Lost+Found: Hierarchies, block lists, revenge, Rescue CD and random numbers

Too short for news, too good to lose; Lost+Found is a round up of useful security information. Today, Hierarchies, block lists, revenge, Rescue CD and random numbers.

• At this year's FOSE conference, a US government IT trade show, the FBI has published a list of the top ten positions in cyber criminal organisations. At the top of the list were coders and programmers who write the exploits and malware, followed by the distributors that trade or sell the tools, botnet's and stolen data. The technical experts that maintain the criminal enterprise's IT infrastructure ranked third on this list.
  

• What good are signed installation files if the system doesn't check to see if their certificates have been revoked or blocked? Apparently, by default, Symbian S60 phones aren't configured to check for revoked certificates.

• No honour among thieves: because fraudsters that bought a web panel Bot called “v0id Bot” felt cheated, they posted the bot-pack online for public access. Then, according to Kaspersky, someone posted details of how anyone else could control the bot by simply changing some of the binary code.

• AVG Technologies, the company behind the popular AVG Free anti-virus, has released a Rescue CD for rescuing and repairing infected systems. The Linux-based CD is available to download as a 70 MB ISO image file and includes a virus scanner and various Linux utilities.

• The truth behind /dev/random: comic from xkcd

(crve)