Announcements & Shameless Plugs

PaulDotCom Security Weekly - Episode 278 for Thursday February 16th, 2012

John Strand will be teaching Offensive Countermeasures at SANS Orlando March 23-24th: Check it out here

Larry is teaching SEC617: Wireless Ethical Hacking, Penetration Testing and Defenses 5 times this year: vLive!: April 16 - 22, 2012, SANS Cyber Guardian 2012, Baltimore: April 30 - 06, 2012, SANS Toronto 2012, Toronto: May 14 - 20, 2012, Community SANS Ottawa, Ottawa: June 11 - 17, 2012, SANS Sydney 2012, Sydney, AU: November 12 - 18, 2012

Check out our new shows: Hack Naked TV with John Strand, Hack Naked At Night with Larry and Darren, PaulDotCom Espanol with Carlos Perez.

Subscribe to our only non-computer security related show dedicated to Cigar Enthusiasts Stogie Geeks with Paul Asadoorian and Tim "BugBear" Mugherini. Wether you smoke an occasional cigar or daily, this show is for you! Tune in as we review the latest cigars being released and talk "Stogie Tech".

Don't forget to Follow us on Twitter

Interview: Jeremiah Grossman

Jeremiah Grossman founded WhiteHat Security in August 2001, and is a world-renowned expert in Web security. He's a founder of the Web Application Security Consortium (WASC), and was named one of InfoWorld's Top 25 CTOs for 2007. Prior to WhiteHat, Mr. Grossman was an information security officer at Yahoo! responsible for performing security reviews on the company's hundreds of websites. Follow him on Twitter at @jeremiahg

Four years and 4,000 websites video, slides

Tell us about the "Top Ten Web Hacking Techniques of 2011" survey
There is always a lot of discussion about the value of certifications in infosec, but the Certified Application Security Specialist credential has retained its cachet. As one of the founders, what lessons can you share with other certification bodies such as (ISC)2 and ISACA in their attempts to remain relevant?

Stories

Paul's Stories

Last login: Thu Feb 16 11:18:41 on ttys004 [paulda@Pauls-MacBook-Pro:~/private]$ cd ../Do -bash: cd: ../Do: No such file or directory [paulda@Pauls-MacBook-Pro:~/private]$ cd ../Downloads/ [paulda@Pauls-MacBook-Pro:~/Downloads]$ history | grep awk

