New Security Bloggers Network (SBN) member
David Dede We are very happy to be the newest member of the Security Bloggers Network (SBN). Thanks to Alan Shimel for setting this up very quickly…
Downforeveryoneorjustme is down
The service http://www.downforeveryoneorjustme.com/ has been down for at least a few hours already. I got the first notification via sucuri.net a few hours ago saying…
Honeypot analysis – Looking at SSH scans
Daniel Cid An integral part of the Sucuri project is to research and monitor current attacks as a way to improve our defense techniques. To achieve that,…
A closer look at the iiscan
The free IIScan was recently announced on the full-disclosure list and I took the time to review it. They announced it as a new generation…
VMware insecure file creation
If you are using the free VMware server on Linux, beware that the installer is creating files with insecure permissions, allowing any user to modify…
Twitter defacement
It is all over the news today that Twitter was defaced yesterday. Lots of speculation regarding what happened, but that’s the alert I received yesterday…
Searching vulnerable sites with Google
At http://sucuri.net/ we have a free online tool that allows you to scan any domain name for security issues. It is very simple and report…
Process monitoring with OSSEC
OSSEC v2.3 was just released and one feature that really interested me was the Process monitoring. That’s what the OSSEC team says about it: “We…
Improve Domain Name Security, Lessons Learned
I was very glad to interested to read this article by http://syedaqeel.com/ where he talks about a recent domain name hijacking that he suffered and…
New FSF web site
The web site for the Free Software Foundation has been completely redesigned. It is looking great now with a Jquery carousel and a web 2.0…
Password security without a password manager
Daniel from http://www.dailyblogtips.com published an article with some of his ideas on how to create passwords for multiple sites. The idea is to create an…