[00:28.720 --> 00:32.440]  You're watching HNNCast with Space Rogue on the Hacker News Network.
[00:59.820 --> 01:02.640]  This is Space Rogue, the Hacker News Network.
[01:02.640 --> 01:05.960]  And this is HNNCast for the second week of July, 2009.
[01:07.000 --> 01:08.540]  Our top story this week.
[01:08.700 --> 01:17.280]  An updated version of MyDoom is now being blamed for the massive DDoS attacks that have recently been targeted against several US and South Korean government sites since July 4th.
[01:17.680 --> 01:23.880]  The attacks were launched from a botnet of over 50,000 machines, being controlled with malware that was first discovered in 2004.
[01:24.780 --> 01:30.880]  South Korean government officials initially blamed North Korea for the attacks that forced several sites to become unreachable.
[01:31.340 --> 01:34.960]  It is now believed that the attacks were not perpetrated by any official government.
[01:34.960 --> 01:35.960]  Huh.
[01:36.300 --> 01:38.060]  So much for that hyped-up cyber war.
[01:39.180 --> 01:52.920]  Solo, aka Gary McKinnon, the 43-year-old man who has been fighting extradition from the UK to the US for breaking into numerous government computer systems, including those at NASA looking for information on UFOs and aliens, has won the support of Sarah Brown,
[01:53.160 --> 01:54.700]  the wife of the UK Prime Minister.
[01:55.020 --> 02:01.380]  Sarah Brown met Solo's mother, Janice Sharp, at a meeting organized by Trudy Style, wife of the musician Sting.
[02:01.960 --> 02:07.200]  A 4,000-name petition organized by the National Autistic Society was presented to Ms. Brown by Solo's mother.
[02:07.820 --> 02:13.140]  Solo has also garnered support from Joseph Goutines, a cyber-criminal investigator at NASA itself.
[02:13.600 --> 02:16.380]  Solo is expected to be extradited within the next few weeks.
[02:16.600 --> 02:22.480]  He has been accused of causing $700,000 worth of damage and is facing the possibility of up to 60 years in jail.
[02:23.120 --> 02:25.060]  He kinda looks like an alien, doesn't he?
[02:26.880 --> 02:33.060]  Microsoft has released information regarding an actively exploited zero-day vulnerability in ActiveX on Windows XP.
[02:33.460 --> 02:39.160]  The vulnerability allows attackers to remotely take control of a victim's computer without the user doing anything at all.
[02:39.420 --> 02:45.780]  The vulnerability has been actively exploited for at least a week, with thousands of sites already using the hole for drive-by attacks.
[02:46.700 --> 02:52.320]  Microsoft learned of the hole a year ago, but did not issue its advisory until it was massively exploited earlier this week.
[02:52.840 --> 02:59.380]  Microsoft is planning on releasing a patch during this month's Patch Tuesday, and in the meantime has advised people to turn off ActiveX.
[02:59.900 --> 03:03.220]  You have to wonder how long this hole has been exploited before anyone noticed.
[03:03.540 --> 03:06.000]  This is why full disclosure is so important.
[03:07.260 --> 03:22.300]  The judge in the trial against the Sarah Palin email intruder, Rubico, aka Davis Cornell, has ruled that neither the prosecution nor the defense can use the word hacking during the trial and instead should refer to the incident as an unauthorized access to a protected computer.
[03:22.860 --> 03:24.360]  Wow, a judge with some sense.
[03:24.600 --> 03:27.500]  I mean really, guessing a password isn't even a hack anyway, is it?
[03:29.220 --> 03:37.120]  So, earlier this week, some enterprising researchers discovered that it was trivially easy to guess someone's social security number if you knew when and where they were born.
[03:37.120 --> 03:45.380]  They trotted out all kinds of statistics and uber-cool mathematics to back up their claim, but honestly, anyone who's been around for a while knew this already.
[03:45.920 --> 03:53.600]  Here at HNN Studios, we were able to dig up an old BBS text file from 1992 that easily explains the first five digits of the social security number.
[03:53.960 --> 03:58.680]  The last four digits, of course, is the hard part, but these guys really haven't discovered anything new.
[04:00.180 --> 04:03.080]  We will be back with more news right after these messages.
[04:05.810 --> 04:09.010]  What was the most trusted name in Hacker News?
[04:10.270 --> 04:12.410]  The voice of reason.
[04:14.970 --> 04:16.870]  The Hacker News Network.
[04:20.220 --> 04:23.340]  HNNCast Launches 011110.
[04:24.580 --> 04:25.340]  Be.
[04:25.460 --> 04:26.040]  There.
[04:26.360 --> 04:26.740]  Be.
[04:26.960 --> 04:27.440]  There.
[04:31.850 --> 04:34.030]  Advertise with HNNCast.
[04:34.290 --> 04:35.670]  Sponsor and advertiser.
[04:35.850 --> 04:38.330]  Package is available for more information.
