BrokeBerry

Attack Computer Wiz

A Security & Technology Weblog

The New Yahoo! Homepage.
 

Thanks for the new homepage Yahoo! I realize that you control and try to optimize your content. But for how long does your self promotion need to continue? The “Who’s behind this new page?" story has been front page for what seems like an eternity! Even Michael Jackson could not hold on as long as you.

user Posted by Mike

iPhone gets GPS!
 

Great news for iPhone users. You can now download an application and get GPS on your device. Once again Apple is paving the way for all other services out there. Bringing GPS to a mobile device is groundbreaking. I only wish I could take advantage of this opportunity on my BlackBerry. I would just love to be able to install software on my computer in order to connect to iTunes to access the Apple store and install a $99 application.

Darn you BlackBerry for not allowing me to go through all of this! I guess I will just have to keep using my free GPS application that I installed over the air and keep paying $0 for it. Darn you, Darn you all!

Yahoo! Story
AmazeGPS for BlackBerry

user Posted by Mike

FireFox 3.5 'Highly Critical' Vulnerability.
 

A "Highly Critical" vulnerability has been discovered in Firefox 3.5. The vulnerability is in the way Firefox handles JacaScript code. At this time there is not vendor patch but there is a band aid.

Open your about.config file in Firefox and find the line titled "javascript.options.jit.content". Set the value to "false". I also found on another blog that you may want the ensure that the value "javascript.options.jit.chrome" is also set to "false".

Secunia.com
Mozilla Security Blog

Update 7/21/2009

Fix (LINK)

user Posted by Mike

Google Chrome Vulnerability.
 

The people over at Ha.ckers.org have posted a story about a vulnerability in Google Chrome. According to the website, the flaw allows JavaScript to execute in “view-source”. They report that people use the view-source mode “to neuter the danger of pages that they think are potentially malicious.” Check out the full story and proof of concept on their website.

Ha.ckers.org

user Posted by Mike

The Internet Made Safer… and it’s free.
 

Have you been searching for a product that will help protect your family and friends from online threats? Maybe one that is cheap… or free!? Maybe you are concerned about your children accessing a pornography or social networking site? Maybe your mother in-law clicks on every stink’n junk mail she gets? OpenDNS may just be the sparkle of hope you have been looking for.

OpenDNS is a free service that allows you to use their DNS servers for all of your DNS lookups. They also provide web content filtering as part of that service. You can create an account, reconfigure your gateway device, router, or computer and your done. You can further set rules that allow or disallow access to certain classifications. You can also setup white lists and black lists. They will also automatically protect you (as best as possible) from known malicious content such as the recent conficker worm.

This is just a small taste of what you can do with OpenDNS, so check out their site and see for yourself.

OpenDNS

user Posted by Mike

Active Directory Administration via VBS Scripting.
 

There are a lot of good resources that assist with administrative tasks within Windows Active Directory. One resource that I have found invaluable is found on the website of Richard L. Mueller. His Hilltop Lab site has been around for a while and he updates it quite frequently. You can find VBS scripts to run just about any AD task and if it is not exactly what you need, he has written the code in such a way that it is quite easy to modify.

Thanks Richard!

Hilltop Lab

user Posted by Mike

Your Money is Safe… For Now.
 

Captain Barnaby Jack of the SS Juniper was force to walk the Black Hat plank today as his talk demonstrating security weaknesses in widely used ATM machines was chopped. The presentation was said to “explore both local and remote attack vectors, and finish with a live demonstration of an attack on an unmodified, stock ATM.” Captain Jack’s employer, Juniper Networks, stated that they [Juniper] “…believes that Jack’s research is important to be presented in a public forum in order to advance the state of security… However, the affected ATM vendor has expressed to us concern about publicly disclosing the research findings before its constituents were fully protected.”

Well duh! I have no knowledge as to how long Jack and Juniper have known about this or if the vendor in question has been afforded the time required to research it themselves. But let’s assume that they have not had adequate time; the vendor needs to protect itself and its customers before the information is released publicly. Lets now assume that the vendor has had plenty of notice; Then it will be more that their rum and gold that the scurvy pirates will be after…. arr.

LINK

user Posted by Mike