News
GoodBye Google Reader
Google is retiring my favorite RSS reader đ what a pity … so … decided to move to a desktop RSS reader but there it is … the sync question – how I’m going to sync between 2 or 3 of my devices. So I will give LiFeRea a shot and see how it will go. If anyone…
GDBOP website malfunctioning … again
I just found out, with no surprise, that the website of GDBOP (Bulgarian government cybersecurity team) hosted on http://www.cybercrime.bg does not function properly … again. The reason is that the the front-end app cannot connect the back-end MySQL server. Of course the error is not handled securely :). I wonder how long it will take…
Colossus gallery fundraising initiative
British national museum of computing started conversation work of the Colossus hall. Colossus is one of the first programmable computers designed to solve cryptographic problems in 1943 by Tommy Flowers. Colossus second version was used by UK intelligence at the end of WWII to decrypt german messages encoded with Lorenz SZ40/42. Colossus use vacuum tubes…
The reason behind the fraudulent Google cert – DigiNotar security breach
VASCO subsidiary DigiNotar admits that a security breach in their CA infrastructure had been identified. As a result of the attack several fraudulent certificates had been issued among which a fraudulent Google certificate. Microsoft, Mozila ana Google already removed the DigiNotar root certificate form their trusted lists.
Qualys – free SSL test
After publishing a methodology for SSL configuration assessment, Qualys startedfree service their methodology. The result of the assessment is a grade based on 4 indicators: Certificate information Supported protocols Key exchange Cipher strength Enjoy!
LinkedIn with new default ‘privacy’ settings
The social networks those days started to play with out privacy settings more often then we’re expecting and not always with our consent. LinkedIn currently became one of them – they set by default a privacy settings that allow them to use your name, picture and other privacy settigns in advertisements – HOW NICE! So…
MITRE issued their perspective on most dangerous software errors
Software is everywhere those days, and unfortunately bad codding practices together with tight schedules and demanding market brings tones of vulnerabilities. Of course there are people that are happy to find out the holes and exploit them. CWE recently published their opinion regarding the software errors summarizing it in a document called “2011 CWE/SANS Top…
Microsoft amendments in their “immutable” security laws
Version one of the Microsoft “immputable” security laws can be found here: http://technet.microsoft.com/en-us/library/cc722487.aspx. Currently Microsoft made some amendments and published version 2 of their immutable lows. And the new version can be found on http://technet.microsoft.com/en-us/library/hh278941.aspx. So those laws apparently were not so immutable. I started wondering what else from the Microsoft category “immutable” is susceptible…
First look at the Zeus source code – leak 2
So the first thing I did was to search the source code to see which banks had been targeted and for my surprize – one of the Bulgarian banks was targeted – ProCredit. The link to the e-banking login page thou is invalid, but the name of the password field is correct đ Stay tuned…
Zeus code posted online
So … Here it is Zeus source code is online! It’s already few days old info, but I just red about it and luckily the download links were still alive. I was able to find information about the both leaks on http://pastebin.com/VqHq9WeD. Enjoy!
Recent Posts
Tags
bruteforce bug bounty bug hunting Burp Suite d3 data leak data recovery dictionary entropy pool fix fuzzing hackaday image processing Journalistic tools log analysis malware mindmap online courses Practical Reverse Engineering randomness sandbox skype SQL injection SSL technical visualisaiton visualisation Vulnerability Management Wanda the fish Zeus