http://conference.hitb.org/hitbsecconf2008kl/



hackinthebox
 ::  hitb portal  ::  hitb portal (SSL)  ::  hitb forum (SSL)  ::  hitb security conference  ::  hitb training ::  hitb irc  ::  hitb photos  ::  hitb videos :: 

HITB Search:
Who's Online
There are 226 unregistered users and 0 registered users on-line.

You can log-in or register for a user account here.



Main Menu

Top Stories for Today
[533] No excuses -- encrypt all laptops
[355] Asprox computer virus infects key government and consumer websites
[295] Microsoft's DNS Fix Leads to More Problems
[198] Clever students make hapless admin's job a nightmare
[194] Kaminsky on How He Discovered DNS Flaw and More
[175] Can obscurity make cryptography better?
[135] Steve Jobs teases over new Apple products
[135] 'Cold boot' tools surface
[131] Malware Spammers Get Sense of Humor
[130] Computer tech hands over secret codes to Newsom in jailhouse visit
[124] Kerfuffle erupts as DNS flaw described
[118] Last HOPE to become Next HOPE
[111] Philadelphia TV Anchor Accused Of Hacking Rival's E-mail
[109] Are you prepared for targeted attacks?
[108] Iranian hackers target Israeli Web site over message by Jewish group
[106] Second firm tests Apple's legal resolve with Mac OS X-ready PCs
[103] China arrests cyber dissident, rights group says
[103] Mind games: Harnessing the power of your thoughts
[102] Courts strike down COPA
[101] Singaporean lawyer Anamah Tan latest victim of e-mail hoax
[95] New service helps callers avoid awkward cell-phone moments
[93] Kaspersky Lab's Malaysian Web site hacked
[88] To disclose or not to disclose?
[86] Kaspersky says hacking attack did no damage
[85] MySpace Supports OpenID Universal Sign In
[79] Pwnie Awards celebrate best and worst of security

View the Top 50 articles

Top 20 of the Last 2 Weeks

E-Zine Archive

Past Articles
Wednesday, July 23
·Kaspersky Lab's Malaysian Web site hacked (0)
· To disclose or not to disclose?  (0)
·Pwnie Awards celebrate best and worst of security  (0)
·New service helps callers avoid awkward cell-phone moments (0)
·Philadelphia TV Anchor Accused Of Hacking Rival's E-mail  (0)
·MySpace Supports OpenID Universal Sign In  (0)
Monday, July 21
·First iPhone 2.0 antivirus software released (0)
·WiMAX begins to gain momentum (0)
·China Telecom Added 890,000 Internet Users in June (0)
·Six open source web application testing tools  (0)
·Former Microsoft manager sent down for domain name fraud (0)
·Facebook Sues German Knockoff Social Networking Site (0)
·The Wiki-Hacker Strikes Again (0)
·Brit pol loses BlackBerry to spy (0)
·Social Engineering 101: Mitnick and other hackers show how it's done (0)
·2600 magazine-sponsored event kicks off with pwning session (0)
·Kaspersky to set up SEA base in KL  (0)
·8 Killer iPhone 3G Alternatives  (0)
·Futuristic windshield aims to help older drivers (0)
·Hackers open core of Apple's iPhone (0)
Sunday, July 20
·Jailbreak app for iPhone 3G released! (0)
Friday, July 18
·Say goodbye to the computer mouse  (0)
·Microsoft in talks over AOL merger (0)
·Russia: Get computer-savvy or get out, Medvedev tells staff (0)
·Trovalds: OpenBSD developers are a bunch of masturbating monkeys (0)
·Sony Cuts Price on PlayStation 3, Axes Backwards Compatibility Too (0)
·AMD’s Chief Executive Officer Hector Ruiz Steps Down (0)
·Google 2Q letdown raises economic worries  (0)
·Fraudulent calls leave library with $15,000 phone bill  (0)
·Mozilla Fixes Firefox Flaw, But Needs New Security Practices (0)
 Older articles

