<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet title="XSL_formatting" type="text/xsl" href="rss_style.xsl" ?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
        <title>ZDNet Blogs</title>
        <link>http://blogs.zdnet.com</link>
        <description>ZDNet Blogs Focus: Black Hat</description>
<item>
<title>Opera uses Mozilla fuzzer to find, fix severe browser flaw</title>
<link>http://blogs.zdnet.com/security/?p=451</link>
<pubDate>Wed, 15 Aug 2007 08:01:54 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=451</guid>
<description><![CDATA[How's this for cross-browser cooperation?    Using a JavaScript fuzzer released by Mozilla at Black Hat, Opera's security team has found and fixed a "highly severe" browser flaw that could be used in code execution attacks.    The problem:  A virtual function call on an invalid pointer that may reference data crafted by the attacker can be used to execute arbitrary code.  The flaw was found with jsfunfuzz, a JavaScript compiler/decompiler fuzzer built by Jesse Ruderman and released earlier this month by Mozilla security chief Window Snyder.    It is the first in a series of security tools that will be released by the open-source group.    Snyder said all the major browser vendors -- Opera and Microsoft -- were giving the fuzzer ahead of time and they were all ... ]]>
</description></item>
<item>
<title>IBM security strategist: Stop crediting vulnerability brokers</title>
<link>http://blogs.zdnet.com/security/?p=433</link>
<pubDate>Wed, 08 Aug 2007 01:40:09 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=433</guid>
<description><![CDATA[An IBM security strategist wants software vendors to stop acknowledging companies and researchers who buy and sell security vulnerabilities.    Gunter Ollman, director of security strategy at IBM Internet Security Systems (ISS), believes there's no real accountability attached to the trading of vulnerability information by third party companies like iDefense and TippingPoint.    iDefense and TippingPoint have built business models around buying exclusive rights to software bugs and using the information to ship pre-disclosure signatures in IPS (Intrusion Prevention Systems) products.  But, in Ollman's eyes, that model does not lend itself to accountability and actually adds an element of risk because IPS signatures can offer clues on zero-day vulnerabilities.    Ollman's comments (which he makes clear doesn't represent the corporate stance of his employer)  ... ]]>
</description></item>
<item>
<title>Greasemonkey script blocks Gmail cookie-theft attacks</title>
<link>http://blogs.zdnet.com/security/?p=426</link>
<pubDate>Tue, 07 Aug 2007 05:28:48 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=426</guid>
<description><![CDATA[By now, you're probably read about Robert Graham's Black Hat presentation (.pdf) on hijacking Gmail accounts by wirelessly sniffing non-SSL session cookies.    The attack technique, called SideJacking, uses two homegrown tools -- Ferret and Hamster -- to sniff cookies from connections to unsecured Wi-Fi networks.    Careless Google account users are vulnerable because Gmail, Google Calendar, YouTube and Blogspot all default to "http:" instead of "https:"  (which is available) at login.    It's a safe bet that Google will tweak this default but, in the meantime, there's a new Greasemonkey script that offers another layer of protection to Firefox users.    Created by Mark Pilgrim, GMailSecure forces Gmail to use a secure connection for all logins by redirecting   http://gmail.google.com/ to https://gmail.google.com/.    Here's Pilgrim's explanation of how ... ]]>
</description></item>
<item>
<title>Patches in ten f***ing days?  Not really, says Mozilla</title>
<link>http://blogs.zdnet.com/security/?p=423</link>
<pubDate>Mon, 06 Aug 2007 11:37:16 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=423</guid>
<description><![CDATA[Mozilla has moved swiftly to put the kibosh on late-night chatter that it can turn around patches for security flaws within ten days.    The "ten f-ing days" boast came directly from Mozilla Director of Ecosystem Development Mike Shaver during a Black Hat party conversation with hacker Robert "RSnake" Hansen.  We showed up, and nearly immediately I was surrounded by the bulk of the Mozilla QA and security team that was attending Blackhat. They asked me lots of questions, and gave me lots of info. It was a pretty equitable trade of information. Clearly, they acknowledge that they need help from the community but they also feel confident that once things come to their attention it   s simply a matter of days to close ... ]]>
</description></item>
<item>
<title>Something uncomfortable about DEFCON's treatment of Dateline NBC reporter</title>
<link>http://blogs.zdnet.com/security/?p=420</link>
<pubDate>Mon, 06 Aug 2007 08:12:24 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=420</guid>
