Fabulosity from Trammel!

And Video #2: the L0pht Reunion Panel from last week's Source Boston conference!

Enjoy these over and over again, ad infinitum.

CULT OF THE DEAD COW CATCHES THE COMMIES PUBLISHING PORNOGRAPHY ON THEIR WEBSERVERS

NOT SAFE FOR WORK: Chinese Government Web Servers Loaded With Kiddie Porn Graphics, Sex Toys, And Good Old-Fashioned Pron. Western Government Web Servers, No Pron But Plenty Of Holes.

Lubbock, TX - March 4th, 2008 - CULT OF THE DEAD COW (cDc), the world's most attractive hacker group, announced today that it has discovered terabytes of pornographic content on Chinese government Web servers. The sexually explicit images were exposed with Goolag Scanner, a Web auditing tool that uses Google search to reveal Web site vulnerabilities. Goolag Scanner was released on February 20th by the cDc and has one hundred thousand downloads to date.

"This suggests two things," said cDc spokes-model Oxblood Ruffin. "One, Adult content is out of control with Chinese Communist Party (CCP) middle-management types; and, two, Web site security on government and military Web servers in China is stronger than in the West. Because apart from loads of dubious wanking material, we didn't find the same kind of vulnerabilities that we discovered in the U.S., Canada, the U.K., and France just for starters. In fact, we were so concerned about some of the holes we found in the U.S. that we had our attorney forward some of this data to the Department of Homeland Security."

HOW GOOLAG SCANNER WORKS
Goolag Scanner is an automated "Google hacking" application. Google hacking is a form of Web site auditing that takes advantage of "dorks," or extended search queries, that look for very specific kinds of data (credit card information, mp3 files, passwords, IP
configuration data, etc.). There are approximately 1500 dorks in circulation. Goolag Scanner searches whatever it is asked to search: a specific Web site, or a vast network. It will do whatever it is asked to do. And then it will return the results.

WHY CULT OF THE DEAD COW WILL NOT PUBLISH WESTERN SECURITY HOLES
We ain't stupid. We have shared our findings with some security experts, selected journalists and NGOs, and they've been corroborated. But that's it. We have zero interest or motivation in providing a roadmap for bored teenagers, criminals, or any government
agencies.

WHY CULT OF THE DEAD COW WILL PUBLISH CHINESE GOVERNMENT DATA
We couldn't care less about these assholes. Any country that props up dictators and practices genocide doesn't catch a break from us. China should be grateful that we just found this bone-polishing material.

MAN WHO TYPES WITH ONE HAND, CAN THUMB MANUAL WITH OTHER
And now for the moment you've all been waiting for ... the naughty bits. Following are five links selected at random from the ocean of crap we found on Chinese government Web servers. We're sure that Hu Jintao would like to thank Sergei and Larry for making all of this possible.

http://book.comic.gov.cn/book/disc/l/Loli的时间/23/004.jpg
http://sextoys.win.mofcom.gov.cn/www/18%5Csextoys%5Cimg%5C200751016377.jpg
http://www.jcdj.gov.cn/dat/2006/8/28/pics/E/LHUNXHENFXZM.jpg
http://citizen.hld.gov.cn/UploadFiles_5376/200706/200761285049124.jpg
http://www.srjt.gov.cn/image/bt/DVD1KP-012A.jpg

DOWNLOAD GOOLAG SCANNER
http://goolag.org/download.html

PRESS CONTACT
oxblood at hacktivismo dot com

ABOUT CULT OF THE DEAD COW
www.cultdeadcow.com

Based in Lubbock, Texas, CULT OF THE DEAD COW (cDc) is the most influential
computer underground group in the world. The cDc alumni list reads like a
Who's Who of hacking and includes a former Presidential advisor on Internet
security, among others. The group is further distinguished by publishing the
longest running e-zine on the Internet [est. 1984], stretching the limits of
the First Amendment, and fighting anyone or any government that aspires to
limit free speech.

###

Digg this story or be forever cursed!

FOR IMMEDIATE RELEASE

SECURITY ADVISORY: The following program may screw a large Internet search
engine and make the Web a safer place.

LUBBOCK, TX, February 20th -- Today CULT OF THE DEAD COW (cDc), the world's
most attractive hacker group, announced the release of Goolag Scanner, a web
auditing tool. Goolag Scanner enables everyone to audit his or her own web
site via Google. The scanner technology is based on "Google hacking," a form
of vulnerability research developed by Johnny I Hack Stuff. He's a lovely
fellow. Go buy him a drink.

"It's no big secret that the Web is the platform," said cDc spokesmodel
Oxblood Ruffin. "And this platform pretty much sucks from a security
perspective. Goolag Scanner provides one more tool for web site owners to
patch up their online properties. We've seen some pretty scary holes through
random tests with the scanner in North America, Europe, and the Middle East.
If I were a government, a large corporation, or anyone with a large web site,
I'd be downloading this beast and aiming it at my site yesterday. The v
ulnerabilities are that serious."

Goolag Scanner will be released open source under the GNU Affero General
Public license. It is dedicated to the memory of Wau Holland, founder of the
Chaos Computer Club, and a true champion of privacy rights and social justice.

GOOLAG SCANNER FUNCTIONS AND FEATURES

Goolag Scanner is a standalone windows GUI based application. It uses one
xml-based configuration file for its settings. All dorks coming with the
distribution of gS are kept inside one file.
--

Press Contact
Oxblood Ruffin
oxblood at hacktivismo.com

Edit: digg this shit.