Security Seal company sued by FTC

Lets start with the proper disclosure; we provide a Web Site Security Seal service which competes with ControlScan’s. That said, I’m not about to bash ControlScan but rather the poor practices of security seal companies giving out seals to whoever pays them without the proper security checks.

Some background: The FTC sued ControlScan for $750,000 for giving out security seals while not really checking the security of the web sites. This lawsuit and its verdict are good news: It means that services that give out seals need to be responsible for their actions; no more “scanless PCI” badges: if you give out a seal (and I’m looking at all you large domain resellers) that needs to stand for something - when customers see a seal that says “secure site” they need to know the site is secure.

Before you take out the pitchforks, sure - there is no way to verify with 100% certainty that the web site is “secure”. But vulnerability scanning is at a stage today where you can run automated scans and make sure the web site is “secure enough” - meaning it does not have any known vulnerabilities, doesn’t suffer from SQL injections or cross site scripting. If there is a zero day vulnerability in apache, I doubt it will be used against an e-commerce site - it is more likely to be used against a bank or the government. Fact is, over 90% of successful attacks use known vulnerabilities that would have been detected by any competent scanner. If the site is properly scanned and no vulnerabilities are found, this is probably as good as it’s ever going to get; and is definitely better than the chances of your credit card being stolen at a brick-and-mortar store.

What will happen with ControlScan is not really important. What’s important is that security seal providers will now have to stand behind their claims - the fact that the FCC went after a case like this, which is normally way below their threshold, probably means that someone is applying pressure on them; hopefully that will help clean up the act of some online scanning vendors.

Note: Complaint, Exhibits and final judgment here.

DiggRedditSlashdotTwitThisSphinnStumbleUpondel.icio.usFacebookGoogleTechnoratiE-mail this story to a friend!

Thoughts on Haiti, Olympics, and other disasters

Absent those who have gone gaga over the iPad, the top news for the past two weeks has been the earthquake and disaster in Haiti.  The concern, the outpourings of support (and, yes, the malware and phishing sites that have been attempting to capitalize on the crisis) are all reminiscent of the tsunami, Katrina, and other events stretching back in time.

Haiti has been different.  The major factor has been the total breakdown of infrastructure, and the consequent difficulty in getting the help to those who need it most.

Those of us in the security communities are always interested in disasters.  We are forever dealing with crises, both large and small, assessing risks, planning and comparing mitigation strategies, and looking at the management of it all.  So, I recall that, when Katrina struck, there were endless discussions of the latest details, the structures, the organization (and lack thereof) in the followup efforts.  One person made a donation to a charity, and challenged the group to match his gift.  I upped the stakes.  I challenged everyone to get trained for disasters.

Unfortunately for the point I’m trying to make, I am speaking from a position of privilege.  Canada has the best emergency structure in the world.  (Our disaster response team is in Haiti at the moment, and is always one of the first on the ground whenever there is a major incident, anywhere.)  British Columbia has the best emergency response management system in Canada.  (No, I’m not volunteering at the Olympics.  But for the past year, I’ve been working with a group that has been planning for the fact that, with the big event in town, even a minor crisis is probably going to mean that we may have to provide emergency lodging for a few hundred people.)  And the North Shore, where I live, has the best disaster training regime in BC.  (The group lodging thing isn’t done by VANOC: it’s an effort by the ESS volunteers from the North Shore, Vancouver, and Richmond.)

Emergency response, in a major disaster, is not simply a matter of having water, generators, blankets, and rescue dogs.  It has to do with organization, co-ordination, management, and, particularly, trained people.  Most of them volunteers, since nobody can afford to pay for a full-time staff of all those you need to have ready in an emergency.

That’s where you come in.

Get trained.

There is some emergency measures organization that covers your area, regardless of where you live.  Your local municpality probably has an office.  And they probably need volunteers.  And they provide training.

If you volunteer, you will probably get trained.  For free.  (You may also get additional perqs.  I get my flu shots paid for every year, since I’m an emergency worker.)

First of all, you’ll probably get trained on what you need for you and your family.  What do you need to survive the first 72 hours following a disaster?  Do you know how much water, what type of food, etc, you need, in the event of a total failure of utilities and other factors we rely on?

Then there are the skills you need to help other people.  Sometimes this might relate to first aid, or structural assessment of buildings after an earthquake, etc.  However, there are many necessary skills that are not quite so dramatic.  Most emergency response, believe it or not, has to do with paperwork.  Who is safe?  Who needs care?  Do families need to be reunited?  Documentation of all of this is a huge effort, which goes on long after the bottles of water and hot meals have been distributed.

Then there are management skills, to co-ordinate all of the other skills.  An awful lot of “charity” gets wasted because some people get too much help, and others don’t get enough.  Someone needs to oversee the efforts.

Training in all of this is available.  And, in an emergency, having trained people is probably more important than having stockpiles of tents.  Trained people can make or improvise shelter.

Maybe your municipality or county doesn’t have a formal emergency structure.  In that case, there are organizations covering the gap.  In Canada, the government doesn’t do it all.  The Red Cross and Salvation Army are two of the groups that have been working on this for years, and have specialists.  In BC we have courses provided by the Justice Institute in a number of areas.  The provincial government has created a marvelous structure, ensuring consistent organizational layout for all sizes and types of disasters, and all types of response.  But we don’t bother reinventing the wheel.  In our formal training curriculum, a number of the courses are prepared, provided and run by the groups that have been doing it for years, and know it best.  If your government doesn’t have the courses available, go to those who do.  They are around.

(For those who have security related certifications, like the CISSP, ongoing professional education is a requirement.  A constant complaint is that training is expensive, and getting the credits costs too much.  I get all kinds of training related to business continuity and disaster recovery.  I get almost all of it free.)

Get trained.  Volunteer.  You’ll get a wealth of experience that will help you plan for all kinds of events, not just for major disasters, but for the minor incidents that plague us and our companies every day.  You’ll be ready for the big stuff, too.  You’ll be able to keep yourself and those near to you safe.  You’ll be able to make a difference to others, certainly reducing suffering, and possibly saving lives.  If and when something major happens, you will be a part of the infrastructure necessary for the response to be effective.  You’ll be part of the solution, rather than part of the problem.

DiggRedditSlashdotTwitThisSphinnStumbleUpondel.icio.usFacebookGoogleTechnoratiE-mail this story to a friend!

Vendor response to vulnerability disclosure

My wish for 2010: I want this guide to be taught in CS classes to developers everywhere:

http://vrt-sourcefire.blogspot.com/2009/12/matts-guide-to-vendor-response.html

Happy new year everybody.

DiggRedditSlashdotTwitThisSphinnStumbleUpondel.icio.usFacebookGoogleTechnoratiE-mail this story to a friend!

Signs of the (end) times …

Rev. 6:6, OCD [1]

“Then it was as if I heard a voice saying: And they shalt go into the storehouses, and look there for the snack foods made from corn [2] which the hands of men have made into hollow cones or cornets [3].  And they shall go unto the Save-On, and unto the Shoppers Drug Mart, and unto the Safeway, and even unto the Zellers, which is the store of last resort when old stock is being cleared out.  And they shall find them not.  And, having no proper snack foods for the parties of the new year, the new year shall come not, and thus shall be the end of times.”

[1] Old Canadian Deviant translation, as opposed to the New American Standard

[2] Some ancient manuscripts add: “And this is not that barelycorn which was known even in Ur of the Chaldees, but that which came from the land newly found by him who gave his name unto a seventies TV detective show, but of whom we may not, at this time, speak”

[3] Scholars debate the meaning of this word.  Most believe that it is simply a reference to “little objects made from corn.”  However, some feel that it is similar to the word for “trumpets,” or, possibly “bugles.”

DiggRedditSlashdotTwitThisSphinnStumbleUpondel.icio.usFacebookGoogleTechnoratiE-mail this story to a friend!

