Ta Da !
Saturday, November 9, 2013
Monday, November 4, 2013
Wowe is me.
Well I just CAN'T seem to get-into this blogging thing.
I recently added to my web site:
Well we had a good thing going (the Internet and the WWW) for a while. Guess it was only a matter of time till the .gov messes it all up (I had to remove the 4 letter words).
Oh well, life goes on, and on; and on.
I recently added to my web site:
"Try uncovering this Snowden person and does he get "due process", or get the scoop right from the White House."
Well we had a good thing going (the Internet and the WWW) for a while. Guess it was only a matter of time till the .gov messes it all up (I had to remove the 4 letter words).
Oh well, life goes on, and on; and on.
Saturday, May 25, 2013
Here is a re-cap of things on my mind;
from my other web site (ksguy.com):
New internet exploits and bad guys are cropping up all the time.
Now we have the
. Imagine the consequences of 420 million devices which are accepting trivial logins on their Telnet ports. Yes! Researchers found Telnet ports open, on that many IP's.
Originator: internetcensus2012.bitbucket.org Found over a million unique unprotected devices, using botnets, on Port 23 (Telnet).
www.h-online.com/security/news/ US-CERT warns of HP LaserJet printer backdoor.
hp-printers-in-1980s-style-firmware-misconfiguration-boo-boo The US Computer Emergency Response Team (CERT) has issued an intriguing Vulnerability Note to do with a data and password leakage flaw in a number of HP printers.
kb.cert.org/vuls/id/782451 The CERT article from above.
hp.com/us/en/support-drivers HP support/drivers page.
Then there is the SSL problem (with an easy web-test).
SSL/TLS server security as revealed by SSLLabs.com: on their SSLLabs.com/ssltest SSL Server Test site, where even the Department of Homeland Security (DHS) and the United States Computer Emergency Readiness Team (US-CERT) get poor marks. (F's when I checked.)
So, with gaping holes like Telnet and SSL, it looks as though we are in for a lot of bad news this year and beyond. Can you say: "DOS attacks"?
Old Stuff:
Java is still a large security hole that everyone should know about. Please remove it if you can live without it. More info at : java.com - and at krebsonsecurity.com. Consider disabling Shockwave as well.
Here is another GREAT tool for browser security: ( from: https://www.mozilla.org/en-US/plugincheck/ )
Subscribe to:
Posts (Atom)