New Santy Variants Spread Beyond Google
15601
The Santy worm, which appeared just before the Christmas holiday and uses search engines to spread, appears to be morphing into dangerous variants, virus experts warned Tuesday.
615818
A new worm has been detected that uses Google to find vulnerable phpBB forums. The worm - named Net-Worm.Perl.Santy.a - queries Google to find sites using outdated versions of the phpBB forum software which can be exploited.
618610
Could this be an end to broken links? New software replaces and updates links on Web pages.
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
395515
The Santy worm, which originally flared up a week ago as bulletin board Web sites found their pages erased and defaced by the worm&#39;s own text, has begun to spread using both Google and other search engines.
690580
On the Dotvoid.com blog today, there's a new post that shares some handy code to parse out information from the incoming user agent string for the visitors for your site.   Recently I experimented a bit with an Apache log file analyzer written in PHP. It's not all that difficult were it not for trying to parse the browser, or user agent, string. [...] For my purposes I don't care much for the operating system details. This is the result so far. I'm still not very satisfied but I thought maybe other people might be interested and maybe help out.   He provides the code in the format of an encapsulated PHP function that returns the product they're using, the version number of the browser and other various comments.
254653
Analysis: New Google browser plug-in offers offline access to Web-hosted applications, intriguing developers.
663039
UPDATE: Campaign grows from distributed denial-of-service attack to Digg bumps.
238236
Jim Wynia has posted some thoughts about a recent announcement of the development of a WebDAV library for PHP to his blog today:   However, over the past few years, WebDAV has started gaining traction as the underlying protocol for Subversion repositories over the web and in several other places. That makes this story about a new PHP library for working with WebDAV interesting.   He notes that he's moved a lot of his file storage to Amazon's s3 service and having this new PHP library would make it even easier for him to get at his content directly from his applications.
635724
In a new post on his blog, Christian Wenz mentions the latest results of the SANS Institute's Top 20 Internet Security Attack Targets list which both includes a new entry ("Users") and several mentions of PHP and PHP-related applications.   Of course you can debate how such a Top list came together and what the real value behind that is, but there are two specific points in this year's list that I found quite interesting.   There's two targets for the PHP community to worry about - sysadmin/hosting and things developers need to keep in mind. Items on these lists include:  Always test and deploy patches and new versions of PHP as they are released Use Intrusion Prevention/Detection Systems to block/alert on malicious HTTP requests. Consider using Apache's mod_security to block known PHP attacks If you use PHP, migrate your application to PHP 5.2 as a matter of urgency. Encode all output using htmlentities() or a similar mechanism to avoid XSS attacks  You can check out the full information over on the SANS Institute website.
198643
Responding to calls from antivirus firms, Google has taken steps to stop the spread of an Internet worm called Santy worm. The santy worm was first spotted early Tuesday morning and was using Googleâs search
261062
Latest PHPClasses.org Releases:SPL and IteratorsBWT & MTF encodercPanel Sub-domains CreatorObserverableHTTP SpySimple and Attachment Send MailWindows RegistryClean OutputCryptPHP RARRTF Generation ClassBar ChartPclTemplateICQ Protocol
108829
Recently , Google has released a new service for their search engine, the Google Code Search. It allows for developers to look through and locate items in public source code through the simple Google interface we're all used to. Fortunately, there's also a few security problems the site can help with as well, and Chris Shiflett shares some of these in his latest post.   Stephen de Vries sent an email to SecurityFocus's web application security mailing list earlier today to comment on the new Google Code Search: "Google's code search provides an easy way to find obvious software flaws in open source and example applications."   Chris talks about cross-site scripting problems, issues with the superglobals, SQL injection problems, and even a misplaced trust of the $_SERVER superglobal. Each of the items is linked to is search terms on the Code Search to make it easy to locate.
86222
In brief Exploit circulating for unpatched vuln
368939
Today I played with using TSocks  and SSH to provide a transparent SOCKS5 proxy to internal hosts in our colo.  Its a pretty easy setup:  {{{  apt-get install tsocks vi /etc/tsocks.conf #define your networks here export LD_PRELOAD=/usr/lib/libtsocks.so  ssh -D 9050 username@server.com  }}}  Then you can use all your standard applictions like wget, Mozilla, etc without any reconfiguration.  Since its SOCKS based and not application based you can connect to everything as if you had a route.  No more stupid localhost:198377 custom port forwards!  The trick of course is the {{{-D 9050}}} which tells SSH to open a SOCKS server on that port.  It turns out that tor  also supports tsocks which seems ...
563123
Latest PEAR Releases:Net_LDAP 1.1.0a2pearweb_gopear 1.0.3HTML_TagCloud 0.1.3Console_GetoptPlus 1.0.0RC1Crypt_GPG 0.4.0LiveUser 0.16.13
180290
Santy.A infects servers that host online bulletin boards.