There a a bunch of interesting security links today.
From the ISC diaries here and here we have:
From the ISC diaries here and here we have:
- An interesting write up of an ssh brute-force compromise of a honey-pot involving backdoors and IRC botnets.
- Part III of 'Following the Bouncing Malware'. An analysis of what spyware is actually doing. Very confusing. Here are parts One and Two.
- The IE, IFRAME vulnerability with exploit (and here and here). This is a beauty which allows remote code execution. Use Firefox dammit! It is also interesting to note that in the last few days there have also been this and this IE vulnerability, with no equivalent in Gecko based browsers. Microsoft's new advanced notification service has no mention of any patches for these vulnerabilities this tuesday.
- There is a rumour that the Cisco PIX firewall source code has been stolen by a group called 'The Source Code Club' who posted to the alt.gaps.international.sales newsgroup looking for buyers. Another reason not to rely on closed-source products.
- Spyware Warrior is a blog deidcated to fighting spyware, with some interesting write-ups of doing so.
- There is a site dedicated to port knocking. It has a whack of information including implementations for download in perl, C++, Java, Python and Bash.
Trackbacks
Trackback specific URI for this entry
No Trackbacks