Monday, November 4, 2013

Wowe is me.

Well I just CAN'T seem to get-into this blogging thing.

I recently added to my web site:
"Try uncovering this Snowden person and does he get "due process", or get the scoop right from the White House."

Well we had a good thing going (the Internet and the WWW) for a while. Guess it was only a matter of time till the .gov messes it all up (I had to remove the 4 letter words).

Oh well, life goes on, and on; and on.

Saturday, May 25, 2013

Here is a re-cap of things on my mind; 

from my other web site (ksguy.com):



New internet exploits and bad guys are cropping up all the time.

Now we have the The Telnet Apocalypse:
. Imagine the consequences of 420 million devices which are accepting trivial logins on their Telnet ports. Yes! Researchers found Telnet ports open, on that many IP's.

Originator: internetcensus2012.bitbucket.org Found over a million unique unprotected devices, using botnets, on Port 23 (Telnet).

www.h-online.com/security/news/ US-CERT warns of HP LaserJet printer backdoor.

hp-printers-in-1980s-style-firmware-misconfiguration-boo-boo The US Computer Emergency Response Team (CERT) has issued an intriguing Vulnerability Note to do with a data and password leakage flaw in a number of HP printers.

kb.cert.org/vuls/id/782451 The CERT article from above.

hp.com/us/en/support-drivers HP support/drivers page.


Then there is the SSL problem (with an easy web-test).

SSL/TLS server security as revealed by SSLLabs.com: on their SSLLabs.com/ssltest SSL Server Test site, where even the Department of Homeland Security (DHS) and the United States Computer Emergency Readiness Team (US-CERT) get poor marks. (F's when I checked.)


So, with gaping holes like Telnet and SSL, it looks as though we are in for a lot of bad news this year and beyond. Can you say: "DOS attacks"?



Old Stuff:

Java is still a large security hole that everyone should know about. Please remove it if you can live without it. More info at : java.com - and at krebsonsecurity.com. Consider disabling Shockwave as well.

Here is another GREAT tool for browser security: ( from: https://www.mozilla.org/en-US/plugincheck/ )
We can check your plugins and stuff Why should I update my plugins?
Old plugins can interrupt browsing and waste your time. They increase your risk for attack by malware, viruses, and other security threats. Updated plugins have improvements that make the web better and safer for you.