feed on feeds - 2015/05/18 - items 0 to 15

Det krävs inga särskilda kvalifikationer, heter det i jobbannonsen. Men det är nog inget för personer med känslig läggning: Saudiarabien söker åtta nya bödlar.

Majoritetsledaren i senaten, republikanen Mitch McConnell, säger att han har för avsikt att den här veckan på ett ”ansvarsfullt sätt förlänga” bestämmelser i det program som tillåter USA:s underrättelsetjänster att samla enorma mängder data om amerikaners telefonsamtal.

En dränkt hund har hittats i en sjö utanför Borås, skriver Borås tidning. En förbipasserande hittade hunden på måndagskvällen. Den stora hunden, som uppskattas väga mellan 40 och 50 kilo, hade strypkoppel på.

Monitor says fields were vital for generation of electricity for areas under government's control near ancient city.

A new vulnerability arised in Safari Web Browser that can lead to an address spoofing allowing attackers to show any URL address while loading a different web page. While this proof of concept is not perfect, it could definitely be fixed to be used by phishing attacks very easily.

There is a proof of concept http://www.deusen.co.uk/items/iwhere.9500182225526788/. From an iPad Air 2 Safari Web Browser:

From same iPad using Google Chrome:

The code is very simple: webpage reloads every 10 milliseconds using the setInterval() function, just before the browser can get the real page and so the user sees the real" />

We are interested if you notice any phishing attacks using this vulnerability. If you see one, please let us know using our contact form.

Manuel Humberto Santander Pelez
SANS Internet Storm Center - Handler
Twitter: @manuelsantander
Web:http://manuel.santander.name
e-mail: msantand at isc dot sans dot org

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A new vulnerability arised in Safari Web Browser that can lead to an address spoofing allowing attackers to show any URL address while loading a different web page. While this proof of concept is not perfect, it could definitely be fixed to be used by phishing attacks very easily.

There is a proof of concept http://www.deusen.co.uk/items/iwhere.9500182225526788/. From an iPad Air 2 Safari Web Browser:

From same iPad using Google Chrome:

The code is very simple: webpage reloads every 10 milliseconds using the setInterval() function, just before the browser can get the real page and so the user sees the real" />

We are interested if you notice any phishing attacks using this vulnerability. If you see one, please let us know using our contact form.

Manuel Humberto Santander Pelez
SANS Internet Storm Center - Handler
Twitter: @manuelsantander
Web:http://manuel.santander.name
e-mail: msantand at isc dot sans dot org

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Varannan låntagare får rejäla bekymmer om räntan stiger i takt med Riksbankens prognoser, skriver Dagens industri.

An anonymous reader writes: Two years after the fall of Silk Road, new facts about the saga are still emerging all the time. The latest revelation is that Dread Pirate Roberts, the leader of Silk Road, paid a doctor $500 per week to offer public and private counseling to customers of the site. DoctorX, also known as Dr. Fernando Caudevilla, became famous for his free work on the site. The fact that he was eventually paid a salary is being used by lawyers for Ross Ulbricht to argue that Silk Road emphasized harm reduction and was, on the whole, a huge improvement in safety for drug users.