If you’re not already following some of our excellent NovaInfosec Twits and are wondering where to get the best NoVA-, DC-, and MD-related security tweets, look no further than this post. Published every Friday (usually 
), our “Infosec Ramblings” post takes many of my security tweets/RTs from the past week and puts them into one easy to digest post. And if you don’t want to wait an entire week, just stop on by my @grecs Twitter account.
[Sorry but I haven't had time to summarize this like I usually do but just wanted to get it off my plate so I can focus on more important things (like prepping for BSidesLV and Defcon). Anyway enjoy the dump and be sure to say hi if you are going to be in Vegas this week. Grecs]
- #CON #NOVABLOGGER: Thoughts on SANS WhatWorks Summit in Forensics & IR 2010 http://bit.ly/9xbNbz (via @novainfosec) [Good recap.] #
- #NOVABLOGGER: Network Forensics Vendors: Get in the Cloud! http://bit.ly/92Opw6 http://j.mp/nispblog (via @novainfosec) #
- #BSidesLV Participant sign-up list will close on 7/20. U MUST B on official list 2 gain entry. http://bit.ly/doE06e (via @mschafer) #
- #MEETUP DNSSEC/FISMA Seminar in DC w/ DNSSEC Experts fr NIST, MS & Secure64 http://bit.ly/ah5NaF (via @danphilpott @vapigilt) #
- HTCIA “Vetting Ligatt” http://bit.ly/9mrTpn (via @attritionorg @marcusjcarey) [In case U missed earlier today.] #
- Vuln Report – July 2010 http://bit.ly/awGLyl [Get a quick 3 min summary of the July patches fr @VRT_Sourcefire.] #
- RT @rybolov: Dear @whitehouse & OMB: can U please make your memoranda available in RSS? http://bit.ly/aKGKPc [Plz RT.] #
- BLOGGED: Grecs’ Weekly Infosec Ramblings for 2010-07-15 http://bit.ly/bjQcTs #
- BLOGGED: Top 3 NoVA Infosec Blog Posts of the Week http://bit.ly/aTWhQJ #
- IN CASE U MISSED IT: Top 3 NoVA Infosec Blog Posts of the Week http://bit.ly/9iZHXD #
- IN CASE U MISSED IT: Grecs’ Weekly Infosec Ramblings for 2010-07-15 http://bit.ly/cAGenr #
- #MEETUP Can’t get enough #DNSSEC? Reg 4 DNSSEC/FISMA seminar at Spy Museum 7/27 (http://j.mp/dvhHUh) (via @scottr_nist) #
- Just heard that MS is going to support Window XP SP3 through 2010. I just can’t imagine using XP 10 yrs from now. #
- WackoPicko vuln webapp released! – http://bit.ly/cbKCvp (via @carnal0wnage) [@dallendoug - another free webapp 2 use 4 that VM distro.] #
- #MEETUP CapSecDC Not in Vegas edition is early this yr. Come 2 Stetson’s 7/21 before people head 2 Vegas http://bit.ly/aV59MZ #
- Nmap 5.35DC1 (Defcon edition) released! 17 new NSE scripts & much more: http://bit.ly/aUuO2j (via @mubix) [Woot!] #
- Feds Look for Wikileaks Founder at NYC Hacker Event http://bit.ly/djJIgd (via @WeldPond) [Drama at #thenexthope.] #
- Defcon & Blackhat Parties List Updated http://bit.ly/c6psXT #Blackhat2010 #Defcon Help me add! pls RT (via @Jhaddix @jaysonstreet) #
- #NOVABLOGGER: Review of The Cuckoo’s Egg Posted http://bit.ly/dbukvP (via @novainfosec) [Agree. Loved this book.] #
- #NOVABLOGGER: Review of Crypto Posted http://bit.ly/dcwBWH http://j.mp/nispblog (via @novainfosec) [Another awesome book.] #
- #NOVABLOGGER: Review of Code Version 2.0 Posted http://bit.ly/9pihz8 (via @novainfosec) [I have v1.0 & read when I can't sleep.
