http://conference.hackinthebox.org/hitbsecconf2010kul/



hackinthebox
 ::  hitb portal  ::  hitb portal (SSL)  ::  hitb forum (SSL)  ::  hitb security conference  ::  hitb training ::  hitb irc  ::  hitb photos  ::  hitb videos :: 
Who's Online
There are 164 unregistered users and 0 registered users on-line.

You can log-in or register for a user account here.



Main Menu

Top Stories for Today
[621] PS3 Hackers Gain Flash Access. Custom Firmware Coming?
[614] Google Instant could lead to blackhat SEO problems
[497] Bootrom exploit for iPhone iOS4.1 discovered
[476] Acer Founder: Apple is Like a Mutant Virus
[402] Microsoft Cooking Up Baker's Dozen of Fixes for Patch Tuesday
[385] Basics of vulnerability management
[366] Rackspace pulls the plug on Koran-burning pastor's website
[330] New Android SMS Trojan Variant Distributed Through BHSEO
[288] IT Contract Work Is Up, Permanent Hiring Slowly Increasing
[266] Misuse of Computers: Shadowcrew and soupnazi
[259] Adobe To Resume “Dev Work” On Flash-to-iPhone Tool
[253] iPhone Jailbreakers May Get Their Freedom And Their Security, Too
[251] UK government breathes fresh life into Gary McKinnon case
[244] Marriott, Sheraton, Westin warns 3400 customers of data breach
[230] Advanced Spam Sent via PHP Tool Hosted on Compromised Web Servers
[226] Apple relaxes rules for iPhone-iPod-iPad applications
[190] Greece orders new investigation into Olympics wiretapping
[180] DNS Made Easy Suffers from Break in DDOS Attack
[157] At ARM's length

View the Top 50 articles

Top 20 of the Last 2 Weeks

Past Articles
Thursday, September 09
·Security vendor demonstrates insider attack on VMware ESX
·DHS Cybersecurity Watchdogs Miss Hundreds of Vulnerabilities on Their Own Network
·Court OKs Microsoft's new weapon for taking down botnets
·Half think downloading music for free is legal
·Google Instant promises live search results
·Customer database threatened by insider leakages
·When business brains turn to crime
·Dev Team Says Don’t Accept iOS 4.1, “It’s a Trap!”
·Hackers create 57,000 malicious pages per week
·Luis Corrons on taking down cyber criminals
·Apple patches DLL hijacking bug in Safari
·Beware the Fake Interview
·Hackers exploit new PDF zero-day bug, warns Adobe
·Microsoft Rumored To Buy Symantec. Why Would It Bother?
·Research Firm NSS Will Launch ‘Exploit Hub
·50% increase in attacks against Malaysian servers detected
·Ten held in swoop on film pirates
·WorldPay Hacker Gets Suspended Sentence for $9 Million Heist
Wednesday, September 08
·NSA Director Says U.S. Has a Duty to Secure the Internet
·Police in File-Sharing Raids Across Europe
·Flash Player as a spy system
·Cloud Computing: The Invisible Revolution
·Creepy Biometric IDs to Be Forced Onto India's 1.2 Billion Inhabitants
·Why Surging Security Vulnerability Rate May Be a Good Thing
·The world's most advanced smart ID card?
·TechCrunch hacked to distribute Zeus Trojan via JavaScript file
·O2 Forced To Pull Faulty Android 2.2 Desire Update
·Scaling Intrusion Prevention Systems for 10G, 40G and Beyond
·Career turning points: Step up to the big challenges
·HMRC tax problems quickly tapped by cash hungry hackers
 Older articles

How O2 secured its network for the iPhone
Posted by l33tdawg on Tuesday, February 09, 2010 - 05:25 AM (Reads: 790)
Source: Connected Planet Online



When it comes to Apple’s iPhone, the following clichés must certainly ring true for network operators trying to support the iconic, bandwidth-hungry device: too much of a good thing; the devil is in the details; and perhaps above all: careful what you wish for, you just might get it.

Led largely by the iPhone – the first device to make mobile browsing palatable, while also introducing a whole new world of traffic-consuming “apps” – today’s connected devices pose considerable challenges for network operators. Most of the attention goes to the network itself, both the need for upgrades to the radio interfaces that let users jump on the network at 3G and soon 4G speeds, as well as various aspects of the mobile transport network itself, including backhaul to and from cell towers and the emerging converged packet core.

Yet such devices present a major challenge in another crucial area as well, one which, if it were to go untended, could result in even more dire consequences than a few dropped calls and a “there’s a map for that” ad campaign – namely, security.

(Printer-friendly page Send this story to someone)

 
Login
 



 


 Log in Problems?
 New User? Sign Up!

HITBSecConf2010 - Malaysia
Register now for the 8th annual HITB security conference in Asia!

