FormFox

Sunday, April 6th, 2008

I've just recently caught wind of a Firefox plugin called FormFox.  Here's the description from the website: Do you know where your form information is going? This extension displays the form action (the site to which the information you've entered is being sent.) In any place where you can enter data, ...

MySQL SQL Injection Cheat Sheet

Sunday, April 6th, 2008

Some useful syntax reminders for SQL Injection into MySQL databases... This post is part of a series of SQL Injection Cheat Sheets.  In this series, I've endevoured to tabulate the data to make it easier to read and to use the same table for for each database backend.  This helps to ...

Internet Fraud Dupes Men More Often Than Women

Sunday, April 6th, 2008

When it comes to being taken in by Internet fraudsters, men have a knack for losing cash, according to a new report from the Internet Crime Complaint Center. Data compiled from more than 206,000 complaints received last year by the U.S. Internet Crime Complaint Center (IC3) shows that men lost US$1.67 ...

Heads-up: Dangerous new customized IRS scam steals data

Saturday, April 5th, 2008

This afternoon, we got a highly customized email purporting to come from the IRS, which of course, does nothing more than load malware. The email is made out to a key financial contact here at Sunbelt (name obfuscated for this post). As you can see, it’s quite convincing. (Incidentally, “Sunbelt Software Distribution, ...

Researchers dive into memory dumps

Monday, March 31st, 2008

Building on earlier research into cold-boot attacks on computer memory, two consultants showed off their prototype tools for grabbing passwords from untended computers, during a session at the CanSecWest conference last week. The consultants -- Sherri Davidoff and Tom Liston, both of security firm Intelguardians -- found that numerous Windows and ...