<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.9.2" -->
<rss version="0.92">
<channel>
	<title>Ruan Müller</title>
	<link>http://ruanmuller.com</link>
	<description>Willing and not afraid to challenge the status quo.</description>
	<lastBuildDate>Mon, 15 Feb 2010 19:41:25 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>University of Cambridge discovers Chip and PIN verification &#8220;wedge&#8221; vulnerability</title>
		<description><![CDATA[Students at the University of Cambridge have discovered a new flaw that is compromised by using a MITM attack that deceives a terminal in to thinking that a card&#8217;s PIN is correct irregardless of what number is provided for the PIN.
The attack uses an electronic device as a &#8220;man-in-the-middle&#8221; in order to prevent the PIN [...]]]></description>
		<link>http://ruanmuller.com/2010/02/15/university-of-cambridge-discovers-chip-and-pin-verification-wedge-vulnerability/</link>
			</item>
	<item>
		<title>The EU and UK Have Less Open Wireless WiFi Broadband Hotspots Than USA</title>
		<description><![CDATA[From ISPreview:
WeFi, a free wireless Wi-Fi broadband Hotspot locator website with a database of 47,000,000 access points around the world, has revealed that 40% of Hotspots in the USA are unlocked and do not require a security password. This compares with 25% in Europe.
According to WeFi’s data, a traveler would find a higher percentage of [...]]]></description>
		<link>http://ruanmuller.com/2010/01/08/the-eu-and-uk-have-less-open-wireless-wifi-broadband-hotspots-than-usa/</link>
			</item>
	<item>
		<title>Scientists Demonstrate New Lightweight Rootkit Protection Method</title>
		<description><![CDATA[Scientists are set to unveil a lightweight system they say makes an operating system significantly more resistant to rootkits without degrading its performance. The hypervisor-based system is dubbed HookSafe, and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory space that&#8217;s tightly locked down. The team installed HookSafe on [...]]]></description>
		<link>http://ruanmuller.com/2009/11/14/scientists-demonstrate-new-lightweight-rootkit-protection-method/</link>
			</item>
	<item>
		<title>OpenBSD 4.6 Released</title>
		<description><![CDATA[The release of OpenBSD 4.6 was released on Sunday. Highlights of the new release include:

Simplified installation process.
Improved documentation and man pages.
New versions of packages in ports (package management system). Over 5800 packages in total.
Hardware driver updates: sensors, chipsets, video devices etc. New drivers, functionality and reliability updates.
Network stack updates: stricter default settings. Wired interfaces are [...]]]></description>
		<link>http://ruanmuller.com/2009/10/20/openbsd-4-6-released/</link>
			</item>
	<item>
		<title>Employees within business and government organizations are the fastest-growing threat</title>
		<description><![CDATA[A joint study conducted by TELUS and the Rotman School of Management at the University of Toronto surveyed more than 600 Canadian IT security professionals on Canadian IT security practices this year.
The economic downturn has increased the risk organizations:
“The threat environment worsens because when the economy goes into a downturn, job losses mount, and as [...]]]></description>
		<link>http://ruanmuller.com/2009/09/30/employees-within-business-and-government-organizations-are-the-fastest-growing-threat/</link>
			</item>
	<item>
		<title>SANS Report: 60% Of All Attacks Hit Web Applications, Most in the U.S.</title>
		<description><![CDATA[Most organizations are focusing their patching efforts and vulnerability scanning on the operating system &#8212; but 60 percent of the total number of attacks occur on Web applications, and many attacks are aimed at third-party applications such as Microsoft Office, and Adobe Flash and other tools, according to actual attack data gathered for the report. [...]]]></description>
		<link>http://ruanmuller.com/2009/09/15/sans-report-60-of-all-attacks-hit-web-applications-most-in-the-u-s/</link>
			</item>
	<item>
		<title>Sun presents plans for a security accelerator chip to offload encryption</title>
		<description><![CDATA[Sun Microsystems&#8217; product plans are up in the air pending its acquisition by Oracle, but the company&#8217;s chip engineers continue to present new designs in the hope they&#8217;ll see the light of day. At the Hot Chips conference at Stanford University on Tuesday, Sun presented plans for a security accelerator chip that it said would [...]]]></description>
		<link>http://ruanmuller.com/2009/08/26/sun-presents-plans-for-a-security-accelerator-chip-to-offload-encryption/</link>
			</item>
	<item>
		<title>New DoS Vulnerability Affects All Versions of BIND 9</title>
		<description><![CDATA[ISC is reporting that a new, remotely exploitable vulnerability has been found in all versions of BIND 9. A specially crafted dynamic update packet will make BIND die with an assertion error. There is an exploit in the wild and there are no access control workarounds. Red Hat claims that the exploit does not affect [...]]]></description>
		<link>http://ruanmuller.com/2009/07/29/new-dos-vulnerability-affects-all-versions-of-bind-9/</link>
			</item>
	<item>
		<title>Nmap 5 Released</title>
		<description><![CDATA[Nmap Security Scanner version 5 has been released. Significant performance improvements were made, and many scripts have been added. Nmap can now log into Windows a system and perform local checks such as Conficker detection.
Announcement
Changes
Download
]]></description>
		<link>http://ruanmuller.com/2009/07/20/nmap-5-released/</link>
			</item>
	<item>
		<title>PHP Interpreter Modified To Find XSS and Injection Holes, Automatically Generates Attacks</title>
		<description><![CDATA[Researchers have built a tool that automatically finds and exploits SQL injection and cross-site scripting vulnerabilities in Web applications.
The so-called Ardilla tool uses a technique developed by the researchers &#8212; MIT&#8217;s Adam Kiezun, the University of Washington&#8217;s Michael Ernst, Stanford&#8217;s Philip Guo, and Syracuse University&#8217;s Karthick Jayaraman &#8212; that creates inputs that pinpoint bugs in [...]]]></description>
		<link>http://ruanmuller.com/2009/06/19/php-interpreter-modified-to-find-xss-and-injection-holes-automatically-generates-attacks/</link>
			</item>
</channel>
</rss>
