some Interesting Tools Released March 4, 2010
Imposter Imposter is a flexible framework to perform Browser Phishing attacks. The lists of attacks performed are: Steal cookies Set cookies Steal Local Shared Objects Steal stored passwords from FireFox Steal cached files Poison browser cache Steal files from the victim’s local file system through Internet Explorer Run SQL queries on the victim’s Google Gea […]
FINALLY – A “TOP” list we can agree with February 26, 2010
There have been a LOT of lame “Top Security” lists lately. Some start off as a self-serving stroke-fest, others degrade into that as the votes get rigged. While ChannelWeb didn’t get everyone out there, for once we’re seeing a list that goes outside social circles, the Twittersphere, and some n00b’s limited view of the world. [...] […]

CLASSIFIEDS

HELP WANTED: Java/Ruby/Django Developer March 8, 2010
Aftershock is looking for great developers to join our team. http://www.aftershocksf.com/ Web Application Developers: Java, Ruby on Rails, or Django About Aftershock: We make software for mobile devices, we’ve launched 2 apps that made it into the Top 5 of the iTunes App Store. We’ve launched more than 10 apps that have been downloaded cumulatively more than […]
HELP WANTED: HNNCast January 17, 2010
HNN is looking for “on-air talent”. We have studios in NYC and Boston or we can work with you remotely. Looking for various commitments from one-time to ongoing. Submit head-shot and/or audition tape with contact information to tan@hackernews.com. We’re also always looking for graphics contributions from our fans. Send us [...] […]
DataLoss DB and OSVDB Winter Fundraiser January 8, 2010
Good morning all. The Open Security Foundation is pleased to announce that we’re kicking off our first public fundraiser. The goal is to raise $9500 this quarter. The funds will go to supporting development of the site over the next few months, as well as ongoing maintenance, Freedom of Information Act requests, and other ongoing [...] […]

Avatars by Sterling Adventures

Site last updated March 10, 2010 @ 8:25 pm

Your cart is empty
Visit The Shop

Archive for the ‘Harvard University’ tag

HNNCast020510

HNNCast012210

GOOGLE ADS

<img src="/images/sbutt-twitter.gif" border="0">

FOLLOW

HNN MERCHANDISE

TOP OF THE STACK (NEW)

RECENTLY POPPED OFF (FIXED)

ADVERTISEMENT

WEBSITE READERSHIP

PODCAST VIEWERSHIP

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

HACKER INTEREST

CLASSIFIEDS

FEED YOUR NEED FOR MORE

Archive for the ‘Harvard University’ tag

GOOGLE ADS

FOLLOW

HNN MERCHANDISE

HOT TOPICS ON HNNCAST

ADVERTISEMENT

WEBSITE READERSHIP

PODCAST VIEWERSHIP

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

FEED YOUR NEED FOR MORE