Monthly Archives: January 2010

Determining the optical cluster size for your volumes

If you’re like most people then you have a separate partition where you store your data (mp3s, torrents, software, movies etc).  Most people set these partitions up with the default settings (NTFS, 4kb cluster size).  However, in most cases the … Continue reading

Posted in hardware & software | Leave a comment

Google privacy video’s and privacy podcast

On the way to work this morning I was listening to the Silver Bullet podcast interviewing Dr. Lorrie Cranor (Comp Sci professor at Carnegie Melon).  I recommend listening to this episode if you’re at all interested in privacy in the … Continue reading

Posted in news, privacy | 1 Comment

Malware authors: Best storage / hiding locations

Have you just injected a running process’ memory?  In most cases, unless your an adept author and have written a root-kit you want your malware to remain persistent via auto-run, registry, start-up etc.  Where do you store your persistent launcher?  … Continue reading

Posted in malware, security | Leave a comment

Quickly assess your PHP infrastructure security: PHPSecInfo

From their homepage: PhpSecInfo provides an equivalent to the phpinfo() function that reports security information about the PHP environment, and offers suggestions for improvement. It is not a replacement for secure development techniques, and does not do any kind of … Continue reading

Posted in pentest, security | Leave a comment

National Security Agency recruiting

I’ve been reading Stephen Levy’s Crypto which gives a nice history of public cryptography (vs. private crypto which has been around much longer) and follows Whit Diffie at least in the chapters I’ve read so far.  I will post a … Continue reading

Posted in news, security | Leave a comment

Security news, feeds, and alerts

I found a comprehensive list of Security news[letters], feeds, and alerts here: http://www.gideonrasmussen.com/news-alerts.html It’s definitely worth checking out as  I found a few lists that I wasn’t aware of. FYI – Here’s my personal list of favorites (in no particular … Continue reading

Posted in news, security | Leave a comment

Pay to have your neighbor’s wireless cracked

I just found this article about a new service run by Moxie Marlinspike (from sslsniff fame).  He has created WPA Cracker which uses the cloud (his 100 cpu quad processor cluster) to crack WPA and WPA2 (PSK only) handshake captures.  … Continue reading

Posted in networking | Leave a comment

Defending Security Theater

You don’t hear this much but there’s an interesting article in defense of security theater.

Posted in news | Leave a comment