Internet Storm Center Infocon Status
Get FireFox for Secure Browsing
My Blog Roll
Login
User name:
Password:
Remember me 

View Article  Teen Calls Bush’s Secret Phone; Creates Security Scare
An Icelandic teen, MSNBC reports, figured out President Bush’s private phone number, and called it recently, leaving a message saying he was the president of Iceland and wanted Bush to call him back. When police visited the teen, after being alerted by Secret Service, he would not say how he learned the top-secret number. Big Head DC is speculating that he somehow deciphered the code from when Jenna Bush called her parents during a recent taping of the Ellen show.

From Big Head DC.
View Article  iPhone 1.1.1 to 1.0.2 downgrade instructions released!
Well would you look at that, instructions are now available for downgrading your iPhone from 1.1.1 to 1.0.2. It won't downgrade your baseband, meaning so far you can't re-unlock an iPhone that's been 1.1.1-ified, but it's still 1.0.2 in all its third-party application glory. The iPhone Dev Team folks are working on a way to downgrade the new firmware to let people unlock their phones again, but for now AT&T users sitting pretty, and non-AT&T folks can at least do the WiFi thing. There's a video tutorial after the break.

Read - iPhone Dev Wiki instructions
Read - Hackint0sh thread where the magic happened



From Engadget.
View Article  How to Download iTunes Store Previews and Use Them As Ringtones - UPDATED AND WORKING
Ok, so we know how to use your own ripped CD’s as ringtones on your iPhone but here is an updated way to download and use iTS previews with your iPhone - AKA FREE RINGTONES of your favorite songs.

Now, this isn’t for the feint of heart. It requires command-line access and Perl and only works on OS X.

Go on over to UNEASYsilence to get the instructions.

View Article  BSA to pay up to $1 million for piracy tips

The Business Software Alliance announced on Monday the launch of its "Blow the Whistle" campaign and said it will offer up to $1 million as a bonus for employees that turn in their employers.

The campaign, which lasts until October 2007, rewards end users that tip off the the software industry's lobbying arm and offer evidence about companies that have installed unlicensed copies of software. Until the end of the campaign, the BSA will pay a bounty to informants based on the settlement with a maximum fee of $1 million, up from the normal top tip for tattlers of $200,000. Under the guidelines of the program, end users cannot have been the ones to install the software unless they were ordered to do so by a supervisor.

Will you be a rat?  Read the full article on SecurityFocus.


View Article  New Computer Program to Reassemble Shredded Stasi Files

Millions of files consigned to paper shredders in the late days of the East German regime will be pieced together by computer. The massive job of reassembling this puzzle from the late Cold War was performed, until now, by hand.

It's been years in the making, but finally software designed to electronically piece together some 45 million shredded documents from the East German secret police went into service in Berlin on Wednesday. Now, a puzzle that would take 30 diligent Germans 600 to 800 years to finish by hand, according to one estimate, might be solved by computer in seven.

Low tech decryption.  Good article from Spiegel Online.

View Article  Fake Boarding Pass Maker in trouble agian

Last month Security Fix reported that Chris Soghoian -- the Indiana University doctoral student who created an online boarding pass generator to demonstrate security holes in the Transportation Security Administration's "no-fly" list -- had been cleared of any wrongdoing by the FBI and the Justice Department.

Well, turns out the guy isn't out of the woods yet.

On Wednesday afternoon, Soghoian received a letter from the TSA informing him that the agency is conducting its own investigation into the allegation that he "attempted to circumvent an established civil aviation security program established in the Transportation Security Regulations." If Soghoian is ultimately found to have attempted said circumvention, the TSA said, he could be subjected to civil penalties of up to $11,000 per violation. That could be a steep fine: Something like 35,000 people viewed and possibly used the boarding pass generator during the less than 72 hours that it was live on his site in November.

You can read a scanned copy of the TSA letter at Soghoian's site.

From Security Fix.

View Article  Wireless Video Scanner
[aboxman] brought this nice wavecom jr mod to my attention. I first ran across scanning for wireless video signals a couple years ago when the X10 version came out. People were surprised at just how many video signals were flying through the air.This little project results in a unit that can scan a wide 2.3 to 2.7Ghz range. Of course, if you're across the pond, you might want a european version.

Ooh, I found my next project!  From Hack-a-Day.
View Article  6 DMCA new exemptions - good and bad...
Copy protection on games for which there is no longer support from any publisher is no more. Under the new DMCA laws, copy protection can legally be cracked is the copyright holder no longer has any interest in the game.

This means that old school games can now be preserved, and there shouldn't be any legal ramifications to the individual or group who does so.

Other alterations to the laws included allowing cell phone software to be cracked to allow for use on other service providers, allowing blind people to use third-party software to read copy-protected books, and allowing educators to make DVD scene compilations.

The new laws will begin on Monday and last for three years.

From GWN.  [viaEFF has more details about all 6 changes in the DMCA code:

1. Audiovisual works included in the educational library of a college or university’s film or media studies department, when circumvention is accomplished for the purpose of making compilations of portions of those works for educational use in the classroom by media studies or film professors.