Fuzzing anything that moves

<meta content="OpenOffice.org 3.0 (Linux)" name="GENERATOR" /> <style type="text/css"> <!-- @page { margin: 0.79in } P { margin-bottom: 0.08in } A:link { so-language: zxx } --></style></p> <p style="margin-bottom: 0in">I’m in New Delhi, for the local <a href="(http://www.owasp.org/index.php/SecurityByte_and_OWASP_Asia_AppSec_Conference_2009">OWASP Conference</a>. There’s a <a href="http://www.owasp.org/index.php/SecurityByte_and_OWASP_Asia_AppSec_Conference_2009#tab=Conference">really nice lineup</a> and if you’re in the New Delhi area I highly recommend attending.</p> <p style="margin-bottom: 0in"> <p style="margin-bottom: 0in">I’ll be speaking twice. On Tuesday about blackbox testing. The abstract can be paraphrased from the immortal words of the great fuzzing master Ice-T:</p> <blockquote> <p style="margin-bottom: 0in">If you’re from Mars, and you have inputs, we will fuzz you.</p> </blockquote> <p style="margin-bottom: 0in">(Look up the <a href="http://www.rhapsody.com/body-count/body-count/kkk-bitch/lyrics.html">original text</a>, I guarantee it’s worth it)</p> <p style="margin-bottom: 0in"> <p style="margin-bottom: 0in">On Wednesday I’ll be talking a bit about breaking JSON applications, relying on the great research done by Amit Klein, Blueinfy, Jeremiah Grossman, Fortify, and many others.</p> <p style="margin-bottom: 0in"> <p style="margin-bottom: 0in">If you spot any errors in either of my presentations let me know and I will buy you a beer. This offer does not include anything stupid I say while on a discussion panel…</p> <p style="margin-bottom: 0in"> <p style="margin-bottom: 0in"> <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Fuzzing+anything+that+moves&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&t=Fuzzing+anything+that+moves"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332&title=Fuzzing+anything+that+moves"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Fuzzing+anything+that+moves&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1332" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1332" dc:identifier="http://blogs.securiteam.com/index.php/archives/1332" dc:title="Fuzzing anything that moves" trackback:ping="http://blogs.securiteam.com/index.php/archives/1332/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1330"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1330" rel="bookmark" title="HP buys 3COM: how will that impact ZDI?">HP buys 3COM: how will that impact ZDI?</a></h2> <p class="postinfo"> Posted on November 12th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/aviram/" title="Posts by Aviram">Aviram</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/full-disclosure/" title="View all posts in Full Disclosure" rel="category tag">Full Disclosure</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a> | <a href="http://blogs.securiteam.com/index.php/archives/1330#comments" title="Comment on HP buys 3COM: how will that impact ZDI?">2 Comments »</a> </p> <div class="entry"> <p>What happens if your job is to sell to customers information about embarrassing vendor vulnerabilities, and then your company gets bought by one of the vendors you are reporting about?</p> <p>Going back to cheesy analogies this is the age old question, can god create a stone so heavy that he cannot lift?</p> <p>The case in question is HP buying 3COM (which owns the Zero Day initiative), and as HD Moore correctly <a href="http://twitter.com/hdmoore/status/5629710613">pointed out</a> there’s bound to be some conflict there.<br /> This will be an interesting match to watch. First, the stone is very heavy. Knowing the ZDI team (*) they have been very successful at staying independent inside the huge 3com corporate, and my money would be on them succeeding to do it again.</p> <p>But when we ask if HP can lift this proverbial stone, lets remember that HP was the only large vendor to pull out the nuclear weapon of <a href="http://news.cnet.com/2100-1023-947325.html?tag=mncol;txt">threatening to sue a security researcher</a> for making their flaws public. Now it’s a group within their own organization, selling information about <a href="http://www.zerodayinitiative.com/advisories/upcoming/">unfixed HP flaws</a> to paying customers, and paying the same researchers HP wanted to sue 7 years ago.</p> <p>(*) Full Disclosure: We run <a href="http://www.beyondsecurity.com/ssd.html">an alternative service to ZDI</a> called SecuriTeam Secure Disclosure. That doesn’t take anything from my respect to the ZDI guys and what they’ve been doing. <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&t=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330&title=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=HP+buys+3COM%3A+how+will+that+impact+ZDI%3F&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1330" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1330" dc:identifier="http://blogs.securiteam.com/index.php/archives/1330" dc:title="HP buys 3COM: how will that impact ZDI?" trackback:ping="http://blogs.securiteam.com/index.php/archives/1330/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1328"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1328" rel="bookmark" title="Is it phish, or is it Amex?">Is it phish, or is it Amex?</a></h2> <p class="postinfo"> Posted on November 4th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/p1/" title="Posts by p1">p1</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="View all posts in Privacy" rel="category tag">Privacy</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/spam/" title="View all posts in Spam" rel="category tag">Spam</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/phishing/" title="View all posts in Phishing" rel="category tag">Phishing</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/corporate-security/" title="View all posts in Corporate Security" rel="category tag">Corporate Security</a> | <a href="http://blogs.securiteam.com/index.php/archives/1328#comments" title="Comment on Is it phish, or is it Amex?">2 Comments »</a> </p> <div class="entry"> <p>I am a bit freaked.</p> <p>Last month I received an email message from American Express.  I very nearly deleted it unread: it was obviously phish, right?  (I was teaching in Toronto that week, so I had even more reason to turf it unread rather than look at it.)</p> <p>However, since I do have an Amex card, I decided to at least have a look at it, and possibly try and find some way to send it to them.  So I looked at it.</p> <p>And promptly freaked out.</p> <p>The phishers had my card number.  (Or, at least, the last five digits of it.)  They knew the due date of my statement.  The knew the balance amount of my last statement.</p> <p>(The fact that this was all happening while I am aware from home wasn’t making me feel any more comfortable with it …)</p> <p>So I had a look at the headers.  And couldn’t find a single thing indicating that this wasn’t from American Express.</p> <p>(I had paid my bill before I left.  Or, at least, I *thought* I had.  So I checked my bank.  Sure enough, that balance had been paid a couple of days before.  However, I guess banks never actually transfer money on the weekend or something …)</p> <p>A couple of days later I got another message: Amex was telling me that my payment was received.  That’s nice of them.  They were once again sending, in an unencrypted email message, the last five digits of my card number, and the last balance paid on my account.</p> <p>Well, I figured that it might have been an experiment, and that they’d probably realize the error of their ways, and I didn’t necessarily need to point this out.  Apparently I was wrong on all counts, since I got another reminder message today.</p> <p>Are these people completely unaware of the existence and risk of phishing?  Are they so totally ignorant of online security that they are encouraging their customers to be looking for legitimate email from a financial institution, thus increasing the risk of deception and fraud?</p> <p>Going to their Website, I notice that there is now an “Account Alerts” function.  It may have been there for a while: I don’t know, since I’ve never used it.  Since I’ve never used it, I assume it was populated by default when they created it.  It seems to, by default, send you a payment due notice a week before the deadline, a payment received notice when payment is received, and a notice when you approach your credit limit.  (Fortunately, someone had the good sense not to automatically populate the option that sends you your statement balance every week.)  These options may be useful to some people.  But they should be options: they shouldn’t be sending a bunch of information about everybody’s account, in the clear, by default.</p> <p>(There are, of course, “Terms and Conditions” applicable to this service, which basically say, as usual, that Amex isn’t responsible for much of anything, have warned you, and that you take all the risks arising from this function.  I find this heavily ironic, since I knew nothing of the service, don’t want it, and got it automatically.  I never even knew the “Terms and Conditions” existed, but in order to turn the service <strong>off</strong> I’ll have to read them.)</p> <p>(In trying to send a copy of this to Amex, I note that their Website only lists phone and snailmail as contact options, you aren’t supposed to be able to send them email.) <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Is+it+phish%2C+or+is+it+Amex%3F&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&t=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328&title=Is+it+phish%2C+or+is+it+Amex%3F"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Is+it+phish%2C+or+is+it+Amex%3F&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1328" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1328" dc:identifier="http://blogs.securiteam.com/index.php/archives/1328" dc:title="Is it phish, or is it Amex?" trackback:ping="http://blogs.securiteam.com/index.php/archives/1328/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1323"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1323" rel="bookmark" title="Ipswitch Means Business">Ipswitch Means Business</a></h2> <p class="postinfo"> Posted on September 25th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/jbrown/" title="Posts by jbrown">jbrown</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/full-disclosure/" title="View all posts in Full Disclosure" rel="category tag">Full Disclosure</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/corporate-security/" title="View all posts in Corporate Security" rel="category tag">Corporate Security</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/sec-tools/" title="View all posts in Sec Tools" rel="category tag">Sec Tools</a> | <a href="http://blogs.securiteam.com/index.php/archives/1323#comments" title="Comment on Ipswitch Means Business">1 Comment »</a> </p> <div class="entry"> <p>A while back I was fuzzing with Hzzp and found a remote format string vulnerability in Ipswitch’s WS_FTP. But, I couldn’t find a security contact for Ipswitch. I waited a few months and made the vulnerability public. The day afterwards, a representative from Ipswitch contacted me and I explained why I hadn’t contacted them previously. He was eager to get the vulnerability fixed and made the comment that they’ll need to do a better job publicizing the security contact information. I was happy to have had received a more professional, non-automated email from someone who seemed to care about the security of their company’s product.