] # - New Metasploit GUI Written in Java: If you don’t like cmd mode 2 interact w/ metas.. http://bit.ly/9MQnfw (via @sans_isc) [Cool.] #
- BLOGGED: Win Three TaoSecurity Recommended Books http://bit.ly/cUiA4K #
- #JOB NPR had a story on Cybersecurity specialist shortage this AM http://n.pr/93nOhm (via @danphilpott) #
- Running a little contest giving away 3 @taosecurity recommended books. See http://bit.ly/cUiA4K for details & RT my next tweet to enter. #
- I want 2 win 3 @taosecurity recommended books from @grecs. #infosecclassics http://bit.ly/cUiA4K #
- MS Confirms Windows Shortcut Zero-Day flaw http://bit.ly/8YZzDR [Nother reason to disable autoplay.] #
- #MEETUP Just a reminder that @CapSecDC is THIS Wed. “After Work” at Stetson’s, 1610 U St NW. Looks like a full house this month! #
- Our Infocon is at Yellow: 4 details: http://bit.ly/cXlMZ6 We R trying 2 mk our Infocon more useful.. (via @sans_isc) [This is new. ] #
- IN CASE U MISSED IT: Win Three TaoSecurity Recommended Books http://bit.ly/c7u5MS #
- #NOVABLOGGER: The Biggest Problem http://bit.ly/ap4UCm (via @novainfosec) ["Learn how to write." Nuff said.] #
- #NOVABLOGGER: Notes fr The Next HOPE http://bit.ly/avN5Kh http://j.mp/nispblog (@novainfosec) [Wish I could have made it.] #
- BLOGGED: Where You Want to Be This Week for 2010-07-19 http://bit.ly/bJuNQn #
- Exploit 4 Windows Shell flaw (LNK) added 2 #metasploit http://bit.ly/a5OwFm (via @hdmoore @TheCustos) [Wow, that was fast.] #
- Court Fails to Protect Privacy of Whistleblower’s Email http://bit.ly/aQrryY (via @GoldbergLawDC) [Not good.] #
- TrueCrypt 7.0 Released http://bit.ly/9r7Yxk [Woot! No whole disk encryption support for Mac tho.
] # - BLOGGED: Starbucks VPN Options for Wifi Security http://bit.ly/d1KFnH #
- Adobe to Fortify Widely Exploited Reader with Security Sandbox http://bit.ly/98BMFf #
- #EDU Certified Ethical Hacker Courses – Again.. http://bit.ly/aXJdMn (via @jaysonstreet) [Good for baseline knowledge.] #
- IN CASE U MISSED IT: Starbucks VPN Options for Wifi Security http://bit.ly/cB0VLu #
- IN CASE U MISSED IT: Where You Want to Be This Week for 2010-07-19 http://bit.ly/b5BYyA #
- Opinion: Apple App Store’s security track record unblemished after two years http://bit.ly/9GGbtQ (via @krvw) [True.] #
- Lowering infocon back 2 green .. http://bit.ly/9sFpLl (via @sans_isc) [Darn, it was so cool being yellow 4 a change. ] #
- Security BSides Announces 2010 Speaker Line-Up at BSides LV http://bit.ly/bqRJs4 (via @mschafer) [I'm finally in the mix. ] #
- Reminder: CapSecDC Meetup @ Wed Jul 21 6pm – 9pm (NovaInfosecPortal.com Calendar) (via @novainfosec) #
- Nonprofit Launches Open-Source IDS/IPS http://bit.ly/batnao [Interesting.] #
- Hackers Unite! .. #BSidesLV http://bit.ly/aIJqDe (via @adamely @petermannmc @mschafer) [Woot! Tx 4 rec. Hope I don't disappoint..] #
- Harsh Words 4 Professional Infosec Certification http://bit.ly/aefdkn ["Creating a Dangerously False Sense of Security." Nuff said.] #
- Innovation – You Keep Using That Word http://bit.ly/9gKc9O [@VRT_Sourcefire 's response to Suricata v1.0 release.] #
- BSides Las Vegas 2010 Speaker Line-Up Announced http://bit.ly/bVhu9F [More #BSidesLV press and not-to-miss talks.] #
