Browse by Tags

All Tags » Security (RSS)
Phishing for a Tax Refund
What's wrong with this picture? If you answered "why would the IRS use a web server in Korea to ask for information about my tax refund" you are a winner! This is a phishing site preying on people who do not know that all you need to do...
Posted 04 May 2008 09:30 PM by jesper | 2 comment(s)
Filed under:
Mitigate the Image Uploader Vulnerabilities
The big security news this week is the six vulnerabilities found in various image uploader ActiveX controls. In case you haven't seen the news , there are exploits available publicly for remote vulnerabilities in five different ActiveX controls. US...
Posted 06 February 2008 11:07 AM by jesper | 5 comment(s)
Filed under: , ,
Using Autoplay on Vista To Stop Attacks
The January issue of TechNet Magazine has an article I wrote about how to hack a system using autoplaying USB flash drives. While it is not possible to stop all attacks from USB tokens, Vista does include some interesting protective measures. However...
Posted 23 December 2007 10:41 AM by jesper | 1 comment(s)
Filed under: , ,
Is Firefox More Secure than Internet Explorer?
Well, sure it is. According to the Firefox web site, which must of course be untainted by marketing claims since it is Mozilla, " Firefox continues to lead the way in online security". OK, marketing hyperbole aside, I'm a data guy. I care...
Posted 30 November 2007 12:28 PM by jesper | 7 comment(s)
Filed under: , ,
What They Teach Kids These Days
Sweden has always been a little "cutting edge," if you know what I mean. Little did I know, however, just how cutting edge. This picture was snapped in a toy store in Stockholm last week: I probably stood there stunned for a good two minutes...
Posted 03 September 2007 01:18 PM by jesper | 4 comment(s)
Filed under: ,
The Protocol Handler Saga Continues: Say What Secunia?
Sometimes you just have to wonder how far people will go to lend undeserved credibility to opinions. The Protocol Handler Saga is rapidly becoming a religious war. The latest entry is related to a very cool exploit that Billy Rios and Nate McFeters published...
Posted 26 July 2007 04:19 PM by jesper | 17 comment(s)
Filed under: ,
Hey, Mozilla: Quotes Are Not Legal in a URL
When I was a child, I learned a saying that I still find important to keep in mind: Those who are sitting in a glass house shall not throw stones The good folks at Mozilla may want to look up what that really means. Two days ago, Mozilla published Firefox...
Posted 20 July 2007 10:25 PM by jesper | 61 comment(s)
Filed under: , , ,
New Firefox Available
Mozilla has published a new Firefox. Version 2.0.0.5 fixes the FirefoxURL protocol handler issue by changing the calling convention for the protocol handler. Instead of the old calling convention: C:\\PROGRA~1\\MOZILL~2\\FIREFOX.EXE -url “%1″ -requestPending...
Posted 19 July 2007 09:10 AM by jesper | 2 comment(s)
Filed under:
Blocking the Firefox -> IE 0-day
Thor Larholm, unhelpfully, published details on what he claims is a 0-day exploit for Internet Explorer (IE) yesterday. This exploit is actually for Firefox, but Thor exploited it by making IE launch Firefox. Firefox creates three protocol handlers. A...
Posted 10 July 2007 08:55 AM by jesper | 59 comment(s)
Filed under: , ,
It's been a month already?
It has really been a month since my last post. I will try not to let it go that far between them again. I've been busy with diving, and writing. On that note, my second Access Control List (ACL) article came out in TechNet Magazine this week. It is...
Posted 01 July 2007 03:02 PM by jesper | 1 comment(s)
Filed under: ,
Wiping a drive, the easy way
While poking around for a blog post on Susan's blog, I found this one , asking how to wipe a drive. Teacher, Teacher, I know the answer, I know: cipher /w:<drive letter> This command, built into Windows XP and higher, does a three-write pass...
Posted 24 August 2006 10:15 PM by jesper | 5 comment(s)
Filed under: , ,
Admin Rights Hall Of Shame and Complaint Abuses
A few weeks ago I bought a copy of Nobeltec's Tides and Currents software. Nobeltec is a subsidiary of Jeppesen, well known for their aviation, and apparently now also marine, navigation charts. I was told this software was by far the best way to...
Posted 17 August 2006 10:01 PM by jesper | 12 comment(s)
Filed under: ,
Interesting Phishing Twist
The other day I got a phishing mail purporting to be from E-Bay. That part in and of itself was not unusual. What was interesting was that the link used a different technique to disguise itself than what I have seen before. Instead of using a URL made...
Posted 17 August 2006 01:55 PM by jesper | 1 comment(s)
Filed under: