Grecs’ Weekly Infosec Ramblings for 2010-12-23

• OpenBSD back door claim now in doubt http://j.mp/ffVnXS (via @CSOonline) [In case you missed this.] #
• NIST Offers Continuous Monitoring Guidance. Public Feedback Sought for SP 800-137. http://j.mp/eO6ZWd [Go-go @danphilpott.] #
• #CON Yes, there WILL b B-SidesDC near #shmoocon Info on location + CFP will come out after @27c3. (via @Nickf4rr) #
• BLOGGED: Grecs’ Weekly Infosec Ramblings for 2010-12-16 http://bit.ly/g73Oah #
• Salted Hash blog: Security pros to follow on Twitter, 12-17 http://j.mp/eTe1Wn [Thanks for the recommendation! ] #
• #CON Readout of Secretary Napolitano's Remarks at The Atlantic's #cybersecurity Forum. http://j.mp/eZ5xwb #DHS (via @werntzp) #
• #CON Rise of #Shmoocon Speakers List! http://bit.ly/cjjvO9 (via @exoticliability @SecurityBSides @mjdotme) #
• BLOGGED: Top 3 NoVA Infosec Blog Posts of the Week http://bit.ly/hEfTnd #
• Anyone know if there is a NAISG around DC? http://bit.ly/i4RHbT #
• Blog post – thanks to @alexhutton for data that fixes my biases. http://bit.ly/eTRJaW (via @djbphaedrus) [Interesting.] #
• MAA Distinguished Lecture on History of Crypto http://bit.ly/dE7xu7 (via @falconsview) [Good read. Looks like a good listen 2.] #
• WordLens would b on WATSON's iPhone… if he needed one: http://bit.ly/i8QqoR (via @IBMFedCyber) [Very cool.] #
• IN CASE U MISSED IT: Top 3 NoVA Infosec Blog Posts of the Week http://bit.ly/fGyyAk #
• IN CASE U MISSED IT: Grecs’ Weekly Infosec Ramblings for 2010-12-16 http://bit.ly/gSPSUv #
• Senate OKs NIST Reorg: Provision bars feds from forcing Industry to adopt NIST IT guidance. http://bit.ly/g5YWfb #
• Google Beefs Search Result Malware Warning http://bit.ly/gRY7rO [Mmmm? I thought they already did this.] #
• Amazon allows direct upload of VMware VMs into EC2. http://bit.ly/fXpLlo (via @jaymcjay @mubix) [Can U say BackTrack?] #
• Is there an official (or unofficial) list of all the @citysec accounts? cc: @charmsec ? (via @PhillySec @MJCdotMe) [citysec.org?] #
• Stored XSS in Amazon – http://bit.ly/eCccwW – catch? 1 has 2 write book! (via @headhntr @rjaucher) [Finally, reason 2 get started.] #
• Santa’s secret cables leaked from North Pole http://j.mp/eSJ2rp (via @GuidoS @schuetzdj) [Fed employees, this is NSFW. ] #
• Nessus Report Hacking at December NoVA Hackers http://bit.ly/fnY0AW (via @novahackers) #
• Is anyone's Apple/iTunes account being locked out recently? Second time in 2 weeks I had to reset mine. #
• #NOVABLOGGER New Frontiers in HTML5 http://bit.ly/e02O2B (via @novainfosec) [Cool, an HTML5 security cheatsheet.] #
• Great analytical, non-FUD, WSJ article in about smartphone data oversharing http://on.wsj.com/gClU80 (via @arj @rgaucher) #
• Glad our rights are being protected. But I hate it when creeps get a break http://bit.ly/hoLaIb (via @bobgourley) #
• Researchers ID Few Internet Choke Points http://bit.ly/gQoVJK (via @derekcslater) [Done at George Mason too.] #
• 10 most worst hacker attacks http://j.mp/ehiPWH according to Business Insider (via @mikkohypponen @TiffanyRad) [Fun read.] #
• Added NIST SP 800-39 Integrated Enterprise-Wide Risk Mgmt 2 FISMApedia http://j.mp/i1zUUg (via @danphilpott) [Great resource.] #
• Audit of OpenBSD IPsec Yields No Backdoors: http://j.mp/gRogQl (via @pansolidate @danphilpott) #
