[00:01.530 --> 00:03.650]  This is Space Rogue of the Hacker News Network.
[00:03.830 --> 00:06.670]  And this is HNNCast for the second week of June, 2009.
[00:07.190 --> 00:08.650]  Our top story this week.
[00:09.690 --> 00:14.930]  An anonymous post to the full disclosure mailing list last Saturday claimed that T-Mobile was completely owned.
[00:15.470 --> 00:16.630]  Quote, we have everything.
[00:16.810 --> 00:22.390]  Their databases, confidential documents, scripts, and programs from their servers, financial documents up to 2009.
[00:22.710 --> 00:23.050]  Unquote.
[00:23.510 --> 00:27.530]  The email went on to say that the information that they have is available for sale to the highest bidder.
[00:27.530 --> 00:36.130]  T-Mobile has confirmed that the snippets of log files posted in the email are legit and that they are investigating the incident, but they do not feel that they have been completely compromised.
[00:36.670 --> 00:40.570]  I actually agree with T-Mobile on this one, at least until more information becomes available.
[00:41.070 --> 00:41.590]  Come on, guys.
[00:41.730 --> 00:45.790]  If you're really that deep into the system, give us something a little more juicy than a simple log file.
[00:46.830 --> 00:48.150]  Doc Tangent, a.k.a.
[00:48.290 --> 01:01.170]  Jeff Moss, the founder of the Black Hat and DEFCON Hacking Conferences, has been sworn in as an advisor to the Homeland Security Advisory Council, where he will give advice on cybersecurity matters directly to Secretary of Homeland Security, Janet Napolitano.
[01:01.910 --> 01:02.190]  Wow.
[01:02.370 --> 01:03.070]  Congrats, DT.
[01:03.330 --> 01:05.590]  I sincerely hope you can knock some sense into these guys.
[01:05.790 --> 01:09.570]  But let me tell you from someone who's been there, this is nothing more than a publicity grab.
[01:09.810 --> 01:11.830]  You will really have to fight to get yourself heard.
[01:12.030 --> 01:12.670]  Good luck.
[01:12.910 --> 01:13.610]  You'll need it.
[01:14.770 --> 01:29.770]  Technicians at UK-based Vayserv.com claim that attackers gained root access to their systems via a critical zero-day vulnerability in HyperVM, a virtualization application made by a company called LX Labs and completely erased over 100,000 websites.
[01:30.270 --> 01:33.990]  LX Labs has not yet commented on the possible existence of the zero-day hole.
[01:34.510 --> 01:39.350]  No known groups or individuals have yet taken credit for the attack, which was probably the result of an SQL injection.
[01:39.930 --> 01:42.310]  Well, I feel sorry for the people who had their sites nuked.
[01:42.470 --> 01:45.270]  I'm glad they were nuked and not turned into malware spreading zombies.
[01:45.470 --> 01:52.890]  In a possibly related story, a boss at LX Labs, the maker of HyperVM from the previous story, was found hanged in his Bangalore home on Monday.
[01:53.130 --> 01:58.810]  It is unknown what the effect of KT Legesh's death will have on development of a patch for HyperVM.
[02:00.490 --> 02:13.270]  Sears Holdings Management Corp., which operates the Sears website for its retailing affiliate, has agreed to settle charges brought by the FTC that it misled consumers into believing that optimal software, optional software, would simply track their online browsing.
[02:13.550 --> 02:24.070]  The software did that and a whole lot more, reporting on customer details of online shopping, bank statements, drug prescription records, video rentals, library browsing histories, even the names and addresses of their email correspondence.
[02:24.070 --> 02:30.370]  Sears has admitted no wrongdoing, but the FTC claimed that Sears failed to disclose the depth and breadth of the information it was collecting.
[02:30.750 --> 02:33.410]  Sears has agreed to destroy all the collected data.
[02:33.870 --> 02:38.390]  Remember kids, malware is not just for Eastern European cyber criminals anymore.
[02:40.010 --> 02:48.150]  At least four people have been arrested by Chinese authorities after massive DDoS attacks and temporarily disabled internet service across more than 20 provinces last month.
[02:48.490 --> 02:53.370]  According to reports, the attacks were launched by rival unauthorized online gaming service providers.
[02:53.370 --> 03:04.030]  The attacks were magnified when popular Baofeng video software from thousands of users erroneously kept sending requests after not getting a proper response, causing increased traffic and eventual outages.
[03:04.310 --> 03:14.810]  The outages, which only lasted for a few hours, have been described as the, quote, worst internet incident in China, unquote, since an earthquake damaged undersea cables near Taiwan in December of 06.
[03:16.210 --> 03:30.070]  Solo, aka Gary McKinnon, the 43-year-old Scottish man facing extradition to the US for breaking into 97 US government and NASA computers in 2001 and 2002, has recently spoken out about the ordeal he has been going through, calling it a living nightmare,
[03:30.310 --> 03:33.750]  and that it was, quote, fundamentally damaged him, unquote.
[03:34.430 --> 03:38.350]  Solo's judicial review of the extradition order starts at the High Court in London this week.
[03:48.140 --> 03:53.980]  Hackers from all over Europe will meet between the 27th and 30th of June at the second Hackerspace Festival in Paris.
[03:54.180 --> 04:06.080]  The four-day schedule includes conferences and workshops on Metasploit, Hostile WRT, FPGA for Beginners, ICT disaster recovery, software patents in Europe, Hidopi, and many other topics.
[04:06.080 --> 04:08.580]  The future of hackerspaces will also be debated.
[04:08.900 --> 04:15.700]  The event will be hosted by the first French hackerspace, TempLab, located at an industrial zone in the outskirts of Paris.
[04:16.680 --> 04:20.000]  This week's Patch Tuesday from Microsoft has broken a record.
[04:20.600 --> 04:31.020]  The recent updates included 10 security updates that patched a record 31 vulnerabilities on Windows Internet Explorer, Excel, Word, Windows Search, and other programs, including 18 bugs marked critical.
[04:31.020 --> 04:37.760]  The total bug count was the most patched by Microsoft in a single month since the company began regularly scheduled updates in 2003.
[04:38.120 --> 04:43.120]  The previous record was 26 vulnerabilities set back in August of 06 and 08.
[04:43.540 --> 04:45.600]  And they say Windows is getting more secure.
[04:47.400 --> 04:55.340]  New research presented by Christian Sabani of Bell Labs has uncovered several new possible DOS attacks against cellular data networks.
[04:55.540 --> 05:02.320]  The threats are the result of inherent weaknesses in mobile IP, a protocol that allows mobile devices to move freely from one network to another.
[05:02.600 --> 05:13.520]  The attacks can take many forms, including signaling attacks, battery drain of end-user devices, peer-to-peer apps over saturating a connection, or malfunctioning air cards, which can cause DOS-like overloads on the systems.
[05:14.140 --> 05:18.600]  As we move further and further off the wire, I suspect these types of attacks will become more common.
[05:20.020 --> 05:26.400]  An ex-employee has filed suit against a net net insurance after the company has lost his personal information to an electronic intruder.
[05:26.640 --> 05:31.480]  The intruder stole personal data for 480,000 employees as well as job applicants.
[05:31.720 --> 05:40.600]  The suit, which is seeking class action status, charges the insurer with negligence, breach of implied contract, negligent misrepresentation, and invasion of privacy.
[05:41.260 --> 05:45.580]  Unfortunately for most companies, the only way to get them to take security seriously is to sue them.
[05:47.060 --> 05:50.520]  Two new pieces of malware have been found in the wild for OS X.
[05:50.860 --> 05:57.600]  The first masquerades itself as a video codec being distributed by porn sites and has been seen on fairly legitimate sites such as Pornotube.
[05:57.960 --> 06:04.020]  The second is a new version of the Tored worm and is distributed as an email attachment that attempts to build a Mac botnet.
[06:05.220 --> 06:09.800]  And to wrap up this week, a few quick stories that came across our desk here at the HNN Studios.
[06:10.820 --> 06:16.060]  Mandated Chinese filtering software may leave the entire country's computers open to attack, according to security researchers.
[06:16.760 --> 06:21.440]  Symantec and McAfee have settled charges from the New York Attorney General regarding never-ending subscription services.
[06:21.580 --> 06:25.600]  They have agreed to pay $375,000 each in penalties.
[06:25.900 --> 06:33.160]  The Serbian renewal movement claims that several of its websites and online forums suffered damage after electronic attacks allegedly launched by Albania.
[06:33.880 --> 06:41.120]  XTobi has taken credit for breaking into the Bella Vista City, Arkansas website and replacing the main page with a skull over Memorial Day weekend.
[06:41.120 --> 06:47.980]  Justin Foster, a security professional, has recently asked the question if hackers in general are more likely to be suffering from slight schizophrenia.
[06:48.440 --> 06:49.480]  I know I'm crazy.
[06:50.200 --> 06:55.720]  Sophos has reported that the website for the British Communist Party has become a malware spreader after a recent iFrame attack.
[06:56.260 --> 07:01.900]  Twitter trending topics are becoming a favorite attack vector for malware spreaders and Frack has released yet another issue.
[07:02.280 --> 07:05.120]  Number 66 is available at fine websites everywhere.
[07:05.660 --> 07:13.780]  For more information about the HNN Quickies or any other stories we have reported on this week, be sure to check www.hackernews.com.
[07:13.900 --> 07:18.480]  And if you have news you think we should be aware of, send it to news@hackernews.com.
[07:18.740 --> 07:22.740]  I'm Space Rogue and this has been HNNCast for the second week of June, 2009.
[07:22.740 --> 07:23.040]  Amen.