«
Expand/Collapse
81 items tagged "secure"
Related tags:
usa [+],
code execution [+],
safer use [+],
authors [+],
ncp [+],
hijacking [+],
client [+],
secure document [+],
processors [+],
james d. broesch [+],
document library [+],
authentication [+],
arbitrary code execution [+],
world authors [+],
virtual machine [+],
video [+],
usage scenarios [+],
strategic initiatives [+],
steve adegbite [+],
steganography [+],
spread spectrum [+],
slides [+],
secure client [+],
rock your [+],
program execution [+],
planet [+],
model [+],
mobility [+],
mike reavey [+],
marcus nutzinger [+],
library version [+],
katie moussouris [+],
facebook [+],
execution [+],
entry [+],
email address [+],
email [+],
document [+],
dmxready [+],
code authors [+],
cisco security advisory [+],
cisco security [+],
cisco anyconnect [+],
cisco [+],
chaos communication congress [+],
audio [+],
arbitrary program [+],
advisory [+],
address maps [+],
writing secure code [+],
whitepaper [+],
wes brown tags [+],
wes brown [+],
web application security [+],
validate [+],
technology [+],
srm [+],
smartcard technology [+],
smartcard [+],
security failures [+],
security event [+],
security coverage [+],
security [+],
scott dunlop [+],
science [+],
paul bhm [+],
paper [+],
mosquito [+],
magazine [+],
juniper edition [+],
issue [+],
hack [+],
goal [+],
fraud [+],
fast [+],
exploits [+],
dunlop [+],
dropbox [+],
christopher tarnovsky [+],
attackers [+],
art and science [+],
art [+],
arbitrary commands [+],
Bugs [+],
zdi [+],
xss [+],
x imageio [+],
windows [+],
webapps [+],
web server [+],
web [+],
want [+],
voip [+],
unspecified [+],
unix [+],
u.s. [+],
twitter [+],
tornado [+],
tiff image [+],
tiff heap [+],
tiff [+],
things [+],
terrorists [+],
ten [+],
stupid [+],
stop [+],
startup [+],
stance [+],
society [+],
silc [+],
service vulnerability [+],
server [+],
secure web [+],
secure content manager [+],
scheduler service [+],
scheduler [+],
sandbox [+],
safer [+],
resistant [+],
researcher [+],
report [+],
remote [+],
reader [+],
presence [+],
power grid [+],
police [+],
pidgin [+],
password [+],
overflow [+],
oded [+],
ngs [+],
new [+],
more [+],
morality [+],
military [+],
microsoft [+],
michael howard tags [+],
mac os [+],
linux [+],
jeff thompson tags [+],
jeff thompson [+],
internet locale [+],
internet authors [+],
internet [+],
insecure [+],
information security [+],
hyundai [+],
hardware hacking [+],
hacker [+],
government [+],
etrust [+],
ethics [+],
ethical [+],
effort [+],
drupal [+],
dominic chell [+],
design authors [+],
design [+],
dep [+],
denies [+],
denial of service [+],
day [+],
david leblanc [+],
cross [+],
cookie [+],
content [+],
connections [+],
code [+],
certificates [+],
cctv [+],
build [+],
bugtraq [+],
brian oblivion [+],
boot [+],
asia [+],
arbitrary code [+],
apple mac os [+],
adobe reader [+],
NWO [+],
Hardware [+],
vulnerability [+],
oracle [+],
black hat [+]
-
-
21:39
»
SecDocs
Authors:
Marcus Nutzinger Rainer Poisel Tags:
cryptography Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Auditive steganography allows for various usage scenarios. In our project we focused on hidden communications in VoIP and GSM in which voice data is typically compressed and transmitted in realtime. A framework has been developed to meet these requirements, providing interfaces for robust steganographic algorithms. The need for steganography has arisen from scenarios that forbid the application of cryptographic algorithms for secure communications. Countries that made secret message exchange a delict are an example for such scenarios. The LSB algorithm used by many open- and closed-source projects is insecure, as its application can be statistically detected. Therefore, we focused on alternate approaches which are more robust against operations on the bit-level, such as compression, D/A-, A/D-conversion and channel idiosyncrasies, such as spread spectrum steganography in time and frequency domain. Secure and hidden communications demand more than an embedding algorithm. Involved elements include: protocols for data flow handling, various embedding algorithms and support for different I/O-interfaces. For correct interaction of these elements, arranging them in a layered model is a reasonable approach for the distribution of the required tasks such as frame and packet building, checksumming, transmission, etc. From this model we derived our software architecture which is portable to common platforms (Linux/Unix, Windows, ...) and various architectures (x8632, x8664, mips). This talk gives an introduction to the topic and describes the development and implementation of our framework based on a novel layered model for auditive steganography including a live demonstration.
-
21:39
»
SecDocs
Authors:
Marcus Nutzinger Rainer Poisel Tags:
cryptography Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Auditive steganography allows for various usage scenarios. In our project we focused on hidden communications in VoIP and GSM in which voice data is typically compressed and transmitted in realtime. A framework has been developed to meet these requirements, providing interfaces for robust steganographic algorithms. The need for steganography has arisen from scenarios that forbid the application of cryptographic algorithms for secure communications. Countries that made secret message exchange a delict are an example for such scenarios. The LSB algorithm used by many open- and closed-source projects is insecure, as its application can be statistically detected. Therefore, we focused on alternate approaches which are more robust against operations on the bit-level, such as compression, D/A-, A/D-conversion and channel idiosyncrasies, such as spread spectrum steganography in time and frequency domain. Secure and hidden communications demand more than an embedding algorithm. Involved elements include: protocols for data flow handling, various embedding algorithms and support for different I/O-interfaces. For correct interaction of these elements, arranging them in a layered model is a reasonable approach for the distribution of the required tasks such as frame and packet building, checksumming, transmission, etc. From this model we derived our software architecture which is portable to common platforms (Linux/Unix, Windows, ...) and various architectures (x8632, x8664, mips). This talk gives an introduction to the topic and describes the development and implementation of our framework based on a novel layered model for auditive steganography including a live demonstration.