  25  history  | grep awk
  27   awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\(1*.csv  | sed -e 's/\"//g'
  28   awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\(1\).csv  | sed -e 's/\"//g'
  29   awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(1\).csv  | sed -e 's/\"//g'
  30   awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(1\).csv  | sed -e 's/\"//g' > pdc-268.txt
 103  awk -FS" '{print $4}
 104  awk -FS" '{print $4}'
 105  awk -FS'"' '{print $4}'
 106  awk -FS'"' '{print $4}' MyCigarSubscriptions.opml 
 107  awk -FS'"' '{print $6}' MyCigarSubscriptions.opml 
 109  awk -FS'"' '{print $13}' MyCigarSubscriptions.opml 
 110  awk -FS'"' '{print $14}' MyCigarSubscriptions.opml 
 111  awk -FS'"' '{print $15}' MyCigarSubscriptions.opml 
 113  awk -FS'"' '{print $3,4,5,6,7,8,9}' MyCigarSubscriptions.opml
 114  awk -FS'"' '{print $3,$4,5,6,7,8,9}' MyCigarSubscriptions.opml
 115  awk -FS'"' '{print $3,$4,$5,$6,$7,$8,$9}' MyCigarSubscriptions.opml
 116  awk -FS" '{print $3,$4,$5,$6,$7,$8,$9}' MyCigarSubscriptions.opml
 117  awk -FS'"' '{print $3,$4,$5,$6,$7,$8,$9}' MyCigarSubscriptions.opml
 130  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href="\"$1\""}'
 131  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href=\"$1\""}'
 132  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href=\""$1\""}'
 133  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\""}'
 134  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"}'
 135  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1}'
 136  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\<\\a\>}'
 137  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1""\<\\a\>"}'
 138  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1""}'
 139  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\"}'
 140  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1\""}'
 141  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1}'
 142  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\""}'
 143  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\"<"}'
 144  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\"<\a>"}'
 145  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"\"<\\a>"}'
 148  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"<\\a>"}'
 149  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"<\/a>"}'
 150  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"<\/a>
"}'
 151  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"<\/a>
"}' > mycigarblogs.html 
 153  cat MyCigarSubscriptions.opml | cut -d'"' -f12 | awk '{print "\<a href\=\"" $1 "\"\>"$1"<\/a>
"}'
 165  awk '{print $1 "," $2 "," $3}' cigars.in 
 177  history  | grep awk
 178  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' pdc269.csv  | sed -e 's/\"//g' > pdc-268.txt
 179  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' pdc269.csv  | sed -e 's/\"//g' > pdc-269.txt
 199  history | grep awk
 202  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(2\).csv  | sed -e 's/\"//g'
 310  history  | grep awk
 311  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(3\).csv  | sed -e 's/\"//g'
 314  history  | grep awk
 315  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(3\).csv  | sed -e 's/\"//g'
 316  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(4\).csv  | sed -e 's/\"//g'
 335  history | grep awk
 336  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(5\).csv  | sed -e 's/\"//g'
 338  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(5\).csv  | sed -e 's/\"//g'
 345  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(5\).csv  | sed -e 's/\"//g'
 346  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(6\).csv  | sed -e 's/\"//g'
 348  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(6\).csv  | sed -e 's/\"//g'
 349  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(6\).csv  | sed -e 's/\"//g' 
 491  history  | grep awk
 492  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(6\).csv  | sed -e 's/\"//g' 
 493  awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ \(7\).csv  | sed -e 's/\"//g' 
 503  history  | grep awk

[paulda@Pauls-MacBook-Pro:~/Downloads]$ !493 awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ $7$.csv | sed -e 's/\"//g'

[paulda@Pauls-MacBook-Pro:~/Downloads]$ awk -F',' '{print "\#\[" $1 " " $2 "\]"}' instapaper-export\ $8$.csv | sed -e 's/\"//g' > 278.txt [paulda@Pauls-MacBook-Pro:~/Downloads]$ vi !$ vi 278.txt [paulda@Pauls-MacBook-Pro:~/Downloads]$ vim 278.txt

Security Advisory: Vulnerabilities in D-Link DAP 1150 - security vulnerabilities database - Same old song and dance, many

model D-Link routers have issues such as default passwords, CSRF, and suffer from brute force attacks. The thing that scares me the most is that people are running t hese things and have no clue that they are vulnerable. Until such time, as I don't know, maybe never, or maybe when their bank account is empty and they are left won dering why. ADSL routers are the scariest, because whose job is it to update the firmware? The provider, who is already losing money, or at least cost cutting, and t he first thing to go is security. Sorry, no shiny rainbows at the end of this story.

PHP Vulnerability Hunter v.1.2.0.1 Released - I could write this very easily in the form of a script that detects if you are running PHP, and returns "Yes, you are vulnerable" if you are. On the flip side, this is a neat little tool to mess around with as PHP applications are notorious for having issues, so running a specialized little fuzzer against them may be worth your while.
Avi Rubin: All Your Devices Can Be Hacked - Just an FYI, we prevent computers from being stolen, and stop pe

ople from getting viruses from your computers.

Twitter Enables HTTPS By Default At Last - Uhm, a little late no? We've been

saying it for years, SSL IS THE SOLUTION TO ALL YOUR SECURITY PROBLEMS!

PSA: Paula Deen - Freaking great post, deep fried cheese filled brownies for everyone! Paula Dean is a great che

f, until it comes out that she has diabetes. Same thing happens in security, your doing X and it seems okay, until it relates to something bad, then someone comes up

with a solution, and everyone gravitates to it. Its a very interesting social aspect of security.

