<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: redirect]]></title>
    <link>http://securityratty.com/tag/redirect</link>
    <description></description>
    <pubDate>Thu, 04 Sep 2008 10:16:36 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter]]></title>
      <link>http://securityratty.com/article/0fa4ba5a0236bfc2bf85ad0c2f8073c0</link>
      <guid>http://securityratty.com/article/0fa4ba5a0236bfc2bf85ad0c2f8073c0</guid>
      <description><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their...]]></description>
      <content:encoded><![CDATA[<a href="http://www.irongeek.com/i.php?page=videos/deploying-metasploits-meterpreter-with-mitm-and-an-ettercap-filter">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</a><br/>In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their box.
<p><a href="http://feedads.googleadservices.com/~a/7ko_VFpmwbmia4v_0JPAgKIAMbs/a"><img src="http://feedads.googleadservices.com/~a/7ko_VFpmwbmia4v_0JPAgKIAMbs/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~4/fWLZDQ_GFuI" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 22 Nov 2008 09:15:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ettercap filter">ettercap filter</category>
      <category domain="http://securityratty.com/tag/meterpreter">meterpreter</category>
      <category domain="http://securityratty.com/tag/redirect web traffic">redirect web traffic</category>
      <category domain="http://securityratty.com/tag/metasploit">metasploit</category>
      <category domain="http://securityratty.com/tag/mitm">mitm</category>
      <category domain="http://securityratty.com/tag/trick users">trick users</category>
      <category domain="http://securityratty.com/tag/bigmac">bigmac</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/box">box</category>
      <source url="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~3/fWLZDQ_GFuI/i.php">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</source>
    </item>
    <item>
      <title><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter]]></title>
      <link>http://securityratty.com/article/ea89117e325f87d4856cadae714fc053</link>
      <guid>http://securityratty.com/article/ea89117e325f87d4856cadae714fc053</guid>
      <description><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their...]]></description>
      <content:encoded><![CDATA[<a href="http://www.irongeek.com/i.php?page=videos/deploying-metasploits-meterpreter-with-mitm-and-an-ettercap-filter">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</a><br/>In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their box.]]></content:encoded>
      <pubDate>Sat, 22 Nov 2008 09:15:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ettercap filter">ettercap filter</category>
      <category domain="http://securityratty.com/tag/meterpreter">meterpreter</category>
      <category domain="http://securityratty.com/tag/redirect web traffic">redirect web traffic</category>
      <category domain="http://securityratty.com/tag/metasploit">metasploit</category>
      <category domain="http://securityratty.com/tag/mitm">mitm</category>
      <category domain="http://securityratty.com/tag/trick users">trick users</category>
      <category domain="http://securityratty.com/tag/bigmac">bigmac</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/box">box</category>
      <source url="http://www.irongeek.com/i.php?page=videos/deploying-metasploits-meterpreter-with-mitm-and-an-ettercap-filter">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</source>
    </item>
    <item>
      <title><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter]]></title>
      <link>http://securityratty.com/article/bcdae3fb963b5c97f68598bb759003d6</link>
      <guid>http://securityratty.com/article/bcdae3fb963b5c97f68598bb759003d6</guid>
      <description><![CDATA[Deploying Metasploit's Meterpreter with MITM and an Ettercap filter In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their...]]></description>
      <content:encoded><![CDATA[<a href="http://www.irongeek.com/i.php?page=videos/deploying-metasploits-meterpreter-with-mitm-and-an-ettercap-filter">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</a><br/>In this video, Bigmac shows how to redirect web traffic and trick users into downloading Meterpreter and running it on their box.
