Security 101
Dec.17, 2008 in
Others
source: http://www.xkcd.com/
Entries for December, 2008
DNS Pharming Attacks Using Rogue DHCP
Dec.05, 2008 in
Vulnerabilities
Attack is not new but it looks like it its becoming popular… Symantec reports:
a Trojan installed on an infected machine runs a rogue DHCP server on the local network and serves bogus DHCP packets to other machines when they request a new IP configuration. If the Trojan is fast enough in sending out these [...]
Polippix CD - A way to enhance your online privacy
Dec.04, 2008 in
Privacy, Security Tools
When I posted the earlier article about cyber-snooping fears, I was wondering how one could use a potentially compromised OS more safely and came across Polippix.
Polippix is a bootable CD created in Denmark as protest for what the creators believed is a far-reaching government snoop in the guise of fight against terror.
Interested? Included on the [...]
Cyber-snooping fears over government-issued OS
Dec.04, 2008 in
Identity Management, Linux, Security Tools
Chinese authorities are reportedly mandating that a Chinese developed OS called Red Flag Linux be installed in Internet cafes in a city in southern China. The action is meant to crack down on piracy, though some are not buying it, suspecting it is part of a scheme to snoop on and stop undesirable activities - [...]
2008 IT Security Threat Summary - Malware tops by far
Dec.03, 2008 in
Cyber-Crime, IT Law, Malware, Security Monitoring, Vulnerabilities
F-Secure has published the IT Security Threat summary for the second half of 2008.
Summary:
Growth in amounts of malicious software
Growth in infections
Growth in the number of botnets
Growth in criminal profits
Call for growth in punishment
Highlights:
On Botnets infections
During 2008 our Response Lab conducted a small research project focusing on approximately 60 orphaned botnets. Listening to the communication attempts [...]
Online payment site hijacked by crime gang
Dec.03, 2008 in
Cyber-Crime, Data Loss Prevention, Digital Forensics, IT Law, Identity Management, Vulnerabilities
The Register has reported that an online payment service mycheckfree.com has lost control of at least two of its domains to a crime gang believed to be based in Eastern Europe.
Possible explanation?
It’s also unclear how the culprits managed to hijack the domains. While security experts say DNS poisoning wasn’t out of the question, the more [...]
Know the law so you don’t break it
Dec.03, 2008 in
Book Reviews, Others
In Alaska
It is against the law to look at a moose from an airplane
In Arizona
It is illegal to drive a car in reverse in Glendale
In Arkansas
It is illegal for a man to beat his wife more than once a month
In California
No vehicle without a driver may exceed 60 miles per hour
In Switzerland (not Sweden)
It is [...]
Volunteer researchers needed - Honeypot project
Dec.02, 2008 in
Cyber-Crime, Digital Forensics, Pentesting, Privacy, Security Monitoring, Security Tools, Vulnerabilities
SANS Internet Storm Center is currently developing a web honeypot project much like the Dshield project.
Volunteer researchers are needed for the next 3 months. Request is made for 70 hours per volunteer for the next 3 months.
Skills needed (up to 4 from the list is welcome):
PHP coding
SQL
Apache
Understanding of HTTP
IIS
Technical writing (documentation)
Experience with various open source [...]
Brain ‘fingerprinting’ - the future of airport security?
Dec.02, 2008 in
Identity Management, Privacy, Security Monitoring
Keep your belt and shoes on, move swiftly through airport security carrying your hand luggage (carry-on cases) all in some 30 seconds!
That is the aim for a new so-called “paradigm shifting” security technology aimed at boosting airport security without the long waiting lines, CNN reports. But there is a price. You will be scanned for [...]
Malware successfully installed. Click OK to Finish!
Dec.01, 2008 in
Corporate Espionage, Cyber-Crime, Digital Forensics, Disclosure, Vulnerabilities, Windows
An article by Zdnet’s Zero Day blog discusses the current spread of malware via the Windows Autorun functionality - USB being the main transport agent.Talking about the malware, it notes:
Their functionality varies. It started out with online games password-stealers targeting World of Warcraft, LineAge and others. But over the last months, we’re seeing malware being [...]