• Bummed-Out Users Give AV Bloatware Boot http://j.mp/eidyAF [Gr8 ex of users choosing usability over security.] #
• BLOGGED: Where You Want to Be This Week for 2010-12-20 http://bit.ly/hbmYyZ #
• Many routers R shipped out w/ same default SSL certs, yielding projects like littleblackbox http://bit.ly/gv2sWF (via @evejou) #
• #TOOL Samurai 0.9.5 released http://bit.ly/i63EzO (via @komeilipour @evejou) [Nice.] #
• Car Immobilisers Easily Circumvented http://bit.ly/eYczan [Been hearing a lot about this lately.] #
• IN CASE U MISSED IT: Where You Want to Be This Week for 2010-12-20 http://bit.ly/evbMPm #
• Good DDoS Study by Harvard Folks http://bit.ly/giIlJ1 (via @rybolov) #
• EH-Net's Hacking Challenge, The Nightmare b/f Charlie Brown's Christmas http://bit.ly/dIaycy (via @edskoudis @mubix) #
• Book is Officially Released – Social Engineering: Art of Human Hacking http://bit.ly/fURjt4 (via @humanhacker @carnal0wnage) #
• What it's like 2 have your security con talk rejected http://bit.ly/fFE0lB [I'm feeling this one. ] #
• pwnshell – a better jsp shell http://bit.ly/i83Cc9 (via @devilok @evejou) [Nice.] #
• Short History of Christmas Malware http://bit.ly/hYpXyk (via @lennyzeltser @sans_isc) [Very appropriate this time of yr.] #
• Reminder: ISSA DC Meetup @ Tue Dec 21 6:30pm – 8pm (NovaInfosecPortal.com Calendar) (via @novainfosec) #
• In her own words: Janet Napolitano on cybersecurity. Sort of a DHS State of Cybersecurity Union http://bit.ly/g6AhPr #
• #MOBILE A well-reasoned article about iOS security & jailbreaking.. http://j.mp/h7QAAX. (via @arj @schuetzdj) #
• Secunia intros auto-update to patch management tool http://bit.ly/hYWZ9c [Nice!] #
• #NOVABLOGGER Password managers – 1Password http://bit.ly/humpaT (via @novainfosec) [I like LastPass too.] #
• Cloud Security Alliance Updates Controls Matrix http://bit.ly/e2uvyB #
• Ah ha! it was an appsec breach!! re Gawker's future security plans revealed http://bit.ly/e9MF5B (via @falconsview) #
• MS-ISAC raised #cyber threat level 2 Guarded due to recent vulns. https://bit.ly/hELSGK (via @werntzp) [Oh nooos.] #
• FCC approves new #NetNeutrality rules 2 prohibit broadband cos fr interfering.. http://on.msnbc.com/hnAtAJ (via @GoldbergLawDC) #
• House approves 1st major NIST reorg; bill goes to White House for president's signature. http://bit.ly/fdNv3s #
• Stuxnet to Gonzalez to Snoop: The Year in Lists http://bit.ly/exJsts [Some year-end "Top" lists.] #
• Security Cons: Why go? http://bit.ly/h7In2g [RSA vs #ShmooCon deathmatch. ] #
• More on whole FCC net-neutrality thing fr WaPo .. nice analysis. http://wapo.st/hFYSw3 via @washingtonpost (via @mschafer) #
• #NOVABLOGGER Nails in the Crypt http://bit.ly/dNnF6z http://j.mp/nispblog (via @novainfosec) #
• Domino Effect of Gawker's Poor Password Practices http://bit.ly/e8Yf4O #
• Informal Mobile Top 10 Lists .. Give them feedback. #OWASP http://bit.ly/dY4hr5 (via @jack_mannino) [Nice project.] #
• Brief interview @edskoudis did yesterday a/b holiday-hacking challenges: http://bit.ly/hhYYHv (via @ethicalhacker) #
• #JOB Reviewing your infosec career path plan for the New Year http://bit.ly/eMIc0w (via @taosecurity) [Good read.] #

No related posts.

Tags: digest, grecs, twitter