Green Dam hackers.

The Chinese government has mandated that all computers in the country must have the screening software installed.

This obviously bring about many security issues, such as - if the applications installed are not secure? This could leave the whole of China exposed to being compromised.

Security doesn't seem to phase the government too much. We have already seen an exploit released for one of the applications to be installed(released 2009-06-12) Green Dam.

The Green Dam software filters content by blocking URLs and Web site images and by monitoring text in other applications.

From Exploit:

"Green Dam is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs. Now it already has 50 million copies in China.

In order to monitor the URL that user is exploring, Green Dam injected the browser process. When Green Dam is trying to handle a long URL, a stack overflow will occur in the browser process.

This exploit can be used for exploitation on IE, on those computers installed Green Dam. I used the .net binary to deploy shellcode, for it`s more stable than Heap Spray, and able to bypass DEP and ASLR on Vista."

*sigh*

In other News Dino and I will be going through to Botswana next month, to keynote at a conference. We will provide you with more information soon.

Take care.