zerolove on February 24th, 2009 in Nerdology

Microsoft Security Advisory (968272) A Zero-Day exploit is one that there are no patches for and is currently public and being used to attack computers.  This one effects at this time Microsoft Excel 2008 for Mac, Microsoft Excel 2007 SP1, Microsoft Excel 2007, Microsoft Excel 2007, Microsoft Excel 2004 for Mac, Microsoft Excel 2003 SP3, [...]

Continue reading about Zero-Day Exploit in Microsoft Excel

zerolove on August 19th, 2008 in Nerdology

Idiots er people are using Flash apps to hijack the clipboard putting a url in the clipboard that won’t go away till the browser is closed. This effects Firefox, Opera, IE, and Safari even on Linux and Mac. By seizing control of the clipboard they are able to place a URL to a fake anti virus program.

These have been showing up on sites such as Newsweek, Digg, and MSNBC.com. They are showing up in

Continue reading about Adobe Flash Ad Hack and Gmail Supposed Hack

zerolove on August 3rd, 2008 in Nerdology

Follow up to “Oops DNS Attack Disclosed! And once again DJB…” there is now a working exploit out. It is an exploit using MetaSploit, a tool used to conduct security vulnerability research. You can also test your network using Nessus by Tenable Network Security.

The released exploit is available at the MetaSploit trac here.

This is now being exploited in the wild. Now here is an issue I

Continue reading about Follow Up – DNS Vulnerability

So Halvar Flake made a post on his blog, thinking and writing about the vulnerability. This was enough thinking to cause someone “Ecopeland” at Matasono’s blog to post a response. To bad Thomas Ptacek pulled it and posted “Regarding The Post On Chargen Earlier Today”. I love how elegantly Halvar Flake put it and I [...]

Continue reading about Oops DNS Attack Disclosed! And once again DJB is the Shit!

spring