Thu, 02 Sep 2010 15:03:00 +0000 1800 This is the RSS feed of the last ten file submissions accepted into our database. This RSS feed is always up to date as it is dynamically updated. http://www.astalavista.com/files/file/9626-insecure-magazine-issue-27/
(IN)Secure Magazine Issue 27

* Review: BlockMaster SafeStick secure USB flash drive
* The devil is in the details: Securing the enterprise against the cloud
* Cybercrime may be on the rise, but authentication evolves to defeat it
* Learning from bruteforcers
* PCI DSS v1.3: Vital to the emerging demand for virtualization and cloud security
* Security testing - the key to software quality
* A brief history of security and the mobile enterprise
* Payment card security: Risk and control assessments
* Security as a process: Does your security team fuzz?
* Book review: Designing Network Security, 2nd Edition
* Intelligent security: Countering sophisticated fraud]]> Thu, 02 Sep 2010 10:57:56 +0000 9626 http://www.astalavista.com/files/file/9625-hakin9-82010-mobile-malware-%e2%80%93-the-new-cyber-threat/
# Botnet:The Six Laws And Immerging Command & Control Vectors
# Hacking Trust Relationships Part II
# Web Malwares Part II
# Defeating Layer-2 attacks in VoIP
# Armoring Malware: Hiding Data within Data
# Is Anti-virus Dead The answer is YES. Here’s why…
# Mobile Malware – the new cyber threat]]> Thu, 02 Sep 2010 10:48:38 +0000 9625 http://www.astalavista.com/files/file/9624-web-application-disassembly-with-odbc-error-messages/ Thu, 02 Sep 2010 10:35:55 +0000 9624 http://www.astalavista.com/files/file/9623-buffer-overflow-seminar/ Thu, 02 Sep 2010 10:34:05 +0000 9623 http://www.astalavista.com/files/file/9622-windows-2000-format-string-vulnerabilities/ Anybody who has programmed even a little C will have come across the printf() function. Indeed the first program of almost of C text book will be the ubiquitous “Hello, World!” program – a tradition started by Kernighan and Ritchie in their “The C Programming Language Thu, 02 Sep 2010 10:33:19 +0000 9622 http://www.astalavista.com/files/file/9621-things-everyone-should-know-about-telephony-over-cable/ Thu, 02 Sep 2010 10:31:59 +0000 9621 http://www.astalavista.com/files/file/9620-gsm-and-gprs-security/ Analog cellular phones and networks were designed with minimal security which soon turned out to be insufficient. The GSMsystemprovides solutions to a few important aspects of security: subscriber authentication, subscriber identity confidentiality and confidentiality of voice and data over the radio path. This paper gives an overview of the security features provided in a GSM PLMN and GPRS network. Also the SIM module, which plays an important role in GSM security, is discussed. Thu, 02 Sep 2010 10:30:06 +0000 9620 http://www.astalavista.com/files/file/9619-gsm-interception/ The GSM standard was designed to be a secure mobile phone system with strong subscriber authentication and over-the-air transmission encryption. The security model and algorithms were developed in secrecy and were never published. Eventually some of the algorithms and specifications have leaked out. The algorithms have been studied since and critical errors have been found. Thus, after a closer look at the GSM standard, one can see that the security model is not all that good. An attacker can go through the security model or even around it, and attack other parts of a GSM network, instead of the actual phone call. Although the GSM standard was supposed to prevent phone cloning and over-the-air eavesdropping, both of these are possible with little additional work compared to the analog mobile phone systems and can be implemented through various attacks. One should not send anything confidential over a GSM network without additional encryption if the data is supposed to stay confidential. Thu, 02 Sep 2010 10:28:52 +0000 9619 http://www.astalavista.com/files/file/9618-palm-keygenz-handbook/
If you want create a Keygen (PSNG Plugin) for a PalmOS Application, i hope this Tutorial will help you ;-)]]> Thu, 02 Sep 2010 10:27:20 +0000 9618 http://www.astalavista.com/files/file/9617-pdd-memory-imaging-and-forensic-analysis-of-palm-os-devices/ One goal of incident response is to preserve the entire digital crime scene with minimal or no modification of data. This paper introduces pdd or “Palm dd”, a Windows-based tool for memory imaging and forensic acquisition of data from the Palm operating system (OS) family of Personal Digital Assistants (PDAs). pdd will preserve the crime scene by obtaining a bit-for-bit image or “snapshot” of the Palm device’s memory contents. Such data can be used by forensic investigators, incident response teams, and criminal and civil prosecutors. Thu, 02 Sep 2010 10:25:21 +0000 9617