Monthly Archives: September 2006

Cross-site scripting the top security risk

Filed under Vulnerabilities

Looks like XSS is becoming the latest threat vector. No surprise here. Webmasters…keep your sites patched!

Cross-site scripting the top security risk – Network World

Shell game: Managing Bash command history

Filed under Linux

Here is a good article on how to manage your shell history. For those of you that don’t know, all the commands that you enter into a Bash shell (default shell on many Linux distros) are stored in a history file. This is to allow a user to use previous executed commands. The problem with this is that an attacker could easily compromise this history file and get all kinds of good data if they were able to own your machine. With these tips you can limit the size and behaviour of this file or remove the history on logout.

Shell game: Managing Bash command history

Recovering Data from Cell Phones

Filed under Computer Forensics

Bruce Schneier posted a good article on how a company is retrieving data from old cell phones. Goes to show how easy it is to recover this data. Scary to think that this company found some interesting data including contracts, bank accounts, passwords, and even prescriptions.

Schneier on Security: Recovering Data from Cell Phones