2003
374 posts
2003 374
December 2003
- Administering Servers with Webmin
- Security 101 Book
- Using Sysmon to Detect Faulty Hardware
- FreeBSD on Laptops
- Understanding Snort DNS TTL Alerts
- Ways to Install FreeBSD
- Adding a New Disk in NetBSD
- Installing Packages on NetBSD and OpenBSD
- Review of Open Source Network Administration Posted
- Simple Network Health Performance Monitoring with Sysmon
- Cisco Icons Online
- Learning To Install Open Source Software on Solaris and HP-UX
- Verisign Acquires Guardent for $140 Million
- Getting Your FreeBSD Box to Speak 802.1q Trunks with a Cisco Switch
- MRTG with FreeBSD and a Cisco Router
- CAIDA to the Rescue
- Creating Fake Interfaces and Bonding Them
- Bruce Schneier on Northeast Blackout
- US Government Security Report Card
- Creative Commons
- Spammers Target Cambridgeshire Police Force
- Debian Project Compromise
- 1500 Helpful Review Votes at Amazon.com
- Exploiting Cisco Routers Article
- Quirks of NetBSD
November 2003
- Voice-Based Fraud Detection
- Wells fargo laptop thief arrested
- Ron Gula Replies to Information Security Review of NeVO
- Tepatche - Automatic OpenBSD System Patcher
- Wells fargo offers 100000 for info
- Finding the Name of FreeBSD Packages to Install
- Tim O'Reilly on Computer Books
- Other Tidbits on SSH, IRC, and other Topics
- PostgreSQL 7.4 Released. Watch Out For MySQL "Gotchas"
- What Makes For Credible Certifications?
- Network Security Monitoring Saves My Bacon
- TruSecure: "k3wl ," Like "Hackweiser and G-force Pakistan"
- Mapping the Internet on a Dare
- Trying Fedora Core 1
- Let Freedom Ring...Not
- Stephen Northcutt Hints at New 2004 SANS Courses
- Portsman tool is curses interface to
- 21st Century Pilotless Airwolf Stolen
- Criminals Extort Companies With DoS Attacks
- New Sguil 0.3.0 Install Doc for FreeBSD 4.9 REL
- More BSD Stuff
- The Game of 'Life' in PostScript
- SilentPCReview.com Provides Info on Quiet PCs
- My c 64 rides again thanks to rr net
- Using fastest_cvsup and freebsd-update Tools
- Testers for DRAFT Sguil on FreeBSD Installation Guide Needed
- Snort 2.0.3 Released
- Do You Bluejack?
- Wireless IDS "All the Rage"
- Security Hole in Ethereal; Upgrade Now
- Red hat linux is dead
- Threat Matrix Chart Clarifies Definition of "Threat"
- FreeBSD 5.2 RELEASE Due 2 Dec
- Silicon defense exits snort business
- Reviews of C Primer Plus, 4th Ed, The Myth of Homeland Security, and Beyond Fear Posted
October 2003
- Foundstone Wants YOU!
- Microsoft "Threats and Countermeasures" Guide
- Orbitz Hacked; Watch Your Credit Cards
- FreeBSD 4.9 Released Today
- "Words Matter" -- To the Tune of $200 Billion
- New Spam?
- SB 1386 Impotent While CardCops Monitor for Your Card
- The Dynamic Duo Discuss Digital Risk
- What is Extrusion Detection?
- Foundstone Publishes White Paper on Integrating Vulnerability Assessment with Incident Response
- Will Companies Let U Penn Collect Monitoring Data?
- Reliable Software Group Posts New Snort Code
- Hacker History and Pictures
- Rudy Giuliani, White Hat?
