Sunday, March 21, 2004

---------------------------------------------------------------------- Hack the Planet ---------------------------------------------------------------------- 1.  Adam Gessaman: "It wouldn’t cost that much more to acquire a bit more of a clue, but we just don’t have the time. We. Must. Blog. It. NOW." Granted, the old media isn't any better. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  You'd think a ''senior analyst'' would know this... 3.  Security firm announces it will ATTACK customers at no extra charge! 4.  W32.Witty.Worm 5.  W32.Netsky.Q@mm 6.  Phishing attacks 'on the rise' 11:24:18 PM    comment []

---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Video-Game Publishers Outsource Development ---------------------------------------------------------------------- SecurityNewsPortal.com HomelandSecurity.com ---------------------------------------------------------------------- 2.  World largest series of raids against movie and entertainment software pirates and hackers - Raids ongoing across Europe and elsewhere with hundreds busted ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  FedSpell Available for the Enterprise - Internet Explorer Spell Checker 4.  USB Pen Drive + Real Pen = Real Threat (Do the Math) 10:23:59 PM    comment []

---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  More Robolympics photos. Boingboing reader matthew bennett says: Here's some pictures on my photoblog from Robolympics yesterday and today! I competed with a mini sumo, that got taken out. I'm also a mentor on the Boilermakers robotics team ( link to earlier BoingBoing post). You know, the SF innercity school that still needs money to go to Atlanta for the finals! As of Sunday morning, our blog has raised over $2200 in donations! Thanks, Boing Boing! Link to photos ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  Wi-Foo: Recon and Attack tools "list of tools we commonly use in pentesting wireless networks or... 3.  Critics Slam Task Force Cyber Plans 9:23:37 PM    comment []

---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Photos of sex-themed museum/park in China. Daze Reader editor Evan Daze says: "Photos of the penis-like rock and vagina-like cave are here and here." Link to Daze Reader post, Link to earlier BoingBoing post ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Mozilla 1.7 Beta Is Faster And Smaller ---------------------------------------------------------------------- Help Net Security ---------------------------------------------------------------------- 3.  Customize this feed. Add more items, descriptions, time stamps, select your version of RSS, aggregate several feeds... Check out NewsIsFree's premium syndication services! (13) ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  AntiVir Personal Edition 6.24.00.07 5.  New Bagle Worm Variant Can Run Without Launching Attachment 6.  Experts Debate Danger of Phatbot Worm 7.  Microsoft Baseline Security Analyzer Sample Scripts 8.  Trend Micro Pattern File March 18, 2004 9.  Norton AntiVirus Virus Definitions March 18, 2004 10.  Ad-aware referencefile 01R270 18.03.2004 11.  Flaw stymies Norton Internet Security 12.  Ad-aware referencefile 01R272 21.03.2004 13.  Fast-Moving Worm Crashes Computers 14.  [CHECKPOINT] Firewall-1 HTTP parse güvenlik açýðý 15.  Korsanla mücadele yasasý Resmi Gazete'de yayýmlandý 16.  [CISCO] OpenSSL implementasyonu güvenlik açýðý 17.  Ýlk Türkçe FreeBSD Kitabý Yayýnda 18.  Four new Bagles emerge 19.  Flaw stymies Norton Internet Security 20.  Traduction des manuels d'aide de SpywareGuard et SpywareBlaster 8:23:18 PM    comment []

---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Do we really use just 10 percent of our brains?. No. It's a myth. Psychologist and neuroscientist Barry L. Beyerstein puts the (gray) matter to rest at Scientific American.com: "With the aid of instruments such as EEGs, magnetoencephalographs, PET scanners and functional MRI machines, researchers have succeeded in localizing a vast number of psychological functions to specific centers and systems in the brain. With nonhuman animals, and occasionally with human patients undergoing neurological treatment, recording probes can even be inserted into the brain itself. Despite this detailed reconnaissance, no quiet areas awaiting new assignments have emerged." Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  AT&T Labs' Brain Drain ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 3.  Vulnerabilities: Sysstat Isag Temporary File Creation Vulnerability. Sysstat is a system monitoring utility for Linux. Sysstat includes a command (Isag) for representing system information graphically. The Sysstat Isag command is prone t... 4.  Vulnerabilities: Techland Chrome Denial of Service Vulnerability. Chrome is a game program implemented from the first person perspective, which can be used as both a server and a client. It is commercially available for Microsoft Windo... ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 5.  Complete Guide to Wi-Fi Security 6.  W32.Witty.Worm 7.  W32.Netsky.Q@mm 7:22:37 PM    comment []

