Author: tlr

Her Majesty’s Government on Responsibiliuty for the September 11 TerroristAttacks

Her Majesty’s Government has presented a document on the repsonsibility for the september 11 terrorist attacks. It’s right now temporarily available from the 10, Downing Street site due to high demand. A local copy is available here.

Her Majesty’s Government has presented a document on the repsonsibility for the september 11 terrorist attacks. It’s right now temporarily available from the 10, Downing Street site due to high demand. A local copy is available here.

Microsoft worms and routing instability

There’s a noteworthy paper on Global Routing Instabilities during Code Red II and Nimda Worm Propagation. From the summary: In this online note, we summarize our preliminary analysis of the surprisingly strong impact of the Internet propagation of…

There’s a noteworthy paper on Global Routing Instabilities during Code Red II and Nimda Worm Propagation. From the summary: In this online note, we summarize our preliminary analysis of the surprisingly strong impact of the Internet propagation of Microsoft worms (such as Code Red and Nimda) on the stability of the global routing system. The data exhibit strong correlations between BGP message storms and worm propagation periods.

Project Honeynet: Scan of the Month Sep / 01 results are out.

The folks at project honeynet have published the results of their scan of the month for September 2001.

The folks at project honeynet have published the results of their scan of the month for September 2001.

www.microsoft.com hit by Nimda

According to messages to the bugtraq and incidents lists, Nimda-generated Javascript code was available earlier tonight at http://www.microsoft.com/frontpage/.

According to messages to the bugtraq and incidents lists, Nimda-generated Javascript code was available earlier tonight at http://www.microsoft.com/frontpage/.

More Nimda news

In a message to incidents, Barislav Kucan points to another collection of Nimda news at his site.

In a message to incidents, Barislav Kucan points to another collection of Nimda news at his site.

Nimda disassembly, and news.

For a good summary on nimda, see this page at incidents.org. Also, according to a message to the incidents and focus-virus mailing lists at SecurityFocus, a disassembly of the beast is under way.

For a good summary on nimda, see this page at incidents.org. Also, according to a message to the incidents and focus-virus mailing lists at SecurityFocus, a disassembly of the beast is under way.

A Security Analysis of PGP

Sieuwert van Otterloo has published A Security Analysis of Pretty Good Privacy. The paper includes a (new) “Multiple user ID attack”. NAI has an advisory about this.

Sieuwert van Otterloo has published A Security Analysis of Pretty Good Privacy. The paper includes a (new) “Multiple user ID attack”. NAI has an advisory about this.

New bug in PGP?

It seems someone from the netherlands has found a new bug in PGP. Apparently, details are to appear later today here.

It seems someone from the netherlands has found a new bug in PGP. Apparently, details are to appear later today here.

Honeynet Project: Results from July/August, and a new Scan of theMonth.

Lance Spitzner of the Honeynet Project writes: The Honenet Project is excited to announce the results to July/August’s Scan of the Month. The challenge was to analyze one month’s worth of firewall and IDS logs captured in the wild. We have also re…

Lance Spitzner of the Honeynet Project writes: The Honenet Project is excited to announce the results to July/August’s Scan of the Month. The challenge was to analyze one month’s worth of firewall and IDS logs captured in the wild. We have also released September’s Scan of the Month. This month’s challenge is to analyze a Snort binary capture and determine the attacker’s tactics.