Archive for June, 2008

Radmin Default Installation Security Vulnerabilities

Monday, June 30th, 2008

"By default, Radmin uses a known port, TCP port 4899 for remote access. In addition, if you are using password authentication only, a remote user only has to find an open TCP port 4899 and guess one word: your password.Suggestions:It is very easy to implement any or all of the ...

Re-blogging Ethically

Monday, June 30th, 2008

It's no shock to anybody that on this blog I'm mainly just re-blogging good and informative articles until I graduate and actually have the time to sit and write my own content. I figured this was a great way to keep my site "active" in the eyes of the ...

Many weak web server certificates threaten online shopping

Monday, June 30th, 2008

"https connections exist to help ensure that when somebody is engaged in a financial transaction over the internet they are actually connected to the correct site - such as a bank, online vendor, and so forth. However, due to an error in the OpenSSL library used by the Debian Linux ...

How to Safely Use Facebook and LinkedIn at Work

Sunday, June 29th, 2008

The virtual flood gates have been opened and social networking is rushing in from the personal lives of employees and into the workplace -- bringing a host of concerns along with it.Facebook is no longer restricted to the realm of college students, and LinkedIn is specifically designed for the professional ...

The Internet is the New Sweatshop

Sunday, June 29th, 2008

When an executive wants to sound humane during a public address to the staff, he or she will trot out the well-worn phrase, "Our most valuable assets leave the building at the end of the day." Clichés are generally true, but this one may not be, thanks to the growth ...

Spybot Search & Destroy 1.6 RC1

Sunday, June 29th, 2008

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behavior to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If ...

Taming Internet Explorer Browser Plug-Ins

Sunday, June 29th, 2008

Security Fix has often lamented the lack of decent point-and-click software tools to help Microsoft Internet Explorer Web browser users kill insecure "ActiveX controls," plug-ins for IE that have traditionally been among the biggest avenues of attack from spyware and adware. That's why I'm pleased to call attention to a ...

Hacker Launches Botnet Attack via P2P Software

Sunday, June 29th, 2008

A 19-year-old hacker is agreeing to plead guilty to masterminding a botnet to obtain thousands of victims' personal data in an anonymous scheme a federal cybercrime official described Friday as the nation's first such attack in which peer-to-peer software was the "infection point."The defendant, Jason Michael Milmont, launched the assault ...

AVG Update: Yet More Fake Traffic With New Disguises

Sunday, June 29th, 2008

In an update to our June 20th post referring to Grisoft’s AVG anti-virus product spewing fake traffic (in our opinion a flawed architecture design by the company’s CTO, Karel Obluk). Cade Metz, of The Register, has delved a bit deeper into the issue, and has discovered that over last weekend, ...

Another Call for Packets - Port 502

Sunday, June 29th, 2008

Usually, I don't have two calls for packets on a shift, but this one definately bears looking into and hopefully finding an answer. There is an increase on port 502, when you look at the targets, that started today. Till today, life has been pretty quiet on that ...