#bugtraq

In July of 2019, many noticed that the Bugtraq mail list stopped having posts approved, including Art Manion at CERT. Since there are many other outlets for vulnerability disclosure, such as the Full-Disclosure mail list, Packetstorm, Exploit Database, and increasingly on GitHub, it didn’t receive much attention. It wasn’t like the days when the list was created when there were very few places to…

Perlroth & The First (Zero-Day) Broker

I am currently reading “This Is How They Tell Me The World Ends” by Nicole Perlroth, only on page 60 in Chapter 5, so a long ways to go before completing the 471 page tome. I hit chapter 4, titled “The First Broker” and it was of specific interest to me for sure, prompting this (second) blog on the book. A broker is defined as “a person who buys and sells goods or assets for others” so I was…

Bugs do Gnome Software no Ubuntu 16.04 LTS serão corrigidos e novos recursos serão adicionados | Diolinux

Os bugs que estão afetando todos os usuários do novo Ubuntu 16.04 LTS e que impedem a instalação de pacotes .deb normalmente serão corrigidos muito em breve, a atualização já está presente no repositório “proposed” no Ubuntu, que é o repositório que os pacotes vão antes de ir para o sistema principal.

  Estes bugs tem atormentado a vida dos usuários, apesar de serem perfeitamente contornáveis e…

Most people reading are probably aware of the common trick whereby spammers and other assorted ne'er-do-wells publish URLs with usernames that look like hostnames to fool people in to trusting a malicious site - for example, http://www.microsoft.com&session%[email protected]. This trick is frequently used by spammers to steal people's PayPal accounts, by tricking them in to "resetting" their password at a site owned by the spammer but disguised as PayPal.com.