FreeBSD Root Exploit Zero Day

Way back when we worked on a grid project based on what was then a beta version of VIA’s “new” dual processor EPIA DP-310 series Mini-ITX embedded board.

As part of the pilot we put the grid together based on existing EPIA series embedded boards and signed an NDA with VIA to gain access to the then beta DP-310.

The grid OS was going to be FreeBSD.

Our goal was to put together an ultra low power consumption setup that would provide an excellent performance/watt value.

For us, the kybosh on the project ended up being VIA’s decision to kill the DP-310 product line altogether.

As a result, we still keep an eye on anything *BSD though it has been a while since we have loaded up either FreeBSD or OpenBSD due to time constraints.

• The H Security: Root exploit for FreeBSD.

It seems that there is a pretty deadly Zero Day vulnerability in FreeBSD that allows for full root.

Since a significant portion of the Internet’s backend runs on top of FreeBSD, this Zero Day has some pretty significant implications.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

A Rare Man of Principle: Nils @ Pwn2Own

The young fellow responsible for bringing down IE 8, Firefox, and Safari at Pwn2Own (previous blog post) sat down with Ryan Naraine of ZDNet to chat about his experiences:

• Nils2Own: 'I want to see security flaws fixed'

Given the fact that there were others who were advocating payment for giving up vulnerabilities they have discovered at the same conference, Nils truly stands out as a rare man of principle.

Doing something for “goodness sake”, to help others, is one of the highest principles we can hold in our businesses and our own life.

Way to go Nils!

Link courtesy of Susan.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Internet Explorer 8 is Now Released

You can get the new IE8 here: Internet Explorer 8 download site.

TippingPoint DVLabs has a good article on the recent Pwn2Own contest where Charlie Miller took down Safari on OS X with a zero day exploit in a couple of minutes.

A fellow by the name of Nils then proceeded to take down IE8, Safari, and finally Firefox with zero day exploits of his own. Quite the talented fellow! :)

Take a look at the Pwn2Own articles and some of the other related content on TippingPoint’s Digital Vaccine Labs Web site.

While no Web browser is perfect, we do need to keep an eye on their specific vulnerabilities and the patches available for them as the Web browser is one of the principle tools used on a daily basis by all users.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer