Juan Andres Guerrero-Saade on the Dangers of APT Security Research

Juan Andres Guerrero-Saade from Kaspersky Lab’s Global Research & Analysis Team GReAT joins Ryan Naraine on the podcast to discuss the “identity crisis” in the anti-malware industry and the ethics and perils of investigating state-sponsored or geopolitically significant threats. READ The Ethics a...

Netragard Shutters Controversial Exploit Acquisition Program

Netragard, one of the small number of companies that buys and sells exploits, has shut down its exploit acquisition program in the wake of the HackingTeam breach. Among the revelations in the cache of documents leaked after the attack on HackingTeam was information about Netragard selling an...

ALCASAR <= 2.8.1 - Remote Root Code Execution Vulnerability

No description provided by source. !/usr/bin/env python -- coding: utf-8 -- ALCASAR = 2.8.1 Remote Root Code Execution Vulnerability Author: eF Date : 2014-09-12 URL : http://www.alcasar.net/ This is not a responsible disclosure coz' I have no sense of ethics and I don't give a fck. db 88...

NASA Tri-Agency Climate Education (TrACE) v1.0 Multiple XSS Vulnerabilities

Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...

Removing CarrierIQ Is A Really Bad Idea For Most Mobile Phone Users

The controversy over stealthy monitoring software by CarrierIQ has raised important questions about user privacy and business ethics in the Brave New World of smart phones, tablets and the like. In the uproar over CarrierIQ’s surreptitious monitoring of mobile phone users, various tools have...

Botnet Takedown: Researcher Describes How Kelihos Fell

Dennis Fisher talks with Kaspersky Lab Researcher Tillmann Werner about the takedown of the Kelihos botnet, the network’s unique multi-tiered architecture, its custom protocol and the ethics and legality of pushing updates to disable bots on users’ machines. Podcast audio courtesy of sykboy65...

The Hacker News Magazine September Issue - NO ONE IS SECURE

The Hacker News Magazine September Issue - NO ONE IS SECURE Well folks, after this issue and the obvious intensity of the insecurity of the net, I have a few thoughts on the unfettered access to knowledge. It is more than apparent we all live in a time where the extensive dissemination of opinion...

The Hacker News Magazine September Issue - NO ONE IS SECURE

The Hacker News Magazine September Issue - NO ONE IS SECURE Well folks, after this issue and the obvious intensity of the insecurity of the net, I have a few thoughts on the unfettered access to knowledge. It is more than apparent we all live in a time where the extensive dissemination of opinion...

Phone Hacker Forced to Disclose name, Who Told Him to Hack !

Phone Hacker Forced to Disclose name, Who Told Him to Hack ! Court tells private investigator he must identify 'News of the World' executives who asked him to intercept voicemails. A private detective jailed for illegally intercepting voice-mail messages on behalf of a journalist at one of Rupert...

New Leak of Documents Is Protest Over Harvard Fellow's Arrest

More than 18,000 academic documents have been copied from an online scholarly archive and posted on Pirate Bay, the file sharing Web site, but questions arose on Friday about where the documents really came from. The documents in question, totalling 18,592 scientific publications and about 33...

Cyber Ethics, Safety and Security Education is essential for Indian users ?

India is an emerging economy investing in computerization and broadband for rapid and balanced economic development. The Indian government has embarked on large egovernance programs and enablers like the Unique ID program UID which provides a unique biometric based ID for all Indian residents. Th...

Dutch Teens Arrested for Cyberattacks on Mastercard and Visa

A Dutch hacker collective called Revspace aims to "re-educate" Dutch teens suspected of cyberattacks against Mastercard, Visa, and the Dutch National Prosecutors Office, transforming them into "ethical hackers." Last week, Dutch police arrested a 16-year-old boy for participating in web attacks...

The Pitfalls of Website Vulnerability Research and Disclosure

Vulnerability disclosure is in the spotlight again. First it was Tavis Ormandy disclosing a vulnerability in Microsoft Windows before Microsoft had a fix available. Now a group called Goatse Security has disclosed a vulnerability in an AT&T website that affects Apple iPad 3G owners. The Wall Stre...

Congress Calls for Internal Security Review

After a former Congressional staffer exposed some sensitive data on a file-sharing network recently, some lawmakers are calling for the Congress to start an internal review of its own data security policies immediately. The situation, which is linked to an ethics investigation in the House of...

Some Researchers Lack Basic Ethics

By Roel Schouwenberg Once upon a time we were living in a world where creating malware, then still called viruses, was a very bad thing to do. These days, people seem much more relaxed with the idea of someone writing malware. Over the years I’ve spent quite some time thinking about this change a...

wu-ftpd-beta18-root.txt

ate: Tue, 23 Mar 1999 09:09:11 +0000 From: duke To: [email protected] Subject: Re: ftp exploit hi, this code i wrote demonstrated a vulnerability that is already widely known, and as indicated in the comments is was private... there is nothing to be gained from posting this here and furthermor...