HITB Links


Top 50 Articles

Top 50 Articles of the Last 7 days

  • [6635] GMail flaw reveals people's real names
  • [1348] Say goodbye to the computer mouse
  • [1179] 12 ways to visualize network security
  • [1062] gOS Space: OSX-like operating system without the Apple
  • [1061] Trovalds: OpenBSD developers are a bunch of masturbating monkeys
  • [994] Jailbreak app for iPhone 3G released!
  • [738] Listen to the 2600 hacker conference
  • [580]  Brazilian hackers unlock Apple iPhone, thwart carriers
  • [545] Facebook privacy breach exposed users' hidden dates of birth
  • [533] No excuses -- encrypt all laptops
  • [526] Six open source web application testing tools
  • [511] Microsoft in talks over AOL merger
  • [504] Fraudulent calls leave library with $15,000 phone bill
  • [485] Mozilla Fixes Firefox Flaw, But Needs New Security Practices
  • [457] Russia: Get computer-savvy or get out, Medvedev tells staff
  • [451] 8 Killer iPhone 3G Alternatives
  • [446] The Wiki-Hacker Strikes Again
  • [443] The man who transformed internet security
  • [441] Cybercrime, Cosa Nostra-Style
  • [436] First iPhone 2.0 antivirus software released
  • [417] Sony Cuts Price on PlayStation 3, Axes Backwards Compatibility Too
  • [417] Barclays claims zero online fraud
  • [411] Schneier, Team Hack 'Invisibility Cloak' for Files
  • [394] Organised crime turns to malware
  • [389] Engineer accused of network tampering
  • [389] Mozilla patches Firefox side of Safari 'carpet bomb' threat
  • [387] Social Engineering 101: Mitnick and other hackers show how it's done
  • [369]  Beware critical BES security flaw
  • [357] eBay Gets Revenue Boost from Paypal, Skype
  • [355] Asprox computer virus infects key government and consumer websites
  • [347] AMD’s Chief Executive Officer Hector Ruiz Steps Down
  • [346] WiMAX begins to gain momentum
  • [344] Apple passes Acer to become third largest U.S. PC vendor
  • [328] Scientists: Humans and machines will merge in future
  • [324] Teenage hacker in global scam discharged
  • [323] 2600 magazine-sponsored event kicks off with pwning session
  • [323] Oracle issues security fixes
  • [322] Google 2Q letdown raises economic worries
  • [317] Nigella Lawson hit by malware attack
  • [309] Apple Files Copyright Suit Against Mac Cloner Psystar
  • [307] The next perfect IT storm
  • [295] Microsoft's DNS Fix Leads to More Problems
  • [288] The Techie Hall of Shame
  • [282] Former Microsoft manager sent down for domain name fraud
  • [281] Cybercrime gets busy getting organized
  • [228] Brit pol loses BlackBerry to spy
  • [224] China Telecom Added 890,000 Internet Users in June
  • [217] Facebook Sues German Knockoff Social Networking Site
  • [210] Hackers open core of Apple's iPhone
  • [198] Clever students make hapless admin's job a nightmare

