The HBGary hack

[HavocXphere]

Details on how it was done over at Ars.

Amazing how a security company managed to do the 100% wrong thing at every step of the way.:wtf:

 

[dequadin]

i'm quite surprised that it was "so simple", I expected more...?

Here's another angle on the attack.
Lessons of the HBGary hack

Does anyone have a reliable link/torrent to the released Stuxnet source code?

 

[James]

Really good article. I really liked page 3

 

[HavocXphere]

Does anyone have a reliable link/torrent to the released Stuxnet source code?

Its on one of the specialised code hosting sites. Not sure if it was github/whatever.

 

[GreGorGy]

I excitedly explained the whole thing to my wife. Well, she just looked at me blank. I said it was like a bank hiding the front door keys under the doormat. Then, once you are inside, the manager keeps all the safe combinations in his top drawer, which is locked, but those some front door keys work on the top drawer.

Inside the safe, they have all their money and the combinations for a few other safes.

She still does not understand how incredibly stupid it is for a security operation to be operating like this, or why I was like "WTF? Noooooo!"

aaah well.

 

[HavocXphere]

I excitedly explained the whole thing to my wife. Well, she just looked at me blank.

I know the feeling. My recently acquired particle physics jokes aren't getting much of a response from people either.

 

[biometrics]

To still have SQL Injection vulnerabilities nowadays is really inexcusable.