NetSec
  corner   



HOME

LINUX

CYBERLAW

VIRTUALIZATION

Bugtraq

Packetstorm

FD

GrokLaw


RSS Feed


Netsec, comsec, infosec and IA news, research and trends

 

7.31.2008

 
Kansas Senator (Brownback) Blasts Chinese Government For Ordering Internet Surveillance - Brownback must be concerned about China competing with the US when it comes to spying on it's own citizens.

 
Paper Catalog + Computer Database = Patent? Um, No.

 
Senators Announce New Intellectual Property Enforcement Bill - Why??? Enforcement of civil law is traditionally (and best) left to the harmed party or parties. Is DOJ prepared to force the FBI to start investigating copyright infringement (again) despite the fact such frivolous issues would steal resources away from much more pressing matters? I do not think that anyone could possibly want this bill to pass other than special interests in Hollywood.



7.29.2008

 
WEIS 2008: Do data-breach-disclosure laws reduce identity theft?



7.28.2008

 
Air Force Cyber Command: Building the Infrastructure for High-Tech War Crimes - I am unashamedly liberal (in the Thomas Paine/Adam Smith way, not the nanny-state sort of way) but even I have to say that the author must be off his meds. Mr. Burghardt apparently thinks that it is better to engage an opponent with bombs and bullets than bits and bytes. If information warfare and operations (IW/IO) means fewer casualties of war, I am all for it. Numerous nations are already involved in non-stop, slow simmering information-based adversarialism. To not develop capabilities in this space would be to surrender the battleground. That said, it is important to ensure that the actions of the AFCC comply with the Constitution as well as the laws of the US, the States, and any applicable international agreements. To that end, I fully support the intent of the author. Democracy is noisy and loud and it means having to put up with all sorts of crackpot theories from both the left and the right.

 
DE-ICE PenTest LiveCD disks "provide a safe and secure way to learn and practice Penetration Test skills" from Matt



7.24.2008

 
Webinar: Dan Kaminsky's DNS Discovery: The Massive, Multi-Vendor Issue and the Massive, Multi-Vendor Fix



7.23.2008

 
DNS Cache Poisoning POC Released

 
The Story Behind San Francisco's Rogue Network Admin - from Andrew

 
NAT being added to IPv6



7.22.2008

 
Kaminsky's DNS Issue Accidentally Leaked?

 
Julie Amero Case Drags On



7.18.2008

 
HSM - Home Security Methodology Vacation Guide



7.17.2008

 
Researcher to demonstrate attack code for Intel chips

 
U.S. Fears Threat of Cyberspying at Olympics - While the threat is real (there will almost certainly be mass compromises during the Olympics), it is unfortunately an issue in both China and the US

 
BlackBerry Warns About PDF Distiller Flaw

 
The DEFCON Shoot Returns with Full-Auto, Class III Firearms



7.16.2008

 
Kon-Boot allows one to change the Linux kernel on the fly (while booting)



7.15.2008

 
DHS Privacy Office - Privacy Workshops - Implementing Privacy Protections in Government Data Mining

 
Are these people out of their minds? - Why stop at the airport gate?

 
And you thought air travel could not get any worse. An official with the Department of Homeland Security says the U.S. should consider having airline passengers wear electronic bracelets that could track their movements, hold personal information and be triggered like a Taser to stun them into immobility.

 
UK to Implement Biometric ID by 2009

 
An Astonishing Collaboration - More on the BIND Bug from Dan Kaminski: "DJBwas right. All those years ago, Dan J. Bernstein was right: Source Port Randomization should be standard on every name server in production use.

There is a fantastic quote that guides a lot of the work I do: Luck is the residue of design. Dan Bernstein is a notably lucky programmer, and that’s no accident. The professor lives and breathes systems engineering in a way that my hackish code aspires to one day experience. DJB got “lucky” here — he ended up defending himself against an attack he almost certainly never encountered.

Such is the mark of excellent design. Excellent design protects you against things you don’t have any information about. And so we are deploying this excellent design to provide no information."



7.13.2008

 
TrackMeNot - a lightweight browser extension that helps protect web searchers from surveillance and data-profiling by search engines. From Tarik



7.11.2008

 
Dutch chipmaker sues to silence security researchers - from Anthony



7.10.2008

 
Insomnia Security - Whitepaper Collection

 
The 2nd Annual Pwnie Awards - An annual awards ceremony celebrating and making fun of the achivements and failures of security researchers and the wider security community - Nominations close July 14th.

 
FBI Headquarters Not Cleared for Classified Intelligence - from Anthony



7.09.2008

 
Snuggly The Security Bear Presents "Constitutional Compromise"

 
Multiple DNS implementations vulnerable to cache poisoning



7.07.2008

 
Art and Practice of Deception

 
Quick access to hidden **** browser passwords - Che'



7.04.2008

 
Thieves steal millions from Citibank customers via 7-11 ATMs



7.02.2008

 
Inside NSA Red Team

 
VMware Infrastructure Earns Common Criteria EAL4+ Certification - from Chainman

 
I know it's anathma to post stories from Slashdot, but PC Repair in Texas now requires a PI license?



7.01.2008

 
OpenBSD ICMPv6 Exploit from LMH





This page is powered by Blogger.


Site Meter Locations of visitors to this page