Elamb Cybersecurity

Category: Main Digg

  • Information Security – Google

    Information Security

    Subject: Information Security Posted: Wed Sep 12, 2007 9:04 am (GMT 0) Topic Replies: 0 Hi, Currently all our libraries have generic logins for talis alto so that alto can be left logged on for all staff to use. …


    Talis Forums – http://www.talis.com/forums/


    Personal Information Security IV

    By John Sumser

    The difficulty with a conversation about information security in the domestic American marketplace is that few people are really interested in solving the problem. Instead, the recent brouhaha is essentially a marketing component of the …


    Recruiting.com – Recruiting.com – http://www.recruiting.com/recruiting/rss.xml


    The Fifth Annual Global State of Information Security

    Awareness of the problematic nature of information security is approaching an all-time high. Out of every IT dollar spent, 15 cents goes to security. Security staff is being hired at an increasing rate. Surprisingly, however, enterprise …


    Forum of Incident Response and… – http://www.first.org/newsroom/globalsecurity/


    The Death of Leadership in Management

    Category: Security Basics. Paper Added: September 12, 2007.


    SANS Information Security Reading Room – http://www.sans.org/reading_room/


    My wife is pretty, smart, AND security conscious

    By m1a1vet@infosecplace.com (Michael R. Farnum)

    The lady said that for some reason they couldn’t find our credit card information in their system, so they could not credit our card. So, she asked my wife for our credit card number. My wife told her that she was not comfortable giving …


    An Information Security Place – http://infosecplace.com/blog

  • Encrypt ALL gmail traffic

    Another great post from dmiessler:
    Everyone loves Google. They want to be everything to everyone, and they’re getting pretty damn good at it. Once you start using their services it gets easier and easier to migrate more of your life to them. But there’s a slight problem.

    Google, like any other legitimate service provider, encrypts login traffic, but not your content. So the moment you’re signed in they switch to plain-text communications and send everything to you in the open.

    http://dmiessler.com/blogarchive/why-you-should-encrypt-all-of-your-google-activities-poc

  • Guinness Customers Promotion SCAM

    ***************SCAM********SCAM************SCAM******
    GUINNESS® CUSTORMERS PROMOTION
    Dv-2007 program
    Guinness plc, South Africa.
    St Christo road (Sun City)

    FINAL_ NOTIFICATION.
    We happily inform you about our (guinness® national lottery program)held on the 12Th of September 2007, which you enterd as a dependent client and finally took the 1st position in our second category winners, that falls within the west africa region. Your email was attached to the ticket number(44-40-23-777-01) which made you a winner of $500,000 Thousand dollars and your name being recorded in our guinness world book of record as the 1st lucky winner of the year 2007. You have been approved the sum of $500,000 Thousand dollars which will be sent accross to you through a guiness draft immediately. All emails are selected randomly through a computer ballot which subsequently won you the sweeptake of guinness internet web lottery.

    CONGRATULATIONS YOU EMERGED OUR WINNER!!!
    = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
    This is part of our security mearsures to avoid double claiming or unwarranted taking advantage of the situation by other participant or impersonators.
    Here is our fiduciary agent responsible for your winning claims.
    MRS LILY SMITH
    EMAIL:lilysmith_fiduciaryagent@yahoo.co.uk

    GUINNESS® CLAIMING SECURITY AGENT.
    = = = = = = = = = = = = = = = = = = = = == == = = =
    You are required to forward the following details to help facilitate the processing of your GUINNESS® CLAIMS OF CERTIFICATE.

    Fullnames
    Residential address

    Phone number
    Occupation
    Sex
    Age
    Present country
    Marrtal status.

    ONCE AGAIN CONGRATULATION!!!!
    Yours sincerely
    BERNARD COLINS.

    GUINNESS®CUSTORMERS PROMOTION.

    WARNING!!!! WARNING!!!!
    KEEP THIS INFORMATION CONFIDENTIAL AND BE CAREFULL OF SCAM MAILS

    Hilarious SCAM. Don’t fall for it.

  • EITDR – enterprise information technology data repository

    EITDR

    30 Aug 11 – Update *USAF Recently changed the functionality of EITDR

    To all System Security Engineers and Information Assurance Officers,

    Here is something you might need to know. The Air Force is conducting all MANY of its certification & accreditation through the EITDR database none of its C&A (soon Risk Management Framework) through EITDR. The USAF is moving to the eMASS. As of Aug 2011, the USAF is still using EITDR to do IT portfolio management (to remain compliant with FISMA). EITDR feeds into the DoD IT Portfolio Registry (DITPR) database. Each branch has its own methods IT registry: the Army’s has the Portfolio Management System (APMS), Navy/Marines have the DITPR-DON. All of these system are used to “record investment review and certification submission information, FISMA assessments, E-Authentication status, and Privacy Impact Assessment status” (office of the assistance sec of the navy).

    Each branch has an agency that controls these databases for example, the Air Force has the Air Force Communincations Agency (AFCA) AFNIC, the Army has the Installation Management Agency. These agencies moderate the certification & accreditation process. The IT Lean (aquisitions process) and the SISSU (security, interoperability, supportability, sustainability and usability) processes are integrated into the EITDR/DITPR-DON/APMS. Once you complete all the questions for you registered system, you will have accomplised complete SSAA, DIACAP, and even ISP packages.

