Elamb Cybersecurity

Category: Main Digg

  • SC Magazine Awards 2007: Training Camp listed

    Training Camp has been named a finalist in the SC Magazine Awards 2007 for the Best Professional Training Program category. According to SC Magazine, programs in this category are defined as those geared toward strengthening the expertise of IT security professionals, that provide educational programs, continued learning and certifications. 

    Contact me to find out more about our award-nominated IT security Training Camps and why they’re the best of the best. Our IT security camps include:

    –Official (ISC)2 CISSP
    –Official (ISC)2 ISSEP
    –Official (ISC)2 SSCP
    –Certified Ethical Hacker
    –Forensics
    –Licensed Penetration Tester
    –CompTIA Security+
    –CISA
    –CISM

  • Create a Template for PowerPoint 2003

    To create a PowerPoint template in Office PowerPoint 2003 go to View | Master | and select Slide Master

    Once in Slide Master you will see a small menu, Slide Master View, that will allow you to create a Title Slide. The Slide Master View will allow you to do the following:

    Insert New Slide Master, Insert New Title Master, Delete Master, Preserve Master, Rename Master, Master Layout and Close the Slide Master

    see more on how to create a template for powerpoint 2003 here.

  • SISSU: USAF digesting the DIACAP

    I’m still learning but it looks like the Air Force is going to implement the DIACAP with its IT Lean/SISSU implementation.

    IT Lean is an initiative that is supposed to streamline the system aquisition process (more on IT Lean) by eventually getting rid of the Certificate to Operate (CTO)/Certificate of Networthiness (CON) process. SISSU stands for Security, Interoperability, Supportability, Sustainability and Usability process. All this will be possibly automated with something I am slowly begining to HATE called EITDR – Enterprise Information Technology Data Repository. The reason it rubs me the wrong way is the level of questions I have had to answer. Some of the questions are so high level I have not clue what they are even remotely talking about. And then when I ask the people who run the system to give me some hints on how to answer the questions they know even less than I do about it. So I ask, “can you give me the POC that put the question in the system?” They give me some contacts and lo and behold the contacts have no idea what the fuck I’m talking about.

    Just frustrating, thats all. Some of the questions are Zen like in that they have no answer and seemingly no questioner. They just ARE.

    ***20 April 2009 Update***********
    That actual DIACAP portion of the EITDR isn’t that bad. There are hundreds of questions in the EITDR but only some of those are necessary for a system when it starts the SISSU/IT Lean/DIACAP process.

    We used to answer ALL 500 questions in the EITDR most of which were very, very high level. Now the system is pretty specific and walks you through the DIACAP process.

  • Spy on Co-workers, Spouse and Kids

    a message to a reader.

    A personal note about monitoring: I spied on my wife and I’ll just say that there are somethings you may not want to know. Now, I know that a spouse and a child are totally different issues, I would just like you to realize the power of these tools. You must also take great care in making absolutely CERTAIN they don’t find out you are spying, because trust is sometimes impossible to get back. It can be like throwing gas on a candle flame. There are also tools that can counter the spying tools.

    With all that being said: I’ve got two beautiful little girls and when they are old enough I will DEFINITELY spy on them. Its not so much my lack of trust on them, as it is my knowledge of predators on the Net.

    Terms for you to know:

    keylogger – software or device that monitors every key stroke. Used by parents, spouses, bosses and covert, subversive spying. Typically only for a local machine (you install it on a system then have to get on that machine to get the data off of it when they are gone.)

    network keylogger – keylogger for every computer on a network managed from a primary computer. These are more expensive but can give real-time spying.

    Stealth mode – keyloggers/spy software usually has a key stroke like Ctrl+Alt+6 that will allow you to make the application run completely undetected.

    Tools:

    These tools range from 30-day free demos to $300 for some of the better tools. I won’t spend less than $29 dollars if you are not computer savy. There are $10 one that are created by independent hackers but you have to know computer well to use them.

    Review of spy tools
    (look through this list – look for fairly priced software that looks easy to use and have the ability to send information to you via network, email or share drive. If you can get the spy data when they go to school or work then you don’t need it emailed or networked.
    Don’t worry about technical stuff, they will usually tell you exactly how to use it unless you get some 10 dollar product made for hackers.    )

  • Videoblog gets maliciously hacked. They lost everything

    Anil de Mello of MobuzzTV writes “At 8am yesterday someone hacked our servers and wiped all of our data. Yes, they deleted the platform, the video archives (all 72 gigs !), and the websites (English and Spanish).”

    read more | digg story

  • Spammer’s Can’t Escape Now!!

    this blog describes the types of spams that we can see in our inbox (unblocked by our email spam filters). you can have a look how they try to make you give you personal details. you can also make spammers busy. have a look over the blog guys you will tempted to comment.

    read more | digg story

  • VPN Access For Roadwarriors with Racoon

    Racoon Roadwarrior is a client that uses unknown, dynamically assigned IP addresses to connect to a VPN gateway (in this case also firewall). This is one of the most interesting and today most needed scenarios in business environment. This tutorial shows how to configure Racoon Roadwarrior.

    read more | digg story

  • Warning of New Fraudulent Department of Transportation Letter

    Fraudulent letters have been sent in an attempt to compromise your TPIN. Your TPIN should be kept confidential. CCR personnel will NEVER ask you for your TPIN. Please contact the CCR Help Desk immediately to obtain a new TPIN if you feel that your TPIN has been compromised. The point of contact concerning these fraudulent letters is the Department of Transportation Office of the Inspector General Hotline at 1-800-424-9071.

    *** Always protect your TPIN with the highest level of security. No one outside of your organization should know what your secure TPIN number is. Please note that in case your TPIN has been compromised, it will be possible for unknown sources to obtain your financial information with the possibility to redirect any EFT payments to their own benefit.

    *** We have recently been informed that fraudulent letters have been sent to venders requesting that the vendor provide their TPIN for new CCR related features. Do not, under any circumstance, provide your TPIN to any person outside of your immediate organization.

    http://www.ccr.gov/securitynote.asp

  • Google Accidentally Sends Out Kama Sutra Worm to 50,000 members

    Google accidentally sent out e-mail containing a mass mailing worm to about 50,000 members of an e-mail discussion list focused on its Google Video Blog, the company said Tuesday.

    read more | digg story

  • Fradulent You Tube video on MySpace installing Zango Cash

    Websense
    ® Security LabsTM has discovered a number of user pages on the MySpace domain which have videos that look like they are from You Tube. The videos have an installer embedded within them for the Zango Cash Toolbar. When users click on the video, they are directed to a copy of the video, which is hosted on a site called “Yootube.info.”

    read more | digg story