black hat federal

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Vista's ASLR not so random, but does it matter?

Symantec is using the spotlight of the Black Hat DC 2007 conference to pick apart the security technologies built into Windows Vista.On the heels of its exposé of weaknesses in the UAC user account control mechanism, Symantec rolled out a Vista security portal with three new research papers discussing legacy...

Tags: Pen testing, Black Hat Federal, Data theft, Black Hat, Viruses and Worms, Spyware and Adware, Exploit code, Spam and Phishing, Responsible disclosure, Rootkits, Vulnerability research, Microsoft, Windows Vista, Hackers

Blog posts 2007-02-28

HID denies RFID demo threat, hackers worry

Black Hat Diary: IOActive's decision to cancel its RFID hacking demo is the main topic of conversation here as white hat hackers ponder the ramifications of a vendor using patent infringement claims to thwart legitimate security research.The company at the center of the storm, HID Global, issued a statement acknowledging...

Tags: Black Hat Federal, Digital rights management, Pen testing, Open source, Exploit code, Black Hat, Responsible disclosure, Punditocracy, Vulnerability research, Cisco, Hackers

Blog posts 2007-02-28

Additional Resources

Howard's happy: Sirius-XM merger (finally) approved; Now the work really begins

The government regulatory debacle known as the Sirius-XM merger has officially ended as the Federal Communications Commission approved the deal after 17 months of deliberation and lobbying from the National Association of Broadcasters. According to the Washington Post and Wall Street Journal the FCC approved the deal...

Tags: Merger, XM Satellite Radio Inc., Radio, Sirius, Howard, Satellite Radio, Digital Music, Advertising & Promotion, Federal Government, Mergers & Acquisitions, Consumer Electronics, Personal Technology, Marketing, Government, Investment, Finance, Larry Dignan

Blog posts 2008-07-26

Girls are as smart as boys, but tests are getting dumber

New research published in the journal Science confirms what all of us teachers have known for a long time: girls are just as smart as boys. I hope none of our tax dollars went into that one. A quick quote from the article before I get into the...

Tags: Test, Teacher, Hyde, Taxes, Free Trade, Financial Planning, Finance, Christopher Dawson

Blog posts 2008-07-25

iPhone gas application roundup

On 18 June 2008 I published my iPhone app wishlist and I'm happy that most of my most requested applications have been released (Thank you Texas Hold'Em!). Two my most request applications dealt with fuel, specifically a fuel economy tracker and a cheap gas finder. Several iterations...

Tags: Apple iPhone, Vehicle, MPG, AccuFuel, Gas Finder, Roi/Tco, GPS, 3G, Handhelds, Finance, Managerial Accounting, Consumer Electronics, Personal Technology, Cellular Phones, Hardware, Jason D. O\'Grady

Blog posts 2008-07-25

Foxconn snubs Linux users

Foxconn snubs Linux usersWho needs Foxconn anyway.There are plenty of good MB makers that do support Linux.It's a good idea to look at hardware compatibility at the distro's website anyway. I use Asus. But I have had to update the BIOS on every Asus MB I've bought to get...

Tags: Operating systems, UNIX, OPEN SOURCE, Foxconn, Linux, BIOS, ASUS, operating system

Discussion threads 2008-07-25

Microsoft joins 'patch DNS now' chant; Apple patch missing

Microsoft joins 'patch DNS now' chant; Apple patch missingI couldn't make this stuff up if I triedSeriously, I'm not that creative.[url=http://talkback.zdnet.com/5208-12691-0.html?forumID=1&threadID=48138&messageID=898138] Apple fan explains why Apple isn't responsible for PWN2OWN vulnerability [/url][i]A Perl exploit isn't an Apple bug, anymore than the Flash exploit on the Vista machine was a Microsoft...

Tags: Apple Mac OS X, Domain names, Apple Mac OS, Operating systems, DNS, Microsoft Corp., Apple Inc.

Discussion threads 2008-07-25

Heap-based buffer overflow reported in RealNetworks RealPlayer

Heap-based buffer overflow reported in RealNetworks RealPlayerDefinition of PoC?Forgive my ignorance when using vulnerability speak, but what does PoC stand for? I thought at first it might mean Point of Contact, but I figured I might as well ask.RE: Black Hat webcastThe Black Hat conference organisers really should know...

Tags: Digital music, Digital media, SECURITY, PoC, RealNetworks RealPlayer, buffer-overflow, RealNetworks Inc.

Discussion threads 2008-07-25

GMail adds "https:"-only connections but still not by default

Google has added a new "Browser Connection" feature to GMail to allow users to force e-mail sessions to always use the more secure "https:" protocol but, strangely, this is not turned on by default. In the Settings tab, at the very bottom, GMail users can now select...

Tags: Google Inc., Google Gmail, HTTP, E-mail Providers, Cloud Computing, Internet, Ryan Naraine

Blog posts 2008-07-25

iPhone 3G availability tracker mashup

Looking for an iPhone 3G? Apple provides an iPhone 3G availability application on their retail Web page that lists iPhone availability by store location. The app appears to be offline as of press time. The problem is that Apple's availability application forces you to drill down store...

Tags: Apple iPhone, Apple iPhone 3G, Mashup, Chris Barnes, 3G, Collaboration, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Jason D. O\'Grady

Blog posts 2008-07-25

Heap-based buffer overflow reported in RealNetworks RealPlayer

Update 07/25/2008: Aaron Portnoy of TippingPoint's security research group was kind enough to point out that I'm actually not affected by this, since I've installed the newest version of RealPlayer.  From Aaron's email: Notice the Secunia advisory states it affects RealPlayer 10.5... the latest is 11.x, which now uses...

Tags: Vulnerability, RealNetworks Inc., Buffer-overflow, RealNetworks RealPlayer, Secunia Research, Vendor, Digital Music, Digital Media, Personal Technology, Consumer Electronics, Nathan McFeters

Blog posts 2008-07-25

If Xen and KVM are free, why do VMware and Microsoft get all of the press?

Xen and KVM, like other virtualization tools, can be used as part of a comprehensive datacenter architecture. One of the most important value propositions offered by both of these tools is low initial cost (read "free"). Depending upon the implementation (Citrix, Red Hat, SUSE, Virtual Iron, Oracle, Sun, Qumranet, etc.)...

Tags: Red Hat Inc., Xen, VMware Inc., Microsoft Corp., Tool, Comprehension, Productivity, Data Centers, Open Source, Storage, Hardware, Data Management, Dan Kusnetzky

Blog posts 2008-07-25

Dell opts for performance with R5400 data center-hosted desktop

Dell unveiled its data center-hosted desktop product line on Tuesday. Unlike rivals Hewlett-Packard and IBM, Dell didn't build its solution on blade servers but instead opted for a high performance system using a 2U box called the Dell Precision R5400 Rack Workstation. "By not putting the solution...

Tags: Dell Computer Corp., Performance, R5400, Workstations, Desktops, Servers, Hardware, Jason Hiner

Blog posts 2008-07-24

HP Pavilion dv2945se

Editors' note: This review is part of our Back to School 2008 roundup, covering specific configurations of popular laptops that can be found in retail stores.HP's 14-inch HP Pavilion dv2945se looks like it should cost more than $899, thanks to a cool subtle pattern on the keyboard tray and lid...

Tags: Keyboards, Notebooks, Processors, laptop computer, Hewlett-Packard Co., HP Pavilion, keyboard

Product reviews 2008-07-24

Escapee 'Spam King' dead in apparent murder-suicide

Escapee 'Spam King' dead in apparent murder-suicideGood riddance to bad rubbish.Too bad he took others with him.Escapee 'Spam King' dead in apparent murder-suicideThis is very sad. There was no reason for him to take other people's lives.Much sadder then you think. Much SadderAs an avid computer enthusiast, owning...

Tags: INTERNET, apparent murder-suicide, Escapee, murder-suicide, Spam King

Discussion threads 2008-07-24

Escapee 'Spam King' dead in apparent murder-suicide

Convicted spammer Eddie Davidson, who escaped from federal prison over the weekend, killed his wife and 3-year-old daughter before killing himself in what is being described as a murder-suicide. Colorado's 9News.com said the tragic end of the man known as the "Spam King" was confirmed by the...

Tags: Prison, Sheriff, Internal Revenue Service, Attorney, Healthcare, Ryan Naraine

Blog posts 2008-07-24

2008 Audi A8 L W12

Photo gallery:2008 Audi A8 L W12The 2008 Audi A8 L W12 rests in a premier echelon of cars that combine extreme luxury with exceptional driving performance, cars that make it difficult to decide whether you'd rather be reclining in the back seat while a chauffeur drives or up there where...

Tags: Digital music, Digital media, subwoofer, Audi A8, Audi AG, Bang & Olufsen, car, MP3

Product reviews 2008-07-24

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soonTTLSomething I wish I'd asked during the webcast and which I can't quite get my head around:It was said that setting a long TTL doesn't help because of the way delegation works - has to...

Tags: Domain names, DNS server, TTL, server, Kaminsky

Discussion threads 2008-07-24

Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon

I listened to the Black Hat webcast today to grab as much info as I could on this subject. The biggest thing that I heard from the whole talk is that the patch fixes things to a reasonable point, but that long-term, there will have to be more work...

Tags: CERT, DNS Server, Server, Kaminsky, Dan, Patches, Domain Names, Security, Internet, Nathan McFeters

Blog posts 2008-07-24

Childs rigged crazyquilt private network

Childs rigged crazyquilt private networkBut who is monitoring the monitor?Gartner's statement not worth quoting. They are the most worthless thing to hit IT.Was Childs the only IT person on staff that knew anything about computers? That's what it sounds like. But this isn't that hard to believe. Most IT...

Tags: NETWORKING, Most IT department, private network, network, information technology

Discussion threads 2008-07-24