NewsFactor Network | Black Hat Hears Security Details as Reporters Booted

The Black Hat Security Conference got off to a fast start with two reporters from a security magazine kicked out for trying to hack the pressroom systems. In other highlights at the Black Hat conference, Dan Kaminsky outlined how to hack DNS, serious holes in Google Gadgets were discussed and Cisco vulnerabilities were on the agenda.

Day one of the Black Hat Security Conference in Las Vegas got off to a hot start with details about DNS and e-mail flaws, Google gaffes, and Cisco vulnerabilities. And some French reporters were kicked out for trying to hack the pressroom facilities.

The Black Hat conference is the premiere conference for the latest in security news and tools. Nearly 7,000 attendees are listening to presentations on phishing, hacking and malware, and many are taking comprehensive training on the latest security tools and techniques to protect their networks.
Kaminsky Details DNS Flaw

Dan Kaminsky gave an in-depth briefing of the much-reported DNS flaw he discovered, with some startling new wrinkles.

First and foremost, Kaminsky estimated that only 70 percent of Fortune 500 servers have rolled out a DNS patch. Despite the fact that many servers are still exposed, Kaminsky ran through a detailed laundry list of ways to exploit the flaw before a standing-room only crowd. He may have been pushing laggards to fix the problem by releasing details.

By listening to his presentation, a hacker would have a road map to develop multiple exploits. Kaminsky also spoke in detail on how patches prevent such attacks.

Google Gadgets Vulnerable

Next up for security woes was Google's Gadgets. According to conference presenters Tom Stracener and Robert "RSnake" Hansen, Google's popular desktop gizmos are a gaping security hole waiting to be exploited. Gadgets run a variety of small tasks, such as a desktop calendar, news-feed windows, or the latest crossword puzzle.

Stracener and Hansen highlighted some scenarios.

First, a malicious Google gadget could be added to users' desktops without their knowledge, monitoring activities and collecting sensitive information.

A malicious gadget could also be used to collect account information, trigger other malicious gadgets and send users to bogus sites to fill out forms with sensitive information.

They also demonstrated JavaScript hacks of Google gadgets, underscoring their vulnerability. The duo warned that as businesses deploy desktop gadgets, significant business data could be at risk.

When Reporters Hack

InfoWorld reported that reporters from a French security magazine, Global Security Mag, were tossed out of the Black Hat conference after an apparent reporter-led hack of the pressroom facilities. Apparently the French journalists were attempting to snoop on their rivals to determine what stories they were filing.

According to a later report, the victim was a reporter working for eWeek. His password was intercepted by the French journalists using a well-known hacking technique on the unsecured portion of the LAN in the pressroom.

After the incident, eWeek had to reset its online story-filing passwords to protect its system. Sphere: Related Content

Georgia cyberwar overblown - Network World

Last week Russian tanks rolled into South Ossetia while Russian bombers were taking out critical communications infrastructure. But even before the first tank rolled across the disputed borders, another war was brewing in cyberspace. Sphere: Related Content

EASEUS Disk Copy: Free Disk Copy Software. Sector by Sector for hard drive backup tool.

Disk Copy 2.0 is a potent freeware providing sector-by-sector disk/partition copy regardless of your operating system, file systems and partition scheme. The sector-by-sector method assures you a copy 100% identity to the original. EASEUS Disk Copy can be used for copy, cloning, or upgrading your original small hard drive to a new larger drive. Simply speaking, it can copy anything from the old hard drive including the deleted, lost files and inaccessible data Sphere: Related Content

Dutch police, FBI rein in large botnet - Network World

The botnet created by a teenager who was arrested by Dutch police in a sting operation
is most notable for its total reliance on social engineering to spread, computer security
experts said Thursday. Sphere: Related Content

Anti-Georgia spammers building new botnet - Network World

Hackers targeting Georgia in the midst of its conflict with Russia have started sending out a new batch of malicious spam messages, apparently with the aim of building a new botnet network of remote-controlled computers. Sphere: Related Content

Judge refuses to lift gag order on MIT students in Boston subway-hack case

Judge refuses to lift gag order on MIT students in Boston subway-hack case

A federal judge in Boston today refused to lift a temporary restraining order preventing three MIT students from publicly discussing details of several security vulnerabilities that they found in the electronic ticketing system used by the city's mass transit authority. Sphere: Related Content

The dos and don'ts of IT job seeking - Network World

The dos and don'ts of IT job seeking - Network World

High-tech recruiter sheds light on how IT workers can help and hinder their job search with social networking sites. Sphere: Related Content

Kenyan economy to benefit from e-transaction law - Network World

Kenyan economy to benefit from e-transaction law - Network World:

"Kenya's ICT industry will contribute to at least one percent of economic growth if Parliament enacts proposed e-transaction legislation, said Marcel Werner, chairman of the Kenya ICT Federation." Sphere: Related Content

Inside the CIA's extreme technology makeover, part 4 - Network World

Inside the CIA's extreme technology makeover, part 4 - Network World:

"The CIA is undergoing a major transformation, and IT is playing a leading role. In Part 4 of our inside look at the agency, we look at how the CIA is working to 'play nicely' with the 15 other intelligence agencies. We also describe the IT department that CIO Al Tarasiuk leads and why he's protective of them and their efforts." Sphere: Related Content

The dirty half-dozen - Network World

The dirty half-dozen - Network World

Six types of rootkits and how to defend against them Sphere: Related Content

Russian hacker gang steals with impunity, says researcher

Russian hacker gang steals with impunity, says researcher

The Russian hacker gang using a Microsoft administration tool to steal passwords has cashed in big time for years, the researcher who has tracked the group's crimes said today.

A sampling of 11% of the stolen accounts found in one directory on the gang's command-and-control server found more than a quarter-million dollars at risk, said Joe Stewart, director of malware research at Atlanta-based SecureWorks Inc. Sphere: Related Content

Researchers mash Google Earth with electrical data to predict national grid problems | NetworkWorld.com Community

Researchers mash Google Earth with electrical data to predict national grid problems NetworkWorld.com Community

What do you get when you combine images from Google Earth and the brainpower from researchers at Oak Ridge National Labs? Well in this case you get a tool that enables real-time status of the national electric grid that federal state and local agencies can use to coordinate and respond to major problems such as wide-area power outages, natural disasters and other catastrophic events. Sphere: Related Content

Black Hat: U.S. cybersecurity director talks democracy, cyberjustice - Network World

Black Hat: U.S. cybersecurity director talks democracy, cyberjustice - Network World

The director of the National Cyber Security Center (NCSC), Rod Beckstrom, wants to see the nation’s traditions of democracy and human rights extend into the online world. Sphere: Related Content

Credit card thieves ran a polite, professional help desk - Network World

Credit card thieves ran a polite, professional help desk - Network World

The criminal network identified in the Justice Department indictments this week as having stole tens of millions of credit card numbers used people with skills in technology, finance and black markets -- some whom were notably polite, attentive and productive. Sphere: Related Content