SecuriTeam.comBeyond Security will help you expose your security holes and will show you what the bad guys already know about your hosts and network. Use our Automated Scanning service to perform a full security audit of your site, and find the latest security news and tools on Beyond Security's SecuriTeam web site.Cold Boot Attacks on Disk Encryption- February 25, 2008 The below linked paper shows that disk encryption, the standard approach to protecting sensitive data on laptops, can be defeated by relatively simple methods. The paper also demonstrates the methods by using them to defeat three popular disk encryption products: BitLocker, which comes with Windows Vista; FileVault, which comes with MacOS X; and dm-crypt, which is used with Linux.http://www.securiteam.com/securityreviews/5GP0N1FNFU.html OpenBSD DNS Cache Poisoning and Multiple OS Predictable IP ID Vulnerability- February 13, 2008 A serious weakness has been discovered in OpenBSD's PRNG, which allows an attacker to predict the next transaction ID (typically up to 8-10 guesses) given a series of consecutive 12-15 transaction IDs.http://www.securiteam.com/securityreviews/5PP0H0UNGW.html |