dnlongen

8 ms·

1.
New forensics tool: RegLister finds malware hiding in the Windows registry(securityforrealpeople.com)
1 points by dnlongen 11y ago|0 comments
2.
by dnlongen 11y ago
So, plugging in a malicious USB storage device can not only execute malicious code, but can do it with elevated privileges. Can it be done on a locked PC or must a user be actively logged in? I presume the former, as I don't believe th
3.
MS15-085 Vulnerability in Mount Manager Could Allow Elevation of Privilege(technet.microsoft.com)
1 points by dnlongen 11y ago|1 comments
4.
by dnlongen 11y ago
When one's profession involves network security, sometimes it helps to capture network communication to analyze. For about $10 in parts, you can easily build a network tap to capture traffic anywhere on your network for analysis or for
5.
How to build a $10 passive network tap (10/100 mbit)(securityforrealpeople.com)
2 points by dnlongen 11y ago|1 comments
6.
by dnlongen 11y ago
Step by step instructions for either removing Flash Player, or updating it and setting it to "click to play" (ask you before playing Flash content). Critical in light of the Hacking Team breach and the Flash exploit now being used
7.
Time to Patch Adobe Flash Player. Now(dnlongen.blogspot.com)
2 points by dnlongen 11y ago|1 comments
8.
by dnlongen 11y ago
Central Texas suffered a catastrophic flash flood during Memorial Day weekend; this article looks at the disaster response, and draws some lessons that apply to all sorts of incident response, whether cyber, IT infrastructure, or natural di
9.
Incident response lessons from the Texas flash flood(csoonline.com)
1 points by dnlongen 11y ago|1 comments
10.
by dnlongen 11y ago
+1 for a thorough walkthough. I'm not quite ready to +1 the idea though. It's intriguing, but seems to open a user up to abuse. Unsolicited messages (email, SMS, IM, DM, Facebook, etc.) are a popular way of phishing (tricking indi
11.
by dnlongen 11y ago
Port-mirroring would work for any traffic that traversed the smart switch ... I actually tried that at one point, but it's somewhat limited: > If the smart switch is on the LAN side of the router, then I only see traffic from wired
12.
by dnlongen 11y ago
There are a couple of shortcomings in the current approach. I'd welcome suggestions for how to improve this. The problems I see are: 1. The alert tells me the IP address of the offending computer or device, but not the domain name that
13.
Show HN: Detecting malware through DNS queries – a Kali Pi / Snort project(dnlongen.blogspot.com)
9 points by dnlongen 11y ago|3 comments
14.
by dnlongen 11y ago
Rather encouraging to see mainstream media describe hacking accurately: "...insights about how various systems worked — and in some cases could be made to do things their creators never intended. This is the essence of hacking. It is n