- Hit By Credit Card Fraud Again
- NetScreen Announces Deep Packet Inspection Firewalls
- New Security Organizations One Year After Attacks on Root Name Servers
- Dogs, Street Children and Hackers
- PBS Frontline Program on "Cyberwar"
- Surveillance Cameras Invade Privacy, Provide Little Security
- ISS Announces "Proventia" Products
- Review of Intrusion Detection Posted
- Microsoft Windows Security Guides
- Review of Incident Response, 2nd Ed Posted
- Marcus Ranum Rants Online and Offline
- Yen-Ming Chen's Blog
- Osiris File Integrity Checker
- Paper on Windows Memory Forensics
- NIST Releases New Security Guidelines
- Gartner Warning Makes Sense
- IDS Review Addresses Issues That Matter
- National Security Archive Online
- Comcast ISP Troubles
- Understanding Legal Issues of Network Monitoring
- Information Security Education
- A Lesson on Indications and Warning
- Review of SQL Server Security Posted
- Beware the Beast
- Working as an Independent Contractor
- Sourcefire Redefines Intrusion Detection
- SRI Patent on "Hierarchical event monitoring and analysis"
- New Wireless Access Point
- CERT Publishes Report on CSIRTs
- Link Between Viruses and Organized Crime?
- Hacker High School Asks for Help
- Earth Station Five Back Door
- How Best to Keep Operating Systems Current?
- Building a Trusted Apple Operating System
- IATF Forum Brings Government and Industry Together
- Live Satellite TV Feeds
- Low Cost Home Network Defense
- USB 2.0/Firewire Combo PCCard
- Is Amazon.com Defaced?
- Free online research libraries while
- Prelude-IDS: Another Open Source Alternative
- New open source software my friend
- Quadruple Boot Laptop
- Microsoft and Foundstone Release Windows IPSec Guide
September 2003
- Review of Investigative Data Mining for Security and Criminal Detection Posted
- Five Years Ago Today...
- What is BitTorrent?
- Try Tenable Security's NeVO before 30 Sep 03!
- Cell Phone Spam
- Suggestion for Patching Windows Dial-Up Users
- "Snort not backdoored, Sourcefire not compromised"
- Reviews of TCP/IP Analysis and Troubleshooting Toolkit, Real 802.11 Security, and Network Performance Toolkit Posted
- Project to Customize Windows
- Verisign -- "The Value of Trust"?
- Thoughts on OpenSSH Vulnerability
- Good Samaritan Saves Bank's Behind
- RAID News Posted
- Installing a Free X Server on Windows XP
- Happenings at TruSecure
- Way to Go Mike Fratto
- RAID Conference Concludes
- Gartners new take on ids anton
- Slides on NSM Webcasts Posted
- IT Security Hottest Job
- Shoki, the Alternative Open Source IDS
- Ohio University Offers Excellent IDS Resources
August 2003
- Running Snort On a Linksys Wireless Access Point
- Is Earth Station Five a Hoax?
- New "CISSP Associate" for People without Years
- Reviews of Absolute OpenBSD, Protect Your Information with Intrusion Detection Posted
- More ways to bring your commodore 64
- Security News Ticker Added to Blog
- New Version of SHADOW IDS Released
- ISECOM Provides "Non-Profit" Competition for SANS
- Watch Connections with Free Tools
- WAP Gateway Allows Testing, Access
- Researchers Use "Fuzzing" to Find Security Flaws
- Oakley Networks Product Monitors for Inappropriate Insider Activity
- Fidonet links users over phone lines
- Visualization Software for Snort Alerts
- Review of The Complete FreeBSD, 4th Ed Posted
- Blaster Strikes Railroad Company
- Slammer (Jan 03) Crashed Ohio Nuke Plant
- AFCERT Keeps the Faith
- Time Magazine on Blackout
- Updating My Mini-PC... I Mean Cell Phone
- FDIC Proposes Guidelines Telling Banks to Notify Customers of Breaches
- Last Day to Oppose Broadband over Power Lines (BPL)
- Study Shows Blackout's Effects on Individual Routers
- Systrace Policy Library
- Webcast on Network Security Monitoring
- Bring New Life to Your Commodore 64
- Internet Radio Linking Project Connects the World
- Email Sent from Amateur Radio Network to Internet and Back
- Blog Enhancements
- Reliable Software Group Produces Security Code
- Computer Forensic Conference Concludes
- Effect of East Coast Blackout on Internet
- Running Four VMWare Guests Simultaneously
- Knoppix
- GNU FTP Site Compromised
- hrack 61 Released
- Vulnerability in TCPFlow
- Meta Group on IDS
- OS Uptime Project
- Enabling Serial Console Access in FreeBSD
- Msblast Worm Ravaging Internet?
