[1882] in Security FYI

home help back first fref pref prev next nref lref last post

[IS&T Security-FYI] SFYI Newsletter, July 13, 2009

daemon@ATHENA.MIT.EDU (Monique Yeaton)
Mon Jul 13 15:38:09 2009

Message-Id: <94F3E6CB-C96A-4032-A82E-3D9E968D080E@mit.edu>
From: Monique Yeaton <myeaton@MIT.EDU>
To: ist-security-fyi@MIT.EDU
Mime-Version: 1.0 (Apple Message framework v935.3)
Date: Mon, 13 Jul 2009 15:32:27 -0400
Cc: itss@MIT.EDU
Content-Type: multipart/mixed; boundary="===============0677623329=="
Errors-To: ist-security-fyi-bounces@MIT.EDU


--===============0677623329==
Content-Type: multipart/signed; boundary=Apple-Mail-41-770892153; micalg=sha1;
	protocol="application/pkcs7-signature"


--Apple-Mail-41-770892153
Content-Type: multipart/alternative;
	boundary=Apple-Mail-40-770892098


--Apple-Mail-40-770892098
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit


In this issue:

1. July 2009 Security Patches
2. iPhone SMS Vulnerability
3. IT Security Website Relaunched
4. Event: Ethical Hacking and Systems Defense Workshop


-------------------------------------
1. July 2009 Security Patches
-------------------------------------

---- Microsoft ----

In an advance notification, Microsoft announced this month's security  
bulletin will be releasing 3 critical and 3 important security  
bulletins on July 14. Applications affected:

  * Microsoft Windows (multiple versions)
  * Microsoft Virtual PC (multiple versions)
  * Microsoft Internet Security and Acceleration Server 2006
  * Microsoft Office Publisher 2007

Read the advance notification in full here: <http://www.microsoft.com/technet/security/bulletin/ms09-jul.mspx 
 >

Microsoft is also aware of vulnerabilities in Microsoft Video Active X  
Control <http://www.microsoft.com/technet/security/advisory/ 
972890.mspx> and Microsoft Office Web Components Control <http://www.microsoft.com/technet/security/advisory/973472.mspx 
 >, both of which will not be addressed in the monthly bulletin.  
Suggested actions have been posted on both advisories.

---- Apple ----

Apple Safari Update: Apple has released an updated version of its  
Safari web browser to address two security flaws.  One is a cross-site  
scripting flaw; the other is a memory corruption issue that could be  
exploited to crash the browser or execute arbitrary code.  The new  
version of Safari also addresses a number of stability issues. Users  
are urged to upgrade to Safari 4.0.2.

Read details here: <http://support.apple.com/kb/HT3666>
The Safari update can be downloaded here: <http://support.apple.com/downloads/ 
 > or from Software Update.


-----------------------------------
2. iPhone SMS Vulnerability
-----------------------------------

At the SyScan conference in Singapore earlier this month, OS X  
security expert Charlie Miller disclosed a hole that would let  
attackers "run software code on the phone that is sent by SMS over a  
mobile operator's network in order to monitor the location of the  
phone using GPS, turn on the phone's microphone to eavesdrop on  
conversations, or make the phone join a distributed denial of service  
attack or a botnet." Mr. Miller is planning to detail the  
vulnerability in full at the upcoming Black Hat conference, but Apple  
is hoping to have it patched by the end of this month.

Read the full story here: <http://tech.yahoo.com/news/pcworld/20090702/tc_pcworld/applepatchingserioussmsvulnerabilityoniphone 
 >


--------------------------------------------
3. IT Security Website Relaunched
--------------------------------------------

Last week the IT Security @ MIT website moved from <http://web.mit.edu/ist/topics/security/ 
 >  to <http://ist.mit.edu/security>, with a new design and content  
organization. The new site is still a work in progress and we are  
working on new content all the time.

Please help us make this site as useful for the MIT community as  
possible.

Tell us what you would like to see! Post a comment here on our wiki  
page: <https://wikis.mit.edu/confluence/x/X1CXAg> (MIT certificate  
required). If you can't access the page, please email me your comments  
at myeaton@mit.edu.

Some things we'd like to add in the near future are:

* a news feature, possibly including an online version of Security-FYI  
(this email newsletter)
* helpful step-by-step tips relating to security practices
* short "captivate" videos with security-related demos


--------------------------------------------------------------------------
4. Event: Ethical Hacking and Systems Defense Workshop
--------------------------------------------------------------------------

Harvard University is hosting a hands-on, 3-day intensive workshop on  
the methodologies and application of hacking concepts and techniques.  
This workshop introduces students to footprinting, scanning, gaining  
and maintaining access, covering tracks, and securing their own  
systems. For more information about the course see the PDF file at:

<http://www.ittrainingsolutions.net/ethicalhacking&systemdefense.pdf>

The when and where: August 10-12, 2009, 8:00 AM to 9:30 PM. Harvard  
University, Radcliffe Institute for Advanced Study, 10 Garden St,  
Cambridge, MA  02138.



= 
= 
= 
========================================================================

Find current and older issues of Security FYI Newsletter: <http://kb.mit.edu/confluence/x/ehBB 
 >






--Apple-Mail-40-770892098
Content-Type: text/html;
	charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; "><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">In =
this issue:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">1. =
July 2009 Security Patches</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">2. iPhone SMS =
Vulnerability</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">3. IT Security Website Relaunched</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">4. =
Event: Ethical Hacking and Systems Defense Workshop</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">-------------------------------------</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; ">1. July 2009 Security =
Patches</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">-------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">---- Microsoft ----</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">In an advance notification, =
Microsoft announced this month's security bulletin will be releasing 3 =
critical and 3 important security bulletins on July 14. Applications =
affected:</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">&nbsp;* Microsoft Windows (multiple versions)</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">&nbsp;* Microsoft Virtual PC (multiple versions)</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">&nbsp;* Microsoft Internet Security and Acceleration Server =
2006</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">&nbsp;* Microsoft Office Publisher =
2007</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Read the advance notification in full here: &lt;<a =
href=3D"http://www.microsoft.com/technet/security/bulletin/ms09-jul.mspx">=
http://www.microsoft.com/technet/security/bulletin/ms09-jul.mspx</a>&gt;</=
div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Microsoft is also aware of =
vulnerabilities in Microsoft Video Active X Control &lt;<a =
href=3D"http://www.microsoft.com/technet/security/advisory/972890.mspx">ht=
tp://www.microsoft.com/technet/security/advisory/972890.mspx</a>&gt; and =
Microsoft Office Web Components Control &lt;<a =
href=3D"http://www.microsoft.com/technet/security/advisory/973472.mspx">ht=
tp://www.microsoft.com/technet/security/advisory/973472.mspx</a>&gt;, =
both of which will not be addressed in the monthly bulletin. Suggested =
actions have been posted on both advisories.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">---- Apple ----</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">Apple Safari Update: Apple has =
released an updated version of its Safari web browser to address two =
security flaws. &nbsp;One is a cross-site scripting flaw; the other is a =
memory corruption issue that could be exploited to crash the browser or =
execute arbitrary code. &nbsp;The new version of Safari also addresses a =
number of stability issues. Users are urged to upgrade to Safari =
4.0.2.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Read details here: &lt;<a =
href=3D"http://support.apple.com/kb/HT3666">http://support.apple.com/kb/HT=
3666</a>&gt;</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">The Safari update can be downloaded here: =
&lt;<a =
href=3D"http://support.apple.com/downloads/">http://support.apple.com/down=
loads/</a>&gt; or from Software Update.</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; min-height: 17px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">-----------------------------------</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; ">2. iPhone SMS =
