Your cart is empty
Visit The Shop

March 10, 2010 - TIFF CVE-2010-0188: Fixed?
March 10, 2010 - FDIC: Clueless on MFA and ACH
March 10, 2010 - Mariposa Botnet Malware Found On Vodafone HTC Magic
March 10, 2010 - LifeLock Will Pay $12 Million to Settle Charges
March 8, 2010 - Microsoft Security Intelligence Report volume 7 (January - June 2009)
March 6, 2010 - Solera Partners with Security Nightmare
March 6, 2010 - Fault-Based Attack of RSA Authentication
March 4, 2010 - Regulators Revisit E-Banking Security Guidelines
March 4, 2010 - Mariposa held 800,000 identities
March 4, 2010 - Homeland Security is recruiting new cyber-warriors
March 4, 2010 - Microsoft wants to tax you for their slop
March 4, 2010 - SCADA Devices on Verizon and Other Wireless Networks
March 4, 2010 - Old Heartland Breach: New Fraud
March 1, 2010 - TicketMaster protocols bypassed, 1mil tickets nabbed
March 1, 2010 - DoD Embraces Hacker Cert to Protect US

Archive for the ‘indictment’ tag

HNNCast110609

HNNCast for the First Week of November, 2009
Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories and News
PART 2: Quickies

Lead Stories:

YouLostIt CEO DDoS, Matt56444 Suicide, TCNiSO.net Indictment, IETF SSL Revamp, Disk Space Invaders

News:

NK Officially to Blame by SK, Swedish Sites Swim with Fishes, the Evil Maid from Mossad
Courtnee: Lockpicking
iPhone Jailbreak Advisory, Copyright Wrongs, Money Mules Move Megabucks

Quickies:

Str0ke’s Not Dead, DHS CERT, Round 1 Schmoo Tix Sold-Out, da p00p on w00p, This Week’s Worm Farm, KiwiCon Speakers Announced, B-Sides on Both Sides, QuahogCon CFP, NYC CSAW Awards, OSVDB Plea, SecurityTubeCon this Weekend, HitB CTF Binaries Posted, Spanish Systems Need a Scrub-Down

Stack of Shame:

Book Recommendation:

Hacking the Cable Modem: What Cable Companies Don't Want You to Know

Lockpicking Related:

Easy Access and Inflate-A-Wedge Kit - 2-Pc

Mr. Smith's 11-Piece Professional Locksmith Lockpicking Kit

Slim Jim Universal Lock Out Tool Set

Posted: November 7th, 2009
at 2:53am by tan

Tagged with "North Korea", "South Korea", Amelia Andersdotter, AppacheBench, CERT, computer intrusion wirefraud, Conficker, conspiracy, CSAW, CTF, DDoS, DerEngel, DHS, Evil Maid, FBI, FDIC, Grumblar, HITB, IETF, indictment, iPhone, jailbreak, Khalid Shaikh, kiwicon, m00p, mail fraud, maleware, matt56444, milw0rm, Money Mule, Mossad, Motorola Surfboard, National Cybersecurity and Communications Integration Center, NCCIC, NYU, Opachki, OSVDB, PandaLabs, Pirate Bay, Pirate Party, Plötzensee, QuahogCon, Ryan Harris, Schmoocon, Schueler VZ, Security B-Sides, SecurityTube, SecurityTubeCon, Space Invaders, SSL, str0ke, Taterf, TCN-ISO.NET, TLS, Trojan, worm, YouSendIt, YouTube, Zach Gage, Zeus

Categories: HNNCast, podcasts

Comments: 2 comments

HNNCast 100909

HNNCast for the second week of October, 2009

Lead Stories:

the BIG dump, FBI phish-fry, NULL-prefix PayPal Cert posted, EFF Pioneer Award to Lady Ada

Hacker News:

Pirate Bay Sails Again, Cyber Commands
Courtnee: Homebrew Intelligence Reports – includes a book recommendation from our Amazon Store.
SMB2 Vulnerability Update, URLZone Update, Strike 2 for Wall Street Cracker Dihn

Quickies:

UK Cyber Challenge, Solo’s Last Appeal, Conflicker hits Oxford Brookes, Tufts Infection, Facebook Takes out the Trash, ISC Squared Says Stay Secure Kids, ASPr0x Awakens, HitB Videos Online, Even HP’s Printers Vulnerable, TI Plugs Leak with DMCA, Sector Exposes X-Box Live Holez

Audio now fixed. Also, the man was trying to keep us down There were buffering issues and the episode got cut-off about half way through. Well, Information Wants to be FREE and this episode is NOW FIXED. Sorry for the false start there and sorry for the delays. Have a great Columbus Day weekend.

