Security News http://floydfe.wordpress.com Wed, 24 Oct 2007 14:44:37 +0000 http://wordpress.org/?v=MU en hourly 1 WMF Zero Day Exploit, solution. http://floydfe.wordpress.com/2007/10/24/wmf-zero-day-exploit-solution/ http://floydfe.wordpress.com/2007/10/24/wmf-zero-day-exploit-solution/#comments Wed, 24 Oct 2007 14:44:37 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/wmf-zero-day-exploit-solution/

Security expert Steve Gibson, and Leo Laporte describe and discuss a way that Windows users can avoid becoming a victim of the Windows Meta File exploit, which now has more than 57 different variants. Note: Link is to a podcast, SecurityNow!

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/wmf-zero-day-exploit-solution/feed/ German Blog-Service Accidentally Deletes 4 Months of Comments http://floydfe.wordpress.com/2007/10/24/german-blog-service-accidentally-deletes-4-months-of-comments/ http://floydfe.wordpress.com/2007/10/24/german-blog-service-accidentally-deletes-4-months-of-comments/#comments Wed, 24 Oct 2007 14:38:09 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/german-blog-service-accidentally-deletes-4-months-of-comments/

The german hosted blogging-service blogg.de accidentally deleted all comments from user weblogs last Friday. This worst case scenario occured when the administrators tried to fight down comment spam platform-wide. And due to corrupt backup files, all previously saved database dumps from mid-August to December 5th are useless.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/german-blog-service-accidentally-deletes-4-months-of-comments/feed/ Zero-Day Mac OS X Exploit Disclosed http://floydfe.wordpress.com/2007/10/24/zero-day-mac-os-x-exploit-disclosed/ http://floydfe.wordpress.com/2007/10/24/zero-day-mac-os-x-exploit-disclosed/#comments Wed, 24 Oct 2007 14:24:42 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/zero-day-mac-os-x-exploit-disclosed/

A researcher has posted proof-of-concept code for a zero-day flaw within Mac OS X dealing with its handling of disk image (.dmg) files. The issue causes a memory corruption vulnerability that could allow attackers to execute arbitrary code.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/zero-day-mac-os-x-exploit-disclosed/feed/ DEEP DIVE into Application Security - free chapter on C Language Issues http://floydfe.wordpress.com/2007/10/24/deep-dive-into-application-security-free-chapter-on-c-language-issues/ http://floydfe.wordpress.com/2007/10/24/deep-dive-into-application-security-free-chapter-on-c-language-issues/#comments Wed, 24 Oct 2007 14:14:11 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/deep-dive-into-application-security-free-chapter-on-c-language-issues/

“… this is probably the most comprehensive application security book I’ve seen. The authors cover topics ranging from memory corruption vulnerabilities such as buffer overflows to Unix, TCP/IP, firewalls and virtual private networks. Througout, there are numerous examples of code, configurations and exploits. –Mathias Thurman, Computerworld

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/deep-dive-into-application-security-free-chapter-on-c-language-issues/feed/ Safari in Windows Zero Day Nightmare http://floydfe.wordpress.com/2007/10/24/safari-in-windows-zero-day-nightmare/ http://floydfe.wordpress.com/2007/10/24/safari-in-windows-zero-day-nightmare/#comments Wed, 24 Oct 2007 14:09:15 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/safari-in-windows-zero-day-nightmare/

Some using the browser in its new OS home are reporting six exploits in one afternoon - ranging from memory corruption bugs to denial of service crashes.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/safari-in-windows-zero-day-nightmare/feed/ SmitFraudFix Tutorial http://floydfe.wordpress.com/2007/10/24/smitfraudfix-tutorial/ http://floydfe.wordpress.com/2007/10/24/smitfraudfix-tutorial/#comments Wed, 24 Oct 2007 13:13:15 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/smitfraudfix-tutorial/

This is a review and tutorial for Smithfraudfix, which is a free tool for removal popular
browser hijackers and corrupt anti-spyware programs.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/smitfraudfix-tutorial/feed/ Simple Digg Hack http://floydfe.wordpress.com/2007/10/24/simple-digg-hack/ http://floydfe.wordpress.com/2007/10/24/simple-digg-hack/#comments Wed, 24 Oct 2007 12:49:51 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/simple-digg-hack/

A simple little demo of a digg exploit I discovered a while back…

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/simple-digg-hack/feed/ Simple hack lets you view all comments on a PRIVATE Myspace profile http://floydfe.wordpress.com/2007/10/24/simple-hack-lets-you-view-all-comments-on-a-private-myspace-profile/ http://floydfe.wordpress.com/2007/10/24/simple-hack-lets-you-view-all-comments-on-a-private-myspace-profile/#comments Wed, 24 Oct 2007 12:20:42 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/simple-hack-lets-you-view-all-comments-on-a-private-myspace-profile/

Thought your “private” myspace comments were really private? Well think again! This simple code lets ANYONE view all the comments on ANY private profile. With a simple variation you can also view “private” pictures. It’s so simple, i dont know why someone didn’t figure it out sooner.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/simple-hack-lets-you-view-all-comments-on-a-private-myspace-profile/feed/ How to: Complete Install Simple Mail Server in 30 minute including webmail http://floydfe.wordpress.com/2007/10/24/how-to-complete-install-simple-mail-server-in-30-minute-including-webmail/ http://floydfe.wordpress.com/2007/10/24/how-to-complete-install-simple-mail-server-in-30-minute-including-webmail/#comments Wed, 24 Oct 2007 12:11:08 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/how-to-complete-install-simple-mail-server-in-30-minute-including-webmail/

This is some guide to install mail server in 30 minute. That easy!

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/how-to-complete-install-simple-mail-server-in-30-minute-including-webmail/feed/ Interview with a convicted hacker http://floydfe.wordpress.com/2007/10/24/interview-with-a-convicted-hacker/ http://floydfe.wordpress.com/2007/10/24/interview-with-a-convicted-hacker/#comments Wed, 24 Oct 2007 11:54:56 +0000 floydfe http://floydfe.wordpress.com/2007/10/24/interview-with-a-convicted-hacker/

Convicted hacker Robert Moore, who is set to go to federal prison this week, says breaking into 15 telecommunications companies and hundreds of businesses worldwide was incredibly easy because simple IT mistakes left gaping technical holes. “It’s so easy a caveman can do it,” Moore said, laughing.

read more | digg story

]]> http://floydfe.wordpress.com/2007/10/24/interview-with-a-convicted-hacker/feed/