Security Corner:

Opinion


July 22, 2008  12:26 AM

If Spam Has You Irate, Obfuscate!



Posted by: Ken Harthun
Email security, Opinion, Security, Security maxim

Spam email is not only a nuisance, it's a security risk. Most of the viruses, worms, and trojans floating around these days are transmitted in one form or another via spam. The threat can be attached directly to the email or it can rely on some subterfuge to get a clueless victim to click on a link...

July 5, 2008  2:43 PM

The #1 Security Priority: Protect The Information



Posted by: Ken Harthun
Embedded systems, Encryption, Firmware security, Networking, Opinion, Security, Security management, Storage, Vulnerabilities

SANS recently reported that a Ponemon Institute survey, commissioned by Dell,...


June 30, 2008  3:55 PM

Virtual Safe Deposit Box?



Posted by: Ken Harthun
Cryptography, DataManagement, Encryption, Opinion, Portable computing, Security

A bank safe deposit box, securely stored in a vault behind several feet of concrete on five sides with a virtually impenetrable combination-and-time-lock-protected door on the sixth side, is about as safe a storage place as you can get for your cash, gold, jewels, important documents, and other...


June 20, 2008  1:31 AM

HP’s iLO is not Vulnerable to Phlashing Attack



Posted by: Ken Harthun
Development, Embedded systems, Firmware security, Opinion, Remote management, Security, Security management, Vulnerabilities

My May 29th post, "Phlashing Attack Can Damage Systems Beyond Repair," generated some...


June 14, 2008  1:57 PM

Infected PC? Don’t Just Clean–Wipe and Reload



Posted by: Ken Harthun
Anti-malware, Malware, Opinion, Rootkit, Security, Security maxim

You've seen them: PCs with serious malware infections that seem to defy any and all attempts to clean them up. You persevere and eventually get rid of the files that regenerate upon deletion, clean up the autorun registry entries that keep the malware going, and kill all the malicious processes...


May 29, 2008  8:14 PM

Phlashing Attack Can Damage Systems Beyond Repair



Posted by: Ken Harthun
Cyber warfare, Opinion, Remote Code Execution, Security, Security management, Vulnerabilities

It has long been an "everybody knows" that viruses and other malware cannot physically damage hardware. We've all seen those alarming emails that say, "...the virus destroys Sector Zero, thus permanently destroying the hard disk," a statement we know is rubbish; at worst, the disk is rendered...


May 29, 2008  5:14 PM

Beware the Internet Criminals’ Latest Trick



Posted by: Ken Harthun
Browsers, Email security, Opinion, Phishing, Security, spam

Some spammers, phishers, and other Internet criminals have resorted to (mis)using the convenient service of tinyurl.com in order to disguise their web site addresses and entice you into clicking. Tinyurl.com takes those weird, long URLs and...


May 18, 2008  6:39 PM

Are You a Hacker Target?



Posted by: Ken Harthun
Browsers, Firewalls, NAT, Opinion, Routers, Security

Aside from those unenlightened, naive souls who invite every hacker, phisher and Nigerian scammer on the planet into their computers how many people actually fall victim to hackers? I'm talking about people who take reasonable precautions, like installing a NAT router, running a personal firewall...


May 11, 2008  1:13 PM

Windows XP SP3 Offers Enhanced Reliability and Security, But Not IE7



Posted by: Ken Harthun
Browsers, Cryptography, Microsoft Windows, Networking, Opinion, Security

The long-awaited Windows XP Service Pack 3 became available as an Express Update May 6, 2008 on Windows Update, and offers enhanced reliability and security through a few new features: Network...


April 4, 2008  8:13 PM

Are You a Security “No” Man or a Security “Yes” Man?



Posted by: Ken Harthun
Networking, Opinion, Security, Security management

We security wonks always seem to be put into a position of having to say "no." That makes us unpopular with the I'm-not-hurting-anything crowd who insist on checking their webmail, IMing their friends, and running assorted and sundry downloaded and web-based applications (but only on their time, of...