links of the day 01/15/2014 (a.m.)

• XSSing Your Way to Shell

• WAF_Bypassing_By_RAFAYBALOCH

• https://raw.github.com/galkan/tools/master/openvpn-brute/openvpn_brute_force.sh

• Howto: simplest sshd backdoor ever | Offensive Security Blog V2.0

• Wireless Attack Toolkit (WAT) | Free Security & Utilities software downloads at SourceForge.net

• Offensive Security Blog V2.0

• Howto: Secure your Apache server from DDoS, Slowloris, and DNS Injection attacks | Offensive Security Blog V2.0

• 10 Techniques for Blindly Mapping Internal Networks - NetSPI Blog

• Have I been pwned? Check if your email has been compromised in a data breach

• Pinpoint Tool Released | Kahu Security

• Android Root Detection Techniques - NetSPI Blog

• nccgroup/IP-reputation-snort-rule-generator · GitHub

• Manual Page - macof(8) flood a nework with fake mac addresses

• DEF CON 21 Presentations - YouTube

• jordan-wright

• Wireless Attacks with Python: Part One - The "Dnspwn Attack" - jordan-wright

• Video: Wireshark Network Forensics | Offensive Security Blog V2.0

• Wirelessdefence.org

• Howto: Monitor all shell command and send to syslog server | Offensive Security Blog V2.0

• Exploit Repository | Offensive Security Blog V2.0

• BBC Server Compromised! Russian Hackers Broke Into FTP & Tried to Sell Unauthorized Access ~ VOGH- VOICE OF GREYHAT| Leading Resource of Cyber Updates & Hacker News

• Remotely Scan Malware/Virus in Victim PC with Metasploit » Hacking Articles

• Using Cold Boot Attacks and Other Forensic Techniques in Penetration Tests - EH-Net Online Mag : EH-Net Online Mag

• Cyber Attack Hit Japanese Nuclear Power Plant using Special Malware ~ The Hackers Media™ [ THM ]

• Syrian Electronic Army(#SEA) Website hacked by Turkguvenligi, Turkish hacker ~ The Hackers Media™ [ THM ]

• 1-15 November 2013 Cyber Attacks Timeline | Hackmageddon.com

• 16-30 November 2013 Cyber Attacks Timeline | Hackmageddon.com

• 1-15 December 2013 Cyber Attacks Timeline | Hackmageddon.com

• 2013 Top 20 Breaches | Hackmageddon.com

• 16-31 December 2013 Cyber Attacks Timeline | Hackmageddon.com

• The county sheriff who keylogged his wife | Ars Technica

• HIPAA Data Breach Lawsuit: Omnicell Laptop Theft Case Dismissed - AlertBoot Endpoint Security

• HIPAA Encryption: When Is Encryption Not Encryption? - AlertBoot Endpoint Security

• 30c3 Conference videos

• BYOD Full Encryption: Because Sensitive Data Will Drift To Where You Least Expect It - AlertBoot Endpoint Security

• Encryption ROI: You Can Sometimes Calculate A True Return On Investment For Encryption... - AlertBoot Endpoint Security

• Keyloggers: One Way To Defeat Full Disk Encryption - AlertBoot Endpoint Security

• HIPAA BA Laptop Security: Accretive Settles With FTC Over Privacy Failure - AlertBoot Endpoint Security

• Court Rejects Equal Access Rules for Internet Providers - NYTimes.com

• Banks Say No to Marijuana Money, Legal or Not - NYTimes.com

• Researcher Says Simple Security Fixes From Carriers Would Have Prevented NSA Collection Of Cell Communications | Techdirt

• House Intel Committee Releases Fact-Free Fearmongering About Impact Of Snowden Revelations | Techdirt

• Supreme Court agrees to hear Aereo case | Internet & Media - CNET News

• Telecom Believed to Be at Center of Government Court Fight Files Surveillance Transparency Report | Threat Level | Wired.com

• IOActive Labs Research: Personal banking apps leak info through phone

• The security realities of the Internet of Things

• Court rules YELP must ID negative reviewers; no constitutional protection - Washington Times

• NSA revelations: the 'middle ground' everyone should be talking about | Matt Blaze | Comment is free | theguardian.com

• What It's Like When The FBI Asks You To Backdoor Your Software

• Lifelogging: Crowdsourcing + life logs = big insights - tech - 10 January 2014 - New Scientist

• Larry Page's Second Big Mistake As CEO: Opening Your Gmail Box to Google+ Followers - Forbes

• BBC News - CES 2014: Phones morph into 'stun guns' and 'tricorders'