</p> <p>I didn’t worry too much about the update process. I know it can take some companies months or even years to release new patches for vulnerabilities in their products, which most of the time is completely unreasonable. Then, a little more than two weeks later, I received an email from that same Ipswitch representative informing me that a new release of WS_FTP was available and the date in the Help->About window should say Sept 18th (10 days after we discussed the vulnerability). What an excellent example of how vendors should handle security issues within their products.</p> <p>Fast response, efficient security policy, good business. Thanks Ipswitch! <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Ipswitch+Means+Business&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&t=Ipswitch+Means+Business"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323&title=Ipswitch+Means+Business"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Ipswitch+Means+Business&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1323" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1323" dc:identifier="http://blogs.securiteam.com/index.php/archives/1323" dc:title="Ipswitch Means Business" trackback:ping="http://blogs.securiteam.com/index.php/archives/1323/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1320"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1320" rel="bookmark" title="Robert Who?">Robert Who?</a></h2> <p class="postinfo"> Posted on September 9th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/p1/" title="Posts by p1">p1</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="View all posts in Privacy" rel="category tag">Privacy</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/ot/" title="View all posts in OT" rel="category tag">OT</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/funny/" title="View all posts in Funny" rel="category tag">Funny</a> | <a href="http://blogs.securiteam.com/index.php/archives/1320#comments" title="Comment on Robert Who?">3 Comments »</a> </p> <div class="entry"> <p>As part of some research into the security risks of social networking, I did an <a rel="nofollow" href="http://en.wikipedia.org/wiki/Ego_search"title="egosurfing" >ego search</a> on myself.  (Hey, it’s legitimate research, all right?)</p> <p>On Altavista, the first hit was the Wikipedia page someone created about me.  The second result was <a href="http://www.robertslade.com/">http://www.robertslade.com/</a> which I hadn’t known existed.  As well as correctly listing his published books, this page informed him that me that I was mentioned on the Wikipedia entry for the RISKS-Forum Digest (which is a definite ego boost).  It also provides a photograph of someone else.  As well as two pictures I didn’t take, and three videos I have nothing to do with.  Two different boxes provide links to buy books, some of which are mine, and most of which aren’t.</p> <p>I expected to find entries that weren’t me: I know there are a lot of <a href="http://victoria.tc.ca/techrev/robslade.htm">Robert Slades</a> on the net.  But it’s a bit weird to find out that there is a domain about me that I didn’t know about.<br /> I also found the <a href="http://www.rootsweb.ancestry.com/~scwhite/sherman/Slade04.jpg">church I’m buried in</a>, so currently I’m not feeling too great … <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Robert+Who%3F&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&t=Robert+Who%3F"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320&title=Robert+Who%3F"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Robert+Who%3F&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1320" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1320" dc:identifier="http://blogs.securiteam.com/index.php/archives/1320" dc:title="Robert Who?" trackback:ping="http://blogs.securiteam.com/index.php/archives/1320/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1318"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1318" rel="bookmark" title="Wordpress: we are protecting your blog">Wordpress: we are protecting your blog</a></h2> <p class="postinfo"> Posted on September 6th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/aviram/" title="Posts by Aviram">Aviram</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/funny/" title="View all posts in Funny" rel="category tag">Funny</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/malware/" title="View all posts in malware" rel="category tag">malware</a> | <a href="http://blogs.securiteam.com/index.php/archives/1318#comments" title="Comment on Wordpress: we are protecting your blog">2 Comments »</a> </p> <div class="entry"> <p>As the Wordpress team scramble around trying to resolve the latest set of security issues, and doing all the wrong things like giving their users a <a href="http://codex.wordpress.org/Upgrading_WordPress_Extended">14-step process for upgrade</a>, the following Jewel <a href="http://lorelle.wordpress.com/2009/09/04/old-wordpress-versions-under-attack/">came up</a>:</p> <blockquote><p>4. WordPress is Not Secure: WordPress is incredibly secure and monitored constantly by experts in web security. This attack was well anticipated and so far, WordPress 2.8.4 is holding. If necessary, WordPress will immediately release a update with further security improvements. WordPress is used by governments, huge corporations, and me, around the world. Millions of bloggers are using WordPress.com. Have faith they are working overtime to monitor this situation and protect your blog.</p></blockquote> <p>This is funny on so many levels.<br /> (HT: Jericho, AKA security curmudgeon) <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Wordpress%3A+we+are+protecting+your+blog&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&t=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318&title=Wordpress%3A+we+are+protecting+your+blog"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Wordpress%3A+we+are+protecting+your+blog&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1318" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1318" dc:identifier="http://blogs.securiteam.com/index.php/archives/1318" dc:title="Wordpress: we are protecting your blog" trackback:ping="http://blogs.securiteam.com/index.php/archives/1318/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1317"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1317" rel="bookmark" title="The achilles heel of the Internet">The achilles heel of the Internet</a></h2> <p class="postinfo"> Posted on September 5th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/aviram/" title="Posts by Aviram">Aviram</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="View all posts in Privacy" rel="category tag">Privacy</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/phishing/" title="View all posts in Phishing" rel="category tag">Phishing</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/insider-threat/" title="View all posts in Insider Threat" rel="category tag">Insider Threat</a> | <a href="http://blogs.securiteam.com/index.php/archives/1317#comments" title="Comment on The achilles heel of the Internet">2 Comments »</a> </p> <div class="entry"> <p>It won’t surprise you if I say the achilles heel of the Internet is passwords. But the problem is not that our passwords are too weak: in fact, the bigger problem is that our passwords are too <strong>strong</strong>.</p> <p>Preventing brute force password attacks is a problem we know how to solve. The problem is that web service providers have bad habits that cause our passwords to be less secure. Remember the saying “the chain is only strong as the weakest link?” If you are strengthening an already strong link in the chain but weakening another, you are not improving security and usually decreasing the overall security of the system. Those “bad habits”, mostly of web services that require a login, are all wrapped in supposedly ’security concerns’: meaning some security consultant fed the CSO a strict compliance document and by implementing these rigid security methods they are actually making their users <strong>less</strong> secure.</p> <p>Here are some examples.</p> <p><strong>Don’t you remember who I am?</strong><br /> What’s the easiest way to fight phishing? Have the web site properly identify itself. When the bank calls, most people don’t ask the person on the other side of the line to prove they are really from the bank (though they really should). The reason is you assume that if they knew how to reach you, they are indeed your bank.</p> <p>So why not do the same for phishing? The bank of America uses <a href="http://blogs.securiteam.com/index.php/archives/767">Sitekey</a>, which is a really neat trick. But you don’t have to go that far: just remember my username and I’ll have more confidence that you are the right web site. In fact, if I see a login page that does not remember my username I’ll have to stop and think (since I typically don’t remember all the usernames) and that gives me more time to spot suspicious things about the page.</p> <p>If you can tell me what my username is, there are higher chances you are the legitimate site. But some sites block my browser from remembering my username, on the excuse of increasing security. Well, they’re not.</p> <p><strong>Let me manage my passwords</strong></p> <p>This is where most financial sites really fight me - they work so hard to prevent the browser from remembering my passwords.</p> <p>Why? I can see the point when I’m on a public terminal. But what if I’m using my own laptop? By letting my browser remember the password I am decreasing the chance of phishing, and in fact if I know for certain a web site will let me remember the password (rather than force to type it in) I select a strong, complicated password - since I don’t have to remember it. In some cases I even stick with the random-assigned password; I don’t care as long as my browser remembers it.