Why are we talking philosophy instead of technology? - I disagree with this

article. We don't need more non-technical talks, and we really don't need less of them. What we need is balance. We should have 10% talks be really high level, 10% b e extremely technical, and the remaining 80% should be a balance of technical and non-technical aspects of security.

I Want to Detect and Respond to Intruders But I Don't Know Where to Start! - Start wi

th thinking about how an attacker would attack your network, like your web server, then talk about how you would respond. You'd likely need to look at the logs. If y ou aren't collecting them, hey look you have something to do now!

The Cloud’s Low-Rent District - The cloud in general is a slum, and Amazon is the slum lord.
Continuous patching – is it viable in the enterprise? - I disagree with Raf, we need patches, lots of patches all the time. Its simple, how can someone else (e.g. the vendor) tell you when you should apply a

patch? It makes ZERO sense. Rothman makes more sense in the case.

I’ve always wondered how many vulnerable devices - Answer: LOTS.
Dumping Cleartext Credentials with Mimikatz - Sweet post!
What people think industry analysts do - This is just classic
Cisco Zine: Nmap for IOS? No - Neat, a portscanner for Cisco IOS! Uses TCLshell.
Employment for security professionals at all-time high - We are in a great field, however now we have a problem, finding talent. So, if you need a job...
Android Security Threat From 'Reverse Smudge Engineering' - If you eat lots of pot

ato chips, this could be a security risk! Put the chips away, bitch...

Adobe issues Flash Player update
The Sudafed Security Trade-Off - Its no secret, people use Sudafed for two reasons: Clearing up

your sinuses when you get a cold (its the only thing that works for me) and cooking Meth. So since people use it to cook Meth, we must "Ban" it and require a persci

prion. If you do the math, this could mean a $1.5 billion dollar bill for the healthcare industry. It goes to show that making something harder to get doesn't always

make it more secure. I think this most closely relates to people using their own cell phones and tablets, the moment you try to ban them, it will just have horrible
reprecussions, like people using them anyway without you knowing. Getting back to cookin' meth, according to the great TV show "Breaking Bad" you can use a differen

t chemical process using "methlymine", which the characters in the show have to steal because you can't walking into any store and just buy it).

Been Caught Stealin' - People steal SIM cards out of stuff, like traffic lights.
Penetration Tests: Not Getting 'In' Is An Option - I almost want to d

iagree and say you need to define what "getting in" means to your customer, and then attempt to do just that, and then see if they can detect/prevent it, if they do,

move to plan B, C, D, etc... Its all about defining goals, and yea, sometimes its not about getting in.

Larry's (taken over by Darren cause Larry is a slacker) Stories

Mountain Lion preview (OSX 10.8) - Apple has released a preview of OSX 10.8 due for release later this year. New security feature called Gatekeeper is coming. Looks like developers with valid Dev IDs will create a certificate that will be used to sign all their work. In the event a given developer does something wrong the cert can be pulled and the apps will not run. There are 3 levels of options the iphone option I call it where you can ONLY use apps on the app store nothing else can be installed, or install from anywhere but must have certificate, and lastly the install from anywhere cert or no cert option.
iPhone Address book access - Apple is set to fix an issue that app developers were allowed to gather users contact list with out permission from the phones owner. Now you will be prompted with a pop up asking if you wish to allow this access.
patch patch patch patch and then patch some more - Yet another Adobe 0day.
Insder threats are real - Example that your own employees are your biggest threat.
Nortel hacked for years - Former Nortel exec (they are all former now) says they were compromised for years and Nortel didn't try to hard to stop it.

Episode278

Contents

Announcements & Shameless Plugs

Interview: Jeremiah Grossman

Stories

Paul's Stories

Larry's (taken over by Darren cause Larry is a slacker) Stories

Jack's Stories

Navigation menu

Page actions

Page actions

Personal tools

Shows

Security Weekly Links

Social Media

Search

Tools