Archive for the ‘technology’ Category

 

BGP Man in the Middle Attacks

August 27th, 2008

By prepending the relevant ASNs, the routers along the reply path will not accept the rogue route announcement as a fundamental principle of the BGP path-selection algorithm is that a router will not accept a route whose own ASN is within the AS-path so as to prevent routing loops. Thus, the routers along the reply [...]

Read full article      No Comments

Facebook – The next Social Engineering Tool

August 16th, 2008

Update (25/08/2008):
Someone who is far more familiar with Javascript then I am kindly explained what the code snippet above does. I’m not sure if he’s wants to be named so I’ll just quote “him”.
him: the little javascript snipplet you posted
him: basically just spits out
him: <script language=”Javascript”>window.top.location.href=’http://absvdfd87.com/’;</script>
him: which redirects you to http://tracking.profitsource.net/redir.aspx?CID=9725&AFID=28836&DID=44292
him: then spits back a [...]

Read full article      5 Comments »

Finch

August 2nd, 2008

Most IRC junkies will swear by irssi ( irssi.org ) in a screen ( gnu.org ) on a remote shell account. But what about MSN? Is is possible to run an MSN client from the command line?

Read full article      No Comments

Kaminsky DNS Cache Poisoning Flaw

July 24th, 2008

Since it’s been over 24 hours since an exploit for this was publicly released, I suppose it’s alright to be discussing this out in the open. After all this issue was probably last month’s news for anyone in the security research community.
Description (or as I understand it)

To put it in a nutshell, the attacker queries [...]

Read full article      No Comments

Youtube – Coming Soon to a Data Centre Near You

June 21st, 2008

With the almost endless (tera) bytes of content that it pushes out over the Internet each day, the online video behemoth Youtube has proven to be a problem for some ISPs who desperately try to keep their transit connections flowing in the face of increasing user demands for bandwidth.
In fact, on a major ISP in [...]

Read full article      No Comments

Steal Even More of This Film

June 1st, 2008

Here’s an update to this mini-article I wrote about a few months back – Steal This Film II ( bangky.net )
If you liked it, here’s what the people behind the film have to share with you.
Steal This Film 2 involved extensive research and numerous interviews. Due to time constraints, every documentary uses of only [...]

Read full article      No Comments

From Port 25 to the World

May 27th, 2008

Most people are aware that TCP port 25 is a reserved port number for the SMTP service. Unknown to many, however, is the existence of another reserved port – TCP/587 – for user submission of messages.
Proposed by RFC 2476 ( ietf.org ), the Message Submission Port is one that should be used by email clients, [...]

Read full article      No Comments

Stealing the L root nameserver

May 20th, 2008

L.root-servers.net was recently renumbered from 198.32.64.12 to 199.7.83.42
Well, not exactly recently, it was announced by ICANN in October 2007 ( icann.org )
But hey!.. I wouldn’t bet that many people out there are aware of this.
Having renumbered the server, queries to the old address should have automatically failed. Surprisingly however, queries to the old address continued [...]

Read full article      No Comments

Using Google SMTP Infrastructure for Spam

May 8th, 2008

Exploiting Google mail servers as open SMTP relays – ( securityfocus.com )
Gmail’s normal approach to messages sent though its SMTP service is to rewrite some of the Message Body headers to prevent identity fraud. By exploiting this flaw, an attacker can easily bypass this restriction. This happens because attack messages are disguised as legitimately destined [...]

Read full article      1 Comment »

Control Plane Policing

May 4th, 2008

Above the access layer, most networking equipment have their architecture divided into two main components – the forwarding plane and the control plane. Understandably, the forwarding plane looks up the next-hop and forwards packets with customized hardware ASICs or highly optimized software algorithms.
The control plane however, is a different thing altogether. Charged with the responsibility [...]

Read full article      No Comments