morph3us.org

There was a vulnerability in Google's Gmail service which allowed it to take control over an arbitrary mail account without requiring any cookie thefts. According to the bug spotter the vulnerability was fixed by Google on October 18.

http://www.elhacker.net/gmailbug/english_version.htm

M$ released Security Bulletin MS05-054 which resolves several newly-discovered vulnerabilities in M$ IE.
See File Download Dialog Box Manipulation Vulnerability (CAN-2005-2829), HTTPS Proxy Vulnerability (CAN-2005-2830), COM Object Instantiation Memory Corruption Vulnerability (CAN-2005-2831) and Mismatched Document Object Model Objects Memory Corruption Vulnerability (CAN-2005-1790) for details.

I updated the update pack for Windoze XP SP2..

M$ IE consumes - after approximately ~30 seconds runtime - a huge amount of physical and virtual memory during loading a certain HTML file.

I'm not sure if I should laugh or cry.. but I think it's better to laugh on it. :oP

Yeah, I know you do not know what I'm talking about - I speak about a recently posted "advisory" on Bugtraq (Bugtraq: securityfocus.com) with the title Microsoft Windows CreateRemoteThread Exploit.

Maybe somebody should tell this guy that Windoze has several privileges and more importantly security descriptors. That means that nobody is able to call OpenProcess() on processes which do not belong to him without having the SeDebugPrivilege or rather be able to gaining it. By default only Administrators own this mighty privilege and an Administrator is not limited to anything therefore it's bullshit to claim that it's a exploit to be able to use OpenProcess() and CreateRemoteThread().

To open a handle to another another process and obtain full access rights, you must enable the SeDebugPrivilege privilege. For more information, see Changing Privileges in a Token.

MSDN: OpenProcess()

Several time ago I used the "ISBN mod 11 Check" to write a little, crappy trigger for validating ISBN numbers. It excepts a nine numbers long ISBN number as NUMBER() and the last digit of the ISBN as CHAR().