<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>Mount Knowledge</title>
	<link>http://www.mountknowledge.nl</link>
	<description>IT Consultancy</description>
	<lastBuildDate>Wed, 01 Feb 2012 16:14:23 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress/3.0.5" -->

	<item>
		<title>Ziggo and xs4all block of ThePirateBay.org technical details</title>
		<description><![CDATA[The Dutch court ordered ISPs Ziggo and xs4all to block client&#8217;s access to thepiratebay.org and associated domain names and IP addresses. How exactly do these ISPs implement the block? DNS filtering The normal DNS response to resolving thepiratebay.org using an unfiltered DNS resolver (and omitting the MX records) is: $ host thepiratebay.org thepiratebay.org has address [...]]]></description>
		<link>http://www.mountknowledge.nl/2012/02/01/ziggo-and-xs4all-block-of-thepiratebay-org-technical-details/</link>
			</item>
	<item>
		<title>Shanghai Jiaotong University probing for Chinese IPv6 users?</title>
		<description><![CDATA[My server has had an IPv6 address for a few years now. I&#8217;ve just not gotten arround to properly advertise it in my DNS zones yet. Let alone register it as a name server for my domains. Strangely enough though, every day since 28 july 2011 I see these requests in my logs: named[15984]: client [...]]]></description>
		<link>http://www.mountknowledge.nl/2012/01/27/shanghai-jiaotong-university-probing-for-chinese-ipv6-users/</link>
			</item>
	<item>
		<title>Strong authentication for 2012</title>
		<description><![CDATA[Not so long ago, strong authentication was equivalent to two-factor authentication. Unfortunately, things have changed quite a bit in 2011. It is widely accepted that authenticating with only a username and password is not very secure. No matter how complex or long you make a password, it can be copied, intercepted, phished, etc. A lot [...]]]></description>
		<link>http://www.mountknowledge.nl/2012/01/14/strong-authentication-for-2012/</link>
			</item>
	<item>
		<title>ING mobiel bankieren iPhone app</title>
		<description><![CDATA[De ING Mobiel Bankieren iPhone app slaat slechts 1 configuratie bestand op: nl.ing.iphone.app.Bankieren.plist. Na het installeren bestaat het bestand nog niet, het wordt aangemaakt bij het koppelen van een ING rekening aan de app. Daarna bevat het de volgende gegevens: { clientKeyPairTagPrefix = "com.ing.nl.iMB"; encryptedClientPrivateKey = &#60;xxxxxxxx xxxxxxxx ... xxxxxxxx&#62;; profileId = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"; serverPublicEncryptionKeyTag = [...]]]></description>
		<link>http://www.mountknowledge.nl/2011/11/18/ing-mobiel-bankieren-iphone-app/</link>
			</item>
	<item>
		<title>How I got my #28c3 tickets @ccc today</title>
		<description><![CDATA[I preloaded my account with the tickets I needed, then at 15:59 I started this script: #!/bin/bash while [ 1 ]; do wget -q -T 10 -O out --load-cookies=cookie -U "`cat ua`" --post-file=postdata --no-check-certificate https://presale.events.ccc.de/order/confirm if [ -s out ]; then grep -q "Confirm Order" out &#124;&#124; exit fi rm -f out sleep 1 echo [...]]]></description>
		<link>http://www.mountknowledge.nl/2011/11/14/how-i-got-my-28c3-tickets-today/</link>
			</item>
	<item>
		<title>ING mobiel bankieren Android app</title>
		<description><![CDATA[De ING Mobiel Bankieren Android app slaat slechts 1 configuratie bestand op: IngMobilePrefs.xml. Na het installeren is dit bestand vrij leeg, maar na het koppelen van een ING rekening aan de app bevat IngMobilePrefs.xml de volgende gegevens: &#60;?xml version='1.0' encoding='utf-8' standalone='yes' ?&#62; &#60;map&#62; &#60;int name="STAGE" value="3" /&#62; &#60;string name="RIGHT_PAD"&#62;xxxxxxxxxxxxxxxxxxxx&#60;/string&#62; &#60;string name="PROFILE_ID"&#62;xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx&#60;/string&#62; &#60;string name="LEFT_PAD"&#62;xxxxxxxxxxxxxxxxxxxx&#60;/string&#62; &#60;string name="PRIVATE_KEY"&#62;xxxxxxx...&#60;/string&#62; [...]]]></description>
		<link>http://www.mountknowledge.nl/2011/11/13/ing-mobiel-bankieren-android-app/</link>
			</item>
	<item>
		<title>ING mobiel bankieren authenticatie</title>
		<description><![CDATA[Op 8 november 2011 introduceerde ING mobiel bankieren. Met een speciale ING Bankieren app kan een Mijn ING account gekoppeld worden aan een smartphone of tablet. Tijdens dit proces wordt een 5-cijferige pin code gekozen die daarna (samen met het device) genoeg is om de rekeningen in te zien, en geld over te maken. De [...]]]></description>
		<link>http://www.mountknowledge.nl/2011/11/09/ing-mobiel-bankieren-authenticatie/</link>
			</item>
	<item>
		<title>Bypassing Windows AppLocker using VB script in Word and Excel</title>
		<description><![CDATA[This week started out good. While I was looking into the usefulness of Windows AppLocker Belgian security researcher Didier Steven posted a blog entry explaining that he found a way to load DLLs that are not permitted by AppLocker. An anonymous comment pointed out an even bigger issue: starting new processes (=programs) that are not [...]]]></description>
		<link>http://www.mountknowledge.nl/2011/01/28/bypassing-windows-applocker-using-vb-script-in-word-and-excel/</link>
			</item>
	<item>
		<title>Creating a corporate Java security policy</title>
		<description><![CDATA[On January 23rd, 1996 something magical happened. Sun Microsystems released the Java Development Toolkit 1.0. From that moment on the 3 year old World Wide Web became more interactive. Browsers such as Mosaic and Netscape were able to show small applications inline which ran code on the client computer, allowing for instant feedback. At the [...]]]></description>
		<link>http://www.mountknowledge.nl/2010/11/04/creating-a-corporate-java-security-policy/</link>
			</item>
	<item>
		<title>Rootkit inside your laptop BIOS</title>
		<description><![CDATA[There is a BIOS rootkit inside almost every Windows laptop just waiting to be activated. Scary? Yes! Read the post for more details.]]></description>
		<link>http://www.mountknowledge.nl/2010/09/30/rootkit-inside-your-laptop-bios/</link>
			</item>
</channel>
</rss>

