Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- Saying Farewell
- It's been a great handful of months here at ZDNet, but I'm deciding to say goodbye to the blogging scene. I'm already really busy with my primary job, and at this point I want to slow the work load down a good deal and just enjoy life. I'd like to...
- Tags: blogging, internet, nathan mcfeters
- Blog posts 2008-08-11
- Black Hat Las Vegas Day 2
- Again, sorry for the late updates. Vegas is the kind of place that demands a lot of a person. Too many parties make it difficult to find time to blog on the conference. Pictures of the even are a bit sparse, due to consistently forgetting to bring my camera, but...
- Tags: black hat, microsoft corp., applet, image, vegas, nathan mcfeters
- Blog posts 2008-08-09
- Black Hat Las Vegas Day 1
- Well, this is well late, but here's my recap of Black Hat Day 1. Sorry for the delay, but I've been terribly busy finishing up preparations for my Day 2 talk. The first talk I went to see, "Pointers and Handles, A Story of Unchecked Assumptions...
- Tags: Billy Rios, Black Hat, Cyberthreats, Nathan McFeters, Phishing, Security, Spam, Spam And Phishing, Viruses And Worms
- Blog posts 2008-08-08
- On GIFARs
- Ever since Rob McMillan of IDG published a story giving a preview of our coming Black Hat talk, specifically a preview of the portion of our talk related to GIFARs, media coverage of the research has swirled a bit out of control and there's been some misconceptions. My co-presenter John...
- Tags: Black Hat, Vector, Applet, Image, Attack, Heasman, Nathan McFeters
- Blog posts 2008-08-02
- Black Hat Sneak Preview
- Rob McMillan from IDG interviewed John Heasman and I today about the presentation we will be delivering with Rob Carter at Black Hat Vegas next week. The article has a good teaser about one of the more interesting of the many attacks we will cover, namely what we've coined...
- Tags: Black Hat, Java Applet, Web Application, Web Browser, Applet, Attack, GIFAR, Java, Programming Languages, Security, Software Development, Software/Web Development, Nathan McFeters
- Blog posts 2008-08-01
- Black Hat talk on Apple encryption flaw pulled
- Brian Krebs from the Washington Post "Security Fix" Blog reported that one of the talks slated for next week's Black Hat convention on a previously undiscovered flaw in Apple's FileVault encryption system has been canceled, the researcher citing confidentiality agreements as the reason he will not be speaking. ...
- Tags: Black Hat, Researcher, Apple Inc., Flaw, Security, Nathan McFeters
- Blog posts 2008-07-31
- McAfee SiteAdvisor blocks SANS
- Showing you just how much they understand about security, McAfee blocked the SANS website, sans.org, as well as giac.org and sans.edu, with their SiteAdvisor application, listing it as a "bad" site. Interestingly enough, SANS sites are some of the best sites to go to for security related...
- Tags: McAfee Inc., McAfee SiteAdvisor, Web Site, Web Site Development, Web Technology, Security, Internet, Nathan McFeters
- Blog posts 2008-07-30
- Gary McKinnon â€" 'world's most dangerous hacker' â€" to be extradited
- The Guardian, out of the United Kingdom, is reporting that Gary McKinnon, the "world's most dangerous hacker", will be extradited to the United States to face criminal hacking charges. McKinnon, a 42 year old unemployed systems administrator from north London, allegedly hacked into systems belonging to the US army,...
- Tags: Hacker, Gary McKinnon, Hacking, Security, Nathan McFeters
- Blog posts 2008-07-30
- Passports worth £2.5 million stolen in van hijack
- Graham Tibbetts of the UK Telegraph is reporting that the British Foreign Office has admitted to losing around 3,000 passports and visa stickers, which were stolen on their way from Manchester to RAF Northolt in London, where they were to be sent to British embassies. From the article: Officials...
- Tags: Passport, Van, Security, Nathan McFeters
- Blog posts 2008-07-29
- Katie Moussouris on HOPE 2008: HOPE Springs Eternal
- Guest Editorial by Katie Moussouris of Microsoft If cyberspace is a mass, consensual hallucination, as William Gibson characterized it, then HOPE was a dream manifested in meatspace that would not die. While Hackers On Planet Earth has been running every other year since 1994, it was...
- Tags: Symantec Corp., IP, Tool, Con, Katie Moussouris, Last HOPE, Wiki, Internet, Productivity, Security, Network Technology, Online Communications, Networking, Nathan McFeters
- Blog posts 2008-07-28
- Airport security part 6: Skimming at airport kiosks
- We've talked a lot about airport security here see other links at the bottom of this article, but one thing we haven't covered yet is airport kiosks. Not that they haven't caught my attention, there's just so much wrong at the airport, it takes time to cover it all. Richard...
