Showing posts with label xss. Show all posts
Showing posts with label xss. Show all posts

Sunday, September 26, 2010

BruCon Destroy Companies, What Is Orkut XSS, Facebook outage cause, ASF Millionth Commit and e-Skin for Robo

Pop-Link@[26-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

@BruCon: Top 5 Ways to Destroy a company
Tarnish the Brand >> Alter Product >> Attack Employees >> Effect financial >> Your-Turn
Article: http://blog.c22.cc/2010/09/25/brucon-top-5-ways-to-destroy-a-company/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Orkut XSS demystified, gotta see the Javascript pattern used to launch 'Bom Sabado' attack on 25th Sep'2010
Article: http://antrix.net/posts/2007/orkut-xss/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Details on Facebook outage on 24-Sep-2010 for 2.5 hours.A flawed handling of error-handling via an automated system for configurations caused damage.
Article: http://www.facebook.com/note.php?note_id=431441338919&id=9445547199&ref=mf
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Apache Software Foundation hits its MILLIONTH Commit on 22nd Sep'2010 by ASF Member Yonik on behalf of Apache Lucene Project. Congratulations!!! to ASF on awesome contribution to community.
Article: https://blogs.apache.org/foundation/entry/the_asf_hits_its_millionth

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Pressure Sensitive 'e-Skin' for new generation Robotics has been fabricated by UC Berkley's Scientists using semi-conductor nano-wires
Article: http://www.associatedcontent.com/article/5803350/pressure_sensitive_eskin_revolutionizes.html?cat=15
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Saturday, September 25, 2010

Orkut's Bom Sabado XSS, Stuxnet via Autorun, Nokia spends $10M on Symbian and NEW google, IBM

Pop-Link@[25-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

'Bom Sabado' bombs XSS attack over Orkut, just after Twitter XSS a similar spreading attack on Orkut, its actually a Portugese word meaning 'Good Saturday'...
Article: http://www.echoblogger.com/internet/cross-site-scripting-attack-on-orkut/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Stuxnet is using Autorun vulnerability to spread this .LNK File Vulnerability
Article: http://www.symantec.com/connect/de/blogs/stuxnet-lnk-file-vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Nokia is spending $10 million for Symbian to be popular, giving away money to several developers via online development contest
Article: http://www.colordev.com/50_links_in_a_day/2010/09/nokia-paying-10m-for-symbian-coders/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Get to know about all new Google Products being launched instead of wondering when it came anyway...
Article: http://www.google.com/newproducts/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM at new-pulsed-STM technique making DRAM cells about 200,000 times faster than before... SPEED <3 IT
Article: http://eetimes.com/electronics-news/4208749/IBM-characterizes-single-atom-DRAM

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Friday, September 24, 2010

Interpol spoofed, Web Redirect-Hell, Context-aware UI, IBM DW Cloud Event and XSS

Pop-Link@[24-Sep-2010]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Cyber Criminals spoofed INTERPOL Chief's identity on Facebook to gain information on International Fugitives, great is this how 'InterPol' is supposed to discuss such information on the first hand i.e. Socially...
Article: http://www.net-security.org/secworld.php?id=9884

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


Short URLs and other web practices are increasing the hops between user and actual Web-content

Article: http://royal.pingdom.com/2010/09/22/is-the-web-heading-toward-redirect-hell/

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Canonical's view about Ubuntu and Context-aware UI, they are working on features like video going full-screen mode automatically detecting user has laid back on chair in a resting position... nice :)

Article: http://www.thinq.co.uk/2010/9/14/canonical-designer-demos-context-aware-ui/


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The actual code style for Twitter XSS attack, here you could have a look over what kind of 'onmouseover' tweet acted as a malicious script

Article: http://h30507.www3.hp.com/t5/Following-the-White-Rabbit-A/Twitter-OnMouseOver-XSS/ba-p/82527#feedback-success



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

IBM DeveloperWorks Virtual Event in October on Cloud for Developers, Register Now


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-