xkcd gets it right when it comes to users creating difficult to remember passwords and the strength of those passwords. It’s better to create a good passphrase rather than a password with just substituted characters.
Archive for the ‘Computer Security’ Category
Asta La Vista, Dropbox!
Hey boys & girls who use Dropbox, Don’t know if you perused through your inboxes this morning, but you should have received an email from Dropbox letting you know that they changed their Terms of Service (TOS). The email should have looked a little something like this: [...]
Episode 29- Sony Hack, MacDefender, Dropbox Privacy and ForensicArtifacts.com
In this episode, I talk about the Sony hacks, MacDefender, Dropbox privacy issues, ForensicArtifacts.com and upcoming events in the month of June. Show Notes: Sony/PBS Hacks links: http://arstechnica.com/tech-policy/news/2011/06/sony-hacked-yet-again-plaintext-passwords-posted.ars http://arstechnica.com/tech-policy/news/2011/05/hacktivists-scorch-pbs-in-retaliation-for-wikileaks-documentary.ars http://www.informationweek.com/news/security/attacks/229700188 Mac Defender, Apple Security Update and Avast A/V Free for Mac: http://www.tuaw.com/2011/05/19/macdefender-malware-protection-and-removal-guide/ http://www.tuaw.com/2011/05/31/mac-security-update-2011-003-now-available-for-download/ http://www.macrumors.com/2011/06/02/apple-responds-quickly-to-evolving-mac-defender-threat-with-updated-malware-definitions/ http://support.apple.com/kb/HT4657 http://www.tuaw.com/2011/06/01/avast-free-antivirus-for-mac-beta-now-available/ Using TrueCrypt with Dropbox: http://lifehacker.com/5794486/how-to-add-a-second-layer-of-encryption-to-dropbox [...]
Gawker, Gizmodo & Lifehacker User Databases Compromised
The user databases for Gawker and it’s sister sites Gizmodo and Lifehacker have been compromised. If you have user accounts set up for any of those sites, make sure you change your passwords immediately!!! If you have a user account set up for any of those sites and you use the same username & password [...]
Episode 20- Lenny Zeltser talks Malware Analysis
Another milestone episode. Made it to 20 and was lucky to have a special guest, Lenny Zeltser. Lenny (in my opinion) is a Malware Analysis guru. He stopped by to talk about Malware Analysis, a Linux distribution called REMnux which he recently released and the two Malware courses that he teaches for SANS. Show Notes: [...]
Meetup group in the NYC area- NYC4SEC
Do you live in the NYC area? Are you in the field of Information Security, Incident Response or Digital Foreniscs? Are you just a technophile who is interested in personal computing security or news on the latest tech? Then read on….. The NYC4SEC Meetup group is composed of people from all fields: academic, software developers, [...]
Episode 17- Mac Security
In this episode, I talk with Dave Melvin of the Inside the Core podcast about how to secure your Mac. Also, updates to the HacKid Conference & the Dissecting the Hack auction that has proceeds going to Hackers for Charity. Show Notes: HacKid Con, which is being held Oct. 9-10, 2010 in Boston, now has [...]
Microsoft advises of fixes to avoid the .lnk/.pif file vulnerability
Microsoft has posted both a software and a manual fix/workaround that will help mitigate the .lnk and .pif file vulnerability on their Support page. This vulnerability can allow a someone remote access to your Windows machine from Windows XP all the way up through Windows 7. Use either of the workarounds until Microsoft issues an [...]
Ubuntu Firewall Prep
I originally posted this to Anthony Gartner’s Grass Roots Security blog a few months ago. It covers how to get setup with the GUFW Firewall in Ubuntu (Linux). I figure that there may be some of you that might not have checked out Anthony’s blog (which is excellent BTW!) and might benefit from this little [...]

