Security4all

Finally something in Belgium to be proud of. Several organizations in Belgium representing internet users, lawyers, journalists, etc......

It has been some while since we blogged about the "Privacy failure in the Belgian RFID transport card", but the card will still be introduced nationally.See Chipkaarten De Lijn niet voor volgend jaar (datanews)Testing will occur in 2010 and the rollout will happen during 2011 and 2012...

Last week, I noticed the existence of an EU surveillance project called "Intelligent information system supporting observation, searching and detection for security of citizens in urban environment" better known as "INDECT"...

First of all, this is about the general flu epidemic which occurs every year. It's nothing H1N1 specific, which has been overhyped. Act normal and use common sense. But this is relevant information. Apply good hand hygiene, eat healthy and get enough sleep...

This year Dan Kaminsky and Moxie Marlinspike discovered that when requesting a certificate for example "Paypal.com\0.phishing.com" that some CAs would approve the request...

While I was too busy with BruCON, it seems that a SMBv2 vulnerability was published: Security Advisory 975497. While it affects Windows Vista and Server 2008, other versions are not vulnerable (including Windows 7 and Windows Server 2008 R2).Port 445 needs to be open for the service to be exploited...

Well, like last year us securitybloggers (-twits) are coming together for a drink and meet the people behind the avatars. It was a small but fun beginning last year and we hope to see even more people this year.Details on location etc... can be found on securityactive.co.uk.

As was told during BruCON, we can stop complaining about a missing CERT in Belgium. BELNET is looking for people to extend their team and the team should be up and running by January 2010. A big applause for their introduction!If you are interested, look at their website cert.be/jobs.

I somehow completely missed any communication about this International Action Day “Freedom not Fear 2009.Unfortunately, it seems that it is on the 12th of September already and that there is nothing planned in Brussels. Bad communication? ...

A zero day for IIS5 & 6 was posted today to the Full Disclosure mailinglist. Yes, we are talking shellcode. This seems to be real.According to Thierry Zoller, it doesn't work reliably for IIS6 but it's not impossible (source: twitter) and confirmed by this comment on the mailinglist...

Well, HAR2009 was a blast. It was fun meeting a lot of other people, doing some workshops and some soldering. I missed some of the talks I wanted to see but luckily there were recordings of the presentations...

This is a list of articles and other fun stuff that people were tweeting about in the last week...

The Defcon 17 CD Archive is up. Get it at https://media.defcon.org/dc-17/DEFCON-17-CD.rarUpdate: The following file triggered some Antivirus engines"Extras/bin/crackmes/manifest.exe"...

As a follow up to my article of yesterday "BlackHat slides available and first blogposts", the following is a additional collection of articles I kept track off by staying glued to tweetdeck all day.Articles:Wildcard certificate spoofs web authentication (The Register)Blackhat US – Roundup Day 1 (...