Elamb Cybersecurity

Category: security

  • First potential virus risk for Windows Vista found

    “Virus writers are targeting a new Microsoft tool that will be part
    of Windows and is set to ship as part of the next Exchange e-mail
    server release.” – C|Net

    F-Secure has already found a possible flaw in the Windows Vista
    (code named Longhorn) command Shell called Monad also know as MSH.

    Representatives of F-Secure stated that if Microsoft released Windows
    Vista with MSH enabled, it could cause and outbreak of scripting
    viruses.  Examples of Scripting viruses include Macrovirues, the
    ILOVEYou VB scripting virus and the Melissa virus.

    The exploit aiming at MSH is discussed here.

    Microsoft my chose to disable MSH by default or simply add it as a plugin. 

  • Kevin Mitnick's Forbidden Chapter

    A very interesting read on the overview of Kevin Mitnick's life as a hacker and his issues with New York Times reporter John Markoff. This chapter, originally slated to be Chapter 1 in Mitnick's 2002 book “The Art of Deception”, was removed by the publisher after initial printing.

    read more | digg story

  • Hotel Access Cards Contain Credit Card Information

    What's scary is how easy it is for even a novice to steal this information. He says he bought a $39 card reader at a local retail store and plugged it into his laptop's USB port. Now when he scans a card, the device inputs the data directly into an open Excel or Word document.

    read more | digg story

  • PayPal hit by payment problems

    PayPal has been hit by two separate technical problems that are causing transactions to appear more than once on some customers' accounts. Although the money is not actually being removed from accounts this can have the effect of freezing the account if spending limits appear to be breached.

    read more | digg story

  • Arrested for being a geek

    “The police decided that wearing a rain jacket, carrying a rucksack with a laptop inside, looking down at the steps while going into a tube station and checking your phone for messages just ticked too many boxes on their checklist and makes you a terrorist suspect.”

    read more | digg story

  • VMware for Security Training

    VMware or Virtual Machine Software is an excellent tool to use for penetration training. 

    I went to an ethical hacking course with New Horizons and that is what
    they used to train us.  Each student was able to operate three or
    more environments (windows 2000, Knoppix STD, and Window XP) and attack
    either our own virtual network or the Instructors firewall to
    demonstrate the use of Netcat for example.

    It was a very cool way to learn.  Years ago I was in a training
    course created by Global Knowlegde for basic networking, hardware,
    cisco routers and a Microsoft cert.  I recall them bringing a ton
    of equipment with them and having trouble getting on and off planes
    with it.   With a software solution like VMware they could
    have carried much less equipment.

    VMware allows you to operate multiple Operating Systems on one
    computer.  OS's such as Linux, OSX, and Windows 2003, for example
    can be placed on the same system.  VMware gives you the ability to
    switch from one system to another with ease.  My only complaint is
    that it seems to be incompatible with some software you might try to
    install on it.  But it works with the main stuff such as protocol
    suites just fine.

    Vmware is great check out their free trial.

  • Google Blog Search Launched!!!

    Google's latest service “Blog Search” has been launched!

    read more | digg story

  • Google to offer secure WiFi VPN

    I could access the page, then it went away…Google Secure Access is a downloadable client application that allows users to establish a more secure WiFi connection. By using Google Secure Access, your internet traffic will be encrypted, preventing others from viewing the information you transmit.

    read more | digg story

  • Hotel Access Cards Contain Credit Card Information

    What's scary is how easy it is for even a novice to steal this information. He says he bought a $39 card reader at a local retail store and plugged it into his laptop's USB port. Now when he scans a card, the device inputs the data directly into an open Excel or Word document.

    read more | digg story

  • Hardening Windows XP

    A short, but good, tutorial on Hardening Windows XP Professional.

    read more | digg story