<p><a href="http://feedads.googleadservices.com/~a/7ko_VFpmwbmia4v_0JPAgKIAMbs/a"><img src="http://feedads.googleadservices.com/~a/7ko_VFpmwbmia4v_0JPAgKIAMbs/i" border="0" ismap="true"></img></a></p><img src="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~4/gn1UQgqfxFs" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 22 Nov 2008 09:15:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ettercap filter">ettercap filter</category>
      <category domain="http://securityratty.com/tag/meterpreter">meterpreter</category>
      <category domain="http://securityratty.com/tag/redirect web traffic">redirect web traffic</category>
      <category domain="http://securityratty.com/tag/metasploit">metasploit</category>
      <category domain="http://securityratty.com/tag/mitm">mitm</category>
      <category domain="http://securityratty.com/tag/trick users">trick users</category>
      <category domain="http://securityratty.com/tag/bigmac">bigmac</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/box">box</category>
      <source url="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~3/gn1UQgqfxFs/i.php">Deploying Metasploit's Meterpreter with MITM and an Ettercap filter</source>
    </item>
    <item>
      <title><![CDATA[Open Redirects and Common Weakness Enumeration]]></title>
      <link>http://securityratty.com/article/2b11b1167225de8773bed54b38eba5fc</link>
      <guid>http://securityratty.com/article/2b11b1167225de8773bed54b38eba5fc</guid>
      <description><![CDATA[Hopefully, you're more than familiar with CVE (Common Vulnerabilities and Exposures), but perhaps you're less familiar with CWE (Common Weaknesses Enumeration). Both are significant efforts,...]]></description>
      <content:encoded><![CDATA[Hopefully, you're more than familiar with <a href="http://cve.mitre.org/" target="_blank">CVE</a> (Common Vulnerabilities and Exposures), but perhaps you're less familiar with <a href="http://cwe.mitre.org/index.html" target="_blank">CWE</a> (Common Weaknesses Enumeration). Both are significant efforts, international in scope, and the excellent products of <a href="http://www.mitre.org/" target="_blank">The MITRE Corporation</a>, sponsored by the <a href="http://www.us-cert.gov/" target="_blank">National Cyber Security Division</a> of the <a href="http://www.dhs.gov/" target="_blank">U.S. Department of Homeland Security</a>.<br />Approximately six months ago I was discussing open redirect vulnerabilities with Steven Christey of MITRE, who mentioned that that CWE <a href="http://web.archive.org/web/20080114070538/http://cwe.mitre.org/data/definitions/601.html" target="_blank">entry</a> for open redirects was sparse and dated, with little reference material. In particular, he pointed out the lack of defining papers. I accepted this information as a challenge and produced an article that was published in <a href="http://www.net-security.org/dl/insecure/INSECURE-Mag-17.pdf" target="_blank">(IN)SECURE Issue 17</a>. Soon after Issue 17 went live, I also took note of an excellent academic paper specific to the topic of open redirect vulnerabilities; Shue, Kalafut and Gupta's <a href="http://www.cs.indiana.edu/cgi-pub/cshue/research/woot08.pdf" target="_blank">Exploitable Redirects on the Web: Identification, Prevalence, and Defense</a>. Complete with these two papers as references, as well as two current CVE identifiers for popular web applications suffering from open redirect vulnerabilities (discovered by yours truly), CVE-2008-<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2052" target="_blank">2052</a> & <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2951" target="_blank">2951</a>, <a href="http://cwe.mitre.org/data/definitions/601.html" target="_blank">CWE-601: URL Redirection to Untrusted Site (aka 'Open Redirect')</a> is now current and complete.<br />As open redirects are undoubtedly one of my <a href="http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html" target="_blank">biggest</a> <a href="http://holisticinfosec.blogspot.com/2008/07/bitrix-open-redirect-vulnerability.html" tagte="_blank">pet</a> <a href="http://holisticinfosec.blogspot.com/2008/06/open-redirect-vulnerabilities-article.html" target="_blank">peeves</a>, I am pleased to no end. Hopefully CWE-601 will help drive more application vendors and site operators to put an end to this easily mitigated vulnerability.<br /><br /><span style="font-style:italic;">CWE:<br />"International in scope and free for public use, CWE™ provides a unified, measurable set of software weaknesses that is enabling more effective discussion, description, selection, and use of software security tools and services that can find these weaknesses in source code and operational systems as well as better understanding and management of software weaknesses related to architecture and design."</span><br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/10/open-redirects-and-common-weakness.html&title=Open%20Redirects%20and%20Common%20Weakness%20Enumeration " title="Open Redirects and Common Weakness Enumeration ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/10/open-redirects-and-common-weakness.html" title="Open Redirects and Common Weakness Enumeration ">digg</a> | <a href="http://slashdot.org/submit.pl?url=http://holisticinfosec.blogspot.com/2008/10/open-redirects-and-common-weakness.html">Submit to Slashdot</a>]]></content:encoded>
      <pubDate>Thu, 16 Oct 2008 10:58:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/redirects">redirects</category>
      <category domain="http://securityratty.com/tag/common weaknesses enumeration">common weaknesses enumeration</category>
      <category domain="http://securityratty.com/tag/weaknesses">weaknesses</category>
      <category domain="http://securityratty.com/tag/redirect">redirect</category>
      <category domain="http://securityratty.com/tag/cwe">cwe</category>
      <category domain="http://securityratty.com/tag/redirect vulnerabilities">redirect vulnerabilities</category>
      <category domain="http://securityratty.com/tag/cwe-601">cwe-601</category>
      <category domain="http://securityratty.com/tag/software weaknesses">software weaknesses</category>
      <category domain="http://securityratty.com/tag/cve">cve</category>
      <source url="http://holisticinfosec.blogspot.com/2008/10/open-redirects-and-common-weakness.html">Open Redirects and Common Weakness Enumeration</source>
    </item>
    <item>
      <title><![CDATA[AOL Hosted Sites Distribute Malware]]></title>
      <link>http://securityratty.com/article/4a3128ea8d000bf53012678213df0d24</link>
      <guid>http://securityratty.com/article/4a3128ea8d000bf53012678213df0d24</guid>
      <description><![CDATA[Malware on AOL hosted pages has been recently reported by Alex Eckelberry from Sunbelt. It seems that it is not new and AOL is actually neglecting this issue, allowing visitors to get infected with...]]></description>
      <content:encoded><![CDATA[Malware on AOL hosted pages has been recently reported by Alex Eckelberry from Sunbelt. It seems that it is not new and AOL is actually neglecting this issue, allowing visitors to get infected with rogue software.
AOL’s German Hometown page has a number of pages that redirect to rogue antivirus programs like Antivirus XP (Do NOT [...]]]></content:encoded>
      <pubDate>Mon, 13 Oct 2008 23:21:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/aol">aol</category>
      <category domain="http://securityratty.com/tag/rogue antivirus programs">rogue antivirus programs</category>
      <category domain="http://securityratty.com/tag/antivirus">antivirus</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/alex eckelberry">alex eckelberry</category>
      <category domain="http://securityratty.com/tag/rogue software">rogue software</category>
      <category domain="http://securityratty.com/tag/pages">pages</category>
      <category domain="http://securityratty.com/tag/recently">recently</category>
      <category domain="http://securityratty.com/tag/visitors">visitors</category>
      <source url="http://cyberinsecure.com/aol-hosted-sites-distribute-malware/">AOL Hosted Sites Distribute Malware</source>
    </item>
    <item>
      <title><![CDATA[One Spam to rule them all!]]></title>
      <link>http://securityratty.com/article/98ecd80e92097113f4263e7aaaa199fb</link>
      <guid>http://securityratty.com/article/98ecd80e92097113f4263e7aaaa199fb</guid>
      <description><![CDATA[If we only had a dollar for each spam we recieved, we could end the worlds money crisis


clipped from www.crime-research.org

40 Trillion Spam E-mails This Year



ComputerWorld did a nice story...]]></description>
      <content:encoded><![CDATA[<div > If we only had a dollar for each spam we recieved, we could end the worlds money crisis! </div>
<table cellpadding="0" cellspacing="0" width="100%" style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;">
<tr>
<td valign="top">
<table cellpadding="0" cellspacing="0" width="100%" style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;">
<tr>
<td valign="top"><a href="http://clipmarks.com/clipmark/01DFE693-83B7-4810-AD2E-2CED7E7BF518/" title="go to this clipmark"><img src="http://content.clipmarks.com/blog_icon/3a2e3708-2633-47c0-9ed8-7e1d97290b47/01DFE693-83B7-4810-AD2E-2CED7E7BF518/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://www.crime-research.org/news/10.10.2008/3618/" href="http://www.crime-research.org/news/10.10.2008/3618/" style="font-size: 11px;">www.crime-research.org</a></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/10.10.2008/3618/ -->
<div style="margin: 4px 0px; color: #000000; font-size: 20px;">40 Trillion Spam E-mails This Year
</div>
</td>
</tr>
</table>
<div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div>
<table cellpadding="0" cellspacing="0" width="100%" style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;">
<tr>
<td valign="top"><!-- CLIPPED FROM: http://www.crime-research.org/news/10.10.2008/3618/ --><DIV><br />
ComputerWorld did a nice story called Spam Filters: Making Them Work relying on the Ferris numbers. However, the lesson we should learn is buried deeper in the details: spam is no longer a nuisance that clogs inboxes, it&#8217;s a security issue. The majority of spam messages now try to breach security on the computer reading the message, or redirect the user to a Web site full of malware etc. </DIV></td>
</tr>
</table>
</td>
</tr>
</table>
<div style="margin: 0px 6px 6px 4px;">
<table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td>
<td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/01DFE693-83B7-4810-AD2E-2CED7E7BF518/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td>
</tr>
</table>
</div>
</td>
</tr>
</table>
<BR/><MAP name="bdv_RSS_Ad_111008113702"><AREA alt="Feed Ads By BidVertiser.com" shape="poly" coords="0,0,467,0,467,45,315,45,315,59,0,59" href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=111008113702&amp;click=1" target="_blank" /><AREA alt="Feed Ads By BidVertiser.com" shape="rect" coords="315,45,467,59" href="http://www.bidvertiser.com/bdv/bidvertiser/bdv_ref.dbm?Ref_PID=165886&amp;Ref_Option=main&amp;source=90614506" target="_blank" /></MAP><P><a href="http://secure.bidvertiser.com/performance/bdv_rss_rd.dbm?pid=165886&amp;bid=400950&amp;PHS=111008113702&amp;click=1" target="_blank"><IMG src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=165886&amp;bid=400950&amp;PHS=111008113702&amp;rssimage=1&amp;rSRC=2" border="0" usemap="#bdv_RSS_Ad_111008113702" /></a></P>]]></content:encoded>
      <pubDate>Sat, 11 Oct 2008 19:37:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/spam">spam</category>
      <category domain="http://securityratty.com/tag/spam messages">spam messages</category>
      <category domain="http://securityratty.com/tag/trillion spam e-mails">trillion spam e-mails</category>
      <category domain="http://securityratty.com/tag/spam filters">spam filters</category>
      <category domain="http://securityratty.com/tag/worlds money crisis">worlds money crisis</category>
      <category domain="http://securityratty.com/tag/security issue">security issue</category>
      <category domain="http://securityratty.com/tag/breach security">breach security</category>
      <category domain="http://securityratty.com/tag/clogs inboxes">clogs inboxes</category>
      <category domain="http://securityratty.com/tag/web site">web site</category>
      <source url="http://spywarebiz.com/spywarebizblog/?p=640">One Spam to rule them all!</source>
    </item>
    <item>
      <title><![CDATA[XSF & XSS: Double your pleasure, double your fun]]></title>
      <link>http://securityratty.com/article/1fae85d8335f0c9fbe56b8858c8692c2</link>
      <guid>http://securityratty.com/article/1fae85d8335f0c9fbe56b8858c8692c2</guid>
      <description><![CDATA[If you've read this blog, or those of my peers, you're likely quite familiar with cross-site scripting, and the problems associated with open redirect vulnerabilities. A vulnerability you may be less...]]></description>
      <content:encoded><![CDATA[If you've read this blog, or those of my peers, you're likely quite familiar with cross-site scripting, and the problems associated with open redirect vulnerabilities. A vulnerability you may be less familiar with is <a href="http://www.xssed.com/news/26/Cross-site_framed/" target="_blank">cross-site framing</a>, which largely couples the best of both above-mentioned vulnerabilities. <br />What then, if there's a cross-site framing vulnerability coupled with cross-site scripting in the content offered by the frame? All sorts of problems come to mind: phishing, malware, credential theft; all arguably twice removed from the attacker's source, tucked away in the context of two victim sites.<br />First, I'll discuss the original XSS issue that led to this finding.<br />Recently, I was investigating a flawed parameter in <a href="http://www.openhire.com/" target="_blank">Openhire</a>, a career posting vendor used by major companies like <a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?company_id=15635&version=1" target="_blank">Crate&Barrel</a>, Eileen Fisher, Enterprise, Benjamin Moore, Scottrade, and Getty Images.<br />Most of these sites simply link to the Openhire offering that hosts job postings on their behalf which, in turn, has been crafted to look like the referring site.<br />As an example, here's Scottrade's employment page hosted by Openhire.<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?version=1&company_id=15624" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?version=1&company_id=15624</a></span><br /><br />Standard stuff, looks nicely like the Scottrade site, so everything's cool, right?<br />Wrong? What if someone hosting a service on your behalf suffers a security gap?<br /><span style="font-weight:bold;">You're only as strong as your weakest link!</span><br />Here's the posting for an Application Security Engineer (funny, eh?) at Scottrade as hosted on their behalf by Openhire:<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=976367&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters%3B%3B%3BInformation%20Technology%3B%3B%3BSecurity&startflag=3&CFID=66851845&CFTOKEN=29a95-d12594d4-47d9-49e8-9067-1091bdf68e80" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=976367&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters%3B%3B%3BInformation%20Technology%3B%3B%3BSecurity&startflag=3&CFID=66851845&CFTOKEN=29a95-d12594d4-47d9-49e8-9067-1091bdf68e80</a></span><br /><br />Now here the same job posting spewing massive cookie data:<br /><br /><span style="font-style:italic;"><a href="http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3" target="_blank">http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3</a></span><br /><br />Screen shot offered below, as the code above will likely be repaired very soon by Openhire. I notified them this past Thursday.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNcebDIT4JI/AAAAAAAAADA/2umzh0wbmmw/s1600-h/Scottrade_Openhire.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNcebDIT4JI/AAAAAAAAADA/2umzh0wbmmw/s320/Scottrade_Openhire.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248697340769067154" /></a><br /><br />It's bad enough when there's an application security hole in code someone else is hosting on your behalf, but what if your method of displaying said code is also at risk? Enter the Getty Images Jobs page.<br /><br /><span style="font-style:italic;"><a href="http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=careeropps&startflag=0&company_id=15531&version=2&CFID=12265212&CFTOKEN=60213778" target="_blank">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=careeropps&startflag=0&company_id=15531&version=2&CFID=12265212&CFTOKEN=60213778</a></span><br /><br />Watch what happens when you pull the Openhire code. Can you say self-replicating frame loop from hell (in Firefox)? Trust me your browser will crash if you leave this running too long. This will likely be fixed soon, so if the URL doesn't work, the screen shot exemplifies the issue.<br /><br /><a href="http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html" target="_blank">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html</a><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://4.bp.blogspot.com/_kVOWaY1TAF0/SNcqO933d4I/AAAAAAAAADY/SSzLv3ZpiN0/s1600-h/GettyonGetty.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://4.bp.blogspot.com/_kVOWaY1TAF0/SNcqO933d4I/AAAAAAAAADY/SSzLv3ZpiN0/s320/GettyonGetty.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248710327339022210" /></a><br /><br />What if, instead of Openhire's Getty Images page, or nothing at all (which obviously creates its own issue), we drop in an arbitrary URL?<br />Yep, you guessed it.<br /><span style="font-style:italic;"><br />http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://www.xssed.com/news/26/Cross-site_framed/</span><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://2.bp.blogspot.com/_kVOWaY1TAF0/SNcmqF3wQyI/AAAAAAAAADI/EhR6rYOmwlI/s1600-h/Getty_XSF.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://2.bp.blogspot.com/_kVOWaY1TAF0/SNcmqF3wQyI/AAAAAAAAADI/EhR6rYOmwlI/s320/Getty_XSF.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248706395295990562" /></a><br /><br />Now, bringing it all home for double the pleasure, double the fun, what if we coupled the original Openhire cross-site scripting vuln with Getty Images cross-site frame vuln?<br /><br />It hurts twice as much, in my book.<br /><br /><span style="font-style:italic;">http://www.gettyimagesjobs.com/gettyImagesJobsDisplay.html?http://hostedjobs.openhire.com/epostings/jobs/submit.cfm?fuseaction=dspjob&id=23&jobid=130527&company_id=15624&version=1&source=ONLINE&JobOwner=%22%3E%3CSCRIPT%3Ealert(document.cookie)%3C/SCRIPT%3E&level=levelid3&levelid3=18247&parent=St.%20Louis%20Corporate%20Headquarters;;;Information%20Technology;;;Security&startflag=3</span><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNco1c6ensI/AAAAAAAAADQ/QaKByEFozTU/s1600-h/Getty%2BScottrade.png" target="_blank"><img style="cursor:pointer; cursor:hand;" src="http://1.bp.blogspot.com/_kVOWaY1TAF0/SNco1c6ensI/AAAAAAAAADQ/QaKByEFozTU/s320/Getty%2BScottrade.png" border="0" alt=""id="BLOGGER_PHOTO_ID_5248708789483249346" /></a><br /><br />The lessons learned:<br />1) Ensure your partners are writing secure code on you behalf.<br />2) Ensure that the code you utilize to incorporate said partner's code is also well written. ;-)<br /><br />Double the headache, double the dumb.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html&title=XSF%20&%20XSS:%20Double%20your%20pleasure,%20double%20your%20fun " title="XSF & XSS: Double your pleasure, double your fun ">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html" title="XSF & XSS: Double your pleasure, double your fun ">digg</a>]]></content:encoded>
      <pubDate>Sun, 21 Sep 2008 17:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/openhire code">openhire code</category>
      <category domain="http://securityratty.com/tag/openhire">openhire</category>
      <category domain="http://securityratty.com/tag/original openhire cross-site">original openhire cross-site</category>
      <category domain="http://securityratty.com/tag/scottrade site">scottrade site</category>
      <category domain="http://securityratty.com/tag/scottrade">scottrade</category>
      <category domain="http://securityratty.com/tag/cross-site">cross-site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/secure code">secure code</category>
      <category domain="http://securityratty.com/tag/code">code</category>
      <source url="http://holisticinfosec.blogspot.com/2008/09/xsf-xss-double-your-pleasure-double.html">XSF &amp; XSS: Double your pleasure, double your fun</source>
    </item>
    <item>
      <title><![CDATA[Business In Thailand - Part 1: The Challenge]]></title>
      <link>http://securityratty.com/article/9f1f804e00135ef904eb97970171c32e</link>
      <guid>http://securityratty.com/article/9f1f804e00135ef904eb97970171c32e</guid>
      <description><![CDATA[Recently someone asked about business in Thailand.Here is my first post on this challenging topic
First of all, as background information, I learned the Thai alphabet(script with 44 consonants and 32...]]></description>
      <content:encoded><![CDATA[<p>Recently someone asked about business in Thailand.  Here is my first post on this challenging topic:</p>
<p>First of all, as background information, I learned the Thai alphabet (script with 44 consonants and 32 vowels) nearly 20 years ago, so I have have a pretty decent foundation for the Thai language compared to most foreigners visting or working in Thailand.   I can read (slowly) and speak better than 99.99+ percent of all foreigners in Thailand.  For this reason, I thought it was &#8221;the right thing to do&#8221; to redirect my career to a &#8220;new challenge&#8221; in the business climate of Thailand as I continue to improve my foreign language skills.   I wanted to help Thailand progress in IT and IT security, so where else would I go but where I have second language skills?</p>
<p>This was no small decision as you can imagine.  Your career and life changes quite dramatically when you give up a long established consulting practice in the US and dive into business in a foreign land, seeking a new challenge.  I can frankly tell you thatit is more difficult to do business in Thailand (as a foreigner) than I expected, for a number of reasons.  Here is my first off-topic post on this topic.</p>
<p>First of all, it is not legal for foreigners to directly own land in Thailand.  Foreigners can &#8221;own&#8221; land using a variety of legal loopholes, proxy owners and shell companies; but all of this is risky and not advised.  Many foreigners lose a lot of money coming to Thailand and attempting to buy land via various &#8220;structures&#8221;.  Some get lucky, but the entire process of foreigners buying and selling land is quite risky and not recommended.</p>
<p>Foreigners can legally own condominiums, under certain conditions, but this &#8220;foreign market&#8221; results in inflated prices for condos in Thailand that are traded in an &#8220;artificial market place&#8221; designed for foreigners.   Condos in Bangkok and major resort areas that are up-to-par with condos in the US can easily cost more than condos in major cities in the US.  Hence, the cost of living in Thailand is not as economical as some might believe when you visit Thailand as a tourist.</p>
<p>Second, business in Thailand can best be described as protectionism with discrimination where the government has placed many barriers to entry to foreigners working and competing in Thailand.     Every foreigner must have a work permit and these work permits are expensive and time consuming to maintain.   If you own a business you must pay high professional service fees for &#8220;auditors&#8221; to perform annual and semiannual audits regardless of how much income you have (including zero).   Firms in Thailand charge thousands of dollars for these &#8221;audits&#8221;.      </p>
<p>Third, if you operate a business in Thailand, you must have a place of business (you cannot legally work from your condo you bought at high prices!), so you are forced, by law, to lease office space.   Foreigners from the US, for example, must be paid a minimum of 50,000 Thai Baht per month, so the government will take 10 percent of that each month as their share of tax withholdings.  Startups with no income simply pay income taxes against their personal savings to comply with the law.  Therefore, to start a company and maintain the business in Thailand, you are required to pay significant startup, monthly, semi-annual and annual fees, permits, tax, leases, visas, etc. </p>
<p>Forth, generating incoming revenue in Thailand can be quite difficult in a climate of both protectionism and discrimination.   In Thailand, it is easy when you are spending money.  This is the &#8221;Land of Smiles&#8221; that tourists see and experience.   However, when you are legally permitted to work in Thailand and trying to generate in-country income, you cannot help but notice the protectionism and discrimination against foreigners working and living here.  Many foreigners working in Thailand just &#8220;give up&#8221; because the barriers to business success are quite high.</p>
<p>Fifth, on top of the challenges of protectionism/discrimination regarding foreigners and foreign investments, which I have only just scratched the surface here, is the overall global business slowdown combined with a climate of political instability which I am sure you have seen in the news.  Thailand has seen 18 coups since 1932.   Currently, <a href="http://www.independent.co.uk/news/world/asia/state-of-emergency-declared-in-thailand-916866.html" target="_blank">Thailand is under a State-of-Emergency </a> which negatively impacts business even more.  Sound challenging? </p>
<p>Most people who live and work in Thailand have the opinion that it is far better to enjoy being a tourist here. Working in Thailand is very difficult for many reasons.   Being a tourist in Thailand is completely different than working here.  When you are a tourist, foreign currently flows from you into Thailand, so life in Thailand as a tourist is fun and friendly, hence the &#8220;Land of Smiles&#8221; you have heard about or experienced.     However, when you are working in Thailand and trying to generate income from Thailand versus bringing in foreign currency, you don&#8217;t see the &#8220;Land of Smiles&#8221; quite the same anymore.</p>
<p>Without getting into too many details in this post, I can simply say that a foreigner doing business in Thailand experiences both protectionism and discrimination.  I came to Thailand hoping to contribute my experience to help the Kingdom.  However, sometimes it feels like foreigners are only welcome if you are working for free, giving seminars for free, and bringing in lots of foreign currency here.</p>
<p>In a future post on business in Thailand I will dive into some details on a number of topics that might be of interest to readers who will never have a chance to come and work here.   </p>
]]></content:encoded>
      <pubDate>Fri, 05 Sep 2008 10:16:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/thailand">thailand</category>
      <category domain="http://securityratty.com/tag/visit thailand">visit thailand</category>
      <category domain="http://securityratty.com/tag/thailand progressin">thailand progressin</category>
      <category domain="http://securityratty.com/tag/thailand chargethousands">thailand chargethousands</category>
      <category domain="http://securityratty.com/tag/lifein thailand">lifein thailand</category>
      <category domain="http://securityratty.com/tag/foreigners">foreigners</category>
      <category domain="http://securityratty.com/tag/foreigners canown">foreigners canown</category>
      <category domain="http://securityratty.com/tag/businessin thailand">businessin thailand</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <source url="http://www.thecepblog.com/2008/09/05/business-in-thailand-part-1-the-challenge/">Business In Thailand - Part 1: The Challenge</source>
    </item>
    <item>
      <title><![CDATA[Scammers Avoid Spam Detection By Using Redirection In Adobe Flash Files And ImageShack.com Free Hosting]]></title>
      <link>http://securityratty.com/article/3ca3b30ea3e958da67db13cc2c0f1325</link>
      <guid>http://securityratty.com/article/3ca3b30ea3e958da67db13cc2c0f1325</guid>
      <description><![CDATA[Anti-spam service MessageLabs reports a new way found by scammers to bypass anti-spam filters. This time scammers are utilizing Adobe Flash files and free websites hosting services. Spam messages with...]]></description>
      <content:encoded><![CDATA[Anti-spam service MessageLabs reports a new way found by scammers to bypass anti-spam filters. This time scammers are utilizing Adobe Flash files and free websites hosting services.
Spam messages with harmless-looking content contain links to Flash-based files on free image hosting services like ImageShack.com. The commands embedded in flash files redirect the recipient to sites that [...]]]></content:encoded>
      <pubDate>Thu, 04 Sep 2008 15:59:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/files">files</category>
      <category domain="http://securityratty.com/tag/adobe flash files">adobe flash files</category>
      <category domain="http://securityratty.com/tag/flash files redirect">flash files redirect</category>
      <category domain="http://securityratty.com/tag/scammers">scammers</category>
      <category domain="http://securityratty.com/tag/bypass anti-spam filters">bypass anti-spam filters</category>
      <category domain="http://securityratty.com/tag/time scammers">time scammers</category>
      <category domain="http://securityratty.com/tag/imageshack">imageshack</category>
      <category domain="http://securityratty.com/tag/free websites">free websites</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <source url="http://cyberinsecure.com/scammers-avoid-spam-detection-by-using-redirection-in-adobe-flash-and-imageshack-hosting/">Scammers Avoid Spam Detection By Using Redirection In Adobe Flash Files And ImageShack.com Free Hosting</source>
    </item>
    <item>
      <title><![CDATA[Business In Thailand - Part 1: The Challenge]]></title>
      <link>http://securityratty.com/article/ea0ac16a8a09729fec092a6a2c0a7e21</link>
      <guid>http://securityratty.com/article/ea0ac16a8a09729fec092a6a2c0a7e21</guid>
      <description><![CDATA[Recently someone asked about business in Thailand.Here is my first post on this topic
First of all, I learned the Thai alphabet nearly 20 years ago, so I have have a pretty good foundation for the...]]></description>
      <content:encoded><![CDATA[<p>Recently someone asked about business in Thailand.  Here is my first post on this topic:</p>
<p>First of all, I learned the Thai alphabet nearly 20 years ago, so I have have a pretty good foundation for the Thai language.   I can read (slowly) and speak better than 99.99+ percent of all foreigners in Thailand; so, I thought it was time to redirect my career to a &#8220;new challenge&#8221; in the business climate of Thailand.   </p>
