Entries by VideoMan

This is the vulnerability that my wife and I did a demo for at the local MN-ISSA group.


http://trifinite.org/blog/archives/2005/09/helomoto_publis.html

This was pretty funny!

The tool is on their download page

Do you want to encrypt your data?

Don't use "Encrypted drives", they don't really write the data to the disk platter encrypted.

At an MN-ISFA meeting someone was asking how to recover data from a hard drive that used encryption that was build into the disk. Suggestions were send the drive off to someone who can read the registers on the disk/chip. Another alternivate was to move the platters to another working hard drive. If that is really all it takes, then this fo "hardware" based encryption is really stupid.

I would recommend looking into real encryption, such as:

TrueCrypt ((Open Souce Virtual Drive/disk encryption)
PGP Whole Disk
PGP Drive (Virtual disk)
PointSec
Etc.

You may find some performance decrease, but it should be minor compared to the protection.

Alan Amesbury of the U Of Minnesota has a good write-up about password attacks and does a good job to crunch the numbers!

http://www1.umn.edu/oit/security/passwordattackdiscussion.html

Looks like cisco finaly released the patch to the problem from July's BlackHat conference.

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers
http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml

They knew about this, why didn't they just fix it, rather then tear out the pages from the BlackHat books. They made such a big deal out of the issue, that it made it a bigger issue then it was. And now they have claimed to have fixed the real issue. Really, Cisco has now confrimed that cisco sucks when it comes to dealing with security holes.

Maybe we will all have to move to OpenBSD for core routing boxes (I know that drivers would need to be written, and hardware made for fiber, etc...).

http://www.thebunker.net/security/bluetooth.htm

And if anyone knows someone with a new fancy Audi car with bluetooth... Car Wisperer

DC612's DefCon Group very first post, it's been a long day juggleing systems to get this up, but dc612 now has a place for content, and soon will have a mailing list for all to see in Minneapolis.

We also want to have an informal gathering sometime in the not to distant future, if your interested, please let us know, info at dc612 dot org.

thanks!