CORRECTION: The graphic for the Pirate Bay story should NOT be the U.S. Appellate court logo but rather the Dutch Appellate court logo. Sorry and droevig respectively.

Practical Guide to Photographic Intelligence, Harold Hough

Posted: October 11th, 2009
at 10:40am by spacerog

Tagged with "Credit card", "cross-site scripting", 123456, 689th Combat Communications Wing, 83+ calculator, Adafruit Industries, Admiral Gary Roughead, Air Force, Alberto, AOL, appeal, appellate, ASPr0x, Asprox, bank fraud, Bank of America, BitTorrent, Black Internet, botnet, California, Chief of Naval Operations, Chrome, CISSP, Citizen Engineer, Comcast, computer fraud, Conficker, Cyber Challenge, cyberbullying, Defcon, DMCA, Earthlink, Egypt, Electronic Frontier Foundation, Facebook, FBI, Gary McKinnon, Germany, Gmail, guilty plea, Hack In The Box, Hamadoun Touré, HITB, hotmail.com, HP LaserJet, Identity Theft, iFrame, indictment, Information Dominance Corps, International Information Systems Security Certification Consortium, International Telecommunication Union, Internet Explorer, ISC2, ITU Telecom World Exhibition, Joe 'Kingpin' Grand, Julian Assange, Keesler Air Force Base, Lady Ada, Lemor Freid, live.com, Malaysia, malware, Microsoft, Minty Boost, Moxie Marlinspike, msn.com, NASA, Navy, Nevada, North Carolina, null-prefix, online currency exchange, Oxford Brookes University, passwords, pastebin.com, patch Tuesday, paypal, phish-fry, Pioneer awards, Safari, SECtor, Securities and Exchange Commission, Singapore, Singapore Infocom Technology Security Authority, SMB v2, social networking, SPAM, Spotify, sql injection, SSL, SSL Sniff, Texas Instruments, The Pirate Bay, The Twit-A-Watt, TI, Toronto, Trojan, Tufts University, UK, UK Supreme Court, Ukraine, URLZone, USMC, Van Dihn, viral emails, vulnerability, Websence, Wells Fargo, WikiLeaks, wire fraud, XBox Live, XSS, Yahoo

Categories: HNNCast, podcasts

Comments: 2 comments

<img src="/images/sbutt-twitter.gif" border="0">

RT @th3j35t3r Second video of enhanced XerXeS attack against jihadists - bit.ly/90IaQd 12:25:32 PM March 12, 2010 from Twitterrific
Turkey arrests 23 'militant' hacker suspects. Attempts to take down 'Code Attack Team' http://tr.im/Rzf2 08:10:15 AM March 12, 2010 from Tweetie
RT @th3j35t3r releases 2nd video of enhanced XerXeS attack- http://bit.ly/90IaQd -read it and well...weep cuz it's not just Apache now 07:10:07 PM March 11, 2010 from Twitterrific
Attrition.org's list of Certified Pre-0wned products http://bit.ly/9IZP5j <- more complete than ThreatPosts 06:37:23 AM March 11, 2010 from Tweetie
RT @aestetix: 2600 Magazine presents The Next HOPE: Call for Projects and Art (Hotel Penn, NYC, July 16-18 2010): http://tr.im/Rm48 05:36:40 PM March 10, 2010 from Twitterrific

TOP OF THE STACK (NEW)

ZDI-CAN-689: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]
ZDI-CAN-702: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]
ZDI-CAN-711: Apple February 23, 2010
A High severity vulnerability discovered by 'wushi of team509' was reported to the affected vendor on: 2010-02-23, 16 days ago. Once the vendor has created and tested a patch we will coordinate the release of a public advisory. […]

RECENTLY POPPED OFF (FIXED)

ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability March 11, 2010
This vulnerability allows remote attackers to remove arbitrary XML files on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. […]
ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability March 11, 2010
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. […]
ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability March 9, 2010
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Hewlett-Packard Performance Insight. Authentication is not required to exploit this vulnerability. […]