<description><![CDATA[I don't know about you but after watching the video and reading the reports (George Ou, Techmeme, Threat Level) about DEFCON's outing of Dateline NBC producer Michelle Madigan, I came away with an uncomfortable feeling that it was rather childish, over-the-top and unnecessary.    For starters, there's the irony of underground hackers preaching about rules and trust. Please.  What's so criminal about going undercover to get a news story?  Hackers at this conference take great pride in doing man-in-the-middle password hijacks for Wall of Sheep giggles. DEFCON folks routinely commandeer Las Vegas television displays, ATM screens and hotel TV networks.   Suddenly, OMG, a female TV reporter with a camera rigged into her handbag is a terrorist on wheels.    We're ... ]]>
</description></item>
<item>
<title>Blue Pill Project extends VM rootkit cat-and-mouse tussle</title>
<link>http://blogs.zdnet.com/security/?p=419</link>
<pubDate>Thu, 02 Aug 2007 11:11:03 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=419</guid>
<description><![CDATA[LAS VEGAS - The intellectual cat-and-mouse tussle over hiding and finding virtual machine rootkits has hit a new gear with a team of researchers dismissing the notion of "100 percent undetectable" malware and the release of source code for a new "Blue Pill" rootkit.    As previously reported, Thomas Ptacek, co-founder of Matasano Security, Nate Lawson of Root Labs, Symantec   s Peter Ferrie and indie researcher Dino Dai Zovi gave a standing-room-only presentation with a compelling argument that virtualized rootkits are easier to detect than normal rootkits.    "Nothing in undetectable," Lawson said, repeating his earlier contention that there are numerous techniques that can be used to sniff out the presence of a virtualized rootkit.    [ SEE: Let users virtualize Vista because hypervisor rootkits are no ... ]]>
</description></item>
<item>
<title>OpenBSD team mocked at first ever 'Pwnie' awards</title>
<link>http://blogs.zdnet.com/security/?p=418</link>
<pubDate>Thu, 02 Aug 2007 10:19:43 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=418</guid>
<description><![CDATA[LAS VEGAS -- The OpenBSD team has won an award for the most spectacular "mishandling" of a critical security vulnerability.    Here's why:  The OpenBSD team refused to acknowledge the bug as a security   vulnerability and issued a "reliability fix" for it. A week later Core   Security had developed proof of concept code that demonstrated remote   code execution. Read the full timeline and quotes in the Core   advisory.  During the ceremony,  a five-man panel of judges (HD Moore, Alexander Sotirov, Dave Goldsmith, Dino Dai Zovi and Dave Aitel)  cheered accomplishments in the bug-finding field and jeers for lame and overhyped discoveries.    Other winners:    Best server-side bug:  The Solaris in.telnetd remote root exploit released by Kingcope in February.  Kingcope was given a golden ... ]]>
</description></item>
<item>
<title>Hacker movements: Murphy joins Apple; Caceres to Matasano</title>
<link>http://blogs.zdnet.com/security/?p=416</link>
<pubDate>Wed, 01 Aug 2007 11:37:10 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=416</guid>
<description><![CDATA[LAS VEGAS - On the heels of Google's hire of browser hacking whiz Michal Zalewski comes news that another well-known vulnerability researcher is moving over to the vendor side.    Matthew Murphy, an outspoken hacker who is credited with several major flaw discoveries, has confirmed he is joining Apple as a product security engineer.    At Apple, Murphy will work on security response when vulnerabilities are found in Apple products and also with product teams on secure coding practices.   The Murphy hiring is a bit of a coup for Apple, coming at a time when external hackers are aggressively looking to expose flaws and weaknesses in the company's Mac OS X and other product lines.    Murphy will also help improve the company's relationship ... ]]>
</description></item>
<item>
<title>Remembering five years of vulnerability markets</title>
<link>http://blogs.zdnet.com/security/?p=415</link>
<pubDate>Wed, 01 Aug 2007 10:09:10 -0700</pubDate>
<dc:creator>Ryan Naraine</dc:creator>
<guid>http://blogs.zdnet.com/security/?p=415</guid>
<description><![CDATA[Guest Editorial by David Endler    While compiling some stats this week for our Zero Day Initiative two year anniversary, I came across this recent news article by the Associated Press, Researchers Seek Cash for Software Flaws.  It's the latest in a long line of media coverage on the launch of a new vulnerability auction site.    While reading the article, it hit me that it was exactly five years ago to the day I vocalized the idea of a vulnerability purchasing program. I was sitting in a tiny conference room at iDefense headquarters in Chantilly, Virginia. I was the director of their security intelligence division at the time.  We had recently emerged from bankruptcy and we were having one of our ... ]]>
</description></item>
</channel>
</rss>
