Slashdot Mirror

re scanrand
http://www.vulnerabilityassessment.co.uk/scanrand.htm good article, didn't see a date, discuss installation and necessary changes for Fedora Core 1.

dan kaminsky's site for paketto, which includes scanrand; version 1.1 from 2002 has some tools which look interesting
http://dankaminsky.com/?s=paketto

There's an app for that: http://dankaminsky.com/2010/12/15/dankam/

Mod+1 UP! 'Dankam' has been a godsend for many people with imperfect color vision.

I knew a guy who tested with a great aptitude for electronics, but near the end of the course realized he couldn't differentiate between the different color coded wires, instead he got work in home improvement field. This app maybe would've allowed him to pursue that electronics career.

There's an app for that: http://dankaminsky.com/2010/12/15/dankam/

The cyberweapon that could take down the internet
http://www.newscientist.com/article/dn20113-the-cyberweapon-that-could-take-down-the-internet.html

More on BGP Attacks â" Updated
http://www.wired.com/threatlevel/2008/08/how-to-intercep/

http://dankaminsky.com/2008/08/27/the-emergence-of-a-theme/

Doesn't everyone with a clue use it via a VPN anyway?

Most people don't have publicly available RDP open. But there are enough Windows machines out there that even if a small percentage have RDP exposed, and only a small percentage of them aren't patched... there is still a metric shitload of vulnerable hosts.

Dan Kaminsky has done some scanning and extrapolation to estimate that there are about 5 million RDP endpoints exposed

You can always get it to change when you are about to do something that you think requires a new session.

What I do notice when using tor is that Facebook for some reason alternates between different certs. Facebook says the certs are OK but the whole situation does look very strange: http://dankaminsky.com/2011/08/31/notnotar/

To me it's no big deal if the US Gov is MITM'ing or cracking my facebook traffic - they can get everything straight from Facebook anyway ;).

Kaminsky has a very clear writeup about why OSCP does not really address these problems as good as one might think it would. Check it out here, about 3/4 of the way down. http://dankaminsky.com/2011/08/31/notnotar/