Grecs’ Weekly Infosec Ramblings for 2010-10-15

If you’re not already following some of our excellent NovaInfosec Twits and are wondering where to get the best NoVA-, DC-, and MD-related security tweets, look no further than this post. Published every Friday, our “Infosec Ramblings” post takes many of my security tweets/RTs from the past week and puts them into one easy to digest post. And if you don’t want to wait an entire week, just stop on by my @grecs Twitter account.

• Facebook Unveils Changes to Enhance Privacy http://bit.ly/8YfPMX [What about the horrendous ToS update tho?] #
• Cyber Security Awareness Month – Day 6 – Computer Monitoring Tools http://bit.ly/9uYpnL #
• #ASDC10 is next month. But last day that room rates are guaranteed is this Mon the 11th. Book now! http://bit.ly/d00En2 (via @AppSecDC) #
• Cyber Security Awareness Month – Day 7 – Remote Access & Monitoring Tools http://bit.ly/9gVyrn [More cybersec month goodness.] #
• #MEETUP November Meeting: Monday Nov 15th 2010 http://bit.ly/a9ctTT (via @novahackers) #
• BLOGGED: Grecs’ Weekly Infosec Ramblings for 2010-10-07 http://bit.ly/bGlQ3i #
• New SQLi Cheatsheet – Tx to @0x6D6172696F & @FluxReiners 4 helping me..! http://bit.ly/anrpwa (via @LightOS @rgaucher) #
• IN CASE U MISSED IT: Grecs’ Weekly Infosec Ramblings for 2010-10-07 http://bit.ly/d4an6X #
• Information-Age Lessons from a Bronze-Age Fort http://bit.ly/amAwPH (via @derekcslater) [Some things don't change.] #
• Gmail Security Checklist Takes Comprehensive Walk Thru Webmail Safety http://bit.ly/bICrEe (via @lifehacker @Konshu @ibmfedcyber) #
• Re discussion last week re Myspace case http://bit.ly/cZ9yhP [judge ruled "no expectation of privacy" despite settings] (via @hal_pomeranz) #
• MS buying Adobe?!? http://reut.rs/czl4ID Epic fail. (via @gattaca @ryanaraine @briankrebs @taosecurity) [Is this a joke?] #
• Adobe Details Proposed Reader ‘Sandbox’ http://yhoo.it/cqHnj8 [Instead of adding something & making more complex, why not simplify?] #
• Want to see what’s happening at the NoVA Hackers Meeting?! http://bit.ly/dmCWFe (via @novahackers) #
• Cyber Security Awareness Month – Day 8 – Patch Management and System Updates http://bit.ly/bEbFXe [Go PSI .. at least if running Win.] #
• #NOVABLOGGER On the Other Side of an Advanced Persistent Threat http://bit.ly/afm3LY http://j.mp/nispblog #
• Microsoft Plans Biggest Ever Patch Tues http://j.mp/aXnfDr (via @regsecurity) [Wow, 49 vulns. A new record. Congrats. ] #
• #JOB hey good people – @geminisecurity is hiring! security architect, PKI engineer, hacker http://j.mp/a4Wk7L (via @falconsview) #
• PandaLabs July-Sep Quarterly Report http://j.mp/c7lwM8 (via @SecuraBit_Jay) [Might be a good read.] #
• How 2 Manage Gen Y: New Gen Brings New Skills, Perspective in Cybersec. http://j.mp/c2ZghJ (via @InfosecCareer) [Interesting.] #
• It’s Not the Tweet, It’s the Thought: What you know .. makes you a Twitter influencer. http://j.mp/dvy1Bh @InfosecCareer. #
• It’s a scam, don’t believe it. Marcus J. Carey (@marcusjcarey) changed twitter name to @MJCdotme (via @MJCdotme) #
• NIST released SB Sept. 2010 SCAP: Helping Orgs Maintain & Verify Security Of Their Info Systems http://j.mp/cYbAv3 (via @danphilpott) #
• Cyber Security Awareness Month – Day 9 – Disposal of an Old Computer http://j.mp/aa9AKC (via @sans_isc) #
• #JOB Looking 4 jobs doing exploit dev, defense research, or dev? Sourcefire, VRT is hiring in columbia. (via @kmx2600 @baltimorenode) #
• Cyber Security Awareness Month – Day 10 – Safe browsing for pre-teens http://j.mp/bzcUOk (via @sans_isc) #
• #CON Thinking about speaking at #ShmooCon 2011? Get your submission in by 10/31 for first round consideration! (via @herrtodd @mubix) #
• IN CASE U MISSED IT: Where You Want to Be This Week for 2010-10-11 http://bit.ly/atNBPk #
• BLOGGED: Where You Want to Be This Week for 2010-10-11 http://bit.ly/bYft8R #
• iPhone, meet Wireshark: http://j.mp/cmmzau (via @pcapr @jasonmoliver) [Cool, sniff traffic via Mac bridge.] #
• #NOVABLOGGER Hey tweeps, check out my new site/blog http://mjc.me (via @MJCdotMe) [New blogger! Oh no same guy. Gotta fix his link. ] #
• “The Zombie Network: Beware ‘Free Public WiFi’” http://j.mp/bOeoXc (via @jaysonstreet) [Nice writeup!] #
• Cyber Security Awareness Month – Day 11 – Safe Browsing for Teens http://j.mp/bARz9F (via @sans_isc) #
• I take look at several diff Web site exploit kits; all have Java flaws as their most productive http://j.mp/90NSJL (via @briankrebs) #
• Occupancy Permit GRANTED! Moving equip & furniture into space over next 2 weeks, hoping 4 Halloween opening party. (via @ReverseSpace) #
• This is best blog post ever. Same is true 4 cmts. http://j.mp/cduLj9 (via @technosailor @pmhesse) [Cmt on how funny this post is.] #
• DHS Launches Cybersecurity Awareness Campaign http://j.mp/cpQhtY (via @DarkReading) #news #
• Tokenization: No Card # Means No PCI Audit, or Does It? http://j.mp/bLcdkQ (via @GovInfoSecurity) [See 4 @rybolov quotes.] #
• Pentagon’s 193 Mind-Numbing Cybersec Regs http://j.mp/b3jann [chart "best viewed on 22x17 paper" (via @DrInfoSec) #
• #CON Why government security pros must attend OWASP AppSec DC 2010, by @BillBrenner70: http://j.mp/bUa2em (via @CSOonline) #
• CSA releases consensus assessment questionnaire http://j.mp/d2omyU [feat. @beaker as editor] #cloud (via @DougBarbin @DrInfoSec) #
• October 2010 Microsoft Black Tuesday Summary http://j.mp/98BVfx (via @sans_isc) #
• Cyber Security Awareness Month – Day 12 – Protecting and Managing Your Digital Identity On Social Media.. http://j.mp/aF85vd (via @sans_isc) #
• Obama administration slow to implement cybersecurity measures, says GAO http://j.mp/9yQPRu (via @IBMFedCyber) [Ya think?] #
• #CON Registration prices go up after 10/15! Register soon to avoid the price jump! http://j.mp/9jY0m0 #ASDC10 (via @AppSecDC) #
• Facebook Introduces One-Time Passwords http://j.mp/bUHx0r [Have heard good & bad things about this. At least they are trying.] #
• “Traditional Penetration Tests are DEAD” http://j.mp/aI0px0 #BSIDESATL lt;~ great read! (via @infosecmafia @dave_rel1k @indi303) #
• Basic Security Housekeeping Vital http://j.mp/9KGDK1 [Gotta get basics right 1st.] #
• PCI Compliance Means Getting Your App Sec Together http://j.mp/ciBSBa [I like the last point.] #
• Great sum 4 those not here .. #MirCon – @Mandiant Incident Response Con Day 1 Review – http://j.mp/9N9FPX (via @malwaregroup @dallendoug) #
• #NEWS US Steps Up Military-Civilian Cyber Defense Coordination http://yhoo.it/9HvEqf [Mmm? Interesting development.] #
• Google Redirect Virus: How 2 Rm http://bit.ly/c7EPcn [Use 2 happen 2 me on Windows few times a year. Thought NS was pwned.] #
• Facebook: The Rise of the Privacy Killer http://bit.ly/91UFof [Nice read.] #
• Cyber Security Awareness Month – Day 13 – Online Bullying http://j.mp/cT9qxO (via @sans_isc) #
• #MEETUP 10/19 NCAC Conf – IT Gov Risk Compliance -$70/mbr 7CPE 40 seats left register @ http://j.mp/bCoXLp (via @ISACA_WashDC) #
• #JOB FREE http://j.mp/cPcaQe Career & Academic Night near Ballston metro 5:30pm 10/19, 20+ employers, .. (via @ISACA_WashDC) #
• #MEETUP Health IT conf- 11/16 details @ http://j.mp/9FxCJn upds on HITECH, PPAC, ONC initiatives, sec & priv (via @ISACA_WashDC) #
• #MEETUP Charmsec holds it’s 30th meetup on Thursday, October 28th at @Slaintepub. There won’t be cake. (via @charmsec) #
• Cyber Security Awareness Month – Day 14 – Securing a Public Computer http://j.mp/bnWor8 (via @sans_isc) #
• Getting closer to measuring your security posture: http://j.mp/cggCPB [New acronym alert - SPOM.] #
• RT @wimremes: *cough*@infosecmentors*cough* http://j.mp/cGODOP (via @jaysonstreet) #
• Hey Facebook, why don’t U learn sec lesson fr Apple? http://j.mp/dpDj3V ["when did U last hear of malicious app on non-jailbroken iPhone?"] #
• Re prev tweet, anyone know of any? #
• How PayPal screws open source projects (via tortoisesvn.net) http://j.mp/ayZLKj (via @evejou) [WTF?] #
• #CON #ASDC10 sched update: No change in speakers, but OWASP & Metrics tracks swapped days to allow for speaker schedules. (via @AppSecDC) #
• #CON This week is LAST week to reg b/f prices go up. Register by 10/15 for cheaper reg! http://j.mp/duUHem #ASDC10 (via @AppSecDC) #
• #CON We’ve had questions a/b CTF – more details coming soon. Folks from @owaspdc & @capsecdc have been hard at work! (via @AppSecDC) #
• #CON Hotel Update! Hyatt has dug up few more rooms for us. You can still register at http://j.mp/bA8jCq if you move fast. (via @AppSecDC) #
• In Defense of FISMA by Tom Davis (Former Congressman) @NextGov http://j.mp/cOoT0p (via @danphilpott) [Raises some good pts.] #

Well, that’s all for this week. Be sure to follow me on Twitter at @grecs for more great tweets during the week! See ya…

No related posts.

Tags: digest, grecs, twitter