SEARCH RESULTS
 
Showing 1-10 of 29 records
 
Expand article

US Government Won't Cede Control Over DNS Root Zone

2008-08-01 10:54:13 by Editor in Cheap Hack
 
In a letter to ICANN Board chairman Peter Dengate-Thrush Meredith A. Baker, Acting Assistant Secretary for Communications and Information in the Commerce Department's NTIA (National Telecommunications and Information Administration) has declared that the US government has no plans to yield the control it now has over changes to the Internet's...
 
Tags: control, dns root zone, baker, joint project agreement, agreement, baker letter pulls, letter, internet dns derives, internet
 
 
 
 
Expand article

U.S. Government Won't Cede Control Over DNS Root Zone

2008-08-01 10:54:13 by Editor in Cheap Hack
 
In a letter to ICANN Board Chairman Peter Dengate Thrush, Meredith A. Baker, acting assistant secretary for communications and information in the Commerce Department's National Telecommunications and Information Administration, has declared that the U.S. government has no plans to yield the control it now has over changes to the Internet's DNS...
 
Tags: control, dns root zone, baker, joint project agreement, agreement, baker letter pulls, internet, letter, internet domain
 
 
 
 
Expand article

Armchair Legal Analysis of Sierra v. Ritz

2008-01-17 20:25:00 by Security Retentive in Security Retentive
 
You may have heard about the case of Sierra Corporate Design, Inc. v. David Ritz There has been lots of griping and complaining about the fact that doing zone transfers might be illegal. I thought I'd try to give the quick analysis of the case. I'm sure I'm missing a few things here and I'm not a lawyer, but I am a little tired of "hackers"...
 
Tags: dns zone transfers, zone transfers, trespass, prevent trespass, prevent zone transfers, computer, computer fraud, physical world trespass, lot murkier
 
 
 
 
Expand article

Fierce 1.0

The Article has images
2007-12-20 16:39:32 by RSnake in ha.ckers.org web application security lab
Okay, its about time. I am finally releasing Fierce 1.0 as a production ready DNS enumeration tool. What does that mean? It means it works. We have now gotten rid of all the kinks that made me think that it was crippled in a way that made me not want to rely on it. So what was fixed? Well, thanks to Jabra we have now patched fierce so that when...
 
Tags: fierce, fool fierce, production kinks, zone transfer, backtrack, production, dictionary, corp, kinks
 
 
 
 
Expand article

Getting into the Flow With Threat Modeling

The Article has images
2007-10-11 23:25:00 by sdl in The Security Development Lifecycle
Adam Shostack again, with the third in our series on threat modeling. In this post, I want to explain one of the lenses that seemed to help us focus threat modeling, and how Ive applied it The concept of flow originated with Mihaly Csikszentmihalyi. It refers to a state where people are energetically involved with what theyre doing. Seeing this...
 
Tags: threat, people develop skills, people, challenge people, flow, sdl threat, entire threat model, threat model, guide people
 
 
 
 
Expand article

From warzones to strip clubs, the truth comes out for a former First Lady and a Pastor.

2008-03-30 20:57:00 by John Sexton in The Bullet Proof Blog
 
Last week in the Washington Post, "The Fact Checker" awarded former first lady, Hillary Clinton, four "Pinocchios" (real whoppers)for claiming to have come under sniper fire during a photo op. in Bosnia. On Thursday, Michael Dobbs once again awarded Senator Clinton another "poker" of Pinocchios This time she took heat for claiming that her...
 
Tags: senator clinton, sniper fire, avoid sniper fire, role models, war zone, lady, pastor, air force col, persian gulf war
 
 
 
 
Expand article

Safari For Windows Vulnerabilities

2008-06-20 18:36:54 by Dave Lewis in Liquidmatrix Security Digest
 
This one came out early this morning From Secunia Description Some vulnerabilities and a security issue have been reported in Apple Safari, which can be exploited by malicious people to disclose sensitive information or to compromise a users system 1) A boundary error within the handling of BMP and GIF images can be exploited to trigger an...
 
Tags: safari, sites zone, zone, internet explorer, apple safari, sites, vulnerabilities, memory corruption, disclose sensitive information
 
 
 
 
Expand article

Network Solutions Frontrunning And Tasting, Version 1.1

The Article has images
2008-01-09 22:21:14 by Editor in Cheap Hack
After a round of bad publicity they had to be unhappy with, Network Solutions has announced modifications to their domain "protection" scheme . Under this new feature, about which I wrote extensively earlier today, they registered any available domain name you search for using their facilities. They did this purportedly to protect you from...
 
Tags: network solutions, domain names resolve, names, network solutions grab, protection, customer protection measure, resolve, domain, home page
 
 
 
 
Expand article

Okay to Spam, Bad to Fight it in South Dakota

2008-01-17 21:19:46 by RSnake in ha.ckers.org web application security lab
 
I saw this article today and I just thought it was just too amazing. So it turns out that in North Dakota one very technologically impaired judge felt that running a zone transfer, among other things, is illegal. David Ritz was attempting to shut down a spammer, using the normal tactics to find out who was running the server that youd expect,...
 
Tags: north dakota, judge, judge bob, giant leap backwards, district judge, cynthia rothe-seeger, zone transfer, public information, legal impunity