Orkut's Bom Sabado XSS, Stuxnet via Autorun, Nokia spends $10M on Symbian and NEW google, IBM

Pop-Link@[25-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'Bom Sabado' bombs XSS attack over Orkut, just after Twitter XSS a similar spreading attack on Orkut, its actually a Portugese word meaning 'Good Saturday'...
Article: http://www.echoblogger.com/internet/cross-site-scripting-attack-on-orkut/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Stuxnet is using Autorun vulnerability to spread this .LNK File Vulnerability
Article: http://www.symantec.com/connect/de/blogs/stuxnet-lnk-file-vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Nokia is spending $10 million for Symbian to be popular, giving away money to several developers via online development contest
Article: http://www.colordev.com/50_links_in_a_day/2010/09/nokia-paying-10m-for-symbian-coders/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Get to know about all new Google Products being launched instead of wondering when it came anyway...
Article: http://www.google.com/newproducts/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM at new-pulsed-STM technique making DRAM cells about 200,000 times faster than before... SPEED <3 IT
Article: http://eetimes.com/electronics-news/4208749/IBM-characterizes-single-atom-DRAM

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Interpol spoofed, Web Redirect-Hell, Context-aware UI, IBM DW Cloud Event and XSS

Pop-Link@[24-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Cyber Criminals spoofed INTERPOL Chief's identity on Facebook to gain information on International Fugitives, great is this how 'InterPol' is supposed to discuss such information on the first hand i.e. Socially...
Article: http://www.net-security.org/secworld.php?id=9884

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Short URLs and other web practices are increasing the hops between user and actual Web-content

Article: http://royal.pingdom.com/2010/09/22/is-the-web-heading-toward-redirect-hell/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Canonical's view about Ubuntu and Context-aware UI, they are working on features like video going full-screen mode automatically detecting user has laid back on chair in a resting position... nice :)

Article: http://www.thinq.co.uk/2010/9/14/canonical-designer-demos-context-aware-ui/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The actual code style for Twitter XSS attack, here you could have a look over what kind of 'onmouseover' tweet acted as a malicious script

Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Twitter-OnMouseOver-XSS/ba-p/82527#feedback-success

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM DeveloperWorks Virtual Event in October on Cloud for Developers, Register Now

Article: http://www.ibm.com/developerworks/offers/techbriefings/details/cloudfordevelopers.html?cmp=dw&cpb=dwcld&ct=dwcom&cr=dwcom&ccy=zz

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BAE wins, Google hunted down, Security Success, Firewall and giant Zynga

Pop-Link@[23-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

BAE Systems has won $40m for the deal to secure US Cyber Borders, covering FBI networks. What happened to Security Teams in US, and even if someOne hacks them after this.
Article: http://www.itnews.com.au/News/232968,fbi-awards-42m-cybersecurity-deal.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google revealed that its fiber cable at Oregon was shot down by hunters... OMG!!! my data was there, is this how they securely transfer it, anyways thanks for telling that your cables lie there ;)
Article: http://www.itnews.com.au/News/232831,us-hunters-shoot-down-google-fibre.aspx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Is Firewall required on individual Desktops? Is it an over-KILL? If your machine is sitting behind a secure server, then still you require Firewall or it is slowing you down? see someone else's perspective...
Article: http://www.pcpro.co.uk/realworld/361375/do-we-really-need-a-firewall-on-our-desktops
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"HP Blog" on  how to measure success of a Security Program in your Organization. Some thoughts on reducing legacy defects and newer possible risks.
Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Measuring-quot-Success-quot/ba-p/82522
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Some details on fastest growing social-gaming giant Zynga... 10% of Internet Population has played their games
Article: http://techcrunch.com/2010/09/22/zynga-moves-1-petabyte-of-data-daily-adds-1000-servers-a-week/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Google 2x Security, UK Cyber, SNES on PS3, POET hack Oracle, childish MI5

Pop-Link@[20-Sep-2010]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Mr.Fox says UK Cyber Security should be handled by National Security Council also, it's not any small issue to be handed over to few officers.

Article: http://www.publications.parliament.uk/pa/cm201011/cmhansrd/cm100913/debtext/100913-0001.htm#1009137000024

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Super Nintendo Emulator SNES9x pver PS3, some features yet to be supported.

Now go MARIO on your PS3 :)



Article: http://ps3-evolution.dcemu.co.uk/super-nintendo-emulator-snes9x-released-for-ps3-327501.html


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oracle based services are vulnerable for side-channel attack for padding Oracle against CBC mode encryption... this was discussed once in 2002 at EuroCrypt conference, in 2010 again its still active demo was presented at a Hacking Conference, they ares supposed to affect 25% of Internet Infrastructure (ASP.net, JSF, etc.)

Article: http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
ALSO, a new ASP.net vulnerability responsible for Information Disclosure
https://www.microsoft.com/technet/security/advisory/2416728.mspx


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

a Twitter User @PigSpotter warning motorists of SpeedTraps, tension for Cops.

Now when Cops are monitoring his acts so he has gone on break stating his BlackBerry is in for repair.


Article: http://www.iol.co.za/index.php?art_id=vn20100918083241209C425606&singlepage=1

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

MI5 states cyber made espionage more strong but is more straightforward in blocking data stealing... 

They Are KIDDING right, land-water-air are much more safer to identify enemy... in Cyber World anyone can be MI5.
Article: http://www.theregister.co.uk/2010/09/17/mi5_cyber/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The leaked master key of HDCP (High B/w Digital Content Provider) cracked it to strip down encryption... and thus Intel HDTV code got cracked.

How many times shall we repeat that 'Security should not depend on obscurity'.

Article: http://www.foxnews.com/scitech/2010/09/16/intel-confirms-hdtv-code-cracked/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



2 Step Auth by Google, currently just for some App users... to protect you from phishing, you will also have to enter the sms-code sent to your phone number added to your Google Account [ but what if I loose my Mobile :), logged out till arrange new sim with same number ]

Article: http://techcrunch.com/2010/09/20/google-secure-password


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

[WALLPAPER] m not gonna hurt u... just gonna hak

-=Specs=-
Dimension: 1280x800
Size: 116kb
Format: JPEG

if you like |-| 4 ( k 3 |2 5 \/\/ 4 1 1 ! 3 5 (Hackers Wallies) then this one is for you...