Labels: evolution

3 years after slammer, probably the fastest spreading worm ever, caused mayhem, a zero-day ms-sql exploit is out there in the wild...

Microsoft Security Advisory (961040)

Anyone who have seen slammer in action wont never forget how powerful that worm is. Curious enough, more than 2 years later, in 2007 while I was helping the guys who manage one of Italy's biggest data center, the IPS there keep on detecting slammer 376-bytes packets.

I don’t think another ms sql will cause same spearding power as slammer, as these days, only ignorant people will leave UDP port 1434 open...

CVE-2008-5416

PS: the identity of slammer's author was never discovered, as the patient 0...

Labels: security

heimskur is stupid in icelandic..
but heimskur is also means stay at home...

because stupid people should stay at home
because you are stupid if you stay a home

Labels: quote of the day

something is in the air...

this is a BIG deal any IE zero day vulnerability

CVE-2008-4844

MS08-078

ORI: 10 Dec 2008

Labels: security

I'm speechless.

what to say about $50 billion hole in a pyramid scheme?

when we analyze this economic crisis, we can be blame people who work in financial companies.. they earn TONS of money but creates nothing except disaster... many people lost their live savings.

it is worst than zero sum game

but nothing compares to $50 billion hole in pyramid scheme arranged by Bernard Madoff ex NASDAQ chairman...

on second thought, pension system in some countries is actually a legalized pyramid scheme...

On further note, many investors who invest in Bernard L. Madoff Investment Securities LLC KNEW Bernie had to be cheating, because the returns he was generating were impossibly good. But they thought it was insider trading, not a Ponzi scheme.

What the hell is the regulators & the auditors were doing???

Labels: the economist

http://www.microsoft.com/technet/security/Bulletin/ms08-071.mspx


A vulnerability in GDI allow remote code execution...

Imagine if with IE you access a site that host malicious WMF file <~ drive by install scenario :(

Labels: security