Skip to main content

Networking

Openhack III

posted onJanuary 17, 2001
by hitbsecnews

The third annual eWeek Openhack contest is upon us (actually started yesterday). eWeek has set up 4 servers accessible from the internet and invite all to hack the machines. The operating systems being tested are Solaris 7, RedHat Linux 6.2, and AIX 4.3.3 there is also some server security measures activated so hackers will face a little more challenge. Cash prizes range from $1000-$50000. Get hacking/cracking/whatever here.

AOL Password Flaw Found

posted onJanuary 17, 2001
by hitbsecnews

Saw this over at HNN

"AOL Anywhere's" web mail program comes under fire for a glitch that allows old passwords that were replaced to be used to access the same email accounts available via the new password. Needless to say, customers are growing more and more weary of security issues like these, however AOL maintains the identified cases of this particular flaw are few and far between.

CNet via Yahoo

CERIAS Roundtable Findings Released

posted onJanuary 11, 2001
by hitbsecnews

Saw this over at HNN

A Security Call to Action and Executive Summary compiled through the laudable efforts of 15 security experts were recently released online. The documents were the end result of the CERIAS Security Vision Roundtable sponsored by Accenture and the Purdue University CERIAS. This gathering of distinguished security experts, including Dr. Daniel Geer, CTO of @stake, were brought together to determine industry trends as well as develop an initiative to address the future state of security.

CPS-2 Encryption Scheme Broken

posted onJanuary 7, 2001
by hitbsecnews

The CPS-2 arcade board from Capcom uses some hard encryption scheme that
has been a very hot issue in emulation for years. Yet finally the code was broken Final Burn, a
quite recent arcade emulator, showed concrete results by running previously unsupported games
such as Street Fighter Zero using decrypted ROM images. The CPS-2 Shock Team, who managed

IDS Evasion with Unicode

posted onJanuary 7, 2001
by hitbsecnews

Recently, there has been much discussion of the Unicode problem with regard to intrusion detection. Some pundits have gone so far as to claim that Unicode will contribute to the demise of Intrusion Detection Systems (IDS). This article by Eric Hacker will explain what Unicode is, how it complicates IDS and provides opportunities for IDS evasion, and what can be done about it. This discussion will focus particularly on the role of UTF-8, a means by which Unicode code points are encoded, in circumventing IDSs.