Antarctic Adventure

Check out my mate Alan and his crazy charity fund raising idea Here

I like this post.

Security testing as 'badness-ometer'

Nice

Multi-tail

Multi-tail seems like a handy tool for general monitoring purposes.

The Blog Worm

For those of you who linked to the blog worm (cute though it may be) please
read this to see why you should replace it with a gif you control.Ahhh - the joys

[the new p0f]

Passive OS fingerprinting - the non-intrusive scan tool:-)

Moves to professionalise Infosec

Was at the ISC2 Secure London conference yesterday. Interesting day, and lots of interesting info. Check out uksaint.org which is a site supported by Intellect, the trade body for the UK hi-tech industry. It is currently hosting the working group info for the move to professionalising the information security industry.

Another interesting URL mentioned was www.staysafeonline.org which could be of use to your average user.

Interesting stats - from Gartner originally

75% of attacks are at application level
70% of vulnerabilities as at application level

and

Reducing the number of application vulnerabilities by 50% should lead to a 75% reduction in costs!

Nice

Non photo realistic Quake



How cool is that?

Security from the start

Dana Epp discusses building security into code and applications. This seems absolutely obvious but you would be astonished at how many organisations do not have secure coding guidelines or even best practices. This should help any application developers.

The end for simple vulnerability scanning?

Nessus is dropping the GPL



Could change the way a lot of security consulting firms run the basic section of a security assessment, as nessus - even though it has its issues around false positives - has always been a staple part of the toolkit.

Binary Pandas

Binary Art in minimalist form.



Pretty cool:-)



But not as cool as the Ninja Panda!

YARRRRRRRRRRR!

Erm - amusing....I guess it describes me well:-) Remember the 19th of September!!!

CALICO JACK! You are 28 %Treasurer, have 46% Seafairability, crave 29% Bloodlusting, and lust 98% in Wenchwanting!

Jack Rakam, or Calico Jack, as you like to be called, there's more to being a pirate than Wenching! Sure you love the ladies (and occasionally the cabin boy), but you can't plunder, pillage, navigate or brutally mame if you're constantly 'dipping your wick'. Forget Anne Bonny, she was a lesbian anyway! And you're undying affection for her got you and your entire crew hanged!

My test tracked 4 variables How you compared to other people your age and gender: You scored higher than 0% on Treasurer You scored higher than 7% on Seafairability You scored higher than 4% on Bloodlusting You scored higher than 99% on Wenchwanting

Link: The What Kind of PIRATE Are You Test written by JosephineGreen on Ok Cupid

It's all go

Well, I've been hectically busy so failing to post here, but have been able to post at moblog while on the move. Now that blogger allows mobile blogging I might do that here....

Bought a new house, which is nice, and I know it's in a nice area, because it's 2 doors down from my current one. It just has an extra bathroom, bedroom, conservatory, shed, two extra public rooms, bigger garden, longer driveway. Yay!

Just got to sell mine now...know anyone who wants a nice 4 bedroom detached house in a very desirable bit of central scotland?

Preparing to go to Portugal for 2 weeks, then Belfast, London, Cowes, Amsterdam and then Kent. Luckily I get the last week in July at home. Which will keep Claire happy...that'll be our 7th wedding anniversary!

Paris - miles better

Well, I ran the Paris Marathon on the 10th of April...what a lovely city, and what a lovely day for a run. Up until half way I was making reasonable time, on course for around a 4hour and a bit run, but slumped badly towards the end and came in at 5hr 35...I suppose I should have trained, hey ho.
I'm so impressed with Paris, especially after my disappointment with New York.
And the shopping is great, if a tad pricey...

New York

Well - was a bit disappointed with my visit to New York. Grand Central station, although nice, is pretty small. Way smaller than they make it look on the telly. And Manhattan is small as well.
And the gadget shops are pants - many of them but very limited product ranges, and the prices weren't competitive, even with the great exchange rate.
And I couldn't even get much for the wife - better shoes/perfumes/clothes etc in Edinburgh.
And the nightlife was a bit sucky too - so all my preconceptions were dashed except one:

The Empire State Building - it is quite spectacular from the top. Old an dknackered inside - we queued for 2 hours in decrepit, dingy corridors - but absolutely worth it!

Sharp Ideas: Monkey Shell: using XML-RPC for access to a remote shell

Spotted this on Sharp Ideas: Monkey Shell: using XML-RPC for access to a remote shell

Very clever

as is Windows Privacy Tools and all of this

A Plan For Scams

Gerv has some good ideas here. Okay, so they have all been discussed before, but they all make sense in the right environment, and together can significantly improve security.

An update to my February 8th IDN post

Firefox 1.01 is released. By default it defeats the IDN spoofing vulnerability.

Which is nice.

Blimming Windows XP

Just when you are about to do a backup, 'cos you've been a bit lax for a couple of weeks, it starts acting up. I started getting IRQ_NOT_LESS_THAN_OR_EQUAL BSODs. After hunting around forums, it appeared to be connected to pagefile issues, so I removed and recreated my pagefile.

Then I started getting POOL errors, which quickly escalated to the classic symptom of only getting to mup.sys on boot. Sadly this wouldn't let me boot from an XP CD either. After much faffing, Knoppix came to the rescue. I built an XP installation on another hard drive (with my faulty one unplugged, otherwise it wouldn't do it!) then rebooted with both drives connected, using Knoppix CD. This at least let me get all my data across. I was going to use captive-ntfs to mount my old drive read/write but the screwed up filesystem wouldn't let me.

So today I finally wiped the old drive, reinstalled and am now downloading all the relevant updates. At least I had used Slipstreaming to give me an XP SP2 CD before all this happened, but it still wants many updates, and the amount of downloads I need for my Audigy Platinum is staggering.

The only upside is that all the cruft will be gone and the machine will run faster for a while:-)

The joy of SOx

Financial Cryptography has another interesting article on Sarbanes-Oxley. The funny thing is the number of companies I have seen who aren't listed on the US Stock Exchange who want to go through something comparable to or exceeding Section 404 requirements. Just in case.

System Dynamics of Insider Threats

This is a pretty interesting analysis, even if the diagrams in the appendix are a tad on the spiderweb/cat's cradle side:-)