deepsh.it

This blog has moved

2010-03-29T22:46:00.001+01:00

This blog is now located at http://blog.deepsh.it/.
You will be automatically redirected in 30 seconds, or you may click here.

For feed subscribers, please update your feed subscriptions to
http://blog.deepsh.it/feeds/posts/default.

how corporation works in US, by Jon Stewart

2010-03-25T19:53:00.000+01:00

The Daily Show With Jon Stewart

Mon - Thurs 11p / 10c

In Dodd We Trust

www.thedailyshow.com

Daily Show Full Episodes

Political Humor

Health Care Reform

again...another IE 0-day...

2010-03-10T12:45:00.000+01:00

mammmmaaaaa.....

Microsoft Security Advisory (981374)
Vulnerability in Internet Explorer Could Allow Remote Code Execution

seems to affect only IE6 & IE7... not IE8..

another IE 0-day...

2010-02-04T10:46:00.000+01:00

http://www.microsoft.com/technet/security/advisory/980088.mspx

again this time no patch....

60 minutes wingsuit base

2010-01-27T15:56:00.001+01:00

cool love story

2010-01-26T20:24:00.000+01:00

Sign from duckbai kong on Vimeo.

IE 0-day in the wild... scary...

2010-01-15T10:02:00.001+01:00

all IE are affected, except IE 5

Microsoft Security Advisory (979352)

scary...

Microsoft Internet Explorer Arbitrary Code Execution

Adobe 0-day vulnerabilty... again ... again...

2009-12-15T18:41:00.004+01:00

again and again and again

Adobe Reader and Acrobat Vulnerability

as basically all corporate use Adobe PDF... this kind of vulnerability are realy nasty :(

IE 0-day in the wild... again

2009-11-23T13:19:00.001+01:00

As you probably know me, I'm obsessed with IE 0-day vulnerability..
Apparently there is on in the wild...

IE6 and IE7 0-Day Reported

drive by install... MS09-065.mspx

2009-11-11T17:51:00.000+01:00

nasty one..

Allow remote code execution if a user viewed content rendered in a specially crafted Embedded OpenType (EOT) font.
Windows version is affected: windows 2000, xp,... 2008 server (windows 7 & server2008R2 not).
Meaning if a victim browse to attacker website using IE, the attacker can take control of the computer...

SSL TSL MITM

2009-11-11T17:46:00.000+01:00

CVE-2009-3555

does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

take it easy

2009-11-10T16:41:00.002+01:00

seeing is believing

if yuo can make a better antispam, you'll be rich

2009-10-13T22:58:00.000+01:00

Intestinng McAfee's findings:

<snip>
Spammers generate more than 150 billion spam messages daily; that’s enough to send everyone in the world more than 30 emails every day (including people without computers). Nearly 19 out of every 20 emails are spam, and cybercriminals are growing more sophisticated with their attacks.
<snip>

again another Adobe 0day exploit in the wild...

2009-10-13T20:49:00.000+01:00

I think it's already embarassing how frequent Adobe 0day we have seen lately...

Usually it follows the slowness of Adobe themselve to patch.

last but probabaly not least, McAfee Avert Lab blog, another Adobe pdf reader vulnerability:
Latest PDF Zero Day Leads to Exploit Egg Hunt

about supply & demand

2009-09-30T13:53:00.000+01:00

Let’s just say that an architect is more likely to hire a prostitute than vice versa
~ Steven D. Levitt

non ip !eth.type == 0x0800

2009-09-30T10:11:00.002+01:00

!eth.type == 0x0800

ulang tahun

2009-09-28T14:50:00.000+01:00

speed flying

2009-09-16T10:56:00.002+01:00

no comment...

Just a thought on bypass when IPS receives overloaded traffic.

2009-09-16T09:59:00.002+01:00

A feature that prevents traffic being dropped when IPS is receiving more traffic that it can handle... traffic will be forwarded without inspection..

That's it, when the door is locked, break the windows... by simply overloading the link...

Goldman Sachs: Frontrunning or Ponzi Scheme?

2009-09-09T18:33:00.000+01:00

i'm stealing the headlines from goldmansachs666.com

I like the Max guy, he is very cool

Goldman Sachs Insiders Steal 200 Million a Day - The best bloopers are a click away

0-day SMB BSOD

2009-09-09T12:33:00.008+01:00

It's weird to find out with a single SMB (ver 2.0) packet you can cause BSOD on Vista & windows 2008 fully patched...

But probably it's kinda weirder that these days, the guy who found it published the entire POC (probably at the same day he contacted M$).

cool & but very DANGEROUS.

I think nowadays it's pretty much agreed that full disclosure is OK after vendor is informed in timely manner - other wise it would cause more damage...

In case you need to disable SMB 2.0

secunia advisory

riding wingsuit.

2009-09-09T10:26:00.001+01:00

Rodeo Madness from FlockUniversity on Vimeo.

what??? Microsoft IIS 5/6 FTP 0Day ???

2009-09-01T09:42:00.003+01:00

SANS reports Microsoft IIS 5/6 FTP 0Day released

woah... the shit is going to hit the fan....

apache ssh key compromised... that's not nice :(

2009-08-28T17:59:00.002+01:00

from netcraft:

the compromise is "not due to any software exploits in Apache itself", but was instead due to a compromised SSH key.

private key oh private key...

actually I'm wondering how they figured out that it was compromised...

dont go wireless in japan

2009-08-28T07:10:00.000+01:00

the can crack your WPA in 1 minute...

I never trust wireless anyway...