CSRF vulnerability allows Twitter ‘follow’ abuse

Thursday, September 11th, 2008

Last week, TechCrunch’s Jason Kincaid wrote about an obvious Twitter vulnerability that allowed a user called “johng77536″ to game the popular micro-blogging service to add thousands of followers (subscribers) in a short period of time. The “johng77536″ account has since been disabled but a security researcher tracking Twitter security flaws and ...

NMap 4.75 now maps the network graphically

Thursday, September 11th, 2008

Nmap, the popular network scanner and mapper, has been updated to version 4.75 and gained the ability to graphically display the network topology it scans and maps. The update also includes hundreds of new OS signatures and new scripting engine modules.The mapping facility is incorporated in the Zenmap GUI for ...

IE8 beta installs with search bar ‘keylogger’

Thursday, September 11th, 2008

Microsoft's IE8 browser includes a keystroke-logging search suggestion tool similar to the one that Google modified on Monday after coming under fire from consumers. Unlike Chrome, IE8 Beta 2 does not enable the feature - which some have compared to a keylogger - by default. One privacy expert said that was ...

Facebook botnet risk revealed

Saturday, September 6th, 2008

Researchers have created a proof-of-concept application for Facebook that turned the machines of people who added the app to their Facebook page into a botnet that launched denial-of-service attacks on a victim server in a demonstration. "Social Network Web sites have the ideal properties to become attack platforms," according to a ...

Wells Fargo Passwords Are Not Case-Sensitive!

Friday, September 5th, 2008

I just heard on the Security Now podcast a listener mention that his Wells Fargo password was not case-sensitive.  I'm not a Wells Fargo user but several users who are that I asked this morning actually confirmed this.  You will be logged in no matter what case you enter into ...