- Vulnerability in Realpath(3) Function Could Lead to Remote Root Compromise
- MyRSS feed for TaoSecurity Blog, but So What?
- IOS Updates
- Portknocking
- Troubleshooting Thunderbird
- USENIX Follow-Up
- Windows NT on FreeBSD
- Sanctum Patent
- Scott Granneman on Security Blogs
- Recent Security Conference Thoughts
- Cisco IOS 12.3 Security Features
- Global Early Warning Information System
- eBay scammer Jay Nelson
- Samhain
- Review of Hacking Exposed, 4th Ed Posted
- Thoughts on Black Hat USA 2003
- FreeConference
July 2003
- Installing Sguil in Red Hat 7.3
- Eagle Scout Security Project
- Review of Linux on the Mainframe Posted
- Criminals Keylogging Kiosks
- Teaching Foundstone Classes at Black Hat
- Evolution of Intrusion Detection Systems
- VMWare Webinars
- Cisco IOS Vulnerability
- CERT®-Certified Computer Security Incident Handler
- Lenny Zeltser's Reverse Engineering Malware
- PacketHound
- Sguil 0.2.5 on Windows
- Reviews of Intrusion Detection with SNORT, Intrusion Detection with Snort, and UNIX Shell Programming, 3rd Ed Posted
- Code Red Two Years Old Today
- MS03-024
- The Design and Implementation of the FreeBSD Operating System
- Hackers Hijack PC's for Sex Sites
- Bonding Tap Outputs
- Windows Rootkits
- Firewall on a Token USB-based NIC
- Honeynet Project Paper on Credit Card Fraud
- Johnny Long and More
- More NSM Notes
- Thoughts on New Lab
- Cisco Logging Network
- Cables for Gigabit
- Top Three Advances in Honeynet Technology
- Two FreeBSD Interfaces on the Same Subnet
- "Super Zonda" Spammers
- California Disclosure Law
- Understanding DVD Storage
June 2003
- Editing c:\windows\system32\drivers\etc\hosts
- Security Checklist for FreeBSD 4.8
- Odd Activity in Argus Logs
- TaoSecurity Web Down
- Les Cottrell Network Monitoring Tools
- Packet Creation Tools
- Anton Chuvakin profiles TaoSecurity Blog
- Support for Windows NT 4.0
- IPv6 in DoD
- 2003 Recent Advances in Intrusion Detection
- Chucktips
- RPM Tips
- Miscellaneous Hardware
- OpenBSD Pf Scrubbing
- Openroot
- Small Form Factor Sensors
- DCPhoneHome
- Commercial IDS Appliances Built on Snort
- Security Focus Vulnerability Database
- Remote Capture Using Winpcap
- Flow Tools
- Problems with CISSP Questions
- Security "Return on Investment"
- Network Tools
- Network Computing on Foundstone
- Guess and FTC Settlement
- Transforming the U.S. Air Force Enterprise Network
- FreeBSD X Configuration
- Don't Hack Air Force Systems
- Combining NIC interfaces on FreeBSD
- Microsoft Patterns and Practices
- Cisco IOS Licenses
- You go Marty!
- Stealing Network Address Space
May 2003
- Sourcefire Introduces Appliance
- Cisco Router Evidence Extraction Disk
- Patching in the Air Force
- Reducing IDS Alerts
- Gunter Ollmann Doesn't Like Hacking Exposed
- CAIDA Tool Taxonomy
- Prevention Always Fails
- Sguil 0.2 Released
- Review of Art of the Steal Posted
- Vasiliy Gorshkov and Alexey Ivanov
- Loopback for Forensics on Linux and FreeBSD
- Nmap in The Matrix Reloaded
- TaoSecurity Blog Added to Security Blog List
- More on Fluffi Bunni Arrest
- New $20 Bill Arriving
- Sp_Perl for Snort
- Sourcefire Seminar
- ILOVEYOU Virus Three Years Old Today
April 2003
- Fluffi Bunni Arrested
- Exploit for Snort 1.9.1
- First Two SANS GSEs
- (ISC)2 Developments
- Review of Windows XP Under the Hood Posted
- Trying New Martial Arts School
- Interview with FreeBSD Core Members
- BGP and ISP Issues
- Open Source Forensics Tools
- Windows Server 2003 Launch
- Professor Orin Kerr
- North American MSSP Magic Quadrant 2H02
- Museum of Broken Packets
- Quad NIC for FreeBSD
- Interservice Hackfest
- Midshipmen Busted for File Sharing
- Legality of Collecting Network Traffic
- Testing LAN Performance
- Review of IT Security: Risking the Corporation Posted
- Cisco Support for Lawful Intercept In IP Networks
- Fiber Optic Cables and Monitoring Saddam Hussein
- IPS vs IDS
- Neohapsis Open Security Evaluation Criteria
- Snort 2.0 Stream4 Vulnerability
- Black Hat Windows Security 2003: Seattle Presentations
- Defending Against an Internet-Based Attack on the Physical World
- Wiretapping VoIP
- Snort 2.0 Released
- Holding Owners of Compromised Computers Responsible
- Review of Troubleshooting Campus Networks Posted
- National Society of Professional Engineers Code of Ethics
- Thoughts on SPAN Configurations
- Tracfone Fraud
- 900 MHz Wireless Access Points
- Wildpackets Expert Packet Analysis Seminar
- ISS Internet Risk Impact Summary Published
- New Samba Vulnerability?
- Cisco Network Infrastructure Design
- Stegtunnel New Release
- FreeBSD 4.8 Released
- Removing Content from Google
- Rik Farrow on VLANs
March 2003
- Review of Special Ops: Host and Network Security for Microsoft, UNIX, and Oracle Posted
- Melissa Virus Four Year Anniversary
- Bejtlich Speaking at SANS NIAL 2003
- CerbNG FreeBSD Kernel Module
- Article on New AFNOSC
- Review of Firewalls and Internet Security, 2nd Ed Posted
- Vulnerability in IIS 5.0
- Review of Hacking Exposed: Linux, 2nd Ed Posted
- Network Security Monitoring Case Study in Hacking Exposed, 4th Ed
February 2003
- Manipulating Online Gaming Servers
- Quiet X on Port 6000 TCP
- Links from SANS Webcast
- Undocumented Features in VMWare
- How Addamark Technologies Detected an Intrusion
- Run KDE on Windows
- Help Net Security Interviewed Judy Novak
- Internet Security Scanner Started as a Shell Script
- Pluf Simple Hostname Scanner
- Foundstone Incident Response in the News
- HIPAA Regulation Available
- Data Processors Internation Suffers 8 Million Credit Card Loss
- Review of Web Services Security Posted
- TaoSecurity ISP OK
- TaoSecurity.com ISP Woes
- Sguil User Six
- Bruce Schneier on Full Disclosure and Locksmiths
- Marcus Ranum on Firewalls
- JTF-CNO Splits
- Review of Absolute BSD Posted
- Rik Farrow on Firewalls
- Cyber Warfare in Iraq
- FreeBSD Serial Console Access
January 2003
- Windows Rootkit ierk8243.sys
- Review of Windows XP Professional Security Posted
- Port 1434 UDP Traffic
- DALnet DDoS Attacks
- SQL Slammer
- Review of Hacker's Challenge 2 Posted
- DNS Traffic Analysis Results
- Amazon.com Review Updates
- FreeBSD 5.0 Released
- Response from Amazon.com
- Email to Amazon.com
- Amazon.com Problem
- Response from Amazon.com
- New TaoSecurity.com and Listmania Lists
- SecurityFocus Removes Exploits from Database
- Story on DNS Root Servers
- Amazon.com Error
- Review of Implementing Intrusion Detection Systems Posted
- First Post and Review of BGP Posted