Grey Panthers Savannah

Category: security

  • What virtualization can and cannot do in an anti-malware context

    Over at the anti-virus rant blog (which is a nice blog because it includes the word rant in the title :)) Kurt Wismer states that virtualization is overhyped as a security technology. While I agree, I want to point out that following some simple rules, it can be a very powerful security which can easily…

  • 10 Immutable Laws of Security

    From Microsoft: 10 Immutable Laws of Security. A very nice and correct writeup.

  • 20 ways to Secure your Apache Configuration

    A nice writeup about securing your Apache installation: 20 ways to Secure your Apache Configuration

  • The hidden capabilities of windows firewall

    Windows, beginning with XP SP2 contains a decent firewall. It doesn’t have leak prevention or outbound connection filtering. However it does have: inbound connection filtering, ICMP filtering, a default deny policy, GUI and command line interface, configuration using group policy and something I discovered only recently: limiting a certain rule with multiple IP / netmasks…

  • Nmap online

    Some brave people have put online a service where you can scan an arbitrary computer with Nmap using their server to do the scanning on your behalf. One can say that this is the grownup version of Shields Up!. I was worried that their service could be abused in an attack-by-proxy (or in this case…

  • What is not AJAX?

    Not everything involving browser scripting is AJAX. The following two things are not AJAX: Yellow fading effect on web pages Downloading and running an executable in Internet Explorer if you have your Internet Zone security level set to low.

  • HIPS – just a pretty UI?

    Disclaimer: the viewpoints and ideas expressed here an entirely my own and are by no means representative for any institution I am affiliated with. Also I do not want to offend anybody, since I realize that the amount of work it takes to create some of these programs and the wealth of knowledge one must…

  • Cookie viruses? Me thinks not

    The only reader of mine had a question: what is my opinion about cookie viruses? (If you also read this blog, I apologize and also I’m werry happy in this case that I have more than reader. If you have questions or topics you would like me to discuss, please post them in the comments)…

  • Two contest you might enjoy

    Two contests you might consider checking out if you are a security person: The Hitchhackers Guide to the Galaxy – HTML / scripting oriented The malware analisys quiz 7 from SANS – a challenge oriented more at disassembly, and be aware! this is a real malware sample! Good luck

  • Talking out of your head (as opposed to an other body part)

    Recently a hoax / misinformation / hype is making its way around the web (or at least the part of the web I see ;)). I’m talking about the article title Internet Explorer 7 – Still Spyware Writers Heaven. While I’m by no means a MS fan and criticized the IE7 team for not making…