</p> <p>But some people are stuck with “security!=usability” equation. They are wrong; in many cases usability increases security. This is one of those cases.</p> <p>Not to mention they will almost always lose the fight. If paypal won’t let firefox remember the password, I’ll find <a href="http://www.google.com/search?hl=en&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&hs=izP&q=+remember+password+firefox">ways around it</a>. Or maybe I’ll just write a post-it note and put it on my monitor. All of those ways are less secure than firefox’s built-in password manager.</p> <p>Oh, and forcing me to choose a strong password (’strong’ being something absurd and twisted that makes no security sense)? <a href="http://blogs.securiteam.com/index.php/archives/553">Good luck with that</a>. I don’t really mind these silly efforts just because they are so easy to circumvent they are not even a bother anymore. But just remember that putting security measures in place that will be circumvented by 90% of your users means teaching them not to take your security seriously.</p> <p><strong>Stop blocking me </strong><br /> Next week I will have my annual conversation with the Lufthansa ‘frequent flyer’ club support people. It’s a conversation I have at least once a year (sometimes more) when my login gets blocked.</p> <p>Why does my login get blocked? Because I get the password wrong too many times. What’s “too many”? I wish I knew. Since I usually pretty much know what my password is, I get it right within 4-5 tries, so I guess Lufthansa blocks me after 3 or 4. I don’t know for sure, because I also need to guess my username (long story, lets just say Lufthansa has 2 sets of usernames and passwords and you need to match them up correctly). So the bottom line is that I get routinely blocked and need to call their office in Germany to release it.</p> <p>Why are they blocking me? I’m guessing to prevent brute-force password attacks, and that’s a good thing. But why not release it automatically after a day? A week? An hour? Why not authenticate me some other way (e-mail)? I bet I can guess why: Because everybody that complains is told that “it’s due to security concerns”. Nobody can argue with that, can they? After all, security is the opposite of usability. Our goal as security professionals is to make our services not work, and hence infinitely secure.</p> <p>So Lufthansa is losing my web site visit, which means less advertising money, and they are making me agitated which is not the right customer retention policy. Some credit card issuers like to do this a lot, which means I can’t login to see my credit card balance and watch if there is any suspicious activity. Now that’s cutting your nose off to spite your face.</p> <p><strong>Don’t encourage me to give out my password</strong><br /> How many web sites have my real twitter password? Must be over half a dozen, maybe more. If you are using any twitter client, you have given them your twitter username and password. If you are using twitterpic, or any of the other hundreds of web 2.0 that automatically tweet for you, they have your login credentials. Heck, even facebook has my twitter credentials - I bet Facebook can flood twitter in an instant if they decide to fight dirty.</p> <p>Twitter wants me to use all these clients because it raises my twitter activity, and that’s ok. But there are plenty of single-sign-on methods out there, that are not too complicated, and are all more secure than spreading my real username and password all over the place. Even Boxee has my twitter login, which makes me think. If I was building a web 2.0 service and asked everyone who opens an account to give me their twitter login details - how many would do that just out of habit?<br /> Giving my credentials is not necessarily a bad thing. Services like <a href="http://www.mint.com">mint</a> and <a href="http://www.pageonce.com/">pageonce</a> are good because they make it unnecessary for me to login to all my financial web sites; the less I login the better: assuming these sites have better security than my own computer, I’d rather have them login to my financial accounts than me. This leap of faith is not for everyone - some will ask what happens if these startups go out of business. Cybercrime experts like Richard Stiennon will argue that an <a href="http://blogs.zdnet.com/threatchaos/?p=341">insider breach</a> in one of those companies can be devastating. And of course <a href="http://blogs.securiteam.com/index.php/archives/author/noam/">Noam</a> will say that until they’ve been scanned by Beyond Security he won’t give them any sensitive information. I agree with them all, and yet I use both Mint.com and PageOnce. So I guess it boils down to a personal judgment call. I personally think there’s value in these type of services.</p> <p><strong>Stick with passwords</strong></p> <p>One thing I am almost allergic to, is the “next thing to replace passwords”. Don’t give me USB tokens or credit-card sized authentication cards. SMS me if you must, but even that’s marginal. Don’t talk to me about <a href="http://openid.net/">new ideas</a> to revolutionize logins. A non-trivial password along with a mechanism that blocks multiple replies (blocks for a certain period of time, not forever - got that Lufthansa?) is good enough. It’s not foolproof - a keylogger will defeat all of those methods, but those keylogging Trojans are also capable of modifying traffic so no matter what off-line method you use for authentication, the transaction itself will be modified and the account will be compromised. So Trojans is a war we have lost - lets admit that and move on. Any other threat can be stopped by simple and proper login policies that do not include making the user wish he never signed up for your service.<br /> There are other password ideas out there. Bruce Schneier <a rel="nofollow" href="http://www.schneier.com/blog/archives/2009/06/the_problem_wit_2.html">suggests</a> to have passwords be displayed while typing them. I think that makes absolutely no sense for 99% of the people out there, but I do agree that we are fighting the wrong wars when it comes to passwords, and I think fresh thinking about passwords is a good thing. The current situation is that on one hand we are preventing our users from using passwords properly, and on the other hand we leaving our services open to attack. That doesn’t help anyone. <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=The+achilles+heel+of+the+Internet&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&t=The+achilles+heel+of+the+Internet"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317&title=The+achilles+heel+of+the+Internet"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=The+achilles+heel+of+the+Internet&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1317" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1317" dc:identifier="http://blogs.securiteam.com/index.php/archives/1317" dc:title="The achilles heel of the Internet" trackback:ping="http://blogs.securiteam.com/index.php/archives/1317/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1313"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1313" rel="bookmark" title="Linux Kernel Bashing">Linux Kernel Bashing</a></h2> <p class="postinfo"> Posted on August 14th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/jbrown/" title="Posts by jbrown">jbrown</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/full-disclosure/" title="View all posts in Full Disclosure" rel="category tag">Full Disclosure</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/insider-threat/" title="View all posts in Insider Threat" rel="category tag">Insider Threat</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/networking/" title="View all posts in Networking" rel="category tag">Networking</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/sec-tools/" title="View all posts in Sec Tools" rel="category tag">Sec Tools</a> | <a href="http://blogs.securiteam.com/index.php/archives/1313#comments" title="Comment on Linux Kernel Bashing">1 Comment »</a> </p> <div class="entry"> <p>This summer may have caused a few burden’s on linux administrators. By all the patching necessary to keep their systems out of the hands of those who would choose to exploit it, unless your using something like <a href="http://www.ksplice.com">Ksplice</a>, you’ve more than likely rebooted many times already. Well, here is one more reason to wake this early this morning…</p> <p>New exploits for the “Linux NULL pointer dereference due to incorrect proto_ops initializations” vulnerability have been released, <a href="http://www.milw0rm.com/exploits/9435">here</a> and <a href="http://www.milw0rm.com/exploits/9436">here</a>. I just tried the second one out myself on a (currently) fully updated Ubuntu Jaunty workstation, with (_default_) successful results.</p> <p>linux@ubuntu:~/2009-proto_ops$ sh run.sh<br /> run.c: In function ‘main’:<br /> run.c:13: warning: missing sentinel in function call<br /> padlina z lublina!<br /> # id<br /> uid=0(root) gid=0(root) groups=4(adm),20(dialout),24(cdrom),46(plugdev)<br /> # exit<br /> linux@ubuntu:~/2009-proto_ops$</p> <p>A reliable local root exploit for that affects all linux kernels 2.x. Feels like 2003 all over again :X <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Linux+Kernel+Bashing&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&t=Linux+Kernel+Bashing"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313&title=Linux+Kernel+Bashing"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Linux+Kernel+Bashing&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1313" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1313" dc:identifier="http://blogs.securiteam.com/index.php/archives/1313" dc:title="Linux Kernel Bashing" trackback:ping="http://blogs.securiteam.com/index.php/archives/1313/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1311"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1311" rel="bookmark" title="Vanishingly small utility …">Vanishingly small utility …</a></h2> <p class="postinfo"> Posted on July 27th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/p1/" title="Posts by p1">p1</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/gadgets/" title="View all posts in Gadgets" rel="category tag">Gadgets</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="View all posts in Privacy" rel="category tag">Privacy</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/insider-threat/" title="View all posts in Insider Threat" rel="category tag">Insider Threat</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/encryption/" title="View all posts in Encryption" rel="category tag">Encryption</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/sec-tools/" title="View all posts in Sec Tools" rel="category tag">Sec Tools</a> | <a href="http://blogs.securiteam.com/index.php/archives/1311#comments" title="Comment on Vanishingly small utility …">1 Comment »</a> </p> <div class="entry"> <p>This system has had some discussion in the forensics world over the past few days.  