2006.09.01 Daily Security Reading
by Rodney Campbell on Sep.01, 2006, under Security
Mitigating the Security Risks of SSH
This article is a follow-up to my earlier article on SSH security considerations, in which I discussed some very real risks with SSH—risks created by how SSH is rolled out in many organizations. Large organizations with many production platforms are especially at risk.
Hoax hacks. Rigged demos of make-believe security holes. Those, it appears, are the real big news that came out of the Black Hat USA security conference earlier this month. Two of the headline-grabbingest claims by independent security researchers at the show have since turned out to be bogus.
Security Engineering – The Book
Ross Anderson, author of 'Security Engineering', just got permission from Wiley to let anyone download the full content of his book for free. This is one of the best books on computer security and it is used as textbook in many University course.
The six worst security mistakes
A Buyer's Guide: The six worst security mistakes, and how to avoid making them.
Fugitive CEO Caught Via Skype – Tracking Anonymous Peer-to-Peer VoIP Calls on the Internet
Reference books for the CISSP CBK domains
This list is provided as a reference, and it is divided by the CBK domains so that you can get help with specific topics where you feel you need more information. The books are linked back to detailed reviews: it is intended that you can quickly find a domain you need help with, and then can quickly go through the reviews in order to find the book that will give you the help with your specific need for information.
Research shows SSL VPNs gaining inroads over IPSec VPNs
People who use VPNs continue to move toward devices that do more than just provide a VPN gateway in conjunction with a firewall, according to a new study by Synergy Research.
Study – Many believe data thefts can't be prevented
Lack of resources cited for difficulties in stopping data breaches.
Crypto browser plug-in aims for simplicity
German coders have developed a free encryption plug-in for webmail accounts.
New Web Browser Leaves No Footprints
A new web browser designed to protect users privacy is available for download. Called Browzar, it 'automatically deletes Internet caches, histories, cookies and auto-complete forms.' It also boasts a search engine, which the company will use to generate income. The 264KB application is the brainchild of Ajaz Ahmen, known for creating the U.K.'s first ISP Freeserve.
September 3rd, 2006 on 6:58 pm
thanks rodney, great blog. have added it to my faves