Researcher shows how to strike back at web assailants
Exploiting the exploiters  A security researcher has disclosed
details on more than a dozen previously unknown vulnerabilities
that people responding to web-based attacks can exploit to
strike back at online assailants.  The bugs reside in off-the-
shelf crimeware kits that go by names such as Eleonore, Liberty,
Neon, and Yes. Attackers install them on compromised websites to
streamline the process of exploiting unpatched vulnerabilities
on the PCs of people who visit them.  It has long been known
that some of the exploit kits are themselves susceptible to
attacks, and on Thursday Laurent Oudot, CEO of French security
consultancy Tehtri-Security, detailed 13 bugs that can be
exploited to turn the tables on the criminals running the
software. They make it possible for law enforcement agents and
other investigators of online attacks to destroy command and
control servers, identify the miscreants, and in some cases even
launch client-side attacks against the