Here’s an extract from <a href="http://www.sciencedaily.com/releases/2009/07/090721113309.htm">Science Daily</a>:</p> <p>“Computers have made it virtually impossible to leave the past behind. College Facebook posts or pictures can resurface during a job interview. A lost cell phone can expose personal photos or text messages. A legal investigation can subpoena the entire contents of a home or work computer. The University of Washington has developed a way to make such information expire. After a set time period, electronic communications such as e-mail, Facebook posts and chat messages would automatically self-destruct, becoming irretrievable from all Web sites, inboxes, outboxes, backup sites and home computers. Not even the sender could retrieve them.</p> <p>“The team of <a href="http://vanish.cs.washington.edu/">UW computer scientists developed a prototype system called Vanish</a> that can place a time limit on text uploaded to any Web service through a Web browser.</p> <p>[Perhaps a bit narrower focus than the original promise, but it is a prototype - rms]</p> <p>“After a set time text written using Vanish will, in essence, self-destruct.  The Vanish prototype washes away data using the natural turnover, called “churn,” on large file-sharing systems known as peer-to-peer networks. For each message that it sends, Vanish creates a secret key, which it never reveals to the user, and then encrypts the message with that key. It then divides the key into dozens of pieces and sprinkles those pieces on random computers that belong to worldwide file-sharing networks. The file-sharing system constantly changes as computers join or leave the network, meaning that over time parts of the key become permanently inaccessible. Once enough key parts are lost, the original message can no longer be deciphered.”</p> <p>However, given the promise to clean up social networking sites, and as I started to read <a href="http://vanish.cs.washington.edu/pubs/usenixsec09-geambasu.pdf">the paper</a>, an immediate problem occurred to me.  And, lo and hehold, the authors admit it:</p> <p>“We therefore focus our threat model and subsequent analyses on attackers who wish to compromise data privacy. Two key properties of our threat model are:<br /> 1. Trusted data owners. Users with legitimate access to the same VDOs trust each other.<br /> 2. Retroactive attacks on privacy. Attackers do not know which VDOs they wish to access until after the VDOs expire.<br /> The former aspect of the threat model is straightforward, and in fact is a shared assumption with traditional encryption schemes: it would be impossible for our system to protect against a user who chooses to leak or permanently preserve the cleartext contents of a VDO-encapsulated file through out-of-band means. For example, if Ann sends Carla a VDO-encapsulated email, Ann must trust Carla not to print and store a hard-copy of the email in cleartext.”</p> <p>So, this system works perfectly.  If you only communicate with people you trust (both in terms of intent, and competence), and who only use the system properly, and never use any of the information in any program that is not part of the system, it’s completely secure.</p> <p>How often have we heard that said?</p> <p>The default to privacy aspect is interesting, and the automatic transparency for the user as well, but this simply moves the problem one step back, as it were.  In terms of utility to social networking, the social networks would have to be completely rewritten to adher to the system, and even then it would be pretty much impossible to ensure that nobody would have the ability to scrape data and keep or publish it elsewhere.</p> <p>(Plus, the data is still there, and so is Moore’s Law …) <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Vanishingly+small+utility+...&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&t=Vanishingly+small+utility+..."rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311&title=Vanishingly+small+utility+..."rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Vanishingly+small+utility+...&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1311" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1311" dc:identifier="http://blogs.securiteam.com/index.php/archives/1311" dc:title="Vanishingly small utility …" trackback:ping="http://blogs.securiteam.com/index.php/archives/1311/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1305"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1305" rel="bookmark" title="Privacy and transparency: cost benefit analysis">Privacy and transparency: cost benefit analysis</a></h2> <p class="postinfo"> Posted on July 16th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/p1/" title="Posts by p1">p1</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="View all posts in Privacy" rel="category tag">Privacy</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/ot/" title="View all posts in OT" rel="category tag">OT</a> | <a href="http://blogs.securiteam.com/index.php/archives/1305#respond" title="Comment on Privacy and transparency: cost benefit analysis">No Comments »</a> </p> <div class="entry"> <p>Gloria pointed out an <a href="http://www.vancouversun.com/Employment+resume+there/1795776/story.html">article in the Vancouver Sun</a> and, just in case it disappears in a few days, I found <a href="http://www.twistimage.com/blog/archives/employment-20/">the author’s blog.</a></p> <p>The main thrust of the article is on the risk/benefit of a lack of privacy, as practiced in social networking.  This (absent the social networking) reminded me of <a href="http://victoria.tc.ca/techrev/bktrasoc.rvw">David Brin’s “The Transparent Society,”</a> and if you haven’t read it, I recommend it. <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Privacy+and+transparency%3A+cost+benefit+analysis&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&t=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305&title=Privacy+and+transparency%3A+cost+benefit+analysis"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Privacy+and+transparency%3A+cost+benefit+analysis&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1305" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1305" dc:identifier="http://blogs.securiteam.com/index.php/archives/1305" dc:title="Privacy and transparency: cost benefit analysis" trackback:ping="http://blogs.securiteam.com/index.php/archives/1305/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1300"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1300" rel="bookmark" title="milw0rm will stay open, but needs your help">milw0rm will stay open, but needs your help</a></h2> <p class="postinfo"> Posted on July 11th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/aviram/" title="Posts by Aviram">Aviram</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/fuzzing/" title="View all posts in Fuzzing" rel="category tag">Fuzzing</a> | <a href="http://blogs.securiteam.com/index.php/archives/1300#respond" title="Comment on milw0rm will stay open, but needs your help">No Comments »</a> </p> <div class="entry"> <p>Seems like milw0rm will stay up for the near future. In an email from Str0ke, he wrote:</p> <blockquote><p>Way to[o] many people unhappy with me over the<br /> idea of closing shop.  I just needed help which I have alot of people to choose from now</p></blockquote> <p>So the good news, is that we’ll still see milw0rm posting information. But for all of you who were disappointed by milw0rm almost closing: if you want to see it stay open, here’s your chance to help. Just write to str0ke and offer him help - managing a vulnerability database is one of the best ways to gain expertise and learn the field. Plus, you’ll be helping a valuable resource, and making friends along the way.</p> <p>From a personal experience, I can very much recommend it. We started our own <a href="http://www.securiteam.com/">vulnerabilities database</a> much like milw0rm a while back, and it gave us the expertise to build a <a href="http://www.beyondsecurity.com/vulnerability-assessment.html">vulnerability scanner</a>, a <a href="http://www.beyondsecurity.com/beSTORM">fuzzer</a>, and build a profitable business while having fun doing it. So much so, that the original SecuriTeam team is still actively working on editing and posting information.</p> <p>So whether you are looking to sharpen your skills for fun or want to give a boost to your professional career, I highly recommend joining milw0rm (do it now, while str0ke is still accepting applications!) <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=milw0rm+will+stay+open%2C+but+needs+your+help&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&t=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300&title=milw0rm+will+stay+open%2C+but+needs+your+help"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=milw0rm+will+stay+open%2C+but+needs+your+help&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1300" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1300" dc:identifier="http://blogs.securiteam.com/index.php/archives/1300" dc:title="milw0rm will stay open, but needs your help" trackback:ping="http://blogs.securiteam.com/index.php/archives/1300/trackback/" /> </rdf:RDF> --> </div> </div> <div class="post" id="post-1299"> <h2><a href="http://blogs.securiteam.com/index.php/archives/1299" rel="bookmark" title="Who Hacks the Hackers that Hack Hackers?">Who Hacks the Hackers that Hack Hackers?</a></h2> <p class="postinfo"> Posted on July 11th, 2009 by <a href="http://blogs.securiteam.com/index.php/archives/author/jbrown/" title="Posts by jbrown">jbrown</a><br /> Filed under: <a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="View all posts in Web" rel="category tag">Web</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="View all posts in Commentary" rel="category tag">Commentary</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/full-disclosure/" title="View all posts in Full Disclosure" rel="category tag">Full Disclosure</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts in Culture" rel="category tag">Culture</a>, <a href="http://blogs.securiteam.com/index.php/archives/category/corporate-security/" title="View all posts in Corporate Security" rel="category tag">Corporate Security</a> | <a href="http://blogs.securiteam.com/index.php/archives/1299#respond" title="Comment on Who Hacks the Hackers that Hack Hackers?">No Comments »</a> </p> <div class="entry"> <p>Just thought I’d bring it up since there has been <a href="http://seclists.org/fulldisclosure/2009/Jul">prolific chatter</a> on the lists lately… <div><a href="http://digg.com/submit?phase=2&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="Digg"><img src="http://blogs.securiteam.com/wp-content/socializer-images/digg.png" title="Digg" alt="Digg" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://reddit.