- #CON Metricon 5.0 http://bit.ly/9TI2yM [And heading back to DC, another interesting event 2 attend.] #
- Tool Blunts Threat from Windows Shortcut Flaw http://bit.ly/djxaIB [MS released a FitIt tool 2 mk same registry changes.] #
- RT @TheCustos: RT @secureideas: Submitted Friendly Traitor 2 & Social Zombies Gone Wild 2 AppSec DC! <- register now 4 @appsecdc! <- +1 #
- Dell Warns on Spyware Infected Server Motherboards http://bit.ly/aBNkzZ [Wow, taking it a step further.] #
- BLOGGED: Winner of TaoSecurity Recommended Books http://bit.ly/9aZn1j #
- NIST Static Analysis Tool Exposition 2009 reports & data are online http://bit.ly/d8MEGA (via @rgaucher) [Worth a read.] #
- BackTrack 4 R1 BlackHat Edition http://bit.ly/a6nXI2 (via @ @security4all @jaysonstreet) [Nice!] #
- IN CASE U MISSED IT: Winner of TaoSecurity Recommended Books http://bit.ly/awOyUB #
- Is ubiquitous encryption technology on the horizon? http://bit.ly/aDVioI [Hopefully..] #
- RT @capsecdc: CapSecDC is TONIGHT. Hope to see you there! Stetson’s, 1610 U Street NW. Follow us here & check for updates if you are late! #
- Google: Plug Critical Holes within 60 Days Across Industry http://bit.ly/aTDxZ3 [Not perfect but at least a start.] #
- RT @angelinaward: RT @Beaker: We’d b grateful if U could spread word a/b sponsorship of non-profit HacKid con. http://www.hackid.org #
- Survey: security pros feel underpaid, but willing to take a pay cut in some cases http://j.mp/dtw0S5 [Interesting.] #
- #EDU University Offers New Cybersecurity Degrees http://bit.ly/chWlCB [Yep, online and from UMUC.] #
- Astaro Security Gateway Vs 8 Home http://bit.ly/bmuNoI [As I mentioned in http://bit.ly/d1KFnH nice free product 2 play w/.] #
- Demonstration of Scriptless XSS http://bit.ly/b5XrIm (via @peterkruse @mubix) [Interesting.] #
- #CON RT @falconsview: anybody else planning to go to the Cybersecurity Symposium in DC next Tues (7/27)? <- Nope #
- Don’t Wait 4 Adobe Sandboxing 2 Secure Your PDF Viewing (via @bobgourley) http://bit.ly/9p5hhv [Yep, FoxIt and Nuance alrdy have.] #
- IT Security Professional: Heal Thyself: Cybersec Lessons 2 b Learned fr Medicine Field http://bit.ly/afx3oM [Interesting.] #
- #JOB Apply now! #InfoSecMentors Meetup 4 all project participants 7-9pm 7/28 @ BSides http://bit.ly/cf4ae0 (via @joshcorman @petermannmc) #
- MS’s Mike Reavey Talks a/b New “Coordinated Vuln Disclosure” Approach http://bit.ly/dzurYv [Will rebranding really help?] #
- RT @InfoSecMentors: #BSidesLV InfoSec Careers Grand Slam! Wed 4pm-@grecs 5pm-@jsokoly 6pm-@infosecmentors 7pm-Mentors Meetup! #
- Dissecting the Hack: How We Rewrote STAR Section http://bit.ly/cH1x9n (via @bbaskin @jaysonstreet) [I'm getting stressed just reading this.] #
- Fed Cyber Strategy Gets Modestly Clearer http://bit.ly/b99bPZ <- Disagree, it made responsibilities much less clear. (via @danphilpott) #
- #JOB We’re hiring again see http://bit.ly/9I5v5P and http://bit.ly/aljRLn (via @VRT_Sourcefire) #
Well, that’s all for this week. Be sure to follow me on Twitter at @grecs for more great tweets during the week! See ya…
No related posts.