WEBSITE READERSHIP

Countries	Visits	Pageviews
United States	13726 (54)	24740 (58)
Canada	1283 (5)	1950 (5)
United Kingdom	1233 (5)	1907 (4)
Germany	857 (3)	1336 (3)
India	575 (2)	833 (2)
France	462 (2)	740 (2)
Australia	383 (2)	556 (1)
Sweden	329 (1)	476 (1)
Italy	326 (1)	444 (1)
Brazil	324 (1)	446 (1)

Total Countries:	162
Total Visits:	25432
Total Pageviews:	42845

HACKER INTEREST

Search the PopSci Archives March 8, 2010
OK – For a minute there I was thinking Google was trying to confuse me – do I love them or hate them? Now I realize they’re profitting off their platform, it’s Popular Science that’s giving us the content. An awesome development! [Popular Science] partnered with Google to offer our entire 137-year archive for free browsing. [...] […]
DIY USB oscilloscope March 6, 2010
Here’s a USB oscilloscope project from a few years back. It’s easy to build on a single-sided PCB and very cheap because it uses just a handful of parts. At the center, an ATtiny45 microcontroller uses its ADC capabilities for the two traces and also handles the USB connectivity. The internal oscillator is used and [...] […]
Some Interesting Tools Released March 4, 2010
Imposter Imposter is a flexible framework to perform Browser Phishing attacks. The lists of attacks performed are: Steal cookies Set cookies Steal Local Shared Objects Steal stored passwords from FireFox Steal cached files Poison browser cache Steal files from the victim’s local file system through Internet Explorer Run SQL queries on the victim’s Google Gea […]
FINALLY – A “TOP” list we can agree with February 26, 2010
There have been a LOT of lame “Top Security” lists lately. Some start off as a self-serving stroke-fest, others degrade into that as the votes get rigged. While ChannelWeb didn’t get everyone out there, for once we’re seeing a list that goes outside social circles, the Twittersphere, and some n00b’s limited view of the world. [...] […]

CLASSIFIEDS

HELP WANTED: Java/Ruby/Django Developer March 8, 2010
Aftershock is looking for great developers to join our team. http://www.aftershocksf.com/ Web Application Developers: Java, Ruby on Rails, or Django About Aftershock: We make software for mobile devices, we’ve launched 2 apps that made it into the Top 5 of the iTunes App Store. We’ve launched more than 10 apps that have been downloaded cumulatively more than […]
HELP WANTED: HNNCast January 17, 2010
HNN is looking for “on-air talent”. We have studios in NYC and Boston or we can work with you remotely. Looking for various commitments from one-time to ongoing. Submit head-shot and/or audition tape with contact information to tan@hackernews.com. We’re also always looking for graphics contributions from our fans. Send us [...] […]
DataLoss DB and OSVDB Winter Fundraiser January 8, 2010
Good morning all. The Open Security Foundation is pleased to announce that we’re kicking off our first public fundraiser. The goal is to raise $9500 this quarter. The funds will go to supporting development of the site over the next few months, as well as ongoing maintenance, Freedom of Information Act requests, and other ongoing [...] […]

Avatars by Sterling Adventures

Site last updated March 10, 2010 @ 8:25 pm

Your cart is empty
Visit The Shop

Archive for the ‘indictment’ tag

HNNCast110609

HNNCast 100909

GOOGLE ADS

<img src="/images/sbutt-twitter.gif" border="0">

FOLLOW

HNN MERCHANDISE

TOP OF THE STACK (NEW)

RECENTLY POPPED OFF (FIXED)

ADVERTISEMENT

WEBSITE READERSHIP

PODCAST VIEWERSHIP

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

HACKER INTEREST

CLASSIFIEDS

FEED YOUR NEED FOR MORE

Archive for the ‘indictment’ tag

GOOGLE ADS

FOLLOW

HNN MERCHANDISE

HOT TOPICS ON HNNCAST

ADVERTISEMENT

WEBSITE READERSHIP

PODCAST VIEWERSHIP

HNN IS SPONSORED BY…

CONS CALENDAR

Upcoming Events

THE DEFINITIVE LIST OF…

FEED YOUR NEED FOR MORE