Grec’s Weekly Infosec Ramblings for 2009-08-10

Don’t have the superhuman ability to read every tweet we post? No worries; here’s the best of our tweets from the past week in one easy-to-read post.

If you don’t follow us on Twitter, consider stopping by @grecs; we’d love to hear from you!

While there weren’t quite as many BlackHat posts as we had anticipated…

• RT @DarkReading At Black Hat, Cloud Of Doubt Hovers Over Government Initiatives http://bit.ly/6bXmF #
• More BH news. RT @CSOonline BlackHat Without The Drama: Well another BlackHat is in books & another round of vulns.. http://bit.ly/8WJXE #

Local bloggers were still busy this week.

• BLACKCON/DEFHAT ROUNDUP: Bet caught your attention. Anyway @geminisecurity has posted their sum. http://bit.ly/R3RTx #novablogger #
• SANDBOXIE: Very nice app and @geminisecurity has a great post discussing it. http://bit.ly/y20Lf #novablogger #tool #
• RT: @marcusjcarey: FREE: Techno Forensics and Digital Investigations Conference http://bit.ly/6LfwZ #novablogger #con #
• RT: @geminisecurity: New blog post: Laptop Loses By The Numbers http://bit.ly/9j0qG #novablogger #
• Nice. RT @rybolov Put up my SCAP slides up on blog and slideshare: http://bit.ly/2cHprz #novablogger #
• BUREAUCRACY IN INACTION: @taosecurity re effort 2 centralize email & network services.. fr 2000. http://bit.ly/9YyJW #novablogger #
• IPV6 SECURITY REVIEW: @taosecurity has been waiting 4 book on this .. & he likes what he’s found. http://bit.ly/A283z #novablogger #
• SANS INCIDENT DETECTION SUMMIT: @taosecurity will b helping org this 2 day DC event in Dec. http://bit.ly/3ekqn7 #novablogger #con #
• ORACLE/MSF NOTES: @carnal0wnage did quick post on some ?s he’s been getting re his talk at BH. http://bit.ly/14lR3Q #novablogger #
• HELP WANTED: Nice post by @rybolov re why no 1 wants cyber coordinator job and how 2 fix it. http://bit.ly/v6qWF #novablogger #
• HEALTHCARE & FISMA: @rybolov on y FISMA keeping gov fr doing e-records. Of course there’s fix. http://bit.ly/27ciZ #novablogger #

If you weren’t able to make it out to BlackHat, no worries—there’s some local upcoming conferences that you’ll want to check out.

• RT @room362 Security 2009: Shared by mubix Call for Papers for “Security 2009″. Never heard of it before. http://bit.ly/AjnbQ #con #
• And by the way, here is link to official page. http://bit.ly/3MhKp#con #

The same goes for meetups. Even if you missed these…

• RT: @IBMFedCyber: Secure gov IT & wake up early? please join me & IBM 4 GovExec’s Focus Group tomorrow 7:30am in DC: http://is.gd/20GGQ #mtg #
• Reminder: HacDC Microcontroller Mondays Meetup is 2day! http://tiny.cc/M4g2N. C ths nova #mtg & othrs http://bit.ly/nipmtg.
• RT @VRT_Sourcefire DoJoSec meeting – August 6th http://bit.ly/1nbRKA #mtg #
• RT @baltimorenode 1st meeting in new space 2morrow Aug 4th @ 7:30. Load of Fun Building 120 W North Ave. Balt. Everyone welcome! #mtg #
• In case u missed it. RT: @baltimorenode: Pics fr last night http://is.gd/22kuJ but most important, 1st key http://is.gd/22kqD #mtg
• RT: @owaspdc: OWASP DC is TOMORROW!! 6:30 PM at GWU. Dan Cornell on Vuln Mgmt in AppSec & Mike Smith on SCAP. http://bit.ly/13TdnC #mtg #
• RT: @marcusjcarey: DojoSec tomorrow bring a friend http://www.saecur.com #mtg #
• Reminder: DojoSec Meetup is 2day! http://tiny.cc/NWj3A. C ths nova #mtg & othrs http://bit.ly/nipmtg . #
• Reminder: OWASP NoVA Chapter Meetup is 2day! http://tiny.cc/sMAE6. C ths nova #mtg & othrs http://bit.ly/nipmtg. #
• Reminder: 2600 Group – Arlington meetup is 2day! http://tiny.cc/9SKr9. C ths nova #mtg & othrs http://bit.ly/nipmtg. #
• Reminder: 2600 Group – Baltimore meetup is 2day! http://tiny.cc/JFX1V. C ths nova #mtg & othrs http://bit.ly/nipmtg. #
• RT: @danphilpott: RT @Beaker: RT @gbrunett: anyone going to the CSA Federal Cloud Security Symposium tomorrow? <- I will be attending. #

