Archive for the 'Security' Category


That’s bad – data on Nuclear agency workers stolen…

Friday, June 9th, 2006

According to reuters data on US Nuclear Safety Administration employees (*some 1500) was stolen in a computer cracking incident.    Send article as PDF   

Windows 98 won’t see the MS06-15 patch

Friday, June 9th, 2006

It turns out that Windows 98 is just too hard for Microsoft to support with a security patch for MS06-15 now. The official support period ends in July, but they’ve announced that this one won’t be getting a patch as the changes would be just too substantial. Some of the mitigation suggestions involve using restricted […]

Bye bye ethereal — hello wireshark

Friday, June 9th, 2006

Ethereal has quite a reputation for itself, I’ve used it in analyzing traffic on the home network and experimenting with virtual images… anyway, it’s a packet sniffer and network protocol analyzer and it now has a new name and new home…. wireshark.org. Apparently the lead developer did not own the rights to the name ethereal […]

Seller Beware…

Thursday, June 8th, 2006

This is a cautionary tale about bank fraud for anyone that sells things. (online or otherwise). A man sold a car online, the buyer sent a check for several thousand more than the buying price. He claimed it was to cover extra shipping costs and for the seller to just wire him the excess which […]

Pretty, shiny usb drive is all it takes to compromise security….

Thursday, June 8th, 2006

Sometimes you just want to cry… This writeup is an example of the “soft underbelly” of every network’s security plan… the users. Basically, you have a group that was hired to do a computer security audit of a credit union. They were told that some of the main concerns were social engineering (easy sharing of […]

Cross browser javascript vulnerability

Thursday, June 8th, 2006

It sounds like this vulnerability would take a great deal of user interaction, but cio-today is reporting on a browser vulnerability that affects pretty much every javascript enabled browser. According to Symantec …. “This issue is triggered by utilizing JavaScript ‘OnKeyDown’ events to capture and duplicate keystrokes from users,” and is a way that the […]

Microsoft June Patch Cycle heads up

Thursday, June 8th, 2006

It’s about that time again folks…. Monthly Microsoft patch cycle – June patches will be released on the 13th (next Tuesday) and it looks like a big batch. There should be 12 patches this time and at least one of the Windows updates is Critical and at least one of the Office updates is critical. […]

Report Phishing Emails/sites

Thursday, June 8th, 2006

By the way, the castlecops dos has reminded me of something that I hope I’ve mentioned before, but will mention again. They have a page castlecops.com/pirt where you can either copy/paste an entire phishing email or provide them with a link of a phishing site. Very useful interface for reporting phishing. Anyway, it’s being added […]

The Great Cyberwar

Thursday, June 8th, 2006

It went un-noticed by most people for a few years. After all, the ones that were affected were just those that were “asking for it”. Where to start. Let’s see, back in the day there were some that sent out messages to other peoples computers and even when people tried to stop getting the messages […]

Bad malware storms brewing

Thursday, June 8th, 2006

ADTMAG.com has an interesting article talking of the convergance of spyware and more sophisticated phishing attacks. They talk about the convergance of viruses and spam engines that happened in 2003 as a real shift in the dynamic of WHERE junk mail was coming from. Today botnets account for about 90% of the spam online, and […]

Google
 
Web www.averyjparker.com