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="Reddit"><img src="http://blogs.securiteam.com/wp-content/socializer-images/reddit.png" title="Reddit" alt="Reddit" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://slashdot.org/bookmark.pl?title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F&url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299"rel="nofollow" title="Slashdot"><img src="http://blogs.securiteam.com/wp-content/socializer-images/slashdot.png" title="Slashdot" alt="Slashdot" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://twitthis.com/twit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299"rel="nofollow" title="TwitThis"><img src="http://blogs.securiteam.com/wp-content/socializer-images/twitter.png" title="TwitThis" alt="TwitThis" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://sphinn.com/submit.php?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="Sphinn"><img src="http://blogs.securiteam.com/wp-content/socializer-images/sphinn.png" title="Sphinn" alt="Sphinn" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="StumbleUpon"><img src="http://blogs.securiteam.com/wp-content/socializer-images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://del.icio.us/post?url=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="del.icio.us"><img src="http://blogs.securiteam.com/wp-content/socializer-images/delicious.png" title="del.icio.us" alt="del.icio.us" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&t=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="Facebook"><img src="http://blogs.securiteam.com/wp-content/socializer-images/facebook.png" title="Facebook" alt="Facebook" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://www.google.com/bookmarks/mark?op=edit&bkmk=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299&title=Who+Hacks+the+Hackers+that+Hack+Hackers%3F"rel="nofollow" title="Google"><img src="http://blogs.securiteam.com/wp-content/socializer-images/googlebookmark.png" title="Google" alt="Google" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="http://technorati.com/faves?add=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299"rel="nofollow" title="Technorati"><img src="http://blogs.securiteam.com/wp-content/socializer-images/technorati.png" title="Technorati" alt="Technorati" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a><a href="mailto:?subject=Who+Hacks+the+Hackers+that+Hack+Hackers%3F&body=http%3A%2F%2Fblogs.securiteam.com%2Findex.php%2Farchives%2F1299" title="E-mail this story to a friend!"><img src="http://blogs.securiteam.com/wp-content/socializer-images/email_link.png"rel="nofollow" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" style="margin:5px; border:0px; opacity: .4; -moz-opacity: .4; filter: alpha(opacity=40);" /></a></div> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"> <rdf:Description rdf:about="http://blogs.securiteam.com/index.php/archives/1299" dc:identifier="http://blogs.securiteam.com/index.php/archives/1299" dc:title="Who Hacks the Hackers that Hack Hackers?" trackback:ping="http://blogs.securiteam.com/index.php/archives/1299/trackback/" /> </rdf:RDF> --> </div> </div> <div class="browse"> — <a href="http://blogs.securiteam.com/index.php/archives/category/culture/page/2/">Next Page »</a></div> <div class="clear"></div> </div> <div class="sidebar sidebar2"> <ul> <li><h3>More <span>SecuriTeam...</span></h3> <!-- inlineRSS - beginning of securiteam feed --> <ul><li><a href="http://www.securiteam.com/securitynews/5EP3H1P0AU.html">LedgerSMB Multiple Vulnerabilities</a></li><li><a href="http://www.securiteam.com/securitynews/5RP2W150AC.html">Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability</a></li><li><a href="http://www.securiteam.com/securitynews/6H00B0AQAS.html">Piwik Cookie Unserialize Vulnerability</a></li><li><a href="http://www.securiteam.com/securitynews/6T0022AQAC.html">Invision Power Board SQL PHP File Inclusion and SQL Injection</a></li><li><a href="http://www.securiteam.com/securitynews/6E00420QAS.html">U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) Vulnerability</a></li><li><a href="http://www.securiteam.com/tools/5QP0B0KQUE.html">Netifera - Modular Open Source Platform for Security Tools</a></li><li><a href="http://www.securiteam.com/tools/5RP012KQKA.html">WarVOX - Tools for Exploring, Classifying, and Auditing Telephone Systems</a></li><li><a href="http://www.securiteam.com/tools/5QP0L0UQAI.html">Webshag - Web Server Audit Tool</a></li><li><a href="http://www.securiteam.com/tools/5OP0L00Q0Y.html">Browser Fuzzer</a></li><li><a href="http://www.securiteam.com/tools/6D00V0ANFY.html">FSpy - Linux Filesystem Activity Monitoring</a></li><li><a href="http://www.securiteam.com/unixfocus/5FP3I1P0AO.html">Publique! CMS and SQL Injection Vulnerabilities</a></li><li><a href="http://www.securiteam.com/unixfocus/5DP3G1P0AA.html">Files2Links F2L-3000 SQL Injection Vulnerability</a></li><li><a href="http://www.securiteam.com/unixfocus/5QP2V150AO.html">HP-UX Running Apache Data Injection and DoS Vulnerability</a></li><li><a href="http://www.securiteam.com/unixfocus/5MP2W0K0AK.html">MIT krb5 KDC denial of service in cross-realm referral processing</a></li><li><a href="http://www.securiteam.com/unixfocus/5BP2V0A0AG.html">AproxEngine Multiple Vulnerabilities</a></li><li><a href="http://www.securiteam.com/windowsntfocus/6S00D00QAW.html">Microsoft Indeo Codec Memory Corruption Vulnerability</a></li><li><a href="http://www.securiteam.com/windowsntfocus/6T00C2AQ0Y.html">HP DDMI Execution of Arbitrary Code</a></li><li><a href="http://www.securiteam.com/windowsntfocus/6M00D0UQ0W.html">Microsoft Windows License Logging Service Heap Corruption Vulnerability</a></li><li><a href="http://www.securiteam.com/windowsntfocus/6K00B0UQ0K.html">Microsoft Office Excel Code Execution Vulnerabilities</a></li><li><a href="http://www.securiteam.com/windowsntfocus/6W0040UQ0W.html">Microsoft SharePoint 2007 ASP.NET Source Code Disclosure</a></li><li><a href="http://www.securiteam.com/exploits/5LP2V0K0AG.html">Trango Broadband Wireless Rogue SU Authentication Bug</a></li><li><a href="http://www.securiteam.com/exploits/5CP2W0A0AU.html">Exposing HMS HICP Protocol and Intellicom NetBiterConfig.exe Remote Buffer Overflow</a></li><li><a href="http://www.securiteam.com/exploits/6U00D20QAQ.html">Family Connections Multiple Remote Vulnerabilities</a></li><li><a href="http://www.securiteam.com/exploits/6T00C20QAY.html">VideoCache vccleaner Root Vulnerability</a></li><li><a href="http://www.securiteam.com/exploits/6S00B20QAQ.html">QuickHeal Antivirus 2010 Local Privilege Escalation</a></li><li><a href="http://www.securiteam.com/securityreviews/5NP0E00R5A.html">Why Silent Updates Boost Security</a></li><li><a href="http://www.securiteam.com/securityreviews/5MP0D00R5G.html">PDF Silent HTTP Form Repurposing Attacks</a></li><li><a href="http://www.securiteam.com/securityreviews/6M0010UNFQ.html">Frame Pointer Overwrite Demonstration (Linux)</a></li><li><a href="http://www.securiteam.com/securityreviews/6E0030KNFO.html">Format String Exploitation Demonstration (Linux)</a></li><li><a href="http://www.securiteam.com/securityreviews/6D00C0KN5S.html">Hacking SOHO Routers</a></li></ul> <!-- end of securiteam feed --> </li> <a href="http://www.securiteam.com/securiteam.rss"><img class="offsetimg" src="http://blogs.securiteam.com/wp-content/themes/securiteam.new/images/rss.gif" ALT="Security Research"> Subscribe</a> </ul> </div> <div class="sidebar"> <a style="font-size: 150%;" href="/index.php/feed/"><img src="http://blogs.securiteam.com/wp-content/themes/securiteam.new/images/rss-icon-48x48.gif" width="24" ALT="Security RSS"> Subscribe</a> <br><br> <ul> <!-- <li class="pagenav"><h2>Pages</h2><ul><li class="page_item"><a href="http://blogs.securiteam.com/index.php/about/" title="About">About</a></li> <li class="page_item"><a href="http://blogs.securiteam.com/index.php/sectoon_about/" title="About SecuriToons">About SecuriToons</a></li> <li class="page_item"><a href="http://blogs.securiteam.com/index.php/sectoon_contact/" title="Contact SecuriToons">Contact SecuriToons</a></li> <li class="page_item"><a href="http://blogs.securiteam.com/index.php/sectoon_join/" title="Join SecuriToons">Join SecuriToons</a></li> <li class="page_item"><a href="http://blogs.securiteam.com/index.php/sectoon_authors/" title="SecuriToons Authors">SecuriToons Authors</a></li> <li class="page_item"><a href="http://blogs.securiteam.com/index.php/write/" title="Write with us">Write with us</a></li> </ul></li> --> <li> <h2 class="orange delicious">On the Wire</h2> <!-- inlineRSS - beginning of delicious feed --> <ul><li><a href="http://freakonomics.blogs.nytimes.com/2010/03/01/setting-off-alarm-bells-at-work/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+FreakonomicsBlog+(Freakonomics+Blog)">Setting Off Alarm Bells at Work - Freakonomics Blog - NYTimes.com</a></li><li><a href="http://www.informationweek.com/blog/main/archives/2010/01/google_were_enc.html">Google: We're Encrypting Everyone's Gmail Automatically</a></li><li><a href="http://www.theregister.co.uk/2010/01/05/symantec_y2k10_bug/">Y2.01K bug trips up Symantec</a></li><li><a href="http://www.washingtonpost.com/wp-dyn/content/article/2009/12/22/AR2009122201429.html?hpid=moreheadlines">Obama names Howard Schmidt as cybersecurity coordinator</a></li><li><a href="http://mashable.com/2009/10/19/twitter-bug-exposes-private-tweets/">Twitter Bug Exposes Private Tweets</a></li><li><a href="http://www.canada.com/technology/Wary+naked+force+Israelis+cyberwar+Iran/1767247/story.html">Wary of naked force, Israelis eye cyberwar on Iran</a></li><li><a href="http://gizmodo.com/5361061/coming-back-from-china-throw-your-phone-out">Coming Back From China? Throw Your Phone Out</a></li><li><a href="http://www.forbes.com/2009/09/03/apple-snow-leopard-technology-security-flash.html?feed=rss_popstories">Apple's Sloppy Security Moves</a></li><li><a href="http://chargen.matasano.com/chargen/2009/8/27/the-security-implications-of-google-native-client.html">the security implications of google native client</a></li><li><a href="http://news.zdnet.com/2100-9595_22-334668.html">Cyberattackers lay more 'stepping stones'</a></li><li><a href="http://www.thesidebar.org/insecurity/?p=447">Breaking Assa locks</a></li><li><a href="http://it.slashdot.org/story/09/08/18/2119254/Australian-Police-Database-Lacked-Root-Password">Australian Police Database Lacked Root Password</a></li><li><a href="http://ephermata.livejournal.com/204026.html">The $99 iphone as an inexpensive tracking device</a></li><li><a href="http://arstechnica.com/tech-policy/news/2009/07/social-insecurity-numbers-open-to-hacking.ars">New algorithm guesses SSNs using date and place of birth</a></li><li><a href="http://thedailywtf.com/Articles/Thawtf.aspx">Thawt leaks personal questions - Daily WTF</a></li></ul> <!