Interesting Information Security Bits for 07/28/2009

Good afternoon everybody! I hope your day is going well.

Here are today's Interesting Information Security Bits from around the web.

1. Raf interviews Andre Gironda.
   Digital Soapbox - Preaching Security to the Digital Masses: 31337 Spotlight: Andre Gironda
   Tags: ( interview )
2. Here is the solution and winners of the third PandaLabs challenge.
   3rd Panda Challenge solution & winners - PandaLabs
   Tags: ( challenge )
3. Forcing HTTPS sounds good. It will be interesting to see how this shakes out.
   Locking up the valuables: Opt-in security with ForceTLS at Mozilla Security Blog
   Tags: ( webappsec )
4. Version 1.0 of Project Quant, a project to develop a patch management framework, has been released along with the survey results.
   Project Quant Version 1.0 Report and Survey Results
   Tags: ( patching )
5. Part 3 of Ax0n's recipe for evilness.
   HiR Information Report: Evil Wifi Part 3: Hamster & Ferret
   Tags: ( wireless hacking )
6. Cutaway has a very interesting post up about malware that resides in the registry. He points to a couple other posts that are worth reading too. This is very cool...scary...but very cool.
   Security Ripcord >> Blog Archive >> Malware IN Registry a.k.a If It Can't Be Done, Why Am I Looking At It?
   Tags: ( registry malware )
7. Be careful what information you are sharing in something as basic as email headers. That stuff can be used against you.
   Looking beyond the surface ... << The Security Kitchen
   Tags: ( data-leakage )
8. Martin points out some basic truths you should be aware of.
   Incident Response Leadership: Basic Truths : The Security Catalyst
   Tags: ( incident-response )
9. You should do what Jack says. Go read the post he points you at and then send it to your friends and family.
   Uncommon Sense Security: A good primer on Social Networking and Security Risks
   Tags: ( social-networks )
10. Folks, regardless of what the NYSE says, details about your infrastructure, patch levels, software versions, etc. is sensitive information.
    Data Detailing New York Stock Exchange Network Exposed on Unsecured Server | Threat Level | Wired.com
    Tags: ( data-leakage )

That's it for today. Have fun!

Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.

Kevin

Tagged as: challenge, data leakage, incident-response, interview, malware, patching, social networks, webappsec, wireless