|
|
|
Big brother with big vulnerabilities... |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Big brother with big vulnerabilities... Par DeobfuscatedLe [2010-05-12] à 14:10:26
Présentation : China is well known to be a not so free country, and monitoring spying on network traffic is just one example of its actions aiming to control the Chinese population. On top of its famous Golden Shield, the Chinese government now provides its own content-control software, called Green Dam Youth Escort. And it's mandatory to have it installed on any new computer... The official aim of Green Dam is to protect users, in particular children, from malicious or dodgy content. Sounds nice... but the reality is obviously slightly different, and reversing this piece of software quickly reveals some filtering on political keywords and other stuff not appreciated by the Chinese government. No big surprise so far... Except that Green Dam comes with stupid vulnerabilities and as it acts as a web proxy, it really puts users at risk. The problem The library in charge of the filtering uses fixed-length buffers to process web-sites requests. You got it, buffer overflow exploitable to remotely run arbitrary code. Nice... Well, Green Dam's editor patched it silently. So silently that it's still vulnerable... Seriously, there're enough botnets in the world, we don't need that s ...
Les derniers articles du site "Deobfuscated" :
- Coloring junk code in IDA Pro
- Security Essentials Rogue AV Anti-Debugging
- More on moron packers and anti-debugging
- Big brother with big vulnerabilities...
- R.I.P milw0rm
- l0phtcrack 6 and Nmap 5 are out
- Null pointer dereference vulnerability in the Linux kernel
- Hey There's a worm in that apple
- Die Delphi, die
- And here comes another secure by design OS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