-- end of delicious feed --> <a class="more" href="http://del.icio.us/securiteam">More...</a><br /> <a href="http://del.icio.us/rss/securiteam"><img class="offsetimg" src="http://blogs.securiteam.com/wp-content/themes/securiteam.new/images/rss.gif" ALT="Leading Security Blog"> Subscribe</a> <p></p><p></p> </li> <li class="feature"><h2 class="orange top">Top Posts</h2> <ul> <li><a href="http://blogs.securiteam.com/index.php/archives/790">IE7 on Linux</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1150">Microsoft Windows RPC Vulnerability MS08-067 (CVE-2008-4250) FAQ - October 2008 [UPDATED]</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1032">Zoned Out #2 (comic strip)</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1060">MBR rootkit - here's some references</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1039">Zoned Out #4 (comic strip)</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1024">Memory Leak #23 (comic strip)</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1038">Zoned Out #3 (comic strip)</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1059">Google as an RBL</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1064">iPhone Key Leak</a></li><li><a href="http://blogs.securiteam.com/index.php/archives/1031">The NULL Terminated Strip #5 (comic strip)</a></li> </ul> </li> <li><h2>RSS FEED</h2><a href="http://blogs.securiteam.com/index.php/feed/"><img class="offsetimg" src="http://blogs.securiteam.com/wp-content/themes/securiteam.new/images/rss.gif" ALT="SecuriTeam RSS">Securiteam Blogs RSS</a> <br /><br /> </li> <li><h2>Reed's Alert!</h2> <ul> <li><a href="mailto:reedalert@securiteam.com">Got something burning?<br />Tell SecuriTeam blogs.</a></li> </ul> </li> <li><h2>Favorites</h2> <ul> <li><a href="http://www.beyondsecurity.com/vulnerability-scanner.html">Vulnerability Scanner</a></li> <li><a href="http://www.beyondsecurity.com/vulnerability-assessment.html">Vulnerability Assessment</a></li> <li><a href="http://www.beyondsecurity.com/black-box-testing.html">Black Box Testing</a></li> </ul> </li> <li><h2>Cartoons</h2> <ul> <li><a href="http://www.securitoons.com/">SecuriTeam cartoons</a></li> </ul> </li>                   <li id="activity">                  <h2>COMMENTS</h2><ul><li><a href="http://blogs.securiteam.com/index.php/archives/507" class="activityentry">Memory Leak #8 (comic strip)</a>  <a href="http://blogs.securiteam.com/index.php/archives/507#comments" title="Go to the comments of this entry">2</a><br /> <small><a style="color: #464646;" href="http://blogs.securiteam.com/index.php/archives/507#comment-653237">sohbet</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/507#comment-18445">BJ</a></small></li> <li><a href="http://blogs.securiteam.com/index.php/archives/48" class="activityentry">An Online MD5 Hash Database</a>  <a href="http://blogs.securiteam.com/index.php/archives/48#comments" title="Go to the comments of this entry">170</a><br /> <small><a style="color: #5a5a5a;" href="http://blogs.securiteam.com/index.php/archives/48#comment-653144">Canary</a>, <a style="color: #5a5a5a;" href="http://blogs.securiteam.com/index.php/archives/48#comment-653143">Canary</a>, <a style="color: #878787;" href="http://blogs.securiteam.com/index.php/archives/48#comment-652983">DTeCH</a>, <a style="color: #878787;" href="http://blogs.securiteam.com/index.php/archives/48#comment-652982">DTeCH</a>, <a style="color: #999999;" href="http://blogs.securiteam.com/index.php/archives/48#comment-652919">Arun Kumar</a>, <a style="color: #b7b7b7;" href="http://blogs.securiteam.com/index.php/archives/48#comment-652735">mahmoud</a> <a href="http://blogs.securiteam.com/index.php/archives/48#comments" title="Go to the comments of this entry">[...]</a></small></li> <li><a href="http://blogs.securiteam.com/index.php/archives/1150" class="activityentry">Microsoft Windows RPC Vulnerability MS08-067 (CVE-2008-4250) FAQ - October 2008 [UPDATED]</a>  <a href="http://blogs.securiteam.com/index.php/archives/1150#comments" title="Go to the comments of this entry">24</a><br /> <small><a style="color: #717171;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-653065">Beginner training for triathlon</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-650773">fake rolex</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-623503">Website Upgradation Remodification</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-604040">David S</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-557263">Jin</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1150#comment-556446">reZident</a> <a href="http://blogs.securiteam.com/index.php/archives/1150#comments" title="Go to the comments of this entry">[...]</a></small></li> <li><a href="http://blogs.securiteam.com/index.php/archives/927" class="activityentry">Dan Holden and ISS Should Pull Their Heads Out of the Sand</a>  <a href="http://blogs.securiteam.com/index.php/archives/927#comments" title="Go to the comments of this entry">13</a><br /> <small><a style="color: #7a7a7a;" href="http://blogs.securiteam.com/index.php/archives/927#comment-653020">sigorta</a>, <a style="color: #979797;" href="http://blogs.securiteam.com/index.php/archives/927#comment-652926">notebook parçaları</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/927#comment-649926">iizle1</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/927#comment-641770">Komik Videolar</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/927#comment-637188">sex hikayeleri</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/927#comment-635586">videolar</a> <a href="http://blogs.securiteam.com/index.php/archives/927#comments" title="Go to the comments of this entry">[...]</a></small></li> <li><a href="http://blogs.securiteam.com/index.php/archives/1289" class="activityentry">T-Mobile confirms breach</a>  <a href="http://blogs.securiteam.com/index.php/archives/1289#comments" title="Go to the comments of this entry">3</a><br /> <small><a style="color: #7b7b7b;" href="http://blogs.securiteam.com/index.php/archives/1289#comment-653016">asics gel kinsei 2</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1289#comment-618333">Aviram</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1289#comment-618330">Nike Lebron VI</a></small></li> <li><a href="http://blogs.securiteam.com/index.php/archives/1290" class="activityentry">T-Mobile, Past, Present & Future</a>  <a href="http://blogs.securiteam.com/index.php/archives/1290#comments" title="Go to the comments of this entry">3</a><br /> <small><a style="color: #7b7b7b;" href="http://blogs.securiteam.com/index.php/archives/1290#comment-653015">asics gel kinsei 2</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1290#comment-619914">arden henderson</a>, <a style="color: #cccccc;" href="http://blogs.securiteam.com/index.php/archives/1290#comment-618329">Nike Lebron VI</a></small></li> </ul>                 </li>          <li id="authors"> <h2>MOST ACTIVE</h2> <ul> <li><a href="http://blogs.securiteam.com/index.php/archives/author/aviram/" title="Posts by Aviram">Aviram Jenik</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/aviram/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/davidh/" title="Posts by davidh">David Harley</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/davidh/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/dmitryc/" title="Posts by dmitryc">Dmitry Chan</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/dmitryc/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/gadi/" title="Posts by gadi">Gadi Evron</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/gadi/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/joe/" title="Posts by joe">Joe Stewart</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/joe/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/juha-matti/" title="Posts by Juha-Matti">Juha-Matti Laurio</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/juha-matti/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/mattmurphy/" title="Posts by mattmurphy">Matthew Murphy</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/mattmurphy/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/noam/" title="Posts by noam">Noam Rathaus</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/noam/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/p1/" title="Posts by p1">Rob Slade</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/p1/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/prozacgod/" title="Posts by Prozacgod">David Hagler</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/prozacgod/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/ren-and-stimpy/" title="Posts by ren and stimpy">Ren and Stimpy</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/ren-and-stimpy/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/roger/" title="Posts by Roger">Roger Thompson</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/roger/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/trirat/" title="Posts by Trirat">Trirat Kira P</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/trirat/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/whiteacid/" title="Posts by WhiteAcid">WhiteAcid</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/whiteacid/feed/" title="rss">rss</a>) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/author/xyberpix/" title="Posts by xyberpix">xyberpix</a> (<a href="http://blogs.securiteam.com/index.php/archives/author/xyberpix/feed/" title="rss">rss</a>) </li> </ul> </li> <li><h2>Archives</h2> <ul> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2010/03/' title='March 2010'>March 2010</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2010/02/' title='February 2010'>February 2010</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2010/01/' title='January 2010'>January 2010</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/12/' title='December 2009'>December 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/11/' title='November 2009'>November 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/10/' title='October 2009'>October 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/09/' title='September 2009'>September 