I guess you've heard about the latest wingnut-welfare-funded propaganda project, the Heritage Foundation's Daily Signal, and they swear this time it'll be real news:

The site aims to rectify the conservative perception that mainstream news slants to the left. “We plan to do political and policy news,” says [publisher Geoffrey] Lysaught, “not with a conservative bent, but just true, straight-down-the-middle journalism"... 

The past few years have seen a profusion of conservative media outlets... “You often sense there’s an element of preaching to the choir,” says Katrina Trinko, a well-regarded political reporter lured away from National Review to manage the Signal’s news team. “What appealed to me was that our goal is not just to reach that audience. Obviously, we hope conservatives will come. But we hope anyone interested in information and public debate will see us as a trusted news source.”

"Katrina Trinko... to manage the Signal’s news team" is the key phrase here. Trinko has shown up in these pages twice before: Once for suggesting that, instead of passing a higher minimum wage, America should encourage fast-food chains to put out tip jars, and once for explaining that it was unfair to compare Republicans with Randroids because Republicans actually want a safety net run by the Church.

Trinko has also written several articles for our favorite culture-war stakewaster Acculturated, with titles like "What We Lose In Our Child-free Culture." And she has helped make National Review Online what it is; her biggest scoop there was that Elizabeth Warren had plagiarized some book, which showed great ambition and a nose for news even if it turned out not to be true. Most of her other NRO work was stuff like "RNC Makes Two Hires for Outreach to Black Media" and "After Eighty-Three Years of Marriage, Husband and Wife Die Three Days Apart -- though she did get on the homosexuals-are-oppressing-us bandwagon early with "The Gay Marriage Double Standard" last September.

So yeah, she's just the person for the job. And the job is more of the same, with better graphics.

This Kat recently became aware of a, to him, somewhat surprising decision of the UKIPO (BL O/170/14) to stay the allowance of an offer to surrender a patent pending the outcome of a revocation action before the High Court.

For the benefit of those who are not quite so au fait with UK patent practice, surrender of a patent (governed by section 29 of the Patents Act 1977) results in the patent ceasing to have effect as of the date of publication of the surrender (ex nunc). Surrendering is a quicker and more definite way for a patentee to be rid of an unwanted patent than simply allowing the patent to lapse by failing to pay renewal fees. By contrast, if a patent is revoked under section 72, the effect is retroactive and the patent is deemed never to have been granted (ex tunc).

Turning to the case at hand, OR Specific (“ORS”) was the proprietor of EP(UK) 1237494 B (“the Patent”). In a letter of 30 December 2013, the representative for ORS contacted the UKIPO offering to surrender the Patent. In accordance with the statutory obligation, ORS duly informed the UKIPO that Kimberley-Clark Europe Limited (“KC”) had commenced an action for revocation of the Patent prior to the surrender offer being made. Being a curious creature, this Kat poked his moist and highly sensitive nose into the UKIPO’s online file history and found that, in the letter to the UKIPO, ORS stated that KC did not enter into any pre-action correspondence with them and that had KC done so, ORS would have made the offer to surrender earlier in order to avoid revocation proceedings altogether.

Who could delay this offer to surrender?

In any case, the offer to surrender was advertised in the Patents Journal, no opposition to the surrender was filed, and everything appeared to be going smoothly for the patentee. However, the UKIPO Hearing Officer had other ideas. After considering the “sparse” case law on what should happen when a patentee offers to surrender a patent while a revocation action is pending, the Hearing Officer ruled that it would be desirable to bring the offer to surrender into the same forum as the revocation action. The Hearing Officer ordered that the surrender proceedings before the IPO be stayed pending the outcome of the revocation action. The Hearing Officer considered that such an order would not unduly delay the overall proceedings and would not prejudice the patentee’s position, as surrendering would still be an option for the patentee, and that if they have no interest in the Patent they may simply choose not the defend the revocation action (as, if revocation were ordered by the court, there would be no patent left to surrender).

This Kat finds the lack of a clear precedent to follow in these circumstances rather surprising, and the Hearing Officer’s decision has likewise raised an eyebrow. The offer to surrender was not opposed, giving a strong impression that no third party would be adversely affected by any surrender. Subsequent revocation of a surrendered patent would only really change the effective date on which the patent ceased to have effect, and hence this Kat can see no harm in allowing the surrender now, which would give more certainty more quickly.

A hearty Katpat to Fergus Tyrrell for assistance in the preparation of this post.

Kumpulan Formasi Terbaik Top Eleven dan Formasi Anti - Banyak sekali formasi-formasi jitu untuk bermain top eleven, saking banyaknya maka mereka para manager top eleven memberikan trik trik tersendiri dengan mode permainan yang berbeda. Nah maka dari itu disini saya akan memberikan beberapa taktik dan taktik untuk mengalahaknnya secara lengkap.

Menentukan sebuah formasi adalah hal penting dalam

"Penetration Testing: A Hands-On Introduction to Hacking" By Georgia Weidman, is an introduction to the tools and procedures used in the phases of penetration testing and program exploitation. This is an entry level book, which carefully explains each procedure described, making it understandable and repeatable, with industry tools. This book is not a light read however, at roughly 500 pages, it covers a whole lot, from setting up a pen-test lab, the scope of a typical penetration test, social engineering, and even exploit development. The book has high level overviews of the theory of each phase as well as some basic walkthroughs with tools you will use to get the job done. It covers many well known examples, so I think if your already well versed in any particular area you can skip that chapter without too much loss, for example The 'Using Kali Linux' chapter, exploiting ms08_067, or WEP. Overall this is a fantastic introduction to many of the subjects in penetration testing, I'd recommend this for those looking to get into penetration and largly unfamiliar with many of the techniques. This book is probably a little too slow for a penetration tester with experience in these subjects, as it starts off very slow but does get into some fascinating topics by the end. I give this book 5 / 10 stars, despite being a long introductory read, the amount of content that is covered is done in a well explained and easy to repeat manner.

Part 1: The Basics
If you are familiar with these topics I would highly recommend skipping this part of the book, as it is extremely introductory material.

Chapter 1: Introduction and Setup
It covers setting up a complete penetration testing environment and lab, which you will use throughout the book.

Chapter 2: Using Kali Linux
This chapter covers the general linux structure and the special structure Kali. It also includes many command line basics, such as: ls, pwd, cd, man, adduser, su, sudo, touch, mkdir, cp, echo, cat, chmod, nano, vi, grep, sed, awk, apt-get, service, ifconfig, route, netstat, nc, and crontab.

Chapter 3: Programming
This chapter covers simple programs in Bash, Python and C. It goes over examples such as ping sweeping, connecting to a port, and passing variables.

Chapter 4: Using the Metasploit Framework
This chapter goes over the basic use and options of the Metasploit command line. It is likely for total newcomers to MSF, as it goes over the very basics such as selecting an exploit module, options, the payload and launching your first exploit.

Part 2: Assessment

Chapter 5: Information Gathering
This chapter covers general OSINT, port scanning, and gathering key information about the target. It uses such tools as: whois, nslookup, host, The Harvester, Maltego, nc, and nmap.

Chapter 6: Finding Vulnerabilities
This chapter is all about vulnerability identification. It covers such tools as: nmap, Nessus, Metasploit scanning, Nikto, cadaver, and nc SMTP VRFY scanner.

Chapter 7: Capturing Traffic
This chapter starts on passive eavesdropping and fundamental networking protocols, then moves on to powerful man in the middle attacks. It covers such tools as: Wireshark, arp, ip_forwarding, arpspoof, dnsspoof, ettercap, and sslstrip.

Part: 3: Attacks

Chapter 8: Exploitation
This chapter dives right back into Metasploit. This chapter goes over exploiting services, websites, and doing things like dumping a windows SAM file. Covering things such as MS08_067, msfvenom, ftp, nfs, and ssh backdoors.

Chapter 9: Password Attacks
This chapter is all about password policy, cracking passwords, and bruteforce attacks. It goes over techniques involving generating wordlists, dumping a SAM file for windows hashes, and basic hash cracking. It covers tools such as:  RockYou wordlist, CeWL, crunch, hydra, JohnTheRipper, and Windows Credential Editor.

Chapter 10: Client-Side Exploitation
This chapter largely discuses ways to get around firewalls through egress port testing payloads, browser executables, and trojan executables. This chapter discuses various Metasploit exploits and payloads that focus on the client, including a cool attack against WinAMP, where the client loads a trojan MAKI config file.

