Looks like XSS is becoming the latest threat vector. No surprise here. Webmasters…keep your sites patched!
Monthly Archives: September 2006
Shell game: Managing Bash command history
Here is a good article on how to manage your shell history. For those of you that don’t know, all the commands that you enter into a Bash shell (default shell on many Linux distros) are stored in a history file. This is to allow a user to use previous executed commands. The problem with this is that an attacker could easily compromise this history file and get all kinds of good data if they were able to own your machine. With these tips you can limit the size and behaviour of this file or remove the history on logout.
Recovering Data from Cell Phones
Bruce Schneier posted a good article on how a company is retrieving data from old cell phones. Goes to show how easy it is to recover this data. Scary to think that this company found some interesting data including contracts, bank accounts, passwords, and even prescriptions.



