Monthly Archives: July 2010

Cell Phone Evidence Extraction Process Development

Cindy M. wrote this paper and is asking for it to be disseminated.  It will be published in the winter issue of DF Magazine.  Enjoy.

Posted in news | Tagged | Leave a comment

Truecrypt 7.0 Released

Truecrypt 7.o has been released.  One of the interesting new features is it takes advantage of Intel’s hardware accelerated AES.  The new Intel i5 and i7 core’s include additional x86 instructions for hardware based AES block ciphering and key generation.  … Continue reading

Posted in news, security | Tagged , | Leave a comment

Authors need thick skin

Richard Bejtlich has been posting Amazon book reviews like a mad man over on his Tao Security blog.  One of those reviews was for “Digital Forensics for Network, Internet, and Cloud Computing“.  Richard gave the book two stars and one … Continue reading

Posted in news | Leave a comment

SophosLabs Released Free Tool to Validate Microsoft Shortcut

I read this on the Internet Storm Center yesterday.  Sophos has released a tool that will provide detection against the Windows shortcut exploit announced last week (originally being used to exploit Siemens SCADA machines).  Be careful, this is a nasty … Continue reading

Posted in news, security | Tagged , , | Leave a comment

REMnux: Distro for Reversers

Lenny Zeltser, SANS Instructor, has released a customized distribution targeted at malware reverse engineers.  From the REMnux page: REMnux is designed for running services that are useful to emulate within an isolated laboratory environment when performing behavioral malware analysis. As … Continue reading

Posted in forensics, malware, news, security | Tagged , , | Leave a comment

LastPass: My new favorite password manager

LastPass is a cloud based password manager.  There’s no worries as your master password is used to symmetrically encrypt your information before it it sent to LastPass.  You don’t have to worry about passwords lying around unencrypted on your disk. … Continue reading

Posted in news, privacy, security | Tagged | Leave a comment

Maltego 3 creators interviewed

In a recent Exotic Liability podcast (not PG13) Chris and Ryan interview folks from Paterva, the makers of Maltego.  You should definitely try Maltego if you’ve never used it.  They have a free version and it runs on both Windows … Continue reading

Posted in hardware & software, news, security | Tagged | Leave a comment

Interview with PCI’s Bob Russo

Episode #205 of the Network Security Podcast has an interview with the General Manager of Payment Card Industry (PCI)’s, Bob Russo.  In case you’re not familiar with PCI this is from Wikipedia “standard was created to help payment card industry … Continue reading

Posted in news | Leave a comment

VoIP Security

The latest edition of free online magazine Hakin9 has a great article about VoIP security.  I learned that NIST has a paper on VoIP security, 800-58 ‘Security Considerations for Voice over IP Systems’.  I’m still in the process of reviewing … Continue reading

Posted in news, security | Leave a comment