HackFest Series: News

James Finstrom jfinstrom at rhinoequipment.com
Tue Sep 1 06:34:23 MST 2009


You missed the sears baby cooker thing. I don't have a link but it was
pretty funny

On 8/31/09, Lisa Kachold <lisakachold at obnosis.com> wrote:
> UK Parliement Website Hacked:
> http://news.softpedia.com/news/UK-Parliament-Website-Hacked-120511.shtml
>
> Apache.org SSH key compromise = Site Taken Offline: 0
> http://www.h-online.com/security/SSH-Key-compromise-takes-Apache-org-offline-Update-2--/news/114115
>
> Stealing 130 million credit cards:
> http://www.schneier.com/blog/archives/2009/08/stealing_130_mi.html
>
> Automated SQLi injection Attacks Spreading:
> http://www.thetechherald.com/article.php/200935/4314/SQL-Injection-attack-still-spreading-84000-and-counting
>
> Twitter Fails to block XSS Flaw:
> http://www.h-online.com/security/Twitter-fails-to-block-Cross-Site-Scripting-flaw--/news/114092
>
> Small Business Identity Theft and Fraud:
> http://www.schneier.com/blog/archives/2009/08/small_business.html
>
> Yahoo Local Hacked:
> http://news.softpedia.com/news/Yahoo-Local-Hacked-120044.shtml
> SQL Injection in Yahoo, mysql 5, with shell upload possibility:
> http://unu1234567.wordpress.com/
>
> Cracking GSM via distributed computing:
> http://news.cnet.com/8301-27080_3-10316812-245.html?part=rss&subj=news&tag=2547-1009_3-0-20
>
> Flash Attack Vectors (and worms):
> http://isc.sans.org/diary.html?storyid=7015&rss
>
> Military Server compromised:
> http://www.net-security.org/secworld.php?id=7918
>
> Nessus Web App Assessment (with Video) DVL:
> http://www.digitalbond.com/index.php/2009/08/24/more-on-nessus-web-app-assessment/
>
> Distributed iFRAME M$ Bot attack using 55,000 sites:
> http://blogs.zdnet.com/security/?p=4091
>
> For Ryan: Apple says it's not to blame for Exploding iPhones:
> http://news.cnet.com/8301-13579_3-10321361-37.html
>
> BaseCamp One Wrong Click XSS:
> http://evilpacket.net/2009/jul/9/basecamp-one-wrong-click/
>
> BSD Smp Null Pointer rooting:
> http://www.frasunek.com/kqueue.txt
>
> SQL Injection Demystified:
> http://www.darkreading.com/database_security/security/app-security/showArticle.jhtml;jsessionid=T0OAY0UES5KRBQE1GHPCKH4ATMY32JVN?articleID=219401046
>
> Businessweek - Profit or Programmer failure:
> http://img4.imageshack.us/img4/7977/29841672.png
>
> It happened, we watched it.  That's the week in news!
>
>
> --
> (623)239-3392
> (503)754-4452 www.obnosis.com
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>


-- 
James Finstrom
Rhino Equipment Corp.
http://rhinoequipment.com ~ http://postug.com
Phone: 1-877-RHINO-T1 ~ FAX: +1 (480) 961-1826
Twitter: http://twitter.com/rhinoequipment
IP: guest at asterisk.rhinoequipment.com


More information about the PLUG-discuss mailing list