2
Jul
WEP also known as Wired Equivalent Privacy was intended to provide comparable confidentiality to a traditional wired network. Several security weaknesses have been identified. Despite the weaknesses, WEP provides a level of security that can deter casual snooping.
The FBI method relies on the following tools: Kismet and Aircrack. Both can be found on Linux live cds such as knoppix.
Do the following if you have the tools available:
22
Jun
Great list of the top 100 network security tools voted by 3243 users of the nmap-hackers mailing list. Every tool mentioned has a description, a homepage link to the developers, icons that tell you if it works on your system and if it costs money. All utilities belong to a category, you have the option to display every category. (like vulnerability scanners)
Top ten tools are Nessus, Wireshark (former Ethereal), Snort, Netcat, Metasploit Framework, Hping2, Kismet, TcpDump, Cain and Abel and finally John the Ripper.
This is a great collection of the most important network security tools of 2006.
8
Jun
If you are crazy enough to try a beta version of Microsofts upcoming operating system you might want to head straight over to microsofts vista website and download a version for either 32-bit or 64-bit. You will need a Microsoft Live account to download windows vista. You can also order a dvd that will be send right to your home.
I would not bother with a beta version at all but I know that guys can´t wait to get their hands on the latest software, even if its beta. There is another reason why Windows Vista, be it beta or final, will never make it on my computer. You should read up on pvp-opm (protected video path - output protection management) and puma (protected user mode audio) if you are not familiar with the terms. You can read about them at engadget, lockergnome, ehomeupgrade and pcstats.
6
Jun
SQL injection is a security vulnerability that occurs in the database layer of an application. Its source is the incorrect escaping of dynamically-generated string literals embedded in SQL statements. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.
SQL Injection Attacks by Example gives you a detailed view how experts used the technique to break into a customers system.
“There have been other papers on SQL injection, including some that are much more detailed, but this one shows the rationale of discovery as much as the process of exploitation.”
6
Jun
Some tv stations, like the BBC in Britain, will provide their fellow countrymen with an opportunity to watch the football world cup 2006 in germany live in a streamed version from their webpages. They said on their webpage that “The service will be available to UK broadband users and will mirror terrestrial and interactive coverage.” I assume it is free of charge but maybe my loyal British readers could enlight me how they plan on streaming the content.
They most likely will scan your IP and lookup your country from it. That means people from outside Britain won´t be able to view the matches on the BBC homepage. (or other homepages of other countries, you get my point I hope.) So, it would be impossible for an englishman, who is supporting his team in Germany, to view the live coverage on the BBC pages. As you all know, there are always ways to circumvent country checks, here is the one I suggest.