Technical

[Asyn]

FSB Backs Away From Gmail Ban
http://www.themoscowtimes.com/mobile/article/434782.html

[Asyn]

Learning the Importance of WAF Technology – the Hard Way
http://www.barracudalabs.com/wordpress/index.php/2011/04/11/learning-the-importance-of-waf-technology-the-hard-way/
http://hmsec.tumblr.com/

[Asyn]

DNS hacks with added value
http://www.h-online.com/security/news/item/DNS-hacks-with-added-value-1227656.html

[Asyn]

Apple Adds Do-Not-Track Tool to New Browser
http://online.wsj.com/article/SB10001424052748703551304576261272308358858.html

The move by the Cupertino, Calif., company leaves Google Inc. as the only major browser provider that hasn't yet committed to supporting a do-no-track capability in its browser, called Chrome.

[Asyn]

Department of Justice Takes Action to Disable International Botnet
http://newhaven.fbi.gov/dojpressrel/pressrel11/nh041311.htm

With Court Order, FBI Hijacks ‘Coreflood’ Botnet, Sends Kill Signal
http://www.wired.com/threatlevel/2011/04/coreflood/

[Asyn]

UK: Ministry of Defence fails at redacting nuclear sub secrets
http://www.h-online.com/security/news/item/Ministry-of-Defence-fails-at-redacting-nuclear-sub-secrets-1229523.html
http://www.parliament.uk/deposits/depositedpapers/2011/DEP2011-0648.pdf
http://cryptome.org/0003/mod-nuke-leak.htm
http://www.telegraph.co.uk/news/uknews/defence/8457506/Secrets-put-on-internet-in-Whitehall-blunders.html

[Asyn]

Whitehats pierce giant hole in Microsoft security shield
http://www.theregister.co.uk/2011/04/18/windows_heap_exploit_shield_pierced/

[YoKenny]

China's Cyber Hackers Target Western Firms
http://news.sky.com/skynews/Home/World-News/Video-Chinas-Cyber-Hackers-Growing-Threat-To-Western-Security-Sky-News-Investigation/Article/201104315974328?lpos=World_News_Right_Promo_Region_1&lid=ARTICLE_15974328_Video%3A_Chinas_Cyber_Hackers_Growing_Threat_To_Western_Security_Sky_News_Investigation

[Asyn]

Microsoft Safety Scanner
http://www.microsoft.com/security/scanner/en-us/default.aspx

The Microsoft Safety Scanner is a free downloadable security tool that provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

Note: The Microsoft Safety Scanner expires 10 days after being downloaded. To rerun a scan with the latest anti-malware definitions, download and run the Microsoft Safety Scanner again.

[Asyn]

Newest Adobe flash 0-day used in new drive-by download variation: drive-by cache
http://blog.armorize.com/2011/04/newest-adobe-flash-0-day-used-in-new.html

[Asyn]

A Security Comparison: Microsoft Office vs. Oracle Openoffice
https://www.cert.org/blogs/certcc/2011/04/office_shootout_microsoft_offi.html
http://dankaminsky.com/2011/03/11/fuzzmark/

[Asyn]

"HTTPS Now" campaign launched to protect internet security
http://www.h-online.com/security/news/item/HTTPS-Now-campaign-launched-to-protect-internet-security-1231563.html
http://www.eff.org/press/archives/2011/04/19-0
https://www.httpsnow.org/

[bob3160]

The interesting part of that article for me was at the very end:
"Facebook's HTTPS workaround was rather crude; if users clicked a link to a Facebook app, the site would ask them if they wanted to switch to a standard HTTP connection as the content they wanted to display could not be displayed using HTTPS. Once users clicked continue, the site completely disabled the HTTPS option under account settings in the background without indicating to users that it would do so."

[Asyn]

The interesting part of that article for me was at the very end:
"Facebook's HTTPS workaround was rather crude; if users clicked a link to a Facebook app, the site would ask them if they wanted to switch to a standard HTTP connection as the content they wanted to display could not be displayed using HTTPS. Once users clicked continue, the site completely disabled the HTTPS option under account settings in the background without indicating to users that it would do so."

Bob, I already posted that in February.
http://forum.avast.com/index.php?topic=66267.msg594233#msg594233

[Asyn]

Designing a cluster-based covert channel to evade disk investigation and forensics
http://www.sciencedirect.com/science?_ob=ArticleURL&_udi=B6V8G-51BBKRS-1&_user=10&_coverDate=01%2F31%2F2011&_rdoc=1&_fmt=high&_orig=gateway&_origin=gateway&_sort=d&_docanchor=&view=c&_acct=C000050221&_version=1&_urlVersion=0&_userid=10&md5=ee913861b3d05b46b905bd4d52ca9380&searchtype=a