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/08/' title='August 2009'>August 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/07/' title='July 2009'>July 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/06/' title='June 2009'>June 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/05/' title='May 2009'>May 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/04/' title='April 2009'>April 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/03/' title='March 2009'>March 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/02/' title='February 2009'>February 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2009/01/' title='January 2009'>January 2009</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/12/' title='December 2008'>December 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/11/' title='November 2008'>November 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/10/' title='October 2008'>October 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/09/' title='September 2008'>September 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/08/' title='August 2008'>August 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/07/' title='July 2008'>July 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/06/' title='June 2008'>June 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/05/' title='May 2008'>May 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/04/' title='April 2008'>April 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/03/' title='March 2008'>March 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/02/' title='February 2008'>February 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2008/01/' title='January 2008'>January 2008</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/12/' title='December 2007'>December 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/11/' title='November 2007'>November 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/10/' title='October 2007'>October 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/09/' title='September 2007'>September 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/08/' title='August 2007'>August 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/07/' title='July 2007'>July 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/06/' title='June 2007'>June 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/05/' title='May 2007'>May 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/04/' title='April 2007'>April 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/03/' title='March 2007'>March 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/02/' title='February 2007'>February 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2007/01/' title='January 2007'>January 2007</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/12/' title='December 2006'>December 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/11/' title='November 2006'>November 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/10/' title='October 2006'>October 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/09/' title='September 2006'>September 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/08/' title='August 2006'>August 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/07/' title='July 2006'>July 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/06/' title='June 2006'>June 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/05/' title='May 2006'>May 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/04/' title='April 2006'>April 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/03/' title='March 2006'>March 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/02/' title='February 2006'>February 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2006/01/' title='January 2006'>January 2006</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/12/' title='December 2005'>December 2005</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/11/' title='November 2005'>November 2005</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/10/' title='October 2005'>October 2005</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/09/' title='September 2005'>September 2005</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/08/' title='August 2005'>August 2005</a></li> <li><a href='http://blogs.securiteam.com/index.php/archives/date/2005/07/' title='July 2005'>July 2005</a></li> </ul> </li> <li id="linkcat-1"><h2>Blogroll</h2> <ul> <li><a href="http://www.osvdb.org/blog/">OSVDB blog</a></li> <li><a href="http://www.securiteam.com">SecuriTeam</a></li> </ul> </li> <li><h2>Categories</h2> <ul> <li><a href="http://blogs.securiteam.com/index.php/archives/category/apple/" title="Stories related to Apple Computer Inc.">Apple</a> (38) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/ask-the-expert/" title="Questions sent to expert@securiteam.com fall under this category.">Ask the Expert</a> (15) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/botnets/" title="View all posts filed under Botnets">Botnets</a> (65) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/cisco/" title="Stories related to Cisco and their products">Cisco</a> (24) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/commentary/" title="General ideas about the world of security">Commentary</a> (996) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/corporate-security/" title="View all posts filed under Corporate Security">Corporate Security</a> (261) </li> <li class="current-cat"><a href="http://blogs.securiteam.com/index.php/archives/category/culture/" title="View all posts filed under Culture">Culture</a> (241) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/ddos/" title="View all posts filed under DDoS">DDoS</a> (32) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/digest/" title="SecuriTeam Digest">Digest</a> (41) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/earl/" title="View all posts filed under Earl">Earl</a> (11) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/encryption/" title="View all posts filed under Encryption">Encryption</a> (32) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/full-disclosure/" title="The need for Full, Partial, Responsible and Zero disclosure. Issues with reporting vulnerabilities to vendors.">Full Disclosure</a> (192) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/" title="Comic strips by our cartoon-writing-bloggers">Funnies</a> (69) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funny/" title="or at least, we think so">Funny</a> (65) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/fuzzing/" title="View all posts filed under Fuzzing">Fuzzing</a> (24) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/gadgets/" title="Hacking TiVO, PS2, Palm, GPRS, or your riding bikes">Gadgets</a> (38) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/google/" title="View all posts filed under Google">Google</a> (50) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/hacked/" title="View all posts filed under Hacked">Hacked</a> (13) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/insecurity/" title="View all posts filed under InSecurity">InSecurity</a> (17) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/insider-threat/" title="The FBI says 70% of attackers originate from inside the organization (or is it 80%). So why do we all talk about hackers and Internet-bound attacks?">Insider Threat</a> (38) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/interviews/" title="View all posts filed under Interviews">Interviews</a> (7) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/law/" title="Law and legislation">Law</a> (55) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/linux/" title="Linux related stories">Linux</a> (36) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/malware/" title="View all posts filed under malware">malware</a> (13) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/memory-leak/" title="View all posts filed under Memory Leak">Memory Leak</a> (24) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/microsoft/" title="Stories about Microsoft, Windows, Office and so on">Microsoft</a> (211) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/networking/" title="View all posts filed under Networking">Networking</a> (69) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/opsec/" title="View all posts filed under OPSEC">OPSEC</a> (11) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/ot/" title="Off Topic">OT</a> (66) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/phishing/" title="View all posts filed under Phishing">Phishing</a> (86) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/physical-security/" title="Fences, alarms, but also TEMPEST and side channels">Physical Security</a> (63) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/privacy/" title="Privacy and anonymity">Privacy</a> (118) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/rootkits/" title="View all posts filed under Rootkits">Rootkits</a> (23) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/sec-tools/" title="View all posts filed under Sec Tools">Sec Tools</a> (35) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/spam/" title="Anything related to Spam.">Spam</a> (135) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/the-null-terminated/" title="View all posts filed under The NULL Terminated">The NULL Terminated</a> (5) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/virus/" title="Anything related to viruses, Trojans and backdoors.">Virus</a> (215) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/web/" title="Web related security entries. Anything that has to do with PHP/ASP/JSP, including Apache, IIS, Macromedia flash, etc.">Web</a> (396) </li> <li><a href="http://blogs.securiteam.com/index.php/archives/category/funnies/zoned-out/" title="View all posts filed under Zoned Out">Zoned Out</a> (4) </li> </ul> </li> <li><h2>Meta</h2> <ul> <li><a href="http://blogs.securiteam.com/wp-login.php">Login</a></li> </ul> </li> </ul> </div> <div class="clear"></div> <div id="footer"> <p><a href="http://blogs.securiteam.com" title="SecuriTeam Blogs home page">SecuriTeam Blogs</a> is powered by Word Press.</p> </div> </div><!-- end page --> </div> <script type="text/javascript"> var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); </script> <script type="text/javascript"> var pageTracker = _gat._getTracker("UA-240792-4"); pageTracker._initData(); pageTracker._trackPageview(); </script> <br> <div align="center"><a href="http://www.beyondsecurity.com/vulnerability-scanner-verification/blogs.securiteam.com" > <img src="http://www.beyondsecurity.com/verification-images/blogs.securiteam.com/vulnerability-scanner-2.gif" alt="Vulnerability Scanner" /> </a> </div> <br> </body> </html>