HNNCast.2010.07.23

HNNCast for the third week of July, 2010
Top Stories

• Bug Bounties, Developments in Disclosure, Stuxnet Stalks Siemans SIMATIC WinCC SCADA, PDF to Play in Sandbox, Dell Malware, Spanish Mariposa is Slovenian

News

• The Next HOPE, FREE BYRONE, U.S. Cyber Defenses Suck – but Who’s Don’t?, Jews for Cheese Lover’s Pizza?, PlayNow Shut Down, Solo – Raised Where Nobody Cares

Tool Time

• Microsoft Security Essentials, Kraken, PacketFence, NMap – Defcon Edition, TrueCrypt, Nikto 2.1.2, PDF Dissector, HaraldScan, Shell of the Future, BackTrack 4 – Defcon Edition, SploitWare

Quickies

• Baidu gets to Sue, Fake French Fun, Sail the Net Like a Pirate, Schoolgirl Spycam, Vatican, Postini, Presidential Commission: Infosec Certification Creates Dangerously False Sense of Security

Cons Call

• HacKid Con, Kiwi Con, RuxCon, Source Barcelona, Defcon 18 – Pwnies, B-Sides Las Vegas, Badge Sneak Peaks, HNN@Defcon18

Stack of Shame
THANK YOU Predram Amini
Count: 122
Turning 1 This Week:

• ZDI-CAN-533 Microsoft 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C) Discovered 2009-07-23 (363 days ago) by: surerun

HNNCast052810

HNNCast for the last week of May, 2010
Lead Stories

• Tab-Napping, NCR Digital Proving Grounds, InfoStealer.GamePass, Media Temple Toppled, Hentai Extortionists Nabbed, Secure Androids

News

• Sign Hacking – Always Fun, KVOA Poll Bot Rigged, Nifty Nokias, Aw CERT – Not Again
• Courtnee: Pokes Mark Puckerburg
• Aspergers Defense, Re-Nick’ing Clegg, Anonymous Moves On, da Pwnies

Quickies

• RFID Virus, BotNets on the Cheap, Apple Encryption – it’s All in THEIR Mind, Building Mediationz, Chinese Apples Sour, Colorado Cries for Help, BP fixes Twitter b4 fixing Spill, Google U, Join the Dark Side, Leprechaun Pr0n, VA Vulnerabilities Vexed by V-LANs, Month of PHP Bugs, the Weekly Cons Call

Stack of Shame
count: 123

HNNCast052110

HNNCast for the third week of May, 2010
Lead Stories

• Owned and Exposed, Another TJX Arrest, Headshot on Zeus, 3FN Assets Seized, GhostExodus Guilty Plea, Romanian Raids

News

• Neo Identified, Facebook Frenzy, MS Omega
• Courtnee: Automotive Control Systems
• Hackers Wanted, Phishing Frenzy, Better Keep Your Butt off the Xerox

Quickies

• USAF Cyberwariors, Solo Update, Symantec in a World of Woes, Itty Bitty Bug Market, Dancho Danchev v. the Koobface Gang, Pirate Bay Disconnected Again, Hackers Reprint, Mitchell Frost DDoS, Neo-Cons B-Gone, Football Phreaks, Symantec to Buy Verisign, Metasploitable, the Weekly Cons Call

Programming Note: Help Wanted at HNN

Stack of Shame
count: 124
Birthdays

• ZDI-CAN-342 TURNS 2 YEARS OLD – Computer Associates – MEDIUM RISK – Discovered 2008-05-23 (728 days ago) by: Sebastian Apelt (sebastian.apelt@siberas.de)
• ZDI-CAN-200 TURNS 3 YEARS OLD – IBM – HIGH RISK – Discovered 2007-05-22 (1095 days ago) by: Sebastian Apelt (sebastian.apelt@siberas.de)

ODB-II Gear on Amazon.com

ECUsim 5100 Multiprotocol OBD-II ECU Simulator (601500) ScanGauge II 3-in-1 Compact Multifunction Vehicle Computer with Customizable Display

Auterra A-302 Dyno-Scan for Windows CAN USB - OBD II Scan Tool and Dynamometer Davis Instruments 8226B CarChip Pro (New Model)

HNNCast050710

HNNCast for the first week of May, 2010
Lead Stories

• Transforming the Troops, ATM Jack-Potting with Barnaby Jack, Mariposo Must be Loco, Another Netsol Breach

News

• Free Solo So He Can Pwn My Colo, Palin-2/Rubico-2, WEP Crack Pack, NZ Parking Police, Romanian National Security

Quickies

• Stormy Skies, Fakebook, Kentucky Fried Mohamed, SONY SOCOM so mad, US Navy Takes CDE, LoveBug Anniversary, Cons Call

Stack of Shame
count: 130
Bottom Dweller POPed after 3 yrs!

• ZDI-CAN-177: Hewlett-Packard – High Risk; Discovered 1136 days ago (2007-03-19) by: Tenable Network Security

New Bottom Dweller: IBM!

• ZDI-CAN-200: IBM – High Risk; Discovered 1080 days ago (2007-05-22) by: Sebastian Apelt (sebastian.apelt@siberas.de)

HNNCast041610

HNNCast for the third week of April, 2010
Lead Stories

• Apache Attacked, NetSol Nonsense, TJX Taps Toey, Uncle Sam to OK Return Phire, Financial Firm Fined for Foolishness, Blackboard Learns from a 3rd Grader

News

• Facebook Farmers Fertile for Foolishness, Oracle’s Vision for Java, Solo’s Mum Janice the Plumber, Patch Too-Much Day, Remember the Alimo – or at Least Log It, EFF Defcon Offer

Quickies

• Romanian On the Run, Gypsies’ Top Gear Defacement, Yes – Optus was Knocked Offus, Phone Meets Malware Meets Fraud, SilentAssalt vs. Little School House on the Prairie, No Child Left at Risk, Palin to Testify re:Rubico

Programming Note
There will be no HNNCast next week for Source Boston however, we will be releasing a new episode of Behind the Firewall for you instead. So watch for it and see you at Source!

Stack of Shame
count: 134

HNNCast012210

Also on YouTube (for 3GP mobile or 720p true HD users):
PART 1: Lead Stories & News
PART 2: Quickies
HNNCast for the third week of January, 2010
Lead Stories

• Google, Baidu, NetSol

News

• Prime4Pwnage, MiFi Holes, Firewall? What Firewall, From Each According to Their Abilities*, Brian Austin Green Don’t Twitter

* TV-14: Brief Mild Nudity

Quickies

• Back Track 4, D-Link Timely Fix, NMap 5.2, HoneyNet Challenge, Exeter Reloaded, Solo Threats, Berkman Internship
• Cons Call: NullCon, AthCon, SchmooCon, the Next Hope
• KEVIN FREE Aniversary

Stack of Shame

• Count: 135
• Real POPs (FIXES) 6 off the stack
• IBM now dominates the Bottom of the Stack
• HP still the Bottom Dweller