-
21:39
»
SecDocs
Authors:
Marcus Nutzinger Rainer Poisel Tags:
cryptography Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Auditive steganography allows for various usage scenarios. In our project we focused on hidden communications in VoIP and GSM in which voice data is typically compressed and transmitted in realtime. A framework has been developed to meet these requirements, providing interfaces for robust steganographic algorithms. The need for steganography has arisen from scenarios that forbid the application of cryptographic algorithms for secure communications. Countries that made secret message exchange a delict are an example for such scenarios. The LSB algorithm used by many open- and closed-source projects is insecure, as its application can be statistically detected. Therefore, we focused on alternate approaches which are more robust against operations on the bit-level, such as compression, D/A-, A/D-conversion and channel idiosyncrasies, such as spread spectrum steganography in time and frequency domain. Secure and hidden communications demand more than an embedding algorithm. Involved elements include: protocols for data flow handling, various embedding algorithms and support for different I/O-interfaces. For correct interaction of these elements, arranging them in a layered model is a reasonable approach for the distribution of the required tasks such as frame and packet building, checksumming, transmission, etc. From this model we derived our software architecture which is portable to common platforms (Linux/Unix, Windows, ...) and various architectures (x8632, x8664, mips). This talk gives an introduction to the topic and describes the development and implementation of our framework based on a novel layered model for auditive steganography including a live demonstration.
-
-
10:22
»
Packet Storm Security Exploits
This is a brief paper that describes how sending external email to an account automatically maps things like a graphic if a person's personal email address maps to it. We tested this and it does work, but Facebook does add a little icon saying the sender isn't verified. However, the average user will probably overlook this.
-
10:22
»
Packet Storm Security Recent Files
This is a brief paper that describes how sending external email to an account automatically maps things like a graphic if a person's personal email address maps to it. We tested this and it does work, but Facebook does add a little icon saying the sender isn't verified. However, the average user will probably overlook this.
-
10:22
»
Packet Storm Security Misc. Files
This is a brief paper that describes how sending external email to an account automatically maps things like a graphic if a person's personal email address maps to it. We tested this and it does work, but Facebook does add a little icon saying the sender isn't verified. However, the average user will probably overlook this.
-
-
15:34
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
7:18
»
Packet Storm Security Advisories
Dominic Chell of NGS Secure has discovered a High risk vulnerability in Mac OS X ImageIO. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution.
-
-
12:46
»
Packet Storm Security Advisories
Cisco Security Advisory - The Cisco AnyConnect Secure Mobility Client, previously known as the Cisco AnyConnect VPN Client, is affected by arbitrary program execution and local privilege escalation vulnerabilities. There are no workarounds for the vulnerabilities described in this advisory.
-
12:46
»
Packet Storm Security Recent Files
Cisco Security Advisory - The Cisco AnyConnect Secure Mobility Client, previously known as the Cisco AnyConnect VPN Client, is affected by arbitrary program execution and local privilege escalation vulnerabilities. There are no workarounds for the vulnerabilities described in this advisory.
-
12:46
»
Packet Storm Security Misc. Files
Cisco Security Advisory - The Cisco AnyConnect Secure Mobility Client, previously known as the Cisco AnyConnect VPN Client, is affected by arbitrary program execution and local privilege escalation vulnerabilities. There are no workarounds for the vulnerabilities described in this advisory.
-
-
11:15
»
SecuriTeam
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates eTrust Secure Content Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
13:36
»
Packet Storm Security Recent Files
secure rm (srm) is a command-line compatible rm(1) which completely destroys file contents before unlinking. The goal is to provide drop in security for users who wish to prevent command line recovery of deleted information, even if the machine is compromised.
-
13:36
»
Packet Storm Security Misc. Files
secure rm (srm) is a command-line compatible rm(1) which completely destroys file contents before unlinking. The goal is to provide drop in security for users who wish to prevent command line recovery of deleted information, even if the machine is compromised.
-
-
12:03
»
Packet Storm Security Recent Files
Topics for this issue include database protocol exploits being explained, measuring web application security coverage, combating the changing nature of online fraud, and much more.
-
12:03
»
Packet Storm Security Misc. Files
Topics for this issue include database protocol exploits being explained, measuring web application security coverage, combating the changing nature of online fraud, and much more.
-
-
16:36
»
SecuriTeam
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
14:17
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
14:07
»
SecuriTeam
This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:47
»
SecuriTeam
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
12:25
»
SecuriTeam
Multiple vulnerabilities were discovered in HP Secure Web Server for OpenVMS (based on Apache) CSWS.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
13:28
»
Full Disclosure
Posted by ☣frank^2 on Mar 31
I'm a little upset that you've decided to take this route-- especially
considering your strong stance on the New World Order. Doesn't helping
the Information Society's establishment in using technology to guide
and control the world populous contradict your beliefs? By joining the
information security community and contributing to it you're
essentially empowering the New World Order and its ability to remain
secure from the outside threat of...