MSInfluentials
A new blog site for influential people

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site
  • Anatomy of a Hack 2008

    A few years ago I delivered a very popular presentation I called "Anatomy of a Hack." Well, actually, I called it "How to Get Your Network Hacked in 10 Easy Steps" but the marketing department at my previous employer thought that title was a bit, edgy, so they renamed it. The Chinese...
    Posted to Jesper's Blog by jesper on 08-22-2008
    Filed under: Filed under: ,
  • Buy the original Olympic Torch from Beijing

    "Buy the original Olympic Torch from Beijing" That was one of the fake headlines in the latest "CNN.com Daily Top 10" malware spam I've been getting lately. This particular spam is a fake newsfeed which redirects you to one of many sites. All the sites have the same thing in common...
    Posted to Jesper's Blog by jesper on 08-08-2008
    Filed under: Filed under:
  • Phishing for a Tax Refund

    What's wrong with this picture? If you answered "why would the IRS use a web server in Korea to ask for information about my tax refund" you are a winner! This is a phishing site preying on people who do not know that all you need to do to get your tax rebate is to file a tax return this...
    Posted to Jesper's Blog by jesper on 05-04-2008
    Filed under: Filed under:
  • Mitigate the Image Uploader Vulnerabilities

    The big security news this week is the six vulnerabilities found in various image uploader ActiveX controls. In case you haven't seen the news , there are exploits available publicly for remote vulnerabilities in five different ActiveX controls. US-CERT is offering the, relatively unhelpful, advice...
    Posted to Jesper's Blog by jesper on 02-06-2008
    Filed under: Filed under: , ,
  • Using Autoplay on Vista To Stop Attacks

    The January issue of TechNet Magazine has an article I wrote about how to hack a system using autoplaying USB flash drives. While it is not possible to stop all attacks from USB tokens, Vista does include some interesting protective measures. However, the autoplay decision flow in Vista is quite convoluted...
    Posted to Jesper's Blog by jesper on 12-23-2007
    Filed under: Filed under: , ,
  • Is Firefox More Secure than Internet Explorer?

    Well, sure it is. According to the Firefox web site, which must of course be untainted by marketing claims since it is Mozilla, " Firefox continues to lead the way in online security". OK, marketing hyperbole aside, I'm a data guy. I care about what the data says. Fortunately, Jeff Jones...
    Posted to Jesper's Blog by jesper on 11-30-2007
    Filed under: Filed under: , ,
  • What They Teach Kids These Days

    Sweden has always been a little "cutting edge," if you know what I mean. Little did I know, however, just how cutting edge. This picture was snapped in a toy store in Stockholm last week: I probably stood there stunned for a good two minutes. Brio is known for high-quality wooden toys, particularly...
    Posted to Jesper's Blog by jesper on 09-03-2007
    Filed under: Filed under: ,
  • The Protocol Handler Saga Continues: Say What Secunia?

    Sometimes you just have to wonder how far people will go to lend undeserved credibility to opinions. The Protocol Handler Saga is rapidly becoming a religious war. The latest entry is related to a very cool exploit that Billy Rios and Nate McFeters published on Tuesday. Unfortunately, he failed to give...
    Posted to Jesper's Blog by jesper on 07-26-2007
    Filed under: Filed under: ,
  • Hey, Mozilla: Quotes Are Not Legal in a URL

    When I was a child, I learned a saying that I still find important to keep in mind: Those who are sitting in a glass house shall not throw stones The good folks at Mozilla may want to look up what that really means. Two days ago, Mozilla published Firefox version 2.0.0.5 to fix a security vulnerability...
    Posted to Jesper's Blog by jesper on 07-21-2007
    Filed under: Filed under: , , ,
  • New Firefox Available

    Mozilla has published a new Firefox. Version 2.0.0.5 fixes the FirefoxURL protocol handler issue by changing the calling convention for the protocol handler. Instead of the old calling convention: C:\\PROGRA~1\\MOZILL~2\\FIREFOX.EXE -url “%1″ -requestPending %1 is the string that urlmon.dll fills in...
    Posted to Jesper's Blog by jesper on 07-19-2007
    Filed under: Filed under:
  • Blocking the Firefox -> IE 0-day

    Thor Larholm, unhelpfully, published details on what he claims is a 0-day exploit for Internet Explorer (IE) yesterday. This exploit is actually for Firefox, but Thor exploited it by making IE launch Firefox. Firefox creates three protocol handlers. A protocol handler is essentially a mapping from an...
    Posted to Jesper's Blog by jesper on 07-10-2007
    Filed under: Filed under: , ,
  • It's been a month already?

    It has really been a month since my last post. I will try not to let it go that far between them again. I've been busy with diving, and writing. On that note, my second Access Control List (ACL) article came out in TechNet Magazine this week. It is the second article excerpted from the Windows Vista...
    Posted to Jesper's Blog by jesper on 07-01-2007
    Filed under: Filed under: ,
  • Wiping a drive, the easy way

    While poking around for a blog post on Susan's blog, I found this one , asking how to wipe a drive. Teacher, Teacher, I know the answer, I know: cipher /w:<drive letter> This command, built into Windows XP and higher, does a three-write pass over a drive to wipe all free space. You will, of...
    Posted to Jesper's Blog by jesper on 08-25-2006
    Filed under: Filed under: , ,
  • Admin Rights Hall Of Shame and Complaint Abuses

    A few weeks ago I bought a copy of Nobeltec's Tides and Currents software. Nobeltec is a subsidiary of Jeppesen, well known for their aviation, and apparently now also marine, navigation charts. I was told this software was by far the best way to analyze currents for diving purposes. When I received...
    Posted to Jesper's Blog by jesper on 08-18-2006
    Filed under: Filed under: ,
  • Interesting Phishing Twist

    The other day I got a phishing mail purporting to be from E-Bay. That part in and of itself was not unusual. What was interesting was that the link used a different technique to disguise itself than what I have seen before. Instead of using a URL made up of an IP address or some nonsense, it bounced...
    Posted to Jesper's Blog by jesper on 08-17-2006
    Filed under: Filed under:
Page 1 of 1 (15 items)
All postings are copyright Jesper M. Johansson, in the year they were made. These postings are provided "AS IS" with no warranties, and confer no rights. All postings are the sole opinions of Jesper M. Johansson and do not reflect any official opinion of anyone else with whom the poster is affiliated or has been affiliated in the past. Use of included code samples is permitted for non-commercial use, with no warranties of fitness express or implied. All use of any information or code snippets posted in this blog at the user's sole risk. The blog site would like to thank www.ownwebnow.com and www.exchangedefender.com for their support.
Powered by Community Server (Commercial Edition), by Telligent Systems