A new release for TCPDump has been put onto the net as of September 25. With it, also a new release has been made for libpcap to 0.9.8. It will probably be the last release before tcpdump 4.0 will be released. The Changelog is here. Hmm, I do not think that the changelog has been updated.
Powered by ScribeFire.
CNN has a big video online which comments on a recent DHS security video showing the results of someone hacking real power-handling generators.
I think they are referring to SCADA, the technology used to control various pieces of hardware. By changing the internal settings of a generator, it’s quite easy to make that generator to go boom. Even though the CNN footage is a bit on the panicky side, it’s still a nice article.
I think this article is an interesting read. From the abstract:
The most serious attack is a replay attack on SDES,
which causes SRTP to repeat the keystream used for media
encryption, thus completely breaking transport-layer security.
We also demonstrate a man-in-the-middle attack on
ZRTP, which allows the attacker to convince the communicating
parties that they have lost their shared secret. If
they are using VoIP devices without displays and thus cannot
execute the “human authentication” procedure, they are
forced to communicate insecurely, or not communicate at
all, i.e., this becomes a denial of service attack. Finally, we
show that the key derivation process used in MIKEY cannot
be used to prove security of the derived key in the standard
cryptographic model for secure key exchange.
It appears that one problem with Tor is that there can be rogue nodes that can listen in on all outgoing traffic. Can I hear a very loud and resounding “Duh” here? If you are an exit node and not really interested in one particular target, it’s easy to intercept the traffic. No need to do anything complex, just see what’s coming by. When using Tor you trust the exit nodes.
A security researcher intercepted thousands of private e-mail messages
sent by foreign embassies and human rights groups around the world by
turning portions of the Tor internet anonymity service into his own
private listening post.
Technorati Tags: Security
It appears there are special wal-mart branches for criminals that need malware. I dubbed it mal-mart.
The global market for criminal malware now operates like a supermarket,
complete with special offers and volume discounts, a security company
has discovered.