---------------------------------------------------------------------- Ars Technica ---------------------------------------------------------------------- 1.  Online Marketing: An Overview. First in an occasional series targeted towards the business-oriented geek. Learn how to most effectively market your online business. By Eric Bangeman. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Delta 2 Rocket Launches 50th GPS Satellite ---------------------------------------------------------------------- The Register ---------------------------------------------------------------------- 3.  Phatbot primed to steal your credit card details. And launch DoS attacks ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 4.  Black Ice flaw leads to tens of thousands of computers being damaged 6:22:18 PM    comment []

---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Cell Phones Get More Computer Functions (AP). AP - Of the half billion or so cell phones produced in 2003, fewer than 10 million were so-called "smart phones" with the type of operating system, calendar, e-mail and other software found on computers and handheld organizers. 2.  Wrong Signature on E-Mail Swamps Professor (AP). AP - It's a parody James M. Kauffman said he wished he had written — but he didn't, a point that the University of Virginia education professor emeritus has been repeating and repeating. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 3.  Cebit 2004 Coverage 4.  Online Publisher Blocks LinuxToday Referrals ---------------------------------------------------------------------- Hack the Planet ---------------------------------------------------------------------- 5.  InfoSync: BenQ P50 makes CeBIT sneak appearance. Now if only it ran Symbian. ---------------------------------------------------------------------- SecurityNewsPortal.com HomelandSecurity.com ---------------------------------------------------------------------- 6.  World largest series of raids against movie and entertainment software pirates and hackers ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 7.  Vulnerabilities: Symantec Norton Internet Security/Personal Firewall Remote Denial Of Service Vulnerability. eEye Digital Security has reported an unspecified remotely exploitable denial of service vulnerability in Symantec Norton Internet Security 2004 and Norton Personal Firew... ---------------------------------------------------------------------- The Register ---------------------------------------------------------------------- 8.  Phishing attacks 'on the rise'. Variations on a theme 9.  Build your own iSCSI SAN server. DataCore pitches $1200 software app against EMC's Clariion 10.  Witty attacks your firewall and destroys your data. If you can read this, you're probably all right ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 11.  Building and Implementing a Successful Information Security Policy 12.  Malware - It's Getting Worse 13.  NW Fusion: There's something phishy here "the group intends to focus on finding technical soluti... 14.  Every file you ever owned on 1 disc ---------------------------------------------------------------------- About Internet/Network Security ---------------------------------------------------------------------- 15.  Complete Guide to Wi-Fi Security. Wireless networking can make life very convenient. However, convenience generally comes at a price. If you can pull your data out of the airwaves and send your passwords and other confidential information through the Internet by beaming them through the... 5:21:58 PM    comment []

---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Homebrew Carts and Coin-Ops - Phillyclassic 5 ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 2.  Vulnerabilities: PHP-Nuke Error Manager Module Multiple Vulnerabilities. Error Manager is a module for PHP-Nuke used to log error conditions in the application. It is designed to allow an administrator to monitor potentially malicious attacks... 3:17:41 PM    comment []

---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Mobile Industry Focuses on Fixing Basics (Reuters). Reuters - Gee-whiz gadgetry like TV on cell phones will be overshadowed by more pedestrian concerns like on-the-go convenience and fewer dropped calls as the U.S. wireless industry meets this week for its big annual showcase. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  The Worldwide Domain Battle ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  Qualys et GuardedNet fournissent une solution integree Pour ameliorer le management des incidents de securite 4.  La version beta de BitDefender Antispam 7 bientôt disponible 5.  Trend Micro presente au CeBIT sa nouvelle gamme de produits, conçue pour proteger les entreprises de toute taille contre les codes malicieux 6.  Trend Micro presente au CeBIT 2004 de nouvelles solutions de securite pour reseau domestique 7.  Wanadoo Espagne propose des antivirus et des options de securite avancees à ses clients grâce à l’accord conclu avec Panda Software 8.  Cisco Systems se porte acquereur de Twingo Systems 9.  Nouveau rebondissement dans la saga Bagle avec l’apparition de quatre nouvelles variantes 10.  Les pare-feu en premiere ligne de defense contre les vers Bagle 11.  PowerControls 2.0 de Kroll Ontrack gagnant des 1ers trophees de la securite de 01 Reseaux 2004 ! 2:17:19 PM    comment []