There’s still meetups to attend this week. But enough about  meetups; here’s some new tools to add to your security arsenal.

• NEW SAMURAIWTF RELEASED: Thnks 2 @mubix, @dougburks, @security4all, @securityshell 4 pointing this out! http://tinyurl.com/rdrjov #tool #
• MOTH: VM-based vuln web app. Just what I was looking for. #tool #
• Very nice! RT: @IBMFedCyber: Security Aegis does it again! Howto video on setting up a WebAppSec Pentest Lab: http://is.gd/20QMy #tool #
• INSTALL NESSUS ON BT 4: Great post from @pauldotcom. Think the BT site has a similar tutorial. http://bit.ly/2b5apd #tool #
• TURN IPOD TOUCH IN2 PEN TEST PLATFORM: Nice art by @DarkReading. http://bit.ly/6KssE #tool #
• RT: @danphilpott: RT @cji: New, free, open source webapp scanner from gnucitizen. http://bit.ly/JrOnl – Websecurify #tool #

And in recent Twitter news, there’s finally some good news when it comes to Twitter’s security.

• TWITTER FILTERING MALICIOUS URLS: From @derekcslater and @DrInfoSec. It’s about time! http://bit.ly/16eMz7 #

But, there’s still a lot of bad news about Twitter as well.

• Guess I missed all action. RT: @briankrebs: twitter fighting off massive ddos that is slowing their servers http://status.twitter.com/ #
• TWITTER DDOS: Here is article fr @DarkReading on it. Glad I was doing actual work during this time. http://bit.ly/JZwri #
• Turns out Twitter URL filtering is useless. Need 2 go further. On othr hand, we can trust bit.ly links. @SCMagazine http://bit.ly/nsCuZ #
• RT @cyberwar OK, there appears to be a Russian-Georgian connection to the Twitter-Facebook outages. http://tinyurl.com/m69a4q #

Local @bobgourley was interviewed to comment on some of the Twitter problems. Congrats!

• Congrats! RT: @bobgourley: wusa9′s @lindseymastis just interviewed me on topic of Twitter attacks. If U R in DC set Tivo 4 5pm or 7pm. #

And on the job front this week…

• RT: @wadew: Cert & Accred Security Engineer position in Vienna, VA. DM if interested. @securitytwits @OWASPNoVA @owaspdc #job #
• RT: @securitytwits: RT @theprez98: “Mult openings at Booz 4 cleared individuals IT/Cyber/Malware/Network Analysts in MD, DM for more” #job #
• RT: @cyberhiker: Looking 4 C&A Analyst w/ 800 series exp. Need 2 do light travel & could b short term (< 3 mo). dm 4 details #fisma #job #
• RT: @CSOonline: SecurityJobs: Appsec Administrator: Location: Arlington, VAApplication Security AdministratorDevis is seeking .. #job #

Apple made it back into the news this week. But this time, it wasn’t for iPhone security (or lack thereof).

• RT: @marcusjcarey @ddeighton Mac keychain isn’t encrypted. Lots of info using strings. Passwords encrypted but lots of other stuff. #dojosec #
• RT: @IBMFedCyber: Post on discussion going on @dojosec http://is.gd/25AUi. Apple file vault, keychain, passwords pulled in ~10 mins #

One of the more interesting newsbytes of the week.

• RT: @mubix: ATMs in Vegas story has the Secret Service involved? http://bit.ly/28mLjB (@ChrisPaget) #

And finally, who could forget the tweet of the week?

• RT @mubix RT @secureideas: “When pen tester tells U they luv something, get it off yr network.” @agent0x0: “I luv Sharepoint.” #defcon #totw #

No related posts.

Tags: digest, grecs, twitter