George Hotz alias geohot released his playstation 3 exploit to the public. It gains control of the hypervisor which could be used to run pirated PS3 games and game backups on the hacked machine.
Hacking
FreeBSD
FreeBSD rtld local root exploit
Felix EhlersKingcope discovered and posted on Full-disclosure that the Run-Time Link-Editor rtld in recent FreeBSD versions has a dangerous bug. An attacker can trick rtld to accept a manipulated LD_PRELOAD environment variable even when executing setugid binaries like ping or su.
Security
OllyDbg 2.0 Beta 2 Final available
Felix EhlersThe Beta 2 Final of OllyDbg is now available and adds debugging of child processes to the feature list.
<!- more–> The debugging engine is more stable and tricky, OllyDbg knows more functions now and there’s a more or less consistent support for UNICODE and UTF-8 in dialogs and comments.
Of course also many bugfixes.
OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable.
Security
Zone-H statistic report 2005-2007
Felix EhlersZone-H publishes every year stats of registered attacks.
According to those stats the most targeted operation systems are Linux, Windows 2003 and Windows 2000. The most defaced webservers are Apache, IIS/6.0 and IIS/5.0. References:
Zone-H.org - Statistics report 2005-2007
Security
Development of KisMAC stopped
Felix EhlersThe newly created german anti-hacker-paragraph 202c StGB let the developers of KisMAC to stop working on the project.
It’s not yet clear if development is temporarily suspended to bring it up again in the netherlands.