To Release, or Not Release Full Disclosures?
Posted by: Eric Hansen
Wired posted an interesting article this month discussing the benefits and losses of hackers releasing exploits out into the wild and to vendors. Some of...
Wired posted an interesting article this month discussing the benefits and losses of hackers releasing exploits out into the wild and to vendors. Some of...
When most people think of validating user input, the first thing to come to mind is making sure a string is a string, numbers are numbers and dates are proper. But does it stop there? Let's have Facebook decide. It seems there's a new exploit available for their chat system, and it's not...
As a short series, I will be showcasing some firewall tips and tricks on what to (not) do if you want to secure your network. The first of which is going to be an overview for a very helpful log analyzer, fail2ban. There's other programs out there, such as logwatch, that monitor logs and ensure...
SANS recently put up an article involving handling phishing attacks within the network: https://isc.sans.edu/diary.html?storyid=14578 While most of the points are sensible, and should be what everyone follows, there is one that I...
http://news.yahoo.com/windows-8-terrible-says-usability-expert-jakob-nielsen-174300612.html While I normally don't nod my head with excitement at what 'experts' say, from personal account of previously using Windows 8, some of the points are valid. On the PC, navigating through is pretty...
There's a nifty extension to Chrome called Facebook Nanny: https://chrome.google.com/webstore/detail/facebook-nanny/gkpjofmdbabecniidggbbicfbcmfafmk This is a nice little plugin in that unless you have notifications from Facebook, a message will show up instead disabling use of Facebook. If...
...looking like it's going to be Windows, according to Slashdot. For those who aren't familiar with Call of Duty and it's release cycle, a new...
An interesting article was posted on Slashdot.org: http://tech.slashdot.org/story/12/11/28/1355225/ipv6-deployment-picking-up-speed In it, it talks about how the transition from IPv4-IPv6 has been extremely slow, and some other common statistics. Overall, the information in it proves...
There's a new RFC that was published this month (http://tools.ietf.org/html/rfc6797) about an additional layer of HTTPS for web browsing, called HSTS (HTTP Strict Transport Security). The basic idea behind it is that the server tells the browser...
There's a good collection of different Python modules to use so you can run a server through Python (think SimpleHTTPServer). One that is commonly used behind Nginx proxies for handling API requests, however, is Tornado (http://www.tornadoweb.org). Since creating my backup service I have chosen...