2. Computer programs and video games distributed in formats that have become obsolete and that require the original media or hardware as a condition of access, when circumvention is accomplished for the purpose of preservation or archival reproduction of published digital works by a library or archive. A format shall be considered obsolete if the machine or system necessary to render perceptible a work stored in that format is no longer manufactured or is no longer reasonably available in the commercial marketplace.

3. Computer programs protected by dongles that prevent access due to malfunction or damage and which are obsolete. A dongle shall be considered obsolete if it is no longer manufactured or if a replacement or repair is no longer reasonably available in the commercial marketplace.

4. Literary works distributed in ebook format when all existing ebook editions of the work (including digital text editions made available by authorized entities) contain access controls that prevent the enabling either of the book’s read-aloud function or of screen readers that render the text into a specialized format.

5. Computer programs in the form of firmware that enable wireless telephone handsets to connect to a wireless telephone communication network, when circumvention is accomplished for the sole purpose of lawfully connecting to a wireless telephone communication network.

6. Sound recordings, and audiovisual works associated with those sound recordings, distributed in compact disc format and protected by technological protection measures that control access to lawfully purchased works and create or exploit security flaws or vulnerabilities that compromise the security of personal computers, when circumvention is accomplished solely for the purpose of good faith testing, investigating, or correcting such security flaws or vulnerabilities.

View Article  Certification Top 10 Lists Revisited

When a story like this ran in 2003, it prompted more responses and controversy than we imagined. Although we try to be clear that the order of appearance in any given list indicates nothing about relative ranking or merit, that aspect of things provokes comment, as does the inclusion of some little-known credentials or the omission of better-known ones.

But given that there are more than 850 certifications and more than 200 certification programs in today’s IT certification landscape, we hope to help our readers distinguish good ones from mediocre or bad ones, winners from losers and up-and-comers from programs in their declining phase. So remember, you can go out and analyze the marketplace for yourself and plow through the numerous interest, salary and popularity surveys to try to figure out this stuff for yourself. While you’re at it, it’s also important to pay attention to what’s showing up in classified job ads and online postings to determine where the real action is.

As in the previous survey, we tried to develop a rough consensus about what’s hot and where the action appears to be in today’s highly fragmented IT job market. We can’t dispute that these lists draw heavily on the author’s knowledge, experience and observations, thus they must also reflect his preferences (and possibly even biases.) As in the previous collection of lists, each is labeled by category, along with a short discussion of what characteristics made credentials most suited for inclusion.

This is from CertMag.com and is getting a good bit of coverage.  Go and see where your certs fit and plan you next few.  Here's the winners:

Best Hands-On Programs: Certified Professional Information Technology Consultant (CPITC)
Best Supporting Materials: (ISC)2 Certified Information Systems Security Professional (CISSP)
Best Specialty Certifications: Brocade Certified SAN Designer (BCSD)
Toughest Recertification Requirements: Cisco Certifications
Best Vendor-Neutral Credentials: Building Industry Consulting Services International (BiCSi)
Most Technically Advanced Programs: (ISC)2 Certified Information Systems Security Professional (CISSP)
Best New Programs or Certs: (ISC)2 Associate Program
Best Entry-Level Certifications:
Certified Wireless Network Administrator (CWNA)

View Article  Toolkit to Disable Automatic Delivery of Internet Explorer 7
To help our customers become more secure and up-to-date, Microsoft will distribute Internet Explorer 7 as a high-priority update via Automatic Updates for Windows XP and Windows Server 2003 soon after the final version of the browser is released (planned for fourth quarter 2006). Microsoft is making a non-expiring Blocker Toolkit available for those organizations that would like to block automatic delivery of Internet Explorer 7 to machines in environments where Automatic Updates is enabled.

Note:
  • The Blocker Toolkit will prevent machines from receiving Internet Explorer 7 as a high-priority update via Automatic Updates and the “Express” install option on the Windows Update and Microsoft Update sites. The Blocker Toolkit will not expire.
  • The Blocker Toolkit will not prevent users from manually installing Internet Explorer 7 as a Recommended update from the Windows Update or Microsoft Update sites, from the Microsoft Download Center, or from external media.
  • Organizations do not need to deploy the Blocker Toolkit in environments managed with an update management solution such as Windows Server Update Services or Systems Management Server 2003. Organizations can use those products to fully manage deployment of updates released through Windows Update and Microsoft Update, including Internet Explorer 7, within their environment.
See the "Additional Information" section below for detailed instructions on configuring and deploying the Blocker Toolkit. The same information is also provided in the Help file included in the download.

Answers to Frequently Asked Questions can be found here.

So if you don't want to be forced to run IE 7, download this toolkit from Microsoft.
Search
Google Search
Translators
Partner Sites
Chat with me
Alexa Traffic Counter
Feed Map
Technocrati Chart
Posts that contain "Lazy Genius" per day for the last 60 days.
Technorati Chart
Get your own chart!