// 29.Jan.2010

Kernel Level Root-kit

When do I get crazy-assed bikini models with sexual addiction issues lurking in the bushes? I think I could handle that. Instead, I get this tripe.

Hilarious mailing list exchange in which John C. Welch, who suffers no fools, goes from being helper to stalker in just four moves. Keep reading into the comments to see the inevitable appearance of a lawyer-wannabe (and his subsequent about-face). A must read.


// 23.Oct.2009

Stupid SSH Config Tricks

Using SSH as a proxy server (to avoid your company’s/country’s [firewall]): SSH has a built in SOCKS proxy that you can use in any program that can run over a SOCKS proxy. This includes Firefox (really, all browsers), Thunderbird, Pidgin/Adium (as well as almost all other IM clients like Google Talk, AIM, etc) and a ton of other networking programs we all use. Using SSH with the -D flag lets you create a dynamic ssh tunnel that acts as a SOCKS proxy, and sends all your traffic from the endpoint of your SSH connection.

And a small collection of other SSH secrets that are [fun][useful][illegal] (delete as appropriate).


// 12.Sep.2009

The Opt-out Checkbox and Installer Trickery

You’re giving administrative access to the installer so that it can be installed, you’re also allowing it to modify other parts of your system… A reason to hate Windows? No, but definitely another reason to love Mac OS X and Linux. The trickery used in such installers isn’t new and I think it’s really sad to see no one caring to complain about a procedure like this on Windows.


// 24.May.2009

On the Anonymity of Home/Work Location Pairs


// 02.May.2009

Five Tips for Reading Mac Security Stories


// 21.Apr.2009

Revisiting the Black Sunday Hack

Instead of being delivered all at once like other measures, the Black Sunday attack code was sent to pirate cards in about five dozen parts over the course of two months, like a tank transported piece by piece to a battlefield to be assembled in the field.


// 31.Jan.2009

CubeSoft Networks


// 27.Dec.2008

5 Helpful Tips for Creating Secure PHP Applications

PHP is one of the most popular programming languages for the web. Sometimes a feature-friendly language can help the programmer too much, and security holes can creep in, creating roadblocks in the development path. Here are 5 tips to help you avoid some common PHP security pitfalls and development glitches.


// 02.Nov.2008

Mocha

ARPWatch/Log Watcher — A tool that monitors your network activity and keeps a record of IP/Mac address pairings and firewall logs. It will give a warning when it notices any suspicious activity, like any changes in Mac address or any connection attempt to the firewall.


// 22.Sep.2008

Encrypt Mail, Address Book, and iCal Data

Learn how to create an encrypted sparse disk image that mounts and unmounts on login/logout. With symbolic links in the proper places, Mail, Address Book, and iCal are none the wiser, and you can be reasonably assured that your private data will stay secure.