D-kriptik Blog

Evgeny Legerov and the GLEG team have been fuzzing like mad with their ProtoVer toolset. A quick glance at the recent archives of the Daily Dave list shows 0-days have been just been flying by, the latest coming less than a day ago.

Interesting Isode M-Vault Server 11.3 bug revealed with ProtoVer Sample LDAP (platform: FC4):

Program received signal SIGABRT, Aborted.
[Switching to Thread -1534674000 (LWP 3674)]

Previous examples on the list can be found here, here, here, here, and here.

Dave Aitel puts it best.

One of the reporters on this list should do a paper on “why do fuzzers still work?” Surely if you’re implementing a complex protocol of some sort and you follow this new fangled “test driven development” fad, then clearly you’ve written a few fuzzers in your time. But as Evgeny’s latest entry shows: fuzzers are still more fun than a botnet on all of your ex’s computers. Well, maybe not MORE fun. But nearly as fun. Well, pretty damn fun, anyways

And, via Schneier, yet more stories telling you why to leave that cellphone at home.

But the FBI and the U.S. Department of Justice have seized on the ability to locate a cellular customer and are using it to track Americans’ whereabouts surreptitiously–even when there’s no evidence of wrongdoing.

Lovely.

And, what about all those patches?

Microsoft Security Bulletin Summary for February, 2006
Published: February 14, 2006

Version: 1.0

Included in this advisory are updates for newly discovered vulnerabilities. These vulnerabilities, broken down by severity are:

Critical (2)

Important (5)

But, don’t lose HOPE.

Warning:
Don’t make any plans this summer until you read the following.

HOPE Number Six will be taking place at New York City’s Hotel Pennsylvania on
July 21, 22, and 23, 2006.

Now you can make your plans.

What is HOPE?

The HOPE conferences have been running since 1994. HOPE stands for Hackers On Planet Earth and it has become a gathering point for thousands of computer hackers, phone phreaks, net activists, government spooks, and a whole lot of curious people from all corners of the globe. This will be our sixth one (hence the name) and we expect to continue to grow and have more imaginative events, cool speakers, and fun projects than ever before.

And, via BoingBoing, share a little love.

It’s not a flash mob, it’s a

PILLOW FIGHT!!!

Rules:

1) Tell everyone you know about PILLOW FIGHT!!!
2) Wait for the Ferry Building clock to strike 6:00pm
3) Don’t hit anyone with out a pillow (unless they want it)
4) Don’t hit anyone with a camera
5) HAVE FUN!!!

(Rain plan: put your pillow in a plastic bag, see Rules 1 – 5)

It’s Valentine’s Day afterall, and we love you.

This entry was posted on Tuesday, February 14th, 2006 at 5:25 pm and is filed under Off-topic, Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.