    For more information search the public.afca.af.mil (USAF). Everything you need to know is there. Also call or email AFCA/EV to learn more.
    Army can go –>https://www.us.army.mil/suite/folder/4920492

  • NSL provision in PATRIOT Act struck down by federal court

    The National Security Letter (NSL) provision of the PATRIOT Act was
    struck down today by federal court judge Victor Marrero. The
    controversial NSL provision has allowed the FBI to secretly demand
    access to records held by organizations like libraries and Internet
    service providers. National Security Letters, which can be used without
    probable cause or judicial oversight, also impose “gag” restrictions on
    recipients, forbidding them from disclosing that they have received the
    letter.

    http://arstechnica.com/news.ars/post/20070906-patriot-act-provision-stru
    ck-down-by-federal-court.html

  • Fgpyyih804423 in 160 seconds. How Safe is Your Windows Password?

    The multi-platform password cracker Ophcrack is incredibly fast. How
    fast? It can crack the password “Fgpyyih804423” in 160 seconds. Most
    people would consider that password fairly secure. The Microsoft
    password strength checker rates it “strong”. The Geekwisdom password
    strength meter rates it “mediocre”.

    –> http://www.codinghorror.com/blog/archives/000949.html

  • The liberty/security debate

    From FISA fixes to appointing a new attorney general, Congress will have
    many opportunities to have an honest, open discussion.
    September 10, 2007

    This nation is overdue for a serious conversation about how to balance
    liberty and security — a conversation that must include not only the Bush
    administration and a heretofore compliant Congress but the public as well.
    Citizens shouldn’t have to guess about how much privacy they are
    sacrificing in the war on terrorism.

    Congress will deal with this dilemma on several fronts in the coming
    months. It must enact permanent legislation to replace this summer’s
    temporary “fix” in the Foreign Intelligence Surveillance Act. It will take
    a new look at USA Patriot Act provisions — declared unconstitutional last
    week by a federal judge — that allow the FBI to obtain telephone and
    business records with “national security letters” that don’t require a
    judge’s approval and swear some recipients to secrecy. Finally, Senate
    confirmation hearings for a new attorney general will require the nominee
    to say whether he or she shares Alberto R. Gonzales’ expansive view of
    presidential power.

    — more

  • China ‘tops list’ of cyber-hackers seeking UK government secrets

    China ‘tops list’ of cyber-hackers seeking UK government secrets

    China leads the list of countries hacking into government computers that
    contain Britain’s military and foreign policy secrets, Whitehall sources
    said yesterday.=20

    The emergence of Beijing as one of the most hostile state hackers has
    been highlighted in the United States this week, with allegations that
    the Chinese People’s Liberation Army tried to extract secrets from a
    computer in the Pentagon office of Robert Gates, the US Defense
    Secretary.=20

    President Bush suggested that he intended to confront China directly
    over the claims that it has been trying to hack into Pentagon and other
    US government computers. Mr. Bush hinted that he was prepared to risk a
    diplomatic rift by raising the sensitive issue with President Hu Jintao
    when the pair meet in Sydney today at the Asia-Pacific Economic
    Cooperation (Apec) summit.=20

    More
    http://www.timesonline.co.uk/tol/news/world/asia/article2393979.ece

  • State Monitoring People: This side of Prison

    As a long time government employee, my most sensitive personal information was forfeit some time ago. I still believe it is important that individuals in a “constitutional republic” should have a right to privacy if they choose.

    However, there are a few issues with TOTAL privacy… one of the main problems is sociopaths, psychopaths, extremist groups, and other malcontent predators. If there is a total blackout of a governments ability to spy on its people, how can that government protect its people in this modern age.

    As the gene pool gets larger with the help of modern/postmodern sciences and health practices, its clear that the amount of psychopaths & sociopaths per 100,000 has grown significantly.

    If you combine that number with the number of people who are highly suggestible and indoctrinated in the “red” extremist parts of the religious and political spectrum, you have a recipe for terrorism in pockets around the world which exactly what we are seeing now.

    This combination of disturbed individuals + technological means of taking out scores, 100’s or even thousands of human beings is deadly.

    The Problem with Big GOvernment
    So is bigger government the answer? Liberalism & conservatism aside, as governments gain the legal power to spy, arrest, control people without checks and balances and without probable cause, their size and strength will grow to the point of a sort of bureaucratic dictatorship (something NO one in their right mind would mistake for freedom). Without checks and balances, it is also possible for such an all powerful government to commit atrocities and crimes against humanity for its own gain. It becomes like an out of control beast with its own will. The Nazi party is a clear growth of such unchecked power.

    One Solution.
    Cho Seung, the killer at Virginia Tech, showed numerous signs of self-destructive and sociopathic behavior. There is currently no system in place among private and public organizations to pin point, profile and deal with behaviors of potential predators.

    Perhaps if their was a comprehensive system in place State monitoring would not be necessary. Such a comprehensive system could be created by criminal psychologist, profilers, statisticians, lawyers, police and other agencies. The system would have to consist of monitoring and observing at a LOCAL level and report to proper authority. Once certain behaviors are observed, they could then be reported anonymously to a much smaller state/federal monitoring service.

    This would be a top down approach and would definitely not stop all random acts of violence, but monitoring everyone at a Federal level seems a bit ridiculous this side of prison.

  • Snuggly, the Cuddly Security Bear

    snuggly the security bear - mark fiore