Published scoops - Security & Hacking News

I will be posting interesting video on SecurityTube in this thread. It is important to note that these are videos which people have submitted / referred to SecurityTube and have not been made by me.

Emails from the Argentine mistress of married South Carolina Governor Mark Sanford were leaked to the press by a hacker, according to the Latin American siren at the centre of a political scandal in the US Deep South.

The emails were obtained by South Carolina newspaper The State back in December but kept on ice while the paper investigated their authenticity. Last week Sanford's political aides confirmed that the emails were authentic, allowing the paper to publish the intimate exchange of correspondence between Sanford and the mother of two, initially identified only as Maria.

So how exactly do you calculate a 4 byte hash?

// CalcDLLHash.cpp : Defines the entry point for the console application.
//

#include "stdafx.h"
#include
#include
#include
#include
char * CalcHash(unsigned char * MyString)
{
unsigned int h;
unsigned char *c=MyString;
while(*c)
{
h=((h<<5)|(h>>27))+*c++;
}
printf("Done");
return 0;

Quantum cryptography has been a Holy Grail for security researchers since the idea was proposed, the promise of a new standard in absolutely unbreakable communications. But it's a new standard in the Microsoft sense: "Use our brilliant new system, because we're making sure the old one doesn't work anymore."

The most common security algorithm used online is RSA, an encryption system designed by MIT researchers Ron Rivest, Adi Shamir and Leonard Adlemen in 1977 (hence RSA, Rivest-Shamir-Adlemen). The idea is that any numerical code can be cracked, so rather than try to invent one

A darknet is a private virtual network where users connect only to people they trust, or they connect to other unknown anonymous peers under cloaked conditions. Many F2F networks are classified as Darknets, even if they aren’t self-described as such. Two examples are WASTE and Freenet. Even RetroShare and CSpace are considered darknets.

One thing is certain about darknets: They are anonymous and uncensored. And they are also unpoliced - this is not a metaphor or a figure of speech. Real-world cops can access a darknet, but there is nothing any policing agency in the world can do about it.

Adobe Systems Inc. on Tuesday issued a software update to fix a critical security flaw in its Shockwave Player, a commonly installed Web browser plug-in. According to Adobe, a malicious or hacked site could use the security hole to install malicious software if the visitor merely browses the site with a vulnerable version of the media player software. The flaw exists in Shockwave Player (also known as Macromedia Shockwave Player) version 11.5.0.596 and earlier. To find out whether Shockwave is installed and which version may be on your PC, visit this site.

The agenda for the second SANS WhatWorks Summit in Forensics and Incident Response has been posted. I am really happy to see I am speaking on Tuesday, because I will not be available Wednesday. Day 1 appears mainly technical, and day 2 is mainly legal.

This is a continuation of multiple educational video demonstrations
related to Web application attacks. This video is focused on Cookie Poisoning. The definition can be found in the Imperva ADC Glossary.As always, these videos are in HD.

Less than two weeks after the last vulnerabilities were closed, Google has released version 2.0.172.33 of Chrome, a security update fixing another critical vulnerability

The U.S. Department of Homeland Security announced the launch of a blog it calls The Blog @ Homeland Security.

It’s described as a new way for DHS to offer an inside-out view of what they’re doing each day to secure the nation.

The blog features a video message from Secretary Napolitano outlining the Department’s five overarching responsibilities, an invitation for visitors to comment and the latest “tweets” from @dhsjournal.

FinallySecure uveiled version 7.0 of Secure SignOn, which comes with enhanced support for Web, Windows, Java and Terminal applications as well as a brand new learning wizard for user convenience and e...

Google Blog: CIA adopting Web 2.0 tools despite resistance

HP has recently contracted Symantec to bundle its security software into all of the new HP notebook and desktop packages.

In line with the new deal all pre-installed JP systems will contain Norton Online Backup and customers will have access to a thirty day free trial of the Norton 5GB backup service.

HP has been selling desktop backup software for many years but has started to refocus its efforts on online backup as people are turning to online solutions over hardware solutions.

I figure that since I have to tell you where to look for last month's juicyness, I may as well go on about what's going on outside this freakish Internet.

We have a new kitty named мясо, Russian for meat. Yeah. Keep it to yourself. Our other cat is deathly ill; had her forever, like 13 years. Found her as a stray, fed her from a bottle as a kitten, had her ever since.

I bought a classical electric acoustic guitar.

Recently I gave a presentation at the “SANS Penetration Testing Summit ” titled "Zen and The Art Of An Internal Penetration Testing Program". This presentation outlines the steps required to create a successful program and perform internal penetration testing. There are several key components that must exist to create a successful program: