Federico Biancuzzi: Zero Day Patches
689796
Zero Day Patches &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
147320
Patch for Messenger addresses zero-day exploits that take advantage of vulnerabilities in its Webcam ActiveX controls.
424613
La posta elettronica di Kataweb cambia look, si arricchisce di nuove funzioni e aumenta lo spazio a disposizione. Due potenti funzioni antivirus e antispam garantiscono la sicurezza degli utenti e dei dati e un calendario personale permette di tenere gli impegni sotto controllo. Apri la tua casella ora, &egrave; gratuita!
750699
Bundle of fixes includes patch for zero-day Wi-Fi hijack flaw and other bugs, some that could let an attacker commandeer Macs.
192196
bug text As worms proliferated through the first half of the year, attacks gained in sophistication. Also: A start-up fights zombies.
63097
Also: Windows worm travels with Tetris [News.com Extra]
193189
Update for Mac OS X includes a number of fixes for zero-day vulnerabilities released as part of two high-profile bug-hunting campaigns.
399851
Cal Evans has another update about the upcoming (Oct 8th through 11th) to the Zend Developer Zone today:   ZendCon is sneaking up on us fast. If you've not got your tickets yet, time is running out so you had better hurry. To whet your appetite, ere are a few blog posts or ZendCon mentions from speakers and attendees who will be there this year.   Included in his list are bloggers like Terry Chay, Brian DeShong and Mike Naberenzy and events like the Happy Hour 2.0 and the Unconference.
201252
An implementation of the famous Snake game written for MS-DOS in Pascal. This is a project from my early days of programming which I wish to update and develop as it's a bit rough around the edges and relies on libraries more than it really should. Othe   Although this program is in version 2, I have had it since long before my SourceForge.net days and have just decided to take another look at it after 6 years on the shelf.
448921
(InfoWorld) - Psst. Want to buy a zero-day? A Swiss startup called WabiSabiLabi has some for sale, but to qualified buyers only. On Tuesday, the company launched a security vulnerability marketplace, where details on unpatched software flaws can be bought and sold. By Thursday, the site was offering details on four bugs in products such as the Linux kernel and Yahoo Messenger. No bids had yet been registered, and asking prices for the research ranged between â¬500 ($681) and â¬2,000 A zero-day vulnerability is a previously undisclosed bug that has not been fixed by the vendor. WabiSabiLabi argues that the computer industry's ethical disclosure policies have led to a raw deal for security researchers, who typically are not paid for disclosing vulnerabilities. "Nobody in the pharmaceutical industry is blackmailing researchers (or the companies that are financing the research), to force them to release the results for free under an ethical disclosure policy," the WabiSabiLabi Web site states. Representatives from WabiSabiLabi could not immediately be reached for comment. The company bills its marketplace as a way for "security researchers to get a fair price for their findings and ensure that they will no longer be forced to give them away for free or sell them to cyber-criminals." But to David Perry at Trend Micro, it looks like something else. "It's going to be eBay for vulnerabilities," he said. Although WabiSabiLabi says it will sell details only to legitimate buyers, Perry is concerned that the site could be used to put dangerous information into the hands of criminals. "We're looking at the potential of cyber warfare coming up," said Perry, who is Trend Micro's global director of education. "Now we're going to peddle vulnerabilities in a winner-takes-all auction. How do we know who's good and who's bad when we do this?" Security researcher Cesar Cerrudo said that while it's uncommon for researchers to go underground to sell their vulnerabilities, it does happen. "Researchers will try to get money in the easier and faster way, and sometimes that can only be done in the black market," said Cerrudo, CEO of Argeniss Information Security. WabiSabiLabi is run by Herman Zampariolo, formerly CEO of Italian networking vendor iLight SpA. It lists Roberto Preatoni, founder of the Zone-h.org cyber-defacement Web site, as its strategic director. Like eBay, WabiSabiLabi offers sellers a variety of options. Research can be offered at a fixed price, sold at auction, or sold to a number of different buyers in what is known as a Dutch auction. WabiSabiLabi will test the research to make sure the vulnerabilities operate as advertised, and the company will also vouch for the sellers and buyers, who can remain anonymous and trade under nicknames. Companies such as 3Com's Tipping Point division and VeriSign's iDefense Labs have offered cash for this type of research before, but this is the first time that such an open marketplace has been created, Perry said. Argeniss's Cerrudo doesn't share Perry's fear of the vulnerabilities being misused. "This is already happening in the underground," he said, "but with a public service like this, I think things are a little clearer."
612424
With so much focus on security in the enterprise, it might have been inevitable. A Swiss security research lab is testing the market for zero-day vulnerabilities at an auction site called WSLabi. Security researchers stateside are skeptical.
632100
The IcePack hacker exploit toolkit has three new tools in its collection, including one that targets a zero-day flaw in Microsoft's DirectX software development kit.
351080
Matthew O'Phinney had the chance to present the Zend Framework during a meeting he attended of his local PHP user group (BostonPHP) as a part of a series their doing.   Horde was also represented as part of the evening's fare. It was the first time I've attended a UG, so I got the double whammy of that and being a presenter. Oh, make it a triple whammy -- Boston is a 3+ hour drive from the Burlington, VT area I now call home.   He mentions a talk that Chuck Hagenbuch (of the Horde project) gave on the current state of the project and a bit about his presentation (including some portions that pointed out problems with the Zend_Db component). You can check out this and the rest of the contents of his presentation here [pdf] and here [mp3 podcast].
690828
Asymptote (http://asymptote.sourceforge.net) is a powerful descriptive vector graphics language for technical drawing, inspired by MetaPost but with an improved C++-like syntax. Asymptote provides for figures the same high-quality level of typesetting that LaTeX does for scientific text.   Problems with loading LaTeX packages and slide presentations were fixed. Non-static variables in every loop iteration are now allocated anew. Formatting under locales with nonperiod decimal separators was fixed, along with logarithmic tick labels near the machine epsilon.  Concatenation of nullpaths was fixed. New path markers were added and the perpendicular symbol in the geometry module was improved. The skeleton routines in the solids module were split to provide finer control.  Routines to facilitate drawing 3d contours were added. Reading portable XDR binary data into arrays works again; functions for reading and writing also in native binary formats were added. The TeX preamble is no longer output in inline mode. The TeX pipe is now aware of a previously generated aux file. Memory leaks were fixed. An inline limit is now imposed on old compilers to speed up compilation. Setlocale warnings are disabled unless debugging is on. A colorspace command for extracting the colorspace of a pen was added. An Asymptote introductory slide presentation was added and a user-written Asymptote tutorial is now cited in the manual.
122246
As mentioned by the Zend Developer Zone, Ed Finkler has posted the latest version of his Inspekt security tool.   Although downloads have been on the Google Code site for a bit, I recently put up a new build of Inspekt. This could probably be described as a late alpha release, with most proposed features implemented.   Also included in this new edition are full API documentation for the application, some documentation on its basic usage and, of course, the source of this latest release.
648704
Tra le notizie piÃ¹ interessanti del secondo giorno di lavori di Idf (Intel Developer Forum) che si sta svolgendo a S. Francisco, ci sono quelle sulle prossime piattaforme per portatili. Anand Chandrasekher
502207
Does this mean 40 lean days ahead? Microsoft pushed patches for 12 vulnerabilities out of the door yesterday, six of them classed as critical and six of them important.â¦