Vulnerability</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">-----------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; ">At the SyScan conference in Singapore =
earlier this month, OS X security expert Charlie Miller disclosed a hole =
that would let attackers "run software code on the phone that is sent by =
SMS over a mobile operator's network in order to monitor the location of =
the phone using GPS, turn on the phone's microphone to eavesdrop on =
conversations, or make the phone join a distributed denial of service =
attack or a botnet." Mr. Miller is planning to detail the vulnerability =
in full at the upcoming Black Hat conference, but Apple is hoping to =
have it patched by the end of this month.</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; min-height: 17px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">Read the full story here: &lt;<a =
href=3D"http://tech.yahoo.com/news/pcworld/20090702/tc_pcworld/applepatchi=
ngserioussmsvulnerabilityoniphone">http://tech.yahoo.com/news/pcworld/2009=
0702/tc_pcworld/applepatchingserioussmsvulnerabilityoniphone</a>&gt;</div>=
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">--------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">3. =
IT Security Website Relaunched</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; =
">--------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Last week the IT Security @ MIT =
website moved from &lt;<a =
href=3D"http://web.mit.edu/ist/topics/security/">http://web.mit.edu/ist/to=
pics/security/</a>&gt;&nbsp; to &lt;<a =
href=3D"http://ist.mit.edu/security">http://ist.mit.edu/security</a>&gt;, =
with a new design and content organization. The new site is still a work =
in progress and we are working on new content all the time.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Please help us make this site as =
useful for the MIT community as possible.&nbsp;</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Tell us what you would like to =
see! Post a comment here on our wiki page: &lt;<a =
href=3D"https://wikis.mit.edu/confluence/x/X1CXAg">https://wikis.mit.edu/c=
onfluence/x/X1CXAg</a>&gt; (MIT certificate required). If you can't =
access the page, please email me your comments at <a =
href=3D"mailto:myeaton@mit.edu">myeaton@mit.edu</a>.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Some things we'd like to add in =
the near future are:</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">* =
a news feature, possibly including an online version of Security-FYI =
(this email newsletter)</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">* helpful step-by-step tips =
relating to security practices</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">* short "captivate" videos with =
security-related demos</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; =
">------------------------------------------------------------------------=
--</div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">4. Event: Ethical Hacking and Systems Defense Workshop</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">------------------------------------------------------------------------=
--</div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: =
0px; margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">Harvard University is hosting a =
hands-on, 3-day intensive workshop on the methodologies and application =
of hacking concepts and techniques. This workshop introduces students to =
footprinting, scanning, gaining and maintaining access, covering tracks, =
and securing their own systems. For more information about the course =
see the PDF file at:</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">&lt;<a =
href=3D"http://www.ittrainingsolutions.net/ethicalhacking&amp;systemdefens=
e.pdf">http://www.ittrainingsolutions.net/ethicalhacking&amp;systemdefense=
.pdf</a>&gt;</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">The when and where: August =
10-12, 2009, 8:00 AM to 9:30 PM. Harvard University, Radcliffe Institute =
for Advanced Study, 10 Garden St, Cambridge, MA&nbsp; 02138.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; =
min-height: 16px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; =
">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; min-height: 16px; "><br></div><div style=3D"margin-top:=
 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; ">Find current and older issues =
of Security FYI Newsletter: &lt;<a =
href=3D"http://kb.mit.edu/confluence/x/ehBB"><span =
style=3D"text-decoration: underline ; color: =
#2151aa">http://kb.mit.edu/confluence/x/ehBB</span></a>&gt;</div><div><fon=
t class=3D"Apple-style-span" face=3D"Arial"><br></font></div><div =
apple-content-edited=3D"true"><span class=3D"Apple-style-span" =
style=3D"font-size: 14px; "><div style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
"><div><div><br></div></div><br></div></span><br =
class=3D"Apple-interchange-newline"> </div><br></body></html>=

