Podcast Detail

GMail dots ease brute forcing; Microsoft Pulls Exchange Patch; Apple reissues Safari patch; Demo XSS

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://traffic.libsyn.com/securitypodcast/4273.mp3

previous
next
Podcast Logo
ISC StormCast for Friday, December 12th 2014
00:00
GMail dots ease brute forcing; Microsoft Pulls Exchange Patch; Apple reissues Safari patch; Demo XSS and Putty Interception with ease

GMail quirk used to subvert spam tracking and blacklisting
https://isc.sans.edu/forums/diary/GMail+quirk+used+to+subvert+website+spam+tracking/19051

Microsoft Pulls Exchange Patch
https://support.microsoft.com/kb/2986475
http://blogs.technet.com/b/jribeiro/archive/2014/12/10/update-rollup-8-for-exchange-2010-sp3-has-been-released-kb2986475.aspx


Demonstrating the Impact of XSS With Wordpress
https://blog.gaborszathmari.me/2014/12/10/wordpress-exploitation-with-xss/

Putty Rider: Inspect "putty" ssh connections
https://github.com/seastorm/PuttyRider

Apple Releases Safari 8.0.2
http://lists.apple.com/archives/security-announce/2014/Dec/msg00002.html
no transcript found