2007.08.27 Daily Security Reading
by Rodney Campbell on Aug.30, 2007, under Security
Know Your Enemy: Malicious Web Servers
In this paper, we examine client-side attacks and evaluate methods to defend against client-side attacks on web browsers.
Skype Linux Reads Password and Firefox Profile
Users of Skype for Linux have just found out that it reads the files /etc/passwd, firefox profile, plugins, addons, etc, and many other unnecessary files in /etc.
Student cracks Government’s $84m porn filter
Tom Wood, 16, said it took him just over 30 minutes to bypass the Government’s filter, released on Tuesday.
Point, Click … Eavesdrop – How the FBI Wiretap Net Operates
The FBI has quietly built a sophisticated, point-and-click surveillance system that performs instant wiretaps on almost any communications device.
Virtualized rootkits – Part 1 and Part 2
There has been a lot of buzz around the topic of virtualized rootkits. Joanna Rutkowska has been working on a new version of Blue-Pill, her proof of concept invisible rootkit, while a team made by three prominent security experts (Thomas Ptacek, Nate Lawson, Peter Ferrie) challenged her that there is not an “invisible” rootkit.