ramblings on various information security topics

Here are today's Interesting Information Security Bits from around the web.

1. Looks like CompTIA is creating a more advanced security certification to build on their Security+ certification. They are looking for some feedback via survey. Help'em out.
   A new advanced security certification from CompTIA -- Fill the survey
   Tags: ( certification comptia )
2. Ever wondered what the bad guys can get if you have a site with a local file inclusion vulnerability. Potentially everything. o_O Check out this post for a walk-through.
   .: ciphermonk research :. >> Blog Archive >> Case Study: LFI to Shell
   Tags: ( vulnerability attack )
3. This is pretty cool. The Diaspora project, an open source Facebook, is due to release on September 15th.
   Thoughts of a Technocrat: Facebook Alternative Diaspora Launches September 15
   Tags: ( facebook diaspora )
4. A new way to tell browsers that they should only use HTTPS to access a site.
   HTTP Strict Transport Security at Mozilla Security Blog
   Tags: ( firefox https )
5. I read a lot of science fiction. I find it very disturbing that more and more of the things I read in novels about tracking the population are becoming true in the real world. I understand the thought processes that can get us where we appear to be heading, but we must be very careful that we don't go too far.
   Schools to Experiment with Tracking Students with RFID Chips
   Tags: ( privacy rfid )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

{ 0 comments }

Here are today's Interesting Information Security Bits from around the web.

1. Pay attention folks. Deployment is extremely important when implementing a wireless solution. Read this post and you'll understand why.
   Wi-Fi Convenient, but Dangerous << IT Expert Voice
   Tags: ( wifi )
2. There is a new group meeting to discuss information security topics in a casual setting on a monthly basis in Dublin, Ireland. Check it out if you are in the area.
   The Dublin Security Group << Security Ninja
   Tags: ( general )
3. In the words of Hal Pomeranz who tweeted about this. "This is cool." It is. Very.
   Digital Forensic Analysis Methodology (PDF)
   Tags: ( forensics tools )
4. The folks at Securosis have released their SIEM/Log management white paper. Their stuff is always great. You should check it out.
   Securosis Blog | White Paper Released: Understand and Selecting SIEM/Log Management
   Tags: ( siem )
5. Hmm, interesting what Apple considers non-personal information and also what they say they can and will do with it.
   Non-Personal Information - like where you live?
   Tags: ( privacy apple )
6. Matt shares his favorite nmap scripts.
   Favorite nmap NSE scripts | Attack Vector
   Tags: ( nmap )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

{ 0 comments }

Here are today's Interesting Information Security Bits from around the web.

1. If you are thinking cloud, you need to read this.
   Hoff's 5 Rules Of Cloud Security... | Rational Survivability
   Tags: ( cloud )
2. Rob has penned a post about a) figuring out if a career in digital forensics is for you and b) some times on how to get started. Good stuff.
   Getting Started in Digital Forensics: Do You Have What It Takes?
   Tags: ( forensics career )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

{ 0 comments }

Here are today's Interesting Information Security Bits from around the web.

1. Drazen has a very good suggestion for all of us in the information security profession. We should all be writing End of Year State of Security Reports regardless of you role.
   Beast Or Buddha >> Blog Archive >> Security Manager/Management - End of Year State of Security Report
   Tags: ( general )
2. This looks like it could be an good tool to have in the old tool box.
   FGET v1.0 Goes Live!! | HBGary
   Tags: ( tools forensics )
3. This post applies to information risk management too. I am still working through it, but it is very interesting.
   Cox's risk matrix theorem and its implications for project risk management << Eight to Late
   Tags: ( risk )
4. Here are some thoughts on improving ATM (Automatic Teller Machine) security.
   10 Tips to Improve ATM Security
   Tags: ( atm skimming )
5. Alex offers some interesting points to think about in the private vs public cloud debate.
   Verizon Business Security Blog >> Blog Archive >> Cloud Computing & Polycentric Risk Tolerances
   Tags: ( cloud )
6. Searches for these 10 celebrities are most likely to return links to malware.
   Top 10 most dangerous celebrity searches
   Tags: ( malware )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

{ 0 comments }

Here are today's Interesting Information Security Bits from around the web.

1. Lee offers some thoughts on mentors.
   Career Advice Tuesday = "How Did You Find Your Mentor" : Information Security Leaders
   Tags: ( mentors career )
2. If you are in the Cleveland, Ohio area, you should check out this hacking contest taking place on September 22nd. It is open to the public and free, you just need to register. Looks like a lot of fun.
   Hurricane Labs Hack Challenge
   Tags: ( challenge )
3. From the site: "The Journal of Digital Forensics, Security and Law published its first issue in the 1st quarter of 2006 and is now calling for papers in, or related to, the following areas for Volume 5 (2010).." The list of target areas is pretty big. Check it out.
   Journal of Digital Forensics, Security and Law Call for Papers
   Tags: ( cfp )
4. From the site:ForensicArtifacts.com was built to become a repository for useful information forensic examiners may need to reference during the course of their analysis. Requests for artifacts of system files, programs, and malware are very common to see on computer forensic mailing lists and forums. This site strives to take the place of those requests and become a one-stop shop when it comes to forensic artifacts.
   Artifacts | Forensic Artifacts
   Tags: ( forensics )
5. LockCon 2010 in happening for those of you interested in physical locks and such.
   LockCon 2010 "the winner takes it all" << Blackbag, Barry's weblog
   Tags: ( lockpicking )
6. The Security Shoggoth points out that you may only get one chance to grab that malware sample you want to explore.
   The Security Shoggoth: You never get a second chance...
   Tags: ( malware )
7. Richard is giving a talk at VizSec 2010 next month on Security Visualization and its usefulness in production. To support his talk, he is looking for some real world examples of visualization's use. Help him out.
   TaoSecurity: Do You Use Visualization in Production?
   Tags: ( visualization )
8. Leave it to Shrdlu to come up with the Lopsided Pyramid of Pain[tm].
   Span of Control
   Tags: ( general )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

{ 0 comments }