full-disclosure - Re: All China, All The Time

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <09130A33C60C9C4982D35105CBABB27827B706240A@Exchange.hammerofgod.com>
Date: Fri, 15 Jan 2010 09:17:26 -0800
From: "Thor (Hammer of God)" <thor@...merofgod.com>
To: James Matthews <nytrokiss@...il.com>, "full-disclosure@...ts.grok.org.uk"
	<full-disclosure@...ts.grok.org.uk>
Subject: Re: All China, All The Time

Not based on what I've read - it was a coordinated attack via email attachments, etc.  But who really knows?  Homeland Security described the "equipment" used in the "bombing" of flight 253 to be "a sophisticated device.  It was gunpowder sewn into the crotch of dude's tighty-whities.

But, I must say, at least someone found a use for that flap think in the front of the underwear.  I mean, I know what it's for, but I don't know anyone that actually uses it.

Oop, just made up a joke.  "What kind of underwear to Nigerian terrorists wear?  Fruit of the Boom."  Badum.

t

From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of James Matthews
Sent: Thursday, January 14, 2010 7:48 PM
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] All China, All The Time

They used an IE exploit to get in. I don't understand Google said that they used a complex way to access their systems. AFAIK many home users are hacked daily the same way....

On Thu, Jan 14, 2010 at 7:44 PM, Ivan . <ivanhec@...il.com<mailto:ivanhec@...il.com>> wrote:
Interesting article on zdnet, talking about the targeting of the
lawful intercept system at Google

...they [hackers] apparently were able to access a system used to help
Google comply with search warrants by providing data on Google users,
said a source familiar with the situation, who spoke on condition of
anonymity because he was not authorized to speak with the press.
"Right before Christmas, it was, 'Holy s***, this malware is accessing
the internal intercept [systems],'" he said.

http://blogs.zdnet.com/Foremski/?p=1047

2010/1/15 Michael Holstein <michael.holstein@...ohio.edu<mailto:michael.holstein@...ohio.edu>>:
>
>> With all the hubbub around China yet again, I would like to remind you of the utilities available at Hammer of God that allow one to completely block any or all traffic to or from China or any other country in the world via ISA/TMG.
>>
>
> Source for pre-built blocklists in DNSBL, CIDR, or Cisco ACL format :
>
> http://www.okean.com/thegoods.html
>
> Regards,
>
> Michael Holstein
> Cleveland State University
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

--
http://www.goldwatches.com

--

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/