Polls
Loading ...Books
Blog Search
-
Recent Posts
Recent Comments
- Dragan on Security on Second Round Candidates of the Cryptographic Hash Algorithm Competition Selected
- Tweets that mention Poll: Do You Use Any Security Precautions On Your Mobile Phone? | Dragan on Security -- Topsy.com on Poll: Do You Use Any Security Precautions On Your Mobile Phone?
- Tweets that mention New Version of CrypTool | Dragan on Security -- Topsy.com on New Version of CrypTool
- Dragan on Security on CrypTool
- Tweets that mention What’s Wrong With Secure Software Development?Dragan on Security | Dragan on Security -- Topsy.com on What’s Wrong With Secure Software Development?
Featured
Categories
- Books, Magazines and Journals (28)
- Conferences, Events (25)
- Cryptography (41)
- Database Security (6)
- Education and Training (11)
- Fun (15)
- General (45)
- Hardware Security (9)
- Internet Security (42)
- Intrusion Detection / Prevention Systems (10)
- Malicious Software (23)
- Mobile / Cellular / Bluetooth (15)
- Operating Systems and Application Security (58)
- Penetration Testing (1)
- Secure Programming (13)
- Security (195)
- Compliance (1)
- Polls (17)
- Privacy (32)
- Review (3)
- Security Research (39)
- Software Security (13)
- Threats, Vulnerabilities, Attacks (19)
- Tools and Utilities (14)
- Uncategorized (1)
- VoIP Security (4)
- Wireless Security (19)
Archives
- January 2012 (1)
- October 2011 (3)
- September 2011 (1)
- February 2011 (1)
- January 2011 (1)
- September 2010 (1)
- August 2010 (2)
- July 2010 (1)
- June 2010 (4)
- May 2010 (2)
- April 2010 (1)
- January 2010 (1)
- December 2009 (2)
- October 2009 (1)
- September 2009 (1)
- July 2009 (2)
- June 2009 (2)
- May 2009 (1)
- April 2009 (3)
- March 2009 (1)
- January 2009 (5)
- December 2008 (2)
- November 2008 (1)
- October 2008 (4)
- July 2008 (3)
- May 2008 (4)
- April 2008 (3)
- March 2008 (9)
- February 2008 (4)
- January 2008 (7)
- December 2007 (8)
- November 2007 (9)
- October 2007 (18)
- September 2007 (12)
- August 2007 (17)
- July 2007 (5)
- June 2007 (16)
- May 2007 (21)
- April 2007 (12)
- March 2007 (4)
- February 2007 (12)
- January 2007 (17)
- December 2006 (23)
- November 2006 (62)
- October 2006 (23)
- September 2006 (7)
- May 2006 (2)
- March 2006 (2)
- February 2006 (1)
- January 2006 (6)
- December 2005 (3)
- November 2005 (14)
- October 2005 (26)
- September 2005 (14)
- August 2005 (10)
Monthly Archives: May 2007
Protecting Consumers and Merchants Online
For more than thirty years, Visa has helped to set industry standards for secure payments between consumers and merchants. Verified by Visa protects online merchants in the following ways: You, as merchant, are not liable for fraud resulting from the … Continue reading
Posted in Internet Security
Leave a comment
Has Globalization Made Software Development a US National Security Issue?
Software development has been transformed into a issue of national security as a result of IT globalization, according to a warning from former U.S. cybersecurity czar Andy Purdy. “Companies are looking for the least expensive source of production, but there … Continue reading
Posted in Secure Programming
Leave a comment
Comments on the Hash Algorithm Requirements and Evaluation Criteria
In recent post I wrote about NIST competition for new cryptographic hash function. NIST (National Institute for Standards and Technology) published now comments received on the hash algorithm requirements and evaluation criteria. Among others, big companies (Microsoft, IBM) sent their … Continue reading
Posted in Cryptography
Leave a comment
PCI DSS compliance low as June deadline looms
Interesting article: Software – PCI DSS compliance low as June deadline looms: Survey reveals alarmingly low levels of compliance for PCI DSS with only 3% of merchants ready. Top line survey findings include: 85% of respondents are aware of the … Continue reading
Posted in Internet Security
Leave a comment
Cracking Passwords
Here is small list of tools for cracking passwords. It is listed in order: tool, URL, and short description. Dictionaries / Wordlists ftp://coast.cs.purdue.edu/pub/dict/, http://packetstormsecurity.org/Crackers/wordlists/dictionaries/ – Word lists that can be used in most password-cracking utilities. Hydra http://www.thc.org/thc-hydra/ A fast network logon cracker that supports … Continue reading
Posted in Security, Tools and Utilities
Leave a comment
Cisco – Password Recovery Procedures
This, recently updated page, is an index of password recovery procedures for Cisco products. For security reasons, the password recovery procedures listed, require physical access to the equipment. See: Cisco – Password Recovery Procedures.
Posted in Hardware Security, Internet Security
Leave a comment
WordPress Redoable Theme “s” Cross-Site Scripting
Recently, this blog experienced attacks or better to say XSS bug testing which, fortunately, was unsuccessful. Yesterday John Martinelli has discovered a vulnerability in the Redoable theme for WordPress (I don’t use this theme – lucky again), which can be … Continue reading
Posted in Secure Programming, Security
Leave a comment
Internet Explorer 7 navcancl.htm Cross-Site Scripting Vulnerability
Here is test to see an example of how this vulnerability can be exploited, and also to determine whether or not your browser is vulnerable: Internet Explorer 7 navcancl.htm Cross-Site Scripting Vulnerability – Secunia. If you are vulnerable, text similar to this will … Continue reading
Posted in Internet Security
Leave a comment
Cracking WEP
WEP is dead and here’s the proof – explanation how attack on the 802.11 wireless security protocol works: Gone in 120 seconds: cracking Wi-Fi security | The Register.
Posted in Wireless Security
Leave a comment
OSSEC v1.2 released
Availability of new version of OSSEC (Open Source Host-based Intrusion Detection System) has been announced today at SecurityFocus mail list dedicated to intrusion detection systems. OSSEC performs log analysis, file integrity checking, Windows registry monitoring, rootkit detection, real-time alerting and active response. … Continue reading