  • Top 50 Articles of the Last 4 weeks

  • [6635] GMail flaw reveals people's real names
  • [5120] Hackers post Soviet symbols on Lithuanian sites
  • [5077] 15 Ways Microsoft Can Reinvent Itself for the Post-Gates Era
  • [4217] TMZ removes 'Mini-Me' sex tape from site
  • [2737] 14 favourite free internet tools
  • [2717] Feds catch LimeWire child porn downloader
  • [2321] Hackers grab more Miley Cyrus photos off her phone
  • [2255] Keylogging malware steals 50GB of passwords
  • [2232] Getting the most out of your Apple TV by hacking it
  • [2115] Faceparty tells critics to F*** Off, suspends entire site
  • [2049] How to bypass blocked Usenet
  • [2009] Top Four IT Certification Categories
  • [1949] Apple TV 2.1 released - PatchStick hack still works
  • [1854] Hacker shoehorns Leopard onto MSI Wind
  • [1717] Troubleshooting Problems with Firefox 3 Crashing or Hanging
  • [1568] SSL Encrpytion Coming to The Pirate Bay
  • [1348] Say goodbye to the computer mouse
  • [1262] Even computer 'wipers' leave a mark
  • [1251] Bill Gates bids a teary farewell to Microsoft
  • [1241] Start-up sues Google over e-mail switching tool
  • [1221] MiniNova Not Jumping on the Encryption Bandwagon
  • [1189] "Cyber Terrorist" Group Anonymous hacks and defaces two MTV websites
  • [1189] Opera 9.5 gives Firefox 3 a run for its money
  • [1179] 12 ways to visualize network security
  • [1164] HSBC sites vulnerable to XSS flaws, could aid phishing attacks
  • [1163] How to install Android OS on the Nokia N810
  • [1159] New Dubai Skyscraper Will Shift Shape Dynamically
  • [1104] Microsoft Corp removes 'Fiji' from window
  • [1091] Mastering the UNIX Command Line: A Beginner’s Guide
  • [1062] gOS Space: OSX-like operating system without the Apple
  • [1061] Trovalds: OpenBSD developers are a bunch of masturbating monkeys
  • [1052] Five Best Windows Maintenance Tools
  • [1031] Photobucket plugs hole that revealed private photos
  • [1007] Public lives: Does the internet know too much about us?
  • [994] Jailbreak app for iPhone 3G released!
  • [963] US Secret Service - Best practices for seizing electronic evidence
  • [960] How The FBI Dismantled a BitTorrent Community
  • [921] Why your text messages are not private
  • [870] Malaysian Government Orders Torrent Sites Shutdown
  • [852] iPhone 3G hacked within 24 hours
  • [850] iPhone 3G line starting in New York City
  • [845] Detecting SSH tunnels
  • [832] BT launches iPlate to boost broadband speeds
  • [828] Microsoft releases critical update for Office 2008 for Mac
  • [816] Inside the OS X 10.5.4 Update
  • [780] ATM breach reveals PIN problems
  • [772] Sony readying new PS2
  • [763] Kaspersky to demonstrate hack against Windows XP/Vista/2K8, Linux, BSD and maybe OS X
  • [761] Facebook shuts down application over privacy
  • [757] Dell Colludes with RIAA, Disables Stereo Mix without Forewarning

  • Top 50 Articles Ever

  • [1313333] Microsoft XP Programs Keygen.
  • [639249] How to hack Windows XP Admin Passwords
  • [258447] SAM Files and NT Password Hashes
  • [205678] Pirates crack Windows XP Service Pack 1
  • [176539] Cable modem owners hack for free cable TV
  • [136664] HITB - Now wireless
  • [134542] HITB - mobile edition
  • [128123] Want to add hackinthebox.org content to your site?
  • [126909] Hacking Windows Shares from Linux with Samba
  • [107175] WinXP product activation cracked: totally, horribly, fatally
  • [82587] Cable Modem Hacking Tricks Uncapped Online
  • [80765] Hotmail Hacker X-Edition - The BEST hotmail account hacker there is
  • [71030] Wireless Security & Hacking
  • [70917] How to bypass the new Windows Genuine Advantage (WGA) check
  • [70523] Anatomy of Brute Force Attacks
  • [66367] The occasional hacking of web applications
  • [60246] Issue #25
  • [59721] Windows XP Service Pack 1 (again)
  • [58304] Little-Known DOS Commands That Have Saved My Ass
  • [58295] Issue #27
  • [58136] Issue #28
  • [57602] Issue #32
  • [56535] Issue #26
  • [55781] Dreamcast Underground
  • [54848] Issue #31
  • [54680] Issue #29
  • [54458] Issue #30
  • [53978] Myths about TCP Spoofing
  • [53202] Hotmail ‘bug’ has MSN scratching its head
  • [53109] Guide to ARP Spoofing
  • [48796] A Guide To A New Generation of Phreaking - Part 1
  • [48670] MAC Addressing and ARP Functionality
  • [47241] WinXP activation: what happens under the covers?
  • [47172] IRC Chat Page
  • [46894] Review: Mac OS X x86 10.4.1 & 10.4.3
  • [45844] NetBios Shares -- Cracking Windows Machines
  • [45046] iTunes 7 DRM Already Cracked
  • [43971] Footprinting: The Basics of Hacking
  • [43856] Camouflaging Nmap Scans
  • [43252] State of the Hack Awards #2
  • [40505] Dreamcast Hacking
  • [40420] Net Stat - An over look at market out locked commands
  • [39969] Brute Force - The Attackers Last Resort
  • [39370] Cable Modem Hacking Goes Mainstream
  • [38472] How to Build a Simple Wireless Authenticated Gateway (SWAG) Using OpenBSD
  • [36622] Raw Socket Access in Windows XP
  • [35928] DSniff: Use and Abuse
  • [34076] The Tuxtendo's Tuxkit Rootkit Analysis
  • [33628] Review of Yellow Dog Linux 3.0
  • [31074]  MySpace Music Player Hacked
  • Login
     



