Danzer

Dranzer, an open source tool released by CERT.

It enables users to examine effective techniques for fuzz testing ActiveX controls in order to provide some insight into the current state of ActiveX security.

iPhone in Action

"iPhone in Action" is a book release in Dec 2008.

The blog for iPhone in Action is at http://iphoneinaction.manning.com/iphone_in_action/
It is all about iPhone including tutorials, classes, and other info on iPhone SDK programming.

MakeUseof Freebies

This is a list of freebies from MakeUseOf:

• Shortcut cheatsheets
• "Where to Watch" Guide for Web
• MakeUseOf Photoshop Guide
• Idiot's Ultimate Guide for Building your own computer.
• MakeUseOf Laptop Buying Guide 2009
• The Big Book of iTunes
• MakeUseOf PSP Downgrading and Upgrading Guide

I found the Big Book of iTunes is particularly useful for me.

Vulnerability on OAuth

What's OAuth?

• It is an an open protocol to allow API access authorization.
  
• It allows user to grant access on specific user's data to online providers, like OpenID.
  
• OpenID provides the authentication and then OAuth gives access to the user's properties and attributes without giving all other information to the provider.
  

Summary of the Vulnerability

• It is similar to a session fixation vulnerability (it's not session related).
  
• The attacker can get a legitimate request token from one site, then entice a victim to click on a link with that token.
  
• The link brings the victim to a page for approving access for site to access personal information.
  
• The attacker can then finishes the authorization and get access to whatever information was approved to be accessed by the site.

The advisory and the detail can be accessed at OAuth site.

Below is a list of affected vendors:

• Cliqset
• Fellowship One
• Google
• Iron Money
• Mashery
• Meetup
• Netflix
• TripIt
• Twitter
• Yahoo
• Yammer

New Linux Rootkit Technique

A new rootkit technique is uncovered by a Linux expert using /dev/mem. This is also less obvious thant the established route via traditional LKM method to hide files or processes, or interfere with network traffic.

The trick is that, without requiring extensive rights, libmemrk uses the /dev/mem device driver to write arbitrary code from userspace into main memory. /dev/mem is an interface that enables use of the physically addressable memory.

Interestingly, some platforms are secure against this new rootkit (by default):

• Current RedHat and Fedora (incorporates SELinux )
• Virtual environment (another reason to be virtualized)
  

The detail of the new rootkit is documented in Malicious Code Injection via /dev/mem.