Good afternoon everybody! I hope your day is going well.
Here are today's Interesting Information Security Bits from around the web.
- OT, but very cool. Make your own QR code temporary tatoos.
QR Code Temporary Tattoos Howto | The Guerilla CISO
Tags: ( general ) - I think I pointed to something about this a bit ago, but here is more on chip and pin having issues.
Light Blue Touchpaper >> Blog Archive >> Chip and PIN is broken
Tags: ( chip-and-pin ) - Fun stuff here. Using WCF to scan inside the perimeter.
Abusing WCF to Perform Remote Port Scans - Gotham Digital Science
Tags: ( scanning ) - Dave opines about 5 reasons your security program may be struggling.
ShackF00 >> 5 Reasons Your Security Program is a Failure
Tags: ( general security-program ) - Just in case you were not aware of it, OWASP has a broken web application project. It's a VM with vulnerable apps.
owaspbwa - Project Hosting on Google Code
Tags: ( webappsec education ) - Join the rant against the term "best practice." Drives me nuts, just like it does Adam.
Best Practices for Defeating the term "Best Practices" << The New School of Information Security
Tags: ( general ) - Josh has some good point about social networking and its use are work.
Josh More - Starmind Blog >> Should we allow our employees to engage in social networking?
Tags: ( social-networking ) - Check it out if you are in Europe or have a really big travel budget.
Pimping the Security Non-Cons: Troopers 2010 | Rational Survivability
Tags: ( conferences ) - Some cool and interesting stuff going on in the A6 world. Check out Chris's post about A6 and CloudAudit.
The Automated Audit, Assertion, Assessment, and Assurance API (A6) Becomes: CloudAudit | Rational Survivability
Tags: ( cloud a6 cloudaudit ) - Fun with social engineering and Metasploit.
Social-Engineering Toolkit (SET)
Tags: ( social-engineering metasploit ) - .:[ Layered Security ]:.: 802.11n card that works with BackTrack 4 - woohoo!
Tags: ( backtrack tools wireless ) - Security-Shell: NoMore AND 1=1 - Web Application Testing Tool released
Tags: ( webappsec sql-injection ) - 7 Things Every Information Security Professional Should Know -- My Information Security Job
Tags: ( careers )
That's it for today. Have fun!
Subscribe to my RSS Feed if you enjoy these daily Interesting Bits posts.
Kevin
{ 0 comments }