Day 1 (13th Oct) Keynote Speakers

Keynote 1: Chris Wysopal (CTO/Co-Founder, Veracode)

Keynote 2: Paul Vixie (President, ISC)

Day 2 (14th Oct) Special Keynote Panel Discussion

“The Future of Mobile Malware & Cloud Computing”

Keynote Panelist 1: Mikko Hypponen

Keynote Panelist 2: Paul Ducklin

Keynote Panelist 3: Denis Maslennikov

Keynote Panelist 4: Dr. Jose Nazario

Moderator: Dr. Dinesh Nair


Conference Speakers (alphabetical order)

1.) Alexander Polyakov (CTO, Digital Security Company)

2.) Cedric Halbronn (Sogeti / ESEC)

3.) Claudio Criscione (Principal Consultant, Secure Network S.r.l.)

4.) Dennis Brown (Research Engineer, Tenable Network Security)

5.) Don Bailey (Security Consultant, iSEC Partners)

6.) Fabian Mihailowitsch (IT Security Consultant, cirosec GmbH)

7.) Jean-Baptise Bedrune (Sogeti / ESEC)

8.) Jonathan Brossard (CEO, Toucan Systems)

9.) Laurent Oudot (Founder, TEHTRI-Security)

10.) Long Le (VNSECURITY)

11.) Luis Corrons (Director of Research, PandaLabs)

12.) Marco Slaviero (Associate, SensePost)

13.) Mary Yeoh (Intel Corp)

14.) Meder Kydyraliev (Google Security Team)

15.) Mitja Kolsek (CTO, ACROS Security)

16.) Paul Sebastian Ziegler (Independent Network Security Researcher)

17.) Paul Thierault (Security Consultant, stratsec)

18.) Saumil Shah (Founder, Net-Square)

19.) Shreeraj Shah (Founder, BlueInfy)

20.) The Grugq (Senior Security Researcher, COSEINC)

There are very limited seats and registrants are encouraged to register early!

REGISTER NOW


HITB eZine Issue 003

Last 15 Postings to HITB Forum

Topics
· All topics
· AMD News (Aug 10, 2010)
· Apple News (Sep 10, 2010)
· Articles (Mar 03, 2009)
· Ask Us (Feb 01, 2003)
· Audio/Video (Sep 01, 2010)
· Encryption (Sep 06, 2010)
· Games (Aug 27, 2010)
· Hardware (Sep 10, 2010)
· HITB News (Sep 03, 2010)
· Industry News (Sep 10, 2010)
· Intel News (Aug 31, 2010)
· Law and Order (Sep 10, 2010)
· Linux (Aug 30, 2010)
· Microsoft (Sep 10, 2010)
· Networking (Sep 01, 2010)
· PDAs (Feb 09, 2007)
· Privacy (Sep 10, 2010)
· Red Hat (Mar 30, 2010)
· Science (Aug 30, 2010)
· Security (Sep 10, 2010)
· Software & Programming (Sep 10, 2010)
· Spam (Sep 10, 2010)
· Technology (Sep 07, 2010)
· Transmeta (Jul 07, 2007)
· Viruses & Malware (Sep 08, 2010)
· Wireless (Sep 07, 2010)

Packet Storm Security Latest
· OIG_10-111_Aug10.pdf
Office of Inspector General report OIG-10-1111 - DHS Needs to Improve the Security Posture of Its Cybersecurity Program Systems.
· USN-978-1.txt
Ubuntu Security Notice 978-1 - Several dangling pointer vulnerabilities were discovered in Thunderbird. It was discovered that the XPCSafeJSObjectWrapper (SJOW) security wrapper did not always honor the same-origin policy. Matt Haggard discovered that Thunderbird did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. Chris Rohlf discovered an integer overflow when Thunderbird processed the HTML frameset element. Several issues were discovered in the browser engine. David Huang and Collin Jackson discovered that the tag could override the charset of a framed HTML document in another origin. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. A buffer overflow was discovered in Thunderbird when processing text runs. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine.
· USN-975-1.txt
Ubuntu Security Notice 975-1 - Several dangling pointer vulnerabilities were discovered in Firefox. Blake Kaplan and Michal Zalewski discovered several weaknesses in the XPCSafeJSObjectWrapper (SJOW) security wrapper. Matt Haggard discovered that Firefox did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. Chris Rohlf discovered an integer overflow when Firefox processed the HTML frameset element. Several issues were discovered in the browser engine. David Huang and Collin Jackson discovered that the tag could override the charset of a framed HTML document in another origin. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. A buffer overflow was discovered in Firefox when processing text runs. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine.
· USN-985-1.txt
Ubuntu Security Notice 985-1 - Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user.
· ESA-2010-016.txt
RSA Access Manager Agent version 4.7.1 with RSA Adaptive Authentication Integration contains a potential vulnerability that could be exploited by malicious people to bypass authentication restrictions.
· ESA-2010-015.txt
A vulnerability exists in EMC Celerra which can be exploited to gain unauthorized access to root NFS export on EMC Celerra NAS. NAS Code versions 5.6.50 and below are affected.
· ESA-2010-014.txt
RSA Access Manager Server contains a potential vulnerability that could be exploited to bypass certain security restrictions, potentially enabling unauthorized access to protected resources.
· dsa-2106-1.txt
Debian Linux Security Advisory 2106-1 - Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications.

Follow us
Join our Facebook Group

Follow us on Twitter

Follow our RSS feed


HITB Affiliates

Page created in 0.819373846054 seconds.