[funsec] CERT-FI statement on the Outpost24 TCP issues updated

2009-06-16 Thread Juha-Matti Laurio
>From the statement: "June 15 2009 In the issue #66 of the Phrack magazine there was an article on exploiting TCP Persist Timer weaknesses (http://www.phrack.com/issues.html?issue=66&id=9#article ) to cause Denial of Service conditions. The article discusses issues similar but not the same as th

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread Mike Preston
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Its a USB broadband modem that on boot emulates a CD-ROM where the drivers are stored (This emulated CD doesn't appear with the Linux drivers since it mode switches). It also has a micro-SD slot (but that fails to work on my acer aspire one running ub

[funsec] New day nursery rhyme...

2009-06-16 Thread Thomas Raef
While helping people find out why their websites can no longer be visited after being found serving up malscripts by Google, I wrote this little poem: Little Miss Muffer sat on her buffer sniffing some bits and bytes, When along came beside her, a googlebot spider, Now no one can access

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread Juha-Matti Laurio
I mean there is no need to think that USB sticks have their own OS. I.e. Conficker doesn't infect the operating system of USB stick. Huawei's or Elisa's production line had an infected Windows machine and now we see the result. Thanks for the Huawei link, quispiam. Juha-Matti Juha-Matti Laurio

[funsec] Atlantic "Daily Dish" blog under DDoS?

2009-06-16 Thread chris
Anyone hear anything about Andrew Sullivan's political blog being under attack?  The assumption is that it is part of Iranian government efforts to quash reporting of the post election festivities. http://andrewsullivan.theatlantic.com/the_daily_dish/2009/06/dish-under-attack.html -chris

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread Juha-Matti Laurio
In Finland these so-called 'net-sticks' using 3G networks are very popular. Why the USB stick needs Windows on it... http://linuxbox.org/pipermail/funsec/2009-March/020206.html USB sticks just had the Conficker infection. Juha-Matti Larry Seltzer [la...@larryseltzer.com] kirjoitti: > I ran thi

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread quispiam lepidus
On Wed, Jun 17, 2009 at 12:15 AM, quispiam lepidus wrote: > On Tue, Jun 16, 2009 at 10:44 PM, Larry Seltzer wrote: >> I ran this through Google Translate and it looks to me like it's USB >> sticks, not modems. Still a big mistake for an ISP. >> >> Larry Seltzer >> Contributing Editor, PC Magazine >

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread quispiam lepidus
On Tue, Jun 16, 2009 at 10:44 PM, Larry Seltzer wrote: > I ran this through Google Translate and it looks to me like it's USB > sticks, not modems. Still a big mistake for an ISP. > > Larry Seltzer > Contributing Editor, PC Magazine > larry_selt...@ziffdavis.com > http://blogs.pcmag.com/securitywat

Re: [funsec] Finnish ISP delivered USB modems infected withConficker

2009-06-16 Thread Larry Seltzer
I ran this through Google Translate and it looks to me like it's USB sticks, not modems. Still a big mistake for an ISP. Larry Seltzer Contributing Editor, PC Magazine larry_selt...@ziffdavis.com http://blogs.pcmag.com/securitywatch/ -Original Message- From: funsec-boun...@linuxbox.org

Re: [funsec] Finnish ISP delivered USB modems infected with Conficker

2009-06-16 Thread Larry Seltzer
USB modems running Windows? Larry Seltzer Contributing Editor, PC Magazine larry_selt...@ziffdavis.com http://blogs.pcmag.com/securitywatch/ -Original Message- From: funsec-boun...@linuxbox.org [mailto:funsec-boun...@linuxbox.org] On Behalf Of Juha-Matti Laurio Sent: Tuesday, June 16,

[funsec] Finnish ISP delivered USB modems infected with Conficker

2009-06-16 Thread Juha-Matti Laurio
The model is Huawei Nettitikku E160 and these were infected by Conficker worm according to Finnish online news. Press release of Elisa (in Finnish): http://www.elisa.fi/ir/pressi/index.cfm?t=100&o=5170&did=15675 covered at (in Finnish) http://www.tietoviikko.fi/kaikki_uutiset/article299966.ece