Chapter 11: Social Engineering
This is a great chapter following Client-Side Exploitation because it gives you multiple means of getting your client-side payload over to the victim. It details techniques such as spear-phishing, and doppelganger websites using the very popular tool SET.

Chapter 12: Bypassing Antivirus Applications
This is a great chapter, as Georgia shows many techniques to bypass antivirus, then get's creative by wrapping and re-compiling many of the executables she builds in Python and C. This chapter covers tools such as: msvenom, VirusTotal, Hyperion, and Veil.

Chapter 13: Post Exploitation
This is probably my favorite chapter in the whole book because Georgia takes all of that access previously gained to the next level. Here she show how to elevate privileges, add persistence mechanisms, and pivot through systems. This chapter covers tools such as: Meterpreter, RailGun, Windows UAC bypass, searchsploit, WinSCP exploits, PSExec, SSHExec, Incognito, SMBcapture, route, and proxychains.  

Chapter 14: Web Application Testing
This is a very broad chapter and there are certainly a lot more comprehensive introductions to web app pen-testing, but overall this one does a good job of covering the basics such as using a manual proxy, injection attacks, file inclusion vulnerabilities, command execution and cross-site scripting. It covers tools such as: Burp, sqlmap, BeEF, and w3af.

Chapter 15: Wireless Assessments
This chapter covers basic wireless assessment techniques, such as cracking WEP, WPA2, and WPS. It covers tools such as: aircrack-ng tools and bully.

Part 4: Exploit Development
These are great chapters and I'm really glad Georgia included this stuff in the book, as most security practitioners don't learn these techniques until later in their education. I believe learning this stuff at an introductory point will give the penetration testers much deeper insight into what is going on when they launch an exploit.

Chapter 16: A Stack-Based Buffer Overflow in Linux
This chapter starts by discussing memory layout and registers, as well as things like DEP and ASLR. It goes over building a basic buffer overflow in c, compiling it, and exploiting it. This chapter is also a great introduction to GDB.

Chapter 17: A Stack-Based Buffer Overflow in Windows
This chapter looks at the classic example of exploiting a buffer overflow in WarFtp, searching for gadgets with Mona, building shellcode with msfvenom, and turning assembly instructions into shellcode w/ metasm.

Chapter 18: Structured Exception Handler Overwrites
This chapter focuses on exploiting SEH when used in programs. This chapter covers many vital techniques in exploit development, such as ROP, SafeSEH bypass, and using a short jump instead of an egghunter.

Chapter 19: Fuzzing, Porting Exploits, and Metaslpoit Modules
This chapter roughly covers code review, fuzzing, and debugging a crash. This chapter also covers using public exploits for your own means, building a Metasploit module and common exploit defenses.

Part 5: Mobile Hacking

Chapter 20: Mobile Hacking
This chapter is awesome because it covers Georgia's own Smartphone Pentest Framework.  It steps through exploiting a device, getting persistence, pivoting, and even scanning from the phone. it's a pretty awesome framework, so I suggest you check it out and exploit some droids. The framework also has some good tools for inspecting APKs, like drozer, but doesn't highlight this tool in the book.

Overall, it's a great book on infosec, detailing a large sum of computer penetration testing and exploitation. Due to the breadth it covers it never dives too deep into any particular subject, except perhaps it's heavy use of Metasploit throughout the book. "Penetration Testing" does a fantastic introduction and walkthrough of many core techniques and tools. Although I won't likely reference this book often as a professional pentester, I would use it as an introductory book for a class. This book is great for anyone learning the practice as it allows them to set up and exploit a real environment throughout, providing guidance and wins that every hacker needs to get started.

Patrick has just finished uploading his latest work for Slackware-Current branch that indicates next development cycle for next Slackware release is now officially started.

In this batch of update, he upgraded GLIBC to 2.19 and the Linux Kernel to 3.14.3, the latest version available at this time. There are several new packages as well in networking area, such as libnftnl and nftables which is the future potential replacement for iptables.

There's also a fix on bash-completion so that it's working well with newer bash 4.3.

I still don't see GCC gets upgraded at this time, but hopefully GCC 4.9.0 could make it into -current soon.

Start your current engine and start testing guys :)