---------------------------------------------------------------------- Boing Boing ---------------------------------------------------------------------- 1.  Job of the week: Dept of Homeland Security Entertainment Liason. This has to be one of the more interesting "help wanted" ads to surface of late -- Entertainment Liaison for the US Department of Homeland Security. Up to $136K: The Entertainment Liaison Office supports the Office of Public Affairs by influencing how the Department of Homeland Security is portrayed in mass entertainment media. It helps to ensure accurate portrayal of the department's mission, policies, and activities, while proactively working to help the American public better identify DHS functions. Link (via pho list) 2.  Proposed Bible-based marriage laws. Lawmakers who use the Bible to justify their opposition to gay marriage ought to be consistent. Here are some other Biblical rules to add to the Bill of Rights : Marriage shall not impede a man's right to take concubines in addition to his wife or wives. (II Sam 5:13; I Kings 11:3; II Chron 11:21) A marriage shall be considered valid only if the wife is a virgin. If the wife is not a virgin, she shall be executed. (Deut 22:13-21) In lieu of marriage, if there are no acceptable men in your town, it is required that you get your dad drunk and have sex with him (even if he had previously offered you up as a sex toy to men young and old), tag-teaming with any sisters you may have. Of course, this rule applies only if you are female. (Gen 19:31-36) Link ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 3.  Intel 32/64-bit Nocona CPU 1:17:01 PM    comment []

---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Investors scramble for a slice of Belgacom (AFP). AFP - The flotation of Belgian telecommunications operator Belgacom has been vastly oversubscribed as private investors and institutions scrambled to get a slice of the biggest flotation in Europe since that of French mobile phone firm Orange in 2001. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Microsoft's Paul Allen Funds ET Search 12:16:38 PM    comment []

---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  No Deal in EU, Microsoft Antitrust Case (Reuters). Reuters - Microsoft Corp. (MSFT.O) failed on Thursday to reach a deal with the European Commission, setting the stage for a landmark antitrust ruling next week that will brand the software giant an abusive monopolist. 2.  T-Mobile to Launch 3G in May (Reuters). Reuters - T-Mobile, Europe's second-largest mobile phone operator, will start selling third-generation (3G) multimedia handsets from May and hopes the service will boost revenues, it said on Thursday. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 3.  E-mail and Snail Mail United 4.  Ultimate Cooling System ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 5.  Vulnerabilities: Telindus ADSL Router Encryption Scheme Weakness. The 1120 series routers are a broadband connectivity solution distributed by Telindus. A weakness has been discovered in the algorithm used by Telindus 1120 series route... 6.  Vulnerabilities: Telindus 1100 Series Router Administration Password Leak Vulnerability. The 1100 series routers are a broadband connectivity solution distributed by Telindus. A problem with the firmware of the routers may make it possible for remote attacke... ---------------------------------------------------------------------- The Register ---------------------------------------------------------------------- 7.  Did Register staffer mastermind 'call-girl weblog' conspiracy?. Of course not 11:16:19 AM    comment []

---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Toshiba's Wristwatch PDA ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  Qualys et GuardedNet fournissent une solution integree Pour ameliorer le management des incidents de securite 3.  La version beta de BitDefender Antispam 7 bientôt disponible 4.  Trend Micro presente au CeBIT sa nouvelle gamme de produits, conçue pour proteger les entreprises de toute taille contre les codes malicieux 5.  Trend Micro presente au CeBIT 2004 de nouvelles solutions de securite pour reseau domestique 6.  Wanadoo Espagne propose des antivirus et des options de securite avancees à ses clients grâce à l’accord conclu avec Panda Software 7.  Cisco Systems se porte acquereur de Twingo Systems 8.  Nouveau rebondissement dans la saga Bagle avec l’apparition de quatre nouvelles variantes 9.  Les pare-feu en premiere ligne de defense contre les vers Bagle 10.  PowerControls 2.0 de Kroll Ontrack gagnant des 1ers trophees de la securite de 01 Reseaux 2004 ! 10:15:08 AM    comment []