• Wearable gadgets not ready for prime time, tech watchers say | Reuters

• CES 2014: Wearables break out all over the body

• As automakers tap smartphone technology, concerns grow about use of drivers’ data - The Washington Post

• Google stabs Wikipedia in the front • The Register

• China ALSO building encryption-cracking quantum computer • The Register

• Data scrapers used Amazon cloud to reap biz bods' CVs, wails LinkedIn • The Register

• Encrypted chips help fight credit card fraud

• Key trends for identity and access management

• Security analysis of mobile banking apps reveals significant weaknesses - Computerworld

• Leaked NSA Hacking Tools, Tactics, In Focus -- Dark Reading

• Telecominformatie Nederlanders 2,7 miljoen keer geraadpleegd | nu.nl/tech | Het laatste nieuws het eerst op nu.nl

• Opvouwbare Pocket Drone volgt gebruiker overal | nu.nl/tech | Het laatste nieuws het eerst op nu.nl

• 'KPN tolereert NSA-spionage niet' | nu.nl/tech | Het laatste nieuws het eerst op nu.nl

• EU veroordeelt illegaal downloaden Nederland | nu.nl/tech | Het laatste nieuws het eerst op nu.nl

• CURIA - Documents

• Man arrested for allegedly trying to send sensitive F-35 data to Iran | TheHill

• Obama to unveil NSA reforms on Jan. 17 | TheHill

• Banken stellen nieuwe regels voor internetbankieren - Security.NL

• Wearables with augmented reality are mind-blowing -- and an ethical nightmare | CES 2014: Wearable Tech - CNET Blogs

• How Google and Nest could get the smart home all wrong | Cutting Edge - CNET News

• The Yale Law Journal Online - Tiny Constables and the Cost of Surveillance: Making Cents Out of United States v. Jones

• How the cost of cell phone surveillance can change legal privacy protections | Security & Privacy - CNET News

• Rechter bepaalt wat grof nalatig is bij internetbankieren - Security.NL

• Dropbox - LulzSec Warrants

• Sabu wasn't the only FBI mole in LulzSec, suggest leaked docs • The Register

• Expanding Target Breach Shows Need for Highly Secure Payment Systems

• Reuters sources: Other US retailers victims of cyberattacks - NBC News.com

• Sefnit Trojan endangers users even after removal

• Point of sale systems targeted in retailer data thefts

• Schneier on Security: How the NSA Threatens National Security

• Hackers gain 'full control' of critical SCADA systems - Security - Technology - News - iTnews.com.au

• Is your IP address personal information? - Software - Technology - Blogs - iTnews.com.au

• Dropbox works to resolve service hiccups, says files are safe - Computerworld

• The Day We Fight Back - February 11th 2014

• Privacy advocates announce day of protest against NSA spying

• Fear of data sharing on the rise

• twister | P2P microblogging platform

• Out in the Open: An NSA-Proof Twitter, Built With Code From Bitcoin and BitTorrent | Wired Enterprise | Wired.com

• In Syria, US sides with local jihadists to defeat global ones - Al-Monitor: the Pulse of the Middle East

• Al-Arab Daily Newspaper, first Arabic newspaper published in London 1977

• Jihadists lose headquarters in Syria's Aleppo

• CURIA - Documents

• This malware class was reportedly used in the Target hackings. Here’s how it works.

• Online safety for the home & SMEs | Cyber Street

• Cyber crime robs Britons of £1billion in just a year | Metro News

• Could data collection have stopped 9/11? White House thinks so - latimes.com

• Homegrown Extremism 2001-2013 | The National Security Program

• Terror Plots | The National Security Program

• Do NSA's Bulk Surveillance Programs Stop Terrorism? | The National Security Program

• NSA's snooping dragnet has little impact on terrorism - science-in-society - 13 January 2014 - New Scientist

• Vulnerability leaves Cisco small biz routers wide open to attack • The Register

• Table of Contents — January 7, 2014, 111 (1)

• How Israel and Hamas weaponized social media | Internet & Media - CNET News

• Syrian Electronic Army hacks into Xbox Twitter accounts too | Security & Privacy - CNET News

• Exclusive: With Muslim Brotherhood crushed, Egypt sets sights on Hamas | Reuters

• With data vulnerable, retailers look for tougher security | Reuters

• Timing of cyber conflict

• New cyber-attack model helps hackers time the next Stuxnet

• Do we need cyber warfare treaties? Study looks at legacy of Stuxnet - NBC News.com

Posted from Diigo. The rest of my favorite links are here.