-
Installing and using Truecrypt on Ubuntu
Update: while truecrypt still doesn’t offer native packages (ie. .deb / .rpm) for Linux distributions, their shellscript installer works just fine. So the simplified version of the installation procedure is: Download the correct package from Truecrypt (either 32 or 64 bit – you can find out which you need by typing uname -a – if…
-
Hack the Gibson #88
Read the reason for these posts. Read Steve Gibson’s response. A question which popped up twice in this episode was the problem with broadband user and the answer provided was very good: even if 50% of the people who have broadband would to turn off their connection when they are not using it, the other…
-
Hack the Gibson #81 to #87
Read the reason for these posts. Read Steve Gibson’s response. Here is again a long overdue post about the recent Security Now episodes. I have to say that the quality of the information provided in the recent episodes deteriorated (or maybe it is that they started talking about more concrete things where the errors are…
-
SQL injections – what they are and how to avoid them
SQL injections are a subtype of the larger category of command reparse vulnerabilities. These attacks work because there is an intermediate language between different components of the system, more specifically between the frontend (which is tipically a webserver giving access to the whole world) and the backend (which is hidden behind a firewall / NAT…
-
Active vs. Reactive protection
Hello all. I want to bring to your attention the following article written by fellow blogger Kurt Wismer: defensive lines in end-point anti-malware security. I especially like it because it puts AV technology in place and creates a good foundation to start any meaningful debate. Here are my opinions on the matter (in no particular…
-
AOL Bullying Gaim!
This is deeply troubling: AOL is forcing Gaim to change its name Please kindly contact AOL, and bring these points to their attention: The users of Gaim are highly technical and the probability of them making a confusion between AIM and Gaim is infinitely small Searching for AIM on search engines (like Google, Yahoo or…