<p>This was no small decision.  Your career changes dramatically when you give up a successful consulting practice in the US and dive into business in a foreign land for a new challenge.  I can frankly tell you that often the challenge is sometimes overwhelming.    It is quite difficult as a foreigner to do business in Thailand.</p>
<p>First of all, it is not legal for foreigners to own land in Thailand.  Foreigners can &#8221;own&#8221; land using a variety of legal loopholes, proxy owners and shell companies; but all of this is risky and not advised.  Foreigners lose a lot of money coming to Thailand and attempting to buy land.  Some get lucky, but the entire process of foreigners buying and selling land is quite risky.</p>
<p>Foreigners can own condos, under certain conditions, but this results in  inflated prices for condos in Thailand that are traded in an artificial market place.   Condos that are up-to-par with condos in the US can easily cost more than condos in major cities in the US.  Hence, the cost of living is not as cheap as some might believe.</p>
<p>Business can best be described as &#8220;protectism&#8221; where the government has placed many barriers to entry to foreigners working in Thailand.     Every foreigner must have a work permit and these work permits are expensive and time consuming to maintain.   If you own a business you must pay high professional service fees for auditors to perform annual and semiannual audits even if your business has no income yet.   Firms in Thailand charge thousands of dollars for these &#8221;audits&#8221;.      </p>
<p>In addition, if you operate a business, you must have a place of business, so you are forced to lease office space.   Foreigners from the US must be paid a minimum of 50,000 Thai Baht per month, so the government will take 10 percent of that each month as their share of tax withholdings.   Therefore, to start a company, you will pay a lot of money in startup fees, permits, tax, leases, visas, etc.  The entire system is designed to secure money from you, even if you do not have a penny of incoming revenue.</p>
<p>Of course, generating incoming revenue can be quite difficult in a climate of protectionism.   In Thailand, it is easy when you are spending money.  When you are trying to generate income from Thailand, as a foreigner the challenge can seem overwhelming at times.   Many foreigners here give up because the barriers to business here are very high.</p>
<p>On top of all these challenges, which I have not described in detail, is the overall global business slowdown combined with a climate of political instability, which I am sure you have seen in the news.  </p>
<p>Most people I know say it is better to be a tourist here.   Being a tourist is completely different.  Money flows from you, so life in Thailand is fun and friendly, complimentary to the &#8220;Land of Smiles&#8221; you have heard about.     However, when you are working to have money flow the other direction, flow to you versus away from you, you don&#8217;t see the &#8220;Land of Smiles&#8221; as tourists experience.</p>
<p>Without getting into too many details, I can simply say that a foreigner doing business in Thailand experiences protectionism and, to a certain degree, discrimination, and sometimes I wonder if coming here for a &#8220;business challenge&#8221; was a good idea.    I was seeking a &#8220;new challenge&#8221; and I got more than I bargained for!</p>
<p>In a future post on business in Thailand I will discuss issues regarding how little value is placed in intellectual property in Thailand and how this adversely impacts professional services.    I will also touch on how this lack of regard for intellectual property impacts a consulting practice.   Also, I will touch on some cultural differences in how Thais appear to view teamwork, which is very different than in the US.</p>
<p> </p>
]]></content:encoded>
      <pubDate>Thu, 04 Sep 2008 10:16:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/challenge">challenge</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/thailand">thailand</category>
      <category domain="http://securityratty.com/tag/business challenge">business challenge</category>
      <category domain="http://securityratty.com/tag/global business slowdown">global business slowdown</category>
      <category domain="http://securityratty.com/tag/thailand chargethousands">thailand chargethousands</category>
      <category domain="http://securityratty.com/tag/foreigners">foreigners</category>
      <category domain="http://securityratty.com/tag/money">money</category>
      <category domain="http://securityratty.com/tag/money flows">money flows</category>
      <source url="http://www.thecepblog.com/2008/09/04/business-in-thailand-part-1-the-challenge/">Business In Thailand - Part 1: The Challenge</source>
    </item>
  </channel>
</rss>
