RSS

Archive | Security RSS feed for this section

WoW adds 2 factor authentication

World of Warcraft creator Blizzard Entertainment is selling hardware security devices. These small devices can fit on a key ring and provide a second form factor for authentication using something similar to a one time pad. The cost…..6 EUR. Robert over at Errata Security has a pretty good write up on it. Now if only [...]

Continue reading...

ICANN shutting down a Chinese registrar?

I saw this today on Slashdot. There is an ICANN registrar in China who is apparently not living up to its obligations to verify proper contact information for people registering domain names. The registrar is Xinnet Bei Gong Da Software. How bad is it you ask? Of 11,000 suspected spam domains registered through them, NONE [...]

Continue reading...

Savant Protection supports Google Android

I saw this press release today from my Savant Protection. According to the release Savant’s Protection has been ported over to the Google Android platform. Savant Protection is very interesting technology in the fight to prevent the spread of malware. It’s not AntiVirus in the traditional sense and it is not really white listing either. [...]

Continue reading...

Detecting Bot Command and Control Channels

I came across this paper on Detecting bot C&C channels in network traffic. It is from the Georgia Institute of Technology. An interesting read if you follow the bot problem. –Chris Technorati Tags: bot, command and control, channel

Continue reading...

(ab)using Tor to spy on connections

I saw a reference to this article recently. I knew how Tor worked but never really go under the hood of the exit servers. Well apparently some others have and are setting up their own exit servers for nefarious purposes. It seems as though if you setup an exit server you can specify what ports [...]

Continue reading...

Anyone still blocking Javascript?

In this new age of Ajax / Web 2.0, is anyone still blocking Javascript at the perimeter or disabling it in the browser?? I remember when this was a significant issue…and it may still be one. It seems like the advantages (perceived or not) of real time page updates provided by Ajax are out weighing [...]

Continue reading...

Two job openings at my company

My company, GreenPages, has openings for the following positions: Director of SMB & Education Solutions Senior Network Engineer If you or someone you know is interested send me an email, chris@infosecpodcast.com or Skype at chrisharrington Thanks! –Chris Technorati Tags: GreenPages, employment

Continue reading...

Backpack mounted Laser

Ok…not security related but I thought it was interesting. A German company is producing a backpack mounted Laser system apparently designed for cleaning thinks. Think of the uses….. Is it me or are we just missing Harold Ramis wearing a white jumpsuit? –Chris Technorati Tags: laser, backpack

Continue reading...

Bad Behavior has blocked 901 access attempts in the last 7 days.

Rodney's 404 Handler Plugin plugged in.