Security musings (reflectorium)
Security musings (reflectorium)
First LSASS (MS004-011) worms out
http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.afj.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.afc.html
The fact that hackers seem to reengineer the patches very quickly now, which leads to a much smaller patch-to-outbreak window, doesn't make life easier.
(0) comments
Mail Non Delivery Message DDoS Attacks
I'm afraid not everyone will be a good neighbor and we'll see trouble ahead.
http://www.techzoom.net/paper-mailbomb.asp
(0) comments
Reading Email headers (to get spammers)
Here's a nice tutorial on reading the different lines.
http://support.chartermi.net/tc/chartermi_support/email_headers.shtml
(0) comments
News toys for the trusting
http://wormradar.com/ aims to get a network of worm honeypots up with centralised reporting.
(0) comments
Calculating Security ROI Is a Waste of Time
Nice
article over at TAOSecurity .. Hopefully this heralds a general paradigm/buzz word change..
(0) comments
Using Knoppix 3.4 and F-Prot to clean machines
http://www.fz-juelich.de/zam/net/security/infos/antiviren/zamread4-fprot.txt
fprot Virus Scanning With A Modified Knoppix Cd
- actually, with the Knoppix 3.4 c't edition it is quite easy - choose Software Live Install from the Knoppix tab..
(0) comments
File type blocking or - attachment types you'd like to block in mails
There's a very good article at
http://www.winnetmag.com/Articles/Print.cfm?ArticleID=27072, which contains a link to a good
table. - File types considered unsafe by Microsoft im mail attachments can be found at
http://support.microsoft.com/?kbid=290497
Also, good (and different) information at
http://www.shelbycs.org/techtips/virusblock.html
(0) comments
Federal Agency Security Practices (FASP)
at
http://www.iwar.org.uk/comsec/resources/fasp/nist.htm has good sample documents.
(0) comments
Open Source Vulnerability Database
at
http://www.osvdb.org/
(0) comments