Archive for the 'Security' Category


Testing your firewall for open ports

Friday, August 12th, 2005

For several years now I’ve used a neat tool at Gibson Research to test a clients firewall quick and easy from the web browser. They have a tool called Shields Up that does a limited port scan to determine of network ports are open, closed or “stealth”.    Send article as PDF   

WordPress 1.5.1.3 Security Vulnerability

Friday, August 12th, 2005

According to the entry for WordPress 1.x at Secunia.com, there is a “Highly critical” WordPress vulnerability announced August 10th that affects all 1.x versions including 1.5.1.3 The details are in this advisory. There is not yet an updated version of WordPress to address the issue, but there is a possible workaround.    Send article as […]

Exploits in the wild and other news

Friday, August 12th, 2005

After perusing the Sans.org handlers diary, there are a few things brewing that should be known. Exploits are in the wild for some of the vulnerabilities addressed by this weeks Microsoft patchfest. There is a Veritas Backup Exec vulnerability and it appears that the Beta of Vista has a network service that might be nice […]

Phishing Phax ????

Thursday, August 11th, 2005

The Register is reporting that a new phishing email is taking a different twist. Instead of directing you to a website, they instruct you to fax your information to a number in the email. (I wonder if phone numbers are harder to track than web servers?)    Send article as PDF   

Identity theft

Thursday, August 11th, 2005

So, you don’t click on “phishy” links, keep your pc free from spyware, only bank at secure websites, do all the good things a cautious computer user is supposed to do to keep from having your identity stolen. Your safe right? Not entirely. I just found this in the Security Fix… Verizon Wireless Fixes leaky […]

Sunbeltblog has more info on the identity theft keylogger and will offer removal tool

Thursday, August 11th, 2005

There another two fascinating posts in the saga of the massive identity theft that was reported in the Sunbelt blog. For starters they detail the beast here. It sounds truly devious, MAY still be related to coolwebsearch after all. It turns off Windows firewall and runs through Internet Explorer (thereby bypassing any other software firewall.) […]

Anti-phishing tool

Wednesday, August 10th, 2005

I had run across a link that netcraft was trying to combat phishing schemes and I didn’t have time for a detailed look at the time. I’ve since revisited and found their Netcraft toolbar. I’m impressed, it installs in either Internet Explorer (under Windows), or Mozilla Firefox (all platforms.)    Send article as PDF   

Brian Krebs talks to the FBI on cybercrime

Wednesday, August 10th, 2005

Just found this interesting post at the Security Fix. It seems Brian has had a chance to ask a question of the FBI director Robert Mueller and to speak with the assistant director in the Cyber Division. There are some interesting answers to his questions.    Send article as PDF   

Summary of the windows patches

Wednesday, August 10th, 2005

Over at the Sans Institute (incidents.org), they have a round up of yesterdays windows updates a summary of their severity and some details about some of the problems (one had an invalid signature and had to be re-posted.)    Send article as PDF   

Raft of Microsoft updates out – time to get updating

Tuesday, August 9th, 2005

The promised batch of windows updates for today are now out and it turns out there were 3 critical updates out of the 6 released. It looks as though the biggy is an RPC problem with the plug and play system (Plug and play needing a remote procedure call?) This is one that could likely […]

Google
 
Web www.averyjparker.com