Some of you should remember what a BBS is (Bulletin Board System)… I grew up a child of the 80’s and when I got my first computer (actually an Apple ][e)…all the rage for geeks was connecting to your local BBS and checking out the awesome text based games and reading messages from other users […]
So the hard drive on my wife’s one year old MacBook has officially started to kick the bucket. Random crashes, slow performance and lots of errors like this in the system log: disk0s2: 0xe0030005 (UNDEFINED). Yup, we have bad blocks..all indicating imminent drive “FAIL”. I have AppleCare on the MacBook so I call them up
Bad hard drive? Don’t let Apple take your data! Read More »
I have been following several stories of recent targeted attacks against a few high profile security professionals. Two that I was made aware of were pdp from GNUCITIZEN and Alan Shimel from StillSecure, After All These Years. pdp had his Gmail account compromised and his entire mailbox mirrored all over BitTorrent. Alan’s, was far worse
Are you using strong and unique passwords? You should! Read More »
I am on my way back from Black Hat and Defcon 16 in Las Vegas with a three hour delayed flight so this is probably a good time to talk about Black Hat and Defcon 16. To start off…this was one busy and eventful week! I met so many people this week it was crazy.
Black Hat/Defcon 16 Recap from Vegas Read More »
I thought I would throw my list into the mix of other Security Twits that are posting about talks they are either going to or wish they were going to at Black Hat this week. Most of my picks have a pentest perspective to them (a lot like CG’s over at Carnal0wnage). Here is my
Talks to attend at Black Hat USA ’08 Read More »
I saw this post on Hexesec the other day that made me think about all the skill’s that when you put them together could make one kick ass penetration testing team. Note that this is a pretty large list of skills that would be difficult if not impossible for one person to master. However, it
Building the pentest team skillset Read More »
Looks like the exploit code has been released by HD Moore as a Metasploit module. Hope everyone took the DNS patching requests seriously since we all know Metasploit is really easy to use (yes, especially for script kiddies!). If you haven’t patched your DNS yet…do it now! Check here for more information and here to
Exploit in the wild for the Kaminsky DNS vulnerability Read More »
Perhaps someone has figured it out or just decided to announce it but the big DNS vulnerability that Dan Kaminsky told the world about may have been revealed. Apparently a reverse engineer named Halver Flake was pretty close to figuring out how the vulnerability works. Then someone at Matasano apparently posted the details and then
Has the DNS vulnerability been revealed? Read More »
This is just a classic case of one administrator who managed to get all the “keys to the kingdom”. From the San Francisco Chronicle: “Terry Childs, a 43-year-old computer network administrator who lives in Pittsburg, has been charged with four counts of computer tampering and is scheduled to be arraigned today. Prosecutors say Childs, who
San Francisco’s network held hostage by network admin Read More »
Yes, it’s true. Presidential candidate John McCain is just now learning to use a computer. He also has said that he doesn’t use email (he has staff and consultants to do that for him). So what does this say about him and how he would handle technology issues? In particular, security issues related to technology
McCain is a technology n00b Read More »
