BGP Man in the Middle Attacks
August 27th, 2008
By prepending the relevant ASNs, the routers along the reply path will not accept the rogue route announcement as a fundamental principle of the BGP path-selection algorithm is that a router will not accept a route whose own ASN is within the AS-path so as to prevent routing loops. Thus, the routers along the reply [...]
Facebook – The next Social Engineering Tool
August 16th, 2008
Update (25/08/2008):
Someone who is far more familiar with Javascript then I am kindly explained what the code snippet above does. I’m not sure if he’s wants to be named so I’ll just quote “him”.
him: the little javascript snipplet you posted
him: basically just spits out
him: <script language=”Javascript”>window.top.location.href=’http://absvdfd87.com/’;</script>
him: which redirects you to http://tracking.profitsource.net/redir.aspx?CID=9725&AFID=28836&DID=44292
him: then spits back a [...]
Finch
August 2nd, 2008
Most IRC junkies will swear by irssi ( irssi.org ) in a screen ( gnu.org ) on a remote shell account. But what about MSN? Is is possible to run an MSN client from the command line?
Kaminsky DNS Cache Poisoning Flaw
July 24th, 2008
Since it’s been over 24 hours since an exploit for this was publicly released, I suppose it’s alright to be discussing this out in the open. After all this issue was probably last month’s news for anyone in the security research community.
Description (or as I understand it)
To put it in a nutshell, the attacker queries [...]
Youtube – Coming Soon to a Data Centre Near You
June 21st, 2008
With the almost endless (tera) bytes of content that it pushes out over the Internet each day, the online video behemoth Youtube has proven to be a problem for some ISPs who desperately try to keep their transit connections flowing in the face of increasing user demands for bandwidth.
In fact, on a major ISP in [...]
Steal Even More of This Film
June 1st, 2008
Here’s an update to this mini-article I wrote about a few months back – Steal This Film II ( bangky.net )
If you liked it, here’s what the people behind the film have to share with you.
Steal This Film 2 involved extensive research and numerous interviews. Due to time constraints, every documentary uses of only [...]
From Port 25 to the World
May 27th, 2008
Most people are aware that TCP port 25 is a reserved port number for the SMTP service. Unknown to many, however, is the existence of another reserved port – TCP/587 – for user submission of messages.
Proposed by RFC 2476 ( ietf.org ), the Message Submission Port is one that should be used by email clients, [...]
Stealing the L root nameserver
May 20th, 2008
L.root-servers.net was recently renumbered from 198.32.64.12 to 199.7.83.42
Well, not exactly recently, it was announced by ICANN in October 2007 ( icann.org )
But hey!.. I wouldn’t bet that many people out there are aware of this.
Having renumbered the server, queries to the old address should have automatically failed. Surprisingly however, queries to the old address continued [...]
Using Google SMTP Infrastructure for Spam
May 8th, 2008
Exploiting Google mail servers as open SMTP relays – ( securityfocus.com )
Gmail’s normal approach to messages sent though its SMTP service is to rewrite some of the Message Body headers to prevent identity fraud. By exploiting this flaw, an attacker can easily bypass this restriction. This happens because attack messages are disguised as legitimately destined [...]
Control Plane Policing
May 4th, 2008
Above the access layer, most networking equipment have their architecture divided into two main components – the forwarding plane and the control plane. Understandably, the forwarding plane looks up the next-hop and forwards packets with customized hardware ASICs or highly optimized software algorithms.
The control plane however, is a different thing altogether. Charged with the responsibility [...]