[04:38.550 --> 04:41.130]  Contact sales at HackerNews.com.
[04:44.240 --> 04:52.200]  So everyone remembers back in 1992, when the Software and Information Industry Association released that cheesy rap video, Don't Copy That Floppy.
[04:52.640 --> 04:52.980]  What?
[04:53.270 --> 04:54.100]  You forgotten about it?
[04:54.440 --> 04:55.270]  You never saw it?
[04:55.720 --> 04:56.880]  You're not old enough to remember?
[04:57.160 --> 04:58.620]  Well, let's take another look.
[05:15.900 --> 05:19.320]  You gotta love those early 80 production values a decade later.
[05:19.920 --> 05:24.880]  Well, the SIA thinks that it's time for a remake, and have already released a trailer for the upcoming video.
[05:25.800 --> 05:30.500]  You would think that they would change the guy doing the rap, or at least update the cheesy production, but no.
[05:30.820 --> 05:32.880]  The new version looks like it will be just as bad.
[05:34.220 --> 05:35.340]  Here's a clip from the trailer.
[05:36.140 --> 05:36.940]  I'm back.
[05:37.120 --> 05:37.500]  I'm back.
[05:37.760 --> 05:38.620]  It's me, DP.
[05:38.980 --> 05:40.800]  Digital protector for creativity.
[05:41.340 --> 05:43.500]  Don't copy that floppy was when floppies were new.
[05:43.660 --> 05:46.160]  Now we copy much more than floppies could do.
[05:46.400 --> 05:47.120]  Don't copy that.
[05:47.720 --> 05:48.080]  What?
[05:48.420 --> 05:48.580]  Why?
[05:48.780 --> 05:49.540]  Don't copy that.
[05:50.080 --> 05:50.340]  What?
[05:50.600 --> 05:50.660]  What?
[05:50.820 --> 05:50.980]  Why?
[05:51.140 --> 05:51.860]  Don't copy that.
[05:52.080 --> 05:52.400]  Oh yeah!
[05:52.640 --> 05:53.300]  Hit down with it!
[05:53.580 --> 05:56.840]  I don't know, man.
[05:57.140 --> 05:59.140]  The full video is set to be released later this summer.
[05:59.400 --> 06:01.780]  I know I can't wait until it shows up on BitTorrent.
[06:03.500 --> 06:04.400]  Comrade, a.k.a.
[06:04.480 --> 06:09.820]  Jonathan James, evidently committed suicide a year ago after being linked to the massive identity theft at TJ Maxx.
[06:10.100 --> 06:16.300]  In a five-page suicide note, Comrade indicated that he was innocent, but did not trust the Justice Department to get a fair trial.
[06:17.100 --> 06:22.760]  Comrade gained notoriety in 2000 when he became the first juvenile to receive a federal sentence to breaking into a computer.
[06:23.760 --> 06:26.520]  Information for this report was gathered by Kevin Poulsen of Wired.
[06:28.400 --> 06:33.480]  Millworm, a very popular exploit archive, was briefly shut down earlier this week by its maintainer Stroke.
[06:33.980 --> 06:38.340]  Stroke said that he just didn't have the time to keep the archive maintained to his personal high standards.
[06:38.880 --> 06:45.360]  He has, however, stated via Twitter that he will be turning the site over to a new group to keep the archive online and up to date.
[06:45.940 --> 06:48.820]  He is currently working on getting the site back online.
[06:50.360 --> 06:58.780]  Torrent Reactor, a major bit Torrent search engine, has become the victim of an iframe attack and is now spewing malware through dozens of vulnerabilities onto its visitors' systems.
[06:59.140 --> 07:03.640]  In addition, now Torrents, another Torrent search engine, briefly lost control of its domain on Thursday.
[07:04.340 --> 07:06.600]  First the Pirate Bay sells out, and now this?
[07:06.940 --> 07:08.960]  Okay, where am I supposed to get my movies from now?
[07:10.040 --> 07:12.480]  Here is an update to a story we mentioned last week.
[07:12.480 --> 07:18.860]  The criminals, who stole $415,000 from Bullitt County, Kentucky, have been traced back to the Ukraine.
[07:19.180 --> 07:25.140]  The criminals evidently gained access to the county's machines using a customized version of the malware known as Zeus or Zbot.
[07:25.540 --> 07:32.980]  The malware then allowed the attackers to set up a VPN with the victim's machine, bypassing any IP address checks implemented by the bank.
[07:33.460 --> 07:41.520]  At least 25 unknowing employees of the Fair Love Delivery Service were caught up in this scam, as they unknowingly assisted the criminals by being money mule.
[07:42.100 --> 07:44.280]  The FBI is still investigating the incident.
[07:45.140 --> 07:48.000]  Information for this story came from Brian Krebs of the Washington Post.
[07:49.020 --> 07:56.140]  Earlier this week, noted cryptographer and internet superhero, Bruce Schneier, has admitted that he may have been wrong regarding password masking.
[07:56.460 --> 07:56.980]  Huh?
[07:57.220 --> 07:58.460]  Hey, who wrote this?
[07:58.580 --> 07:59.180]  This is right?
[07:59.320 --> 07:59.860]  It's verified?
[08:00.200 --> 08:01.120]  Bruce Schneier was wrong?
[08:01.380 --> 08:01.900]  You're sure?
[08:02.160 --> 08:03.100]  The internet still worked?
[08:10.480 --> 08:11.520]  What the hell am I gonna do now?
[08:11.760 --> 08:12.900]  Bruce Schneier was wrong.
[08:13.420 --> 08:13.900]  Wow.
[08:15.900 --> 08:17.820]  Advertise with HNNCast.
[08:18.100 --> 08:20.680]  Sponsor and advertiser packages available.
[08:21.020 --> 08:24.960]  For more information, contact sales at hackernews.com.
[08:27.300 --> 08:32.260]  Remember, if you have any news you think we should report, send it to news at hackernews.com.
[08:35.750 --> 08:37.810]  You have been watching HNNCast.
[08:38.030 --> 08:40.150]  This is Space Rogue for the Hacker News Network.
[08:45.080 --> 08:47.680]  Funny dude, funny dude, funny dude, bad things.
[09:21.140 --> 09:24.720]  You're watching HNNCast with Space Rogue on the Hacker News Network.
[09:52.490 --> 09:58.190]  This is HNNCast for the second week of July, 2009.
[09:58.870 --> 10:01.510]  Here are a few quick stories we found on the net this week.
[10:03.150 --> 10:07.930]  Waldeck Botnet, formerly known as Storm, started a new malware campaign over the July 4th weekend.
[10:08.090 --> 10:12.290]  It sent out mass emails with links to supposedly award-winning videos of fireworks.
[10:12.990 --> 10:17.770]  Of course, the links went to malware that infected the victims' machines, recruiting them into the ever-growing botnet.
[10:18.590 --> 10:27.270]  The Irish ISP Ericom suspects that it may have been the victim of a DDoS attack that disrupted the DNS servers for its 50,000 subscribers earlier this week.
[10:28.270 --> 10:36.050]  Hackers on a plane, a chartered plane to hackercons, usually in Europe, that often leaves from New York City, is quickly filling its 1.6 and 2.0 versions.
[10:36.350 --> 10:38.970]  If you want on the plane, get your tickets now.
[10:40.190 --> 10:45.410]  New malware, known as Transmitter.c, is currently spreading via SMS on Symbian-based phones.
[10:46.030 --> 10:53.390]  The Internet Storm Center is asking for help in confirming a rumor about the existence of an actively exploited vulnerability in Open SSH.
[10:53.390 --> 10:58.370]  If anyone has any information regarding such an exploit, please contact the ISC.
[10:58.770 --> 11:02.430]  In the meantime, be sure to update your Open SSH to the latest version.
[11:03.410 --> 11:16.230]  Not a con, occurring in Cleveland next spring, the 8th annual PAC-SET conference, occurring in November this year in Tokyo, Japan, and the 19th annual RSA conference, occurring in March of next year, have all opened their call for papers.
[11:16.230 --> 11:18.510]  Be sure to submit early and often.
[11:19.530 --> 11:25.670]  The Security B-Sides taking place during Black Hat is starting to get extremely popular and may have to go invite only.
[11:26.310 --> 11:29.610]  Organizers are asking people to sign up in advance to ensure themselves a spot.
[11:30.970 --> 11:33.850]  Nominations for the 3rd annual Pony Awards are now being accepted.
[11:34.310 --> 11:37.750]  The awards will be presented during the Black Hat reception on July 29th.
[11:38.630 --> 11:45.590]  The winners of the artwork contest for DEFCON 17 have been announced with the Watchmen parody by Marr taking the People's Choice Award.
[11:45.950 --> 11:49.650]  And the finalists for this year's Capture the Flag competition have also been announced.
[11:49.990 --> 11:52.170]  The top team this year is Skullmaster.
[11:52.590 --> 11:54.350]  At least I think that's how you pronounce it.
[11:54.710 --> 11:58.010]  I mean, League Speak is cool and all, but come on guys, that's a bit ridiculous.
[11:58.830 --> 12:00.710]  Advertise with HNNCast.
[12:01.010 --> 12:03.590]  Sponsor and Advertiser Package is available.
[12:03.910 --> 12:07.870]  For more information, contact sales at HackerNews.com.
[12:10.210 --> 12:15.130]  Remember, if you have any news you think we should report, send it to news at HackerNews.com.
[12:18.650 --> 12:20.750]  You have been watching HNNCast.
[12:20.930 --> 12:23.050]  This is Space Rogue for the Hacker News Network.
[12:27.990 --> 12:30.570]  Funny dude, funny dude, funny dude, bad things.