     


     Log in Problems?
     New User? Sign Up!

    HITBSecConf2008 - Malaysia
    The following speakers have confirmed their participation in HITBSecConf2008 - Malaysia; the premier network security event in Asia and the Middle East!

    Day 1 Keynote Speakers

    1.) Jeremiah Grossman (Founder & Chief Technology Officer, White Hat Security.)
    2.) Marcus Ranum (Chief Security Officer, Tenable Network Security)

    Day 2 Keynote Speakers

    3.) Dr. Anton Chuvakin (Chief Research Officer, Log Logic Inc.)
    4.) Peter Sunde [brokep] (Founder, The Pirate Bay - TPB) and Fredrik Neij [TiAMO] (Founder, The Pirate Bay - TPB)

    Conference Speakers (alphabetical order)

    1. AR (Independent Network Security Researcher, Securebits)
    2. Adrian ‘pagvac’ Pastor (ProCheckUp Ltd. / GNUCITIZEN)
    3. Akshay Agrawal (Practice Manager, Microsoft Information Security ACE Team)
    4. Andrew ‘Q’ Righter (HacDC)
    5. Alexander Tereshkin (Principal Researcher, Invisible Things Lab)
    6. Charlie Miller (Principal Analyst, Independent Security Evaluators)
    7. Ching Tim Meng (Security Consultant, Cable & Wireless)
    8. Dino Covotsos (Managing Director, Telspace Systems)
    9. Dino Dai Zovi (Security Researcher)
    10. Ero Carrera (Reverse Engineering Automation Researcher, zynamics GmbH)
    11. Haroon Meer (Technical Director, Sensepost Information Security)
    12. Hernan Ochoa (Senior Security Consultant, Core Security Technologies)
    13. Ilfak Guilfanov (Founder/CEO of Hex-Rays SA and creator of IDA Pro)
    14. Jamie Butler (Coauthor of Rootkits: Subverting the Windows Kernel)
    15. Jim Geovedi (Member of HERT & Security Consultant, PT. Bellua Asia Pacific)
    16. Julian Ho (Chief Operating Officer, THINKSecure Pte. Ltd.)
    17. King Tuna (Independent Network Security Researcher)
    18. Kris Kaspersky (Independent Network Security Researcher)
    19. Lee Chin Sheng [geek00l] (Independent Network Security Researcher)
    20. Matthew Geiger (Forensics Specialist, CERT)
    21. Meling Mudin [spoonfork] (Independent Network Security Researcher)
    22. Marc Weber Tobias (Investigative Attorney and Security Specialist)
    23. Nitesh Dhanjani (Senior Manager, Ernst & Young)
    24. Paul Craig (Principal Security Consultant, Security-Assessment.com)
    25. Pedram Amini (Manager, Security Research, TippingPoint)
    26. Petko D. Petkov [pdp] (GNUCITIZEN)
    27. Shreeraj Shah (Director, BlueInfy)
    28. Saumil Shah (Founder, Net-Square)
    29. Teo Sze Siong (Senior Web Security Researcher, F-Secure Corporation)
    30. The Grugq (Independent Network Security Researcher)

    There are very limited seats and registrants are encouraged to register early!

