Be in a book about computer security

Martyr

The project will be
started from 1st Jun 2006,
until the deadline of paper submission, which is located at 1st April 2007.
The paper is requested to be,

1. Clear in term of the methodology and the appropriate descriptions
2. Show some snap-shot of the output result, error, or exception
3. Mention the testing configuration and platform in detail
4. Try to avoid any of coding mistake which can cause compilation error

Remarks:

1. The payment of this project is in China currency. You will have options
to get the payment as personal income or donate it into the charity fund
which is managed by XFocus China. The fund is about to contribute the rural
children with better educational facilities. For further details, you can
refer to the following site:

http://hope.xfocus.net/

2. The submitted paper will be published in original format.

3. Please attach your personal details (name, biodata, nick-name,
organization, home-page, country, and etc.) in your acknowledgement email.
These information are requested by the publisher for record purpose.

Finally, I want to express my special thanks to your participation and
contribution to this book writing project. I am so proud to have chance to
work with you all technical folks in the coming time.

p/s:

The book title is named as "Network Security Technology", which is
comprising 5 technical topics:

1. Personal privacy and security protection
2. Secure coding
3. Operating system security
4. Vulnerability search and analysis methodology
5. Virus and malware technology

ecksor

Did you get this via e-mail?

Martyr

Did you get this via e-mail?

aye, never looked it up online, but it felt dodgy from the start.

in january i posted a small windows shellcode here
http://www.milw0rm.org/shellcode/1444

i started getting heaps of spam because my email address was in that source.

the first email from this person looked like spam anyway..but i gave it the benefit of the doubt out of genuine interest & replied with a little humour.
Then after about 3 or 4 emails later, i got the above

meant to ask what everyone thought of it aswell.
i'm really interested if its genuine, but i'm not sure what to make of it.

DOLEMAN

Average Joe wrote:

You will have options
to get the payment as personal income or donate it into the charity fund
which is managed by XFocus China. The fund is about to contribute the rural
children with better educational facilities. For further details, you can
refer to the following site:

http://hope.xfocus.net/

This charity bit strikes me as very strange. If I had to take a guess, this is a teenager who wants this book written (hence the Charity idea - slightly childish IMO!) or a scam, hoping you'll write the book for free.

Sounds dodgy anyway...

Blowfish

Why exactly would a publisher need to know your nick-name as part of your details??

For that matter, why doesn't it give any info on the publisher, surely they would be pimping themselves, or at least mention who it is?

And surely 'avoiding any of coding mistakes' would be a given?

Blowfish

hmmm, just discovered that xfocus is a chinese hacking group....nuff said

Zapho

Man, that was the most ironic email ever.
Be in a book about computer security which deals with topics such as "Personal privacy and security protection" and they expect you to send them all your personal details?!
Thats just freakin brilliant! Anyone who falls for that deserves whats coming to them!

Martyr

Anybody here interested in writing an article for this?
it is real, open to anyone because i checked http://hope.xfocus.net/

i've started looking at 'target' applications but i don't want to say what.
tryin to get some software crackers on board.

anyone here, even if you've never reverse-engineered software, you could still be of great help on where to look & what to look for as a potential vulnerability, as this is something i'm only really beginning to learn about.

i can read assembly quite well though, so someone with expertise recognising software weakness could help me know what to look for.

Black Swan

Very suspect. Especially wanting personal details. Maybe ID theft or who knows?:rolleyes:

gline

all sounds very fishy