Archive for February, 2009

Adobe Acrobat 0-Day

There is an Adobe Acrobat +Reader exploit now circulating in the wild.  Adobe has stated they may not have a patch for several weeks.  You can protect yourself in the meantime by disabling Javascript within Acrobat.  See below:

Hackers have been exploiting a critical bug in Adobe Reader, the popular PDF-viewing software, for at least nine days, researchers said Friday, but a patch may not be ready for another three weeks.

To disable JavaScript in Adobe Reader, Windows users should select “Preferences” from the Edit menu, then click on “JavaScript” in the ensuing list and uncheck the box marked “Enable Acrobat JavaScript.” Mac users will find Preferences under the “Adobe Reader” menu.

adobe_js

Original System7.org Flash Video

I was browsing old hard drives today and secure wiping those that could be recycled.  I came across a very old flash video that someone made for System7.

You can check it out here: System7 Retro Intro

TrueCrypt: Avert Employer’s Computer Policy

Would you like to store personal data on an employer owned computer?  Does your employer have a policy about what can be stored on their machine?

To protect yourself from employer remote software/inventory scans (as well as a ton of other encrypted related uses) download TrueCrypt:

http://www.truecrypt.org/

It will allow you to create an encrypted container.  So lets say you need 1GB for your mp3′s.   This program will make a 1GB file  and when you put in your password that file becomes another hard drive on your computer.   Then when you’re done or turn off the computer that extra hard drive goes away until you mount it again using your password.

Think of this as a FREE encrypted virtual thumb drive — (as long as you have a tough password)

Read the rest of this entry »

That’s a lot of CPU’s….

We just got a new machine at work. Check out this Task Manager screen shot (no photoshop here!)
horsepower

Your Thoughts: Ad-hoc Monitor Port on WRT54G

I would like to run Snort and Bot Hunter on a spare Linux machine on my home LAN.  My local network uses the very common Linksys WRT54G wireless router.  Therefore I have a switched network which makes it very difficult to perform any type of network sniffing.

I’m asking for your thoughts and feedback to solve this problem.  Right now I’ve come up with the following solutions:

  • Connect a hub to the router’s WAN port.  Connect my cable modem and linux machine to the hub.
  • Install DD-WRT on the Linksys router.  Does DD-WRT yet support span / tap (monitor) ports?
  • Install two (2) NICs on the linux machine and route my cable modem through that before connecting to the router.
  • Buy an affordable Cisco 2600 router off of eBay.

Please share your ideas and thoughts on the subject.

Ford (Microsoft) Sync: WOW

I had the chance to ride in a friend’s Ford Fusion over the weekend – first time in this car. The Fusion is one of a handful of automobiles that features Ford Sync which was developed through a partnership by Ford and Microsoft. My Fusion experience was simply incredible. I’m in the market to buy a new car and was heavily leaning towards purchasing a Honda Civic Si Sedan — but no more! The Ford Sync technology is making me reconsider my decision (not to mention that Consumer Reports loves the Fusion).

Ford Sync handles the external audio input — usb or headphone jack. It also features a bluetooth receiver to work with your cell phone. First, my friend told his car “play nirvana” and Sync randomly selected a nirvana song on his mp3 player. It appears that Sync has internal memory that catalogs the media on your mp3 player. While we were driving the car speakers started playing a telephone ringing. My friend pushed a button on his steering wheel and answered the phone – it was his wife! I can see where having your car stereo morph into a cell phone would be great for long commutes. The voice recognition of Sync is also amazing. It never once hesitated when we gave it a command. My friend instructed Sync to call someone and we soon had them on the line. It also turns out that Sync 2.0 will read SMS (text) messages and interpret acronyms i.e. LOL.

Cadillac, Benz, BMW and other luxury cars have had bluetooth receivers built in for some while but they can’t compete with Sync technology in a Ford Fusion with MSRP $19,035.


ford-microsoft-sync