Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Valdis . Kletnieks
On Wed, 26 May 2010 10:15:32 +0545, Bipin Gautam said: > > it's a *bad* sector, so reading and recovering the data is a bitch... > > No, storing in Negative Disk, bad sector, stenography, slack space are > all bad places to store data! No, I meant it's usually not worth worrying that if the disk

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Elazar Broad
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thermite will definitely do, checkout http://hackaday.com/2008/09/16/how-to-thermite-based-hard-drive- anti-forensic-destruction/ and of course a .50 APIT round will do as well: http://www.ranum.com/security/computer_security/editorials/diskcrypt /ind

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Bipin Gautam
> it's a *bad* sector, so reading and recovering the data is a bitch... No, storing in Negative Disk, bad sector, stenography, slack space are all bad places to store data! In short, Flash memory may require multiple wipes before data is securely deleted because many of them use uses wear-levelli

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Marsh Ray
On 5/25/2010 5:01 PM, valdis.kletni...@vt.edu wrote: > > It's not worth worrying about wiping the remapped sectors on a disk - even an > older 40G drive has some 80 million sectors on it - so even if you have a few > hundred sectors that have remapped due to I/O errors, it's still literally > a on

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread BMF
On Tue, May 25, 2010 at 3:01 PM, wrote: > It's not worth worrying about wiping the remapped sectors on a disk - even an > older 40G drive has some 80 million sectors on it - so even if you have a few > hundred sectors that have remapped due to I/O errors, it's still literally > a one-in-a-million

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Valdis . Kletnieks
On Wed, 26 May 2010 03:01:26 +0545, Bipin Gautam said: > @Valdis: Those were from some ooold notes, (~4yrs) :) if you have full > hdd encryption wiping hdd header and backup header few (7?) times and > rest hdd with 1 random pass should be enough. My point is that even if the drive *wasn't* encry

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Tracy Reed
On Tue, May 25, 2010 at 04:08:45PM -0400, valdis.kletni...@vt.edu spake thusly: > There is zero evidence that anybody is able to recover data after even a > single overwrite of /dev/zero on a disk drive made this century. Even in Quite right. I did some research on this last year when I had a pil

[Full-disclosure] [USN-944-1] GNU C Library vulnerabilities

2010-05-25 Thread Kees Cook
=== Ubuntu Security Notice USN-944-1 May 25, 2010 glibc, eglibc vulnerabilities CVE-2008-1391, CVE-2010-0296, CVE-2010-0830 === A security issue affects the following Ubunt

[Full-disclosure] [ MDVSA-2010:107 ] mysql

2010-05-25 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2010:107 http://www.mandriva.com/security/

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Bipin Gautam
@Christian : You, EFF research is no big deal. If you noticed the article was written [On Wed, Feb 20, 2008] www.mail-archive.com/foss-ne...@googlegroups.com/msg04248.html >From open source only rare few people like Henrik Gemal, ( http://browserspy.dk/ ) are known people to have early knowledge (

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Christian Sciberras
By the way, as to EFF's "research" everyone is bragging about; it's no big deal. I mean, seriously, I present my clients with a PDF download page only if their browser can't embed it. How did I do it? Some magic ultra-secret javascript to detect which browser plugins are installed and mime-types s

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Christian Sciberras
Valdis, you're wrong. Give me another century and I'll prove it to you. :-) On Tue, May 25, 2010 at 10:08 PM, wrote: > On Wed, 26 May 2010 01:25:25 +0545, Bipin Gautam said: > > Rest of article actually looks good at first glance, but this jumped out at > me: > > > > -Software disk Wiping: > >

Re: [Full-disclosure] Stealthier Internet access

2010-05-25 Thread Valdis . Kletnieks
On Wed, 26 May 2010 01:25:25 +0545, Bipin Gautam said: Rest of article actually looks good at first glance, but this jumped out at me: > > -Software disk Wiping: > > Wipe KEY, header of your encrypted storage volume (first few mb, ref > > specific manual) Ref using Peter Gutmann standard of data

[Full-disclosure] Stealthier Internet access

2010-05-25 Thread Bipin Gautam
Following is a linkedin posting from a discussion group. This is just a random note for archive purpose. I lack interest to write this article in details. The article and content are of poor quality so ignore.. :) thanks, -bipin Stealthier Internet access

Re: [Full-disclosure] Windows' future (reprise)

2010-05-25 Thread Christian Sciberras
Oh my G! I'm going to quote that site next time I get to help a *nix newbie figure out permissions without sudo. Seriously by that reason I could accuse linux users of exerting too much freedom giving the allusion of godly control - which as you might have guessed is a "sin". ...unless you red

Re: [Full-disclosure] Windows' future (reprise)

2010-05-25 Thread M.B.Jr.
Hey kids, whazup? On Sat, May 15, 2010 at 11:40 AM, Thor (Hammer of God) wrote: > If you are still running Windows 95 that's your problem. Nevertheless, if one runs Windows 7, here is the problem: http://en.windows7sins.org/ Regards, Marcio Barbado, Jr. _

Re: [Full-disclosure] Sun Solaris 10 libc/*convert (*cvt) buffer overflow

2010-05-25 Thread jai
Hi there, i am in bangalore, (karnataka state), India Lot of internet hackers coming to india, we are talking in different frequency, if your coming to india, bangalore, please feel free to contact me, my email id jaikumar.shi...@gmail.com thanks for supporting me, from Def Con and Black Hat

[Full-disclosure] [SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues

2010-05-25 Thread dann frazier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA-2053-1secur...@debian.org http://www.debian.org/security/ dann frazier May 25, 2010h

[Full-disclosure] [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

2010-05-25 Thread Thijs Kinkhorst
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-2052-1 secur...@debian.org http://www.debian.org/security/ Sebastien Delafond May 24, 2010

[Full-disclosure] [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

2010-05-25 Thread Sebastien Delafond
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-2052-1 secur...@debian.org http://www.debian.org/security/ Sebastien Delafond May 24, 2010

[Full-disclosure] London DEFCON May meet - DC4420 - Wed 26th May 2010

2010-05-25 Thread Major Malfunction
wow, doesn't time fly when planes don't? :P if, like me, you've been stuck in the UK, admiring the ash cloud and listening to the chants of the soon to be unemployed trolley dollies, you'll be glad of the distraction of a couple of pints, a decent pie and some evil hax0r learning hammered into