Simple Pharming

Monday, May 5th, 2008

Today I decided to give a very brief example on pharming and why it's so easy to pharm surfers with little or no skills. Usually, browser exploit writers give simple examples on how to read the boot files, or launch a calculator. There is so much you can do with ...

AVG Technologies Releases AVG Anti-Virus Free 8.0

Thursday, April 24th, 2008

AVG Technologies, a leading provider of Internet security software, will tomorrow release AVG Anti-Virus Free 8.0, the latest version of the company’s popular and widely-used free security software, which now incorporates protection against spyware through a new combined anti-virus and anti-spyware engine. AVG Free provides basic protection against viruses and spyware, ...

Reverse-Engineering Exploits from Patches

Wednesday, April 23rd, 2008

The automatic patch-based exploit generation problem is: given a program P and a patched version of the program P', automatically generate an exploit for the potentially unknown vulnerability present in P but fixed in P'. In this paper, we propose techniques for automatic patch-based exploit generation, and show that our ...

MySpace Hack Reveals Profile Visitors

Thursday, April 17th, 2008

A security problem with MySpace has the potential to botch up law-enforcement efforts to track bad actors on the social-networking site. An increasing number of MySpace profiles contain a few lines of code that automatically subscribe people to the profile's video channel, said Chris Boyd, security research manager for FaceTime Communications. After ...

Top 15 Malicious Spyware Actions

Sunday, April 6th, 2008

Spyware authors have ramped up their malicious code to invade users' privacy at unprecedented levels. The following list describes some of the most malicious activities of today's spyware, illustrating the need for solid antispyware defenses. Changing network settings: To prevent signature updates for antivirus and antispyware tools, some spyware alters the ...

Free Honeypot Client Could Sting Malware

Thursday, March 27th, 2008

The Honeynet Project has released a new freebie honeypot client tool that lets security pros and researchers automatically detect and dissect bot infections and other malware attacks on client machines. Capture-HPC v2.1 is an updated and enhanced version of the Honeynet Project’s high-interaction Capture-HPC client honeypot, which the organization last year ...

Subnetting Cheat Charts

Saturday, March 8th, 2008

I won't get into a whole subnetting lesson here but, if you already know subnetting, then you'll know exactly what these charts are and what they mean.I find them very helpful to have around. It saves lots of precious time. Class A Subnetting # bits Subnet Mask CIDR # Subnets # Hosts Nets * Hosts 2 255.192.0.0 /10 2 4194302 8388604 3 255.224.0.0 /11 6 2097150 12582900 4 255.240.0.0 /12 14 1048574 14680036 5 255.248.0.0 /13 30 524286 15728580 6 255.252.0.0 /14 62 262142 16252804 7 255.254.0.0 /15 126 131070 16514820 8 255.255.0.0 /16 254 65534 16645636 9 255.255.128.0 /17 510 32766 16710660 10 255.255.192.0 /18 1022 16382 16742404 11 255.255.224.0 /19 2046 8190 16756740 12 255.255.240.0 /20 4094 4094 16760836 13 255.255.248.0 /21 8190 2046 16756740 14 255.255.252.0 /22 16382 1022 16742404 15 255.255.254.0 /23 32766 510 16710660 16 255.255.255.0 /24 65534 254 16645636 17 255.255.255.128 /25 131070 126 16514820 18 255.255.255.192 /26 262142 62 16252804 19 255.255.255.224 /27 524286 30 15728580 20 255.255.255.240 /28 1048574 14 14680036 21 255.255.255.248 /29 2097150 6 12582900 22 255.255.255.252 /30 4194302 2 8388604 Class B Subnetting # ...

Use the HOSTS File to Assist Privacy

Saturday, March 8th, 2008

Everyone likes to be a good host, but bad guests get carried away. They?ll stay too late or empty bottles too soon. They could even break something along the way. That?s why you take precautions as a host. Think of your Windows HOSTS file in the same way. By properly setting ...