---------------------------------------------------------------------- CNET News.com ---------------------------------------------------------------------- 1.  Week ahead: McNealy, Zander together again. Sun Microsystems chief Scott McNealy will be reunited with his former second-in-command Ed Zander--now Motorola CEO--at the CTIA Wireless conference. 2.  Prying apart Microsoft's pricing logic. Two business professors examine Microsoft's decision to price Windows relatively low and Office so much higher. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  Anti-piracy law 'stifles innovation' 9:13:49 AM    comment []

---------------------------------------------------------------------- Yahoo! News - Technology ---------------------------------------------------------------------- 1.  Development Tools are Reorienting (TechWeb). TechWeb - With standards maturing, proprietary dominance no longer serves as the goal of integrated development environment providers. Here's what process orientation will mean for users of the major products. 2.  Exxon Taps Scientists to Fuel Growth (Reuters). Reuters - Exxon Mobil Corp. (XOM.N) is the world's largest publicly traded energy company. And if it hopes to keep growing, it must replace billions of barrels of new oil and gas reserves each year without eroding profits. ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 3.  BKDR_IRCBOT.Q 4.  BKDR_TALDRATR.30 8:16:55 AM    comment []

---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Can Your ATM Play Beethoven? ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 2.  Vulnerabilities: Linux Kernel do_mremap Function VMA Limit Local Privilege Escalation Vulnerability. A vulnerability involving the do_mremap system function has been reported in the Linux kernel, allowing for local privilege escalation. The mremap(2) system call is used... 7:16:36 AM    comment []

---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 1.  Hackers Attack Taiwan Treasury Website (Reuters) 6:16:15 AM    comment []

---------------------------------------------------------------------- SecurityNewsPortal.com HomelandSecurity.com ---------------------------------------------------------------------- 1.  World largest series of raids against movie and entertainment software pirates and hackers - Raids ongoing across Europe and elsewhere with hundreds busted ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  Apache mod_disk_cache Stores Authentication Credentials on Disk 5:15:06 AM    comment []

---------------------------------------------------------------------- Dilbert ---------------------------------------------------------------------- 1.  Dilbert for 21 Mar 2004. ---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 2.  Energiya Pushes For A 6-Person Space Capsule ---------------------------------------------------------------------- BBC News | Technology | UK Edition ---------------------------------------------------------------------- 3.  Talkative future for every gadget. Easier ways of getting your gadgets to talk to each other are being developed by Philips. ---------------------------------------------------------------------- SecurityFocus Vulnerabilities ---------------------------------------------------------------------- 4.  Vulnerabilities: Multiple Vendor S/MIME ASN.1 Parsing Denial of Service Vulnerabilities. Multiple vulnerabilities have been reported to be present in various implementations of S/MIME protocol. S/MIME is used to send binary data and attachments across e-mail... 5.  Vulnerabilities: Mozilla Browser Cookie Path Restriction Bypass Vulnerability. Mozilla is an open source web browser available for a number of platforms, including Microsoft Windows and Linux. Internet cookies are intended as an infrequent storage m... 6.  Vulnerabilities: Mozilla Browser Zombie Document Cross-Site Scripting Vulnerability. Mozilla is a freely available web browser designed for a number of platforms, including Microsoft Windows and Linux. Mozilla has been reported to be prone to a cross-sit... 4:14:46 AM    comment []

---------------------------------------------------------------------- SecurityFocus News ---------------------------------------------------------------------- 1.  News: 'Witty' Worm Wrecks Computers. Washington Post By Brian Krebs 3:14:25 AM    comment []

---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 1.  "Why bother" at St. Louis Children's Hospital 2.  Fastest Rising: 445 microsoft-ds 3.  Top Port: microsoft-ds 445 2:14:06 AM    comment []

---------------------------------------------------------------------- Slashdot ---------------------------------------------------------------------- 1.  Muscle Cars And Smokin' Chips ---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 2.  Fast-Moving Worm Crashes Computers 1:13:46 AM    comment []

---------------------------------------------------------------------- NewsIsFree: Security ---------------------------------------------------------------------- 1.  Minn. Computer Security System Said Lax (AP) 2.  TROJ_DROPPER.F 3.  TROJ_DROPPER.E 4.  TROJ_MULTIDRP.DH 12:13:25 AM    comment []

© Copyright 2004 Gregg Doherty. Last update: 4/3/2004; 12:17:05 AM.