security: September 2003 Archives

Daniel E. Geer Jr., one of the primary authors of a report Reliance On "MS A Danger To National Security", was fired from @stake Thursday morning. The company said that 'The values and opinions of the report are not in line with @stake's views' and that Geer's participation was 'not sanctioned.'.

Sombria (shadowy in Portuguese) is a honeypot system set up in Tokyo, Japan, intended for network surveillance and research. This paper provides some statistics and an overview of the most prominent attacks from May through July 2003.

Ofer Maor and Amichai Shulman of WebCohort recently posted an interessting paper about Blindfolded SQL Injection to BugTraQ. It describes how SQL Injection can be performed without the help of detailed error messages from the webserver. More Info gives the SQL Injection Whitepaper and the More Advanced SQL Injection Paper from SecuriTeam.com.