- Tags: Credit Card, Airport Security, Airport Kiosk, Stiennon, Sales Channel, Financial Services, Sales, Nathan McFeters
- Blog posts 2008-07-28
- Responding to the DNS vulnerability and attacks
- The DNS vulnerability, which has completely dominated the news in the security world the last two weeks, has been a concern for so many. On the front of good news and getting things protected, the IBM ISS has team has published some great information. The Frequency X...
- Tags: DNS, Vulnerability, DNS Server, Server, Network Address Translation, IBM Corp., Attack, Domain Names, Networking, Security, Internet, Nathan McFeters
- Blog posts 2008-07-28
- Britain moves against illegal file sharing
- CBC News out of Canada is reporting that British ISPs are making an aggressive move against illegal file sharing by implementing a program designed to discover copyright violators, who will be sent warning letters and may potentially have their internet connections disconnected. For more on the article,...
- Tags: File-sharing, Peer To Peer (P2P), Internet Service Providers (ISPs), Internet, Nathan McFeters
- Blog posts 2008-07-25
- iPhone 2.0 jailbreaker for iPhone 2g/3g is available
- The iPhone DevTeam blog has released the development sources for their tool xpwn version 0.3. This tool is the firmware 2.0 version of the team's "cross-platform jailbreaking library/command-line utility". The team claims it has been tested on Linux, Windows XP, and Windows Vista for both the iPhone 2g and the...
- Tags: Apple iPhone, 3G, Microsoft Windows, Team Management, Productivity, Cellular Phones, Wireless, Consumer Electronics, Personal Technology, Operating Systems, Software, Management, Nathan McFeters
- Blog posts 2008-07-25
- IDA Disassembler on the iPhone? Yep.
- Ilfak Guilfanov has reported that IDA has been ported to the iPhone. Unbelievable? Yes. Is it useful? Who cares! IDA on the iPhone is hot! Don't act like you don't want IDA for your iPhone, you know you do. ...
- Tags: Apple iPhone, IDA, Blogging, Internet, Nathan McFeters
- Blog posts 2008-07-25
- Heap-based buffer overflow reported in RealNetworks RealPlayer
- Update 07/25/2008: Aaron Portnoy of TippingPoint's security research group was kind enough to point out that I'm actually not affected by this, since I've installed the newest version of RealPlayer. From Aaron's email: Notice the Secunia advisory states it affects RealPlayer 10.5... the latest is 11.x, which now uses...
- Tags: Vulnerability, RealNetworks Inc., Buffer-overflow, RealNetworks RealPlayer, Secunia Research, Vendor, Digital Music, Digital Media, Personal Technology, Consumer Electronics, Nathan McFeters
- Blog posts 2008-07-25
- Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon
- I listened to the Black Hat webcast today to grab as much info as I could on this subject. The biggest thing that I heard from the whole talk is that the patch fixes things to a reasonable point, but that long-term, there will have to be more work...
- Tags: CERT, DNS Server, Domain Names, Internet, Kaminsky, Nathan McFeters, Patches, Security, Server
- Blog posts 2008-07-24
- Code Diffs for DNS Exploit Code
- Diffs between revisions of the exploit code released by HDM and |)ruid. Generated by Billy Rios. by Nathan McFeters
- Tags: Billy, code, diffs, DNS, Domain Names, Exploit, Exploit Code, HDM, Internet, McFeters, Nate, Nathan McFeters, Networking, Revision, Rios, screenshots, |)ruid
- Image galleries 2008-07-23
- |)ruid and HD Moore release part 2 of DNS exploit
- [Updated 07/24/2008: Gallery images of diffs of code revisions has been included and will be updated as things change, see here.] Earlier today, noted researchers |)ruid and HD Moore released exploit code for the Metasploit tool for attacking the DNS flaw that was originally reported by Dan...
- Tags: DNS, Domain, Server, Entry, Exploit, NS, NS Record, Domain Names, Networking, Internet, Nathan McFeters
- Blog posts 2008-07-23
- A look at the recent Firefox 3 vulnerability
- True to form, Billy Rios promised a more in depth look at the MSFA2008-35 vulnerability which is another protocol handler flaw in Firefox 3. As previously reported here, this was another protocol handler flaw that led to arbitrary remote command execution, and is especially dangerous since it can be deployed...
- Tags: Mozilla Firefox 3.0, Mozilla Firefox, Apple Safari, Vulnerability, Protocol Handler, Firefox3, Security Decision, Web Browsers, Security, Internet, Nathan McFeters
- Blog posts 2008-07-22
White Papers and Webcasts