Put up a survey today to solicit feedback about the rules, servers/platforms supported and so on. Please let me know what you want so I can work on it!

Take the survey here.

continue reading.....

Put up a survey today to solicit feedback about the rules, servers/platforms supported and so on. Please let me know what you want so I can work on it!

Take the survey here.

continue reading.....

Setup the mailing list for the rules today. I’ll use it to announce new releases, to help the process of bug reporting, feature requests, etc. Please feel free to subscribe and start using it. You can sign up here:

http://lists.gotroot.com/mailman/listinfo/modsecurity (cache)

continue reading.....

Setup the mailing list for the rules today. I’ll use it to announce new releases, to help the process of bug reporting, feature requests, etc. Please feel free to subscribe and start using it. You can sign up here:

http://lists.gotroot.com/mailman/listinfo/modsecurity (cache)

continue reading.....

New release of both the application and comment spam mod_security rules. Enjoy!

continue reading.....

New release of both the application and comment spam mod_security rules. Enjoy!

continue reading.....

Ok, just an update on the rules, put out two new releases today with both the application protection rules and the comment spam rules. Includes new sigs and tweaks for the former, and new rules for the later. If you don’t know that this is about, then check out the mod_security page. Now you can protect your webserver again known and unknown flaws in your web applications!

Download the rules, as always, from the rules page.

Please visit the main mod_security rules page for any notes about this release.

You can download the latest version of the application protect rules directly from this URL: http://www.gotroot.com/downloads/ftp/mod_security/rules.conf

And you can download the latest version of the blacklist rules from this URL: http://www.gotroot.com/downloads/ftp/mod_security/blacklist.conf

Please visit the mod_security rules page for the IIS rules.

continue reading.....

Ok, just an update on the rules, put out two new releases today with both the application protection rules and the comment spam rules. Includes new sigs and tweaks for the former, and new rules for the later. If you don’t know that this is about, then check out the mod_security page. Now you can protect your webserver again known and unknown flaws in your web applications!

Download the rules, as always, from the rules page.

Please visit the main mod_security rules page for any notes about this release.

You can download the latest version of the application protect rules directly from this URL: http://www.gotroot.com/downloads/ftp/mod_security/rules.conf

And you can download the latest version of the blacklist rules from this URL: http://www.gotroot.com/downloads/ftp/mod_security/blacklist.conf

Please visit the mod_security rules page for the IIS rules.

continue reading.....

Apple Insider is reporting (cache) that the Federal courts have ruled in Apple’s favor over its use of the trademark “Tiger” for its new operating system. Apple was sued by TigerDirect?, which asserted that it had the rights to “Tiger” and not Apple. More than likely, this was all about getting some press, and not really about the use of Tiger.

continue reading.....

Apple Insider is reporting (cache) that the Federal courts have ruled in Apple’s favor over its use of the trademark “Tiger” for its new operating system. Apple was sued by TigerDirect?, which asserted that it had the rights to “Tiger” and not Apple. More than likely, this was all about getting some press, and not really about the use of Tiger.

continue reading.....

In October, 2004 Colin Percival discovered a vulnerability (cache) in the hyper-threading implementation (cache) of the entire Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processor line. This flaw allows for local information disclosure. This flaw was also disclosed by Dag Arne Osvik in the paper Other People’s Cache – HyperAttacks with HyperThreading (cache) and also by Dan Bernstein. This problem primarily effects multi-user systems (servers), and for now, the solution is to turn hyperthreading off. Its not clear if this is a timing attack, a cache information leakage attack or something else entirely. For the moment, Colin is keeping his details a secret, until later today, when he will release them at BSDCAN (cache). More details as we have them in the article. UPDATE: Colin’s paper is here.

continue reading.....

In October, 2004 Colin Percival discovered a vulnerability (cache) in the hyper-threading implementation (cache) of the entire Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processor line. This flaw allows for local information disclosure. This flaw was also disclosed by Dag Arne Osvik in the paper Other People’s Cache – HyperAttacks with HyperThreading (cache) and also by Dan Bernstein. This problem primarily effects multi-user systems (servers), and for now, the solution is to turn hyperthreading off. Its not clear if this is a timing attack, a cache information leakage attack or something else entirely. For the moment, Colin is keeping his details a secret, until later today, when he will release them at BSDCAN (cache). More details as we have them in the article. UPDATE: Colin’s paper is here.

continue reading.....

AOL has now gotten on the free e-mail love train. Matching google’s 2GB of free mail, the service is available to all net users, and not just AOL subscribers. The annoucement is here (cache). From the official announcement “Starting today, you can download the latest version of AIM and start using your AIM Screen Name to also send and receive emails. Now, AIM is not only the service that allows your friends and family to IM you, but by adding @aim.com to your Screen Name, it is how they can email you as well.”

So, you have to be using the AIM client to use it, but hey, its free. :-)

continue reading.....

AOL has now gotten on the free e-mail love train. Matching google’s 2GB of free mail, the service is available to all net users, and not just AOL subscribers. The annoucement is here (cache). From the official announcement “Starting today, you can download the latest version of AIM and start using your AIM Screen Name to also send and receive emails. Now, AIM is not only the service that allows your friends and family to IM you, but by adding @aim.com to your Screen Name, it is how they can email you as well.”

So, you have to be using the AIM client to use it, but hey, its free. :-)

continue reading.....

Mozilla.org (cache) released version 1.0.4 of firefox. It includes fixes for the security vulnerabilities disclosed earlier this week. You can download it from here (cache).

continue reading.....

A demonstration exploit for two unrelated holes in Firefox was published this weekend. It illustrates how the two flaws can be used together to install and execute arbitrary code on Firefox boxes. The temporary solution is to turn “Allow web sites to install software” option off in your preferences. A fix is already in the development version of firefox, so a full fix should be coming out shortly.

continue reading.....