    REGISTER NOW


    Last 15 Postings to HITB Forum

    Packet Storm Security Latest
    · dns-writeup.txt
    Interesting write up discussing DNS cache poisoning then and now.
    · USN-627-1.txt
    Ubuntu Security Notice 627-1 - Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Dnsmasq. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic.
    · DSECRG-08-032.txt
    Claroline eLearning and eWorking Platform version 1.8.10 suffers from cross site scripting vulnerabilities.
    · dsa-1613-1.txt
    Debian Security Advisory 1613-1 - Multiple vulnerabilities have been identified in libgd2, a library for programmatic graphics creation and manipulation. The Common Vulnerabilities and Exposures project identifies the following three issues:
    · MDVSA-2008-151.txt
    Mandriva Linux Security Advisory - A buffer overflow vulnerability in libxslt could be exploited via an XSL style sheet file with a long XLST transformation match condition, which could possibly lead to the execution of arbitrary code. The updated packages have been patched to correct this issue.
    · sipwitch-0.2.2.tar.gz
    GNU SIP Witch is a pure SIP-based office telephone call server that supports generic phone system features like call forwarding, hunt groups and call distribution, call coverage and ring groups, holding, and call transfer, as well as offering SIP specific capabilities such as presence and messaging. It supports secure telephone extensions for making calls over the Internet, and intercept/decrypt-free peer-to-peer audio and video extensions. It is not a SIP proxy, a multi-protocol telephone server, or an IP-PBX, and does not try to emulate Asterisk, FreeSWITCH, or Yate.
    · pkd-1.0.tgz
    ipt_pkd is an iptables extension implementing port knock detection. This project provides 3 parts: the kernel module ipt_pkd, the iptables user space module libipt_pkd.so, and a user space client knock program. For the knock packet, it uses a UDP packet sent to a random port that contains a SHA-256 of a timestamp, small header, random bytes, and a shared key. ipt_pkd checks the time window of the packet and does the SHA-256 to verify the packet. The shared key is never sent.
    · shopcartdx-sql.txt
    ShopCartDx version 4.30 suffers from a remote SQL injection vulnerability.


    Topics
    · All topics
    · AMD News (Jul 18, 2008)
    · Apple News (Jul 23, 2008)
    · Articles (Feb 13, 2006)
    · Ask Us (Feb 01, 2003)
    · Audio/Video (Jul 18, 2008)
    · Encryption (Jul 23, 2008)
    · Games (Jul 18, 2008)
    · Hardware (Jul 15, 2008)
    · HITB News (May 18, 2008)
    · Industry News (Jul 23, 2008)
    · Intel News (Jul 15, 2008)
    · Law and Order (Jul 23, 2008)
    · Linux (Jul 18, 2008)
    · Microsoft (Jul 23, 2008)
    · Networking (Jul 12, 2008)
    · PDAs (Feb 09, 2007)
    · Privacy (Jul 21, 2008)
    · Red Hat (May 13, 2008)
    · Science (Jul 16, 2008)
    · Security (Jul 23, 2008)
    · Software & Programming (Jul 21, 2008)
    · Spam (Jul 10, 2008)
    · Technology (Jul 23, 2008)
    · Transmeta (Jul 07, 2007)
    · Viruses & Malware (Jul 23, 2008)
    · Wireless (Jul 12, 2008)

    HITB Affiliates