--Apple-Mail-40-770892098--

--Apple-Mail-41-770892153
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIDwjCCA74w
ggMnoAMCAQICEQCgVkmJt2RPZFjUToeFtLUNMA0GCSqGSIb3DQEBBQUAMGwxCzAJBgNVBAYTAlVT
MRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMS4wLAYDVQQKEyVNYXNzYWNodXNldHRzIEluc3RpdHV0
ZSBvZiBUZWNobm9sb2d5MRUwEwYDVQQLEwxDbGllbnQgQ0EgdjEwHhcNMDkwNzA3MTkwNzQ1WhcN
MTAwNzMxMTkwNzQ1WjCBpTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAs
BgNVBAoTJU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxFTATBgNVBAsTDENs
aWVudCBDQSB2MTEXMBUGA1UEAxMOTW9uaXF1ZSBZZWF0b24xHjAcBgkqhkiG9w0BCQEWD215ZWF0
b25ATUlULkVEVTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5YyEmHtimNf2l9Swh7
azen1VDYTAHPef/hu8pDiEdf51i6i/1uiI7RCvzmGt8SRR3gwx1MuJt3TCKKX7kedPK8owWHRDO1
SQTG+RJHEKa8IeG/7Fk8kXFJqBYbk5sA8YOQOwmlG2x5ssMhfoPAxc44rh9tk4VfDgASGZXQITa+
8SwLG2JSFgUlnvEJAOrw8XRXRX78mgPwkydJQNhfK+ikYm2JtyqM5cSwgLxHh0XldWAI7P4csM79
LQcG4HQZRmTCVeMuy67KgNjtg/94O5AfwLkbP6hwvqsDsfr8aTwhbrhkayJnvXeY0L2X4i9AasVP
aAC4apVYBbIQr5mW4S8CAwEAAaOBoTCBnjAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXgMB0GA1UdDgQWBBRfbDIy
HJrY3A0bf+451r8D8oZXGjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY2EubWl0LmVkdS9jYS9t
aXRjbGllbnQuY3JsMA0GCSqGSIb3DQEBBQUAA4GBAIa1unH8mI8xbBDdr0Iqub03tHeb4/VWpsPq
GmhYH9vXRI6x7B+dAIwghm4gKo9y4d8qlgcx+1sLjRQ8DkZcXacX52a1eb1qYzXhzNGkxp4EEZIq
xYCHWJRYuitl+cpqVbS0Dxh/+gC5KL4LkMRJjQ6kP1ns99bdK132BxmyNX1+MYIDNjCCAzICAQEw
gYEwbDELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoTJU1hc3Nh
Y2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxFTATBgNVBAsTDENsaWVudCBDQSB2MQIR
AKBWSYm3ZE9kWNROh4W0tQ0wCQYFKw4DAhoFAKCCAYkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEH
ATAcBgkqhkiG9w0BCQUxDxcNMDkwNzEzMTkzMjI4WjAjBgkqhkiG9w0BCQQxFgQUlarkpDj0gpop
dhHMrCgPz+AcLQwwgZIGCSsGAQQBgjcQBDGBhDCBgTBsMQswCQYDVQQGEwJVUzEWMBQGA1UECBMN
TWFzc2FjaHVzZXR0czEuMCwGA1UEChMlTWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5v
bG9neTEVMBMGA1UECxMMQ2xpZW50IENBIHYxAhEAoFZJibdkT2RY1E6HhbS1DTCBlAYLKoZIhvcN
AQkQAgsxgYSggYEwbDELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNV
BAoTJU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxFTATBgNVBAsTDENsaWVu
dCBDQSB2MQIRAKBWSYm3ZE9kWNROh4W0tQ0wDQYJKoZIhvcNAQEBBQAEggEAt3MeThzTTLtTCOEg
1KXsGf3lToajh8IB70S0UffQoHmy6UFsguyYQsFMN1lFpezXOnZDuAZeOtmjStp9yijB/ckR/KZI
2dPicsa08oyZJd8n49BnsB55XAghiWRyghT2hPSDuN+TAhJjPB/5p8MOasJCnAQlOrk4RWXDv9O7
e4vnFTWfUeC4MN4ltvsTSJNRQ8nVDTuz22/1BQpfWWsv8Ps0tFtEHAXsP1+hdefz0pCUwQ+tQTRC
P4sDmj4SpnYFv6+cDMX2BbhXt+J/jRJeXVuRC/knH0t6GGz0YaXR4SxaFcIBuKZHsEysVjkiqDyz
5t7O25caIizDY4xzGMTb9QAAAAAAAA==

--Apple-Mail-41-770892153--

--===============0677623329==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============0677623329==--

home help back first fref pref prev next nref lref last post