Slashdot Mirror
Security From A To Z
Haruki Soma writes, "Unearthed: An A to Z guide to security — from antivirus to zero-day. The writer includes the latest on the UK's newly updated Computer Misuse Act. She also pokes around rootkits, IM, and spyware, pens an ode to Gary McKinnon (aka the NASA hacker, in the 'E is for Extradition' entry), probes Google-induced Spear Phishing, and takes a look back at the Love Bug and Jaschan's Sasser." Security pros won't find much new here, but the rest of us might learn a thing or two.
If we had only known that all along, there were only 26 things to know about with regards to Security, we wouldn't have had to hire that consultant!
The theory of relativity doesn't work right in Arkansas.
Avoid Microsoft products at all costs!
Security pros won't find much new here, but the rest of us might learn a thing or two.
what, buzzwords?
If "M" is for Microsoft and its awful security record, then the exact opposite security model should be in there also.
A is for Adverts, and Goatse Guy's butt,
B is for Banners, what's my piece of the cut?
C is for C-Net, that page-whoring slut,
D is for Dickhead, by an ass and two nuts,
E is for Extra page views for the win,
F is for Flash, it's a whole 'nother sin,
G is for Google, do no evil (today!)
H is for Hackers, not crackers, OK?
I is for IM, "wut r u do now?"
J is for Javashit, shut it off now.
K is for Kids, 'cuz it's all for their sake,
L is for Legislators, all on the take.
M is for Microsoft, and masturbate meekly,
N is for Neologisms, which I invent weekly,
O is for Orange, with which nothing rhymes
P is for Pageviews, 26 fucking times?!
Q is for Question, WTF are you thinking?
R is for Readership, C-Net's lost a few drinking,
S is for Spammer, and spyware, and shit,
T is for Trash, Turd, and also twenty-six.
U is for Useless, the number of clicks,
V's for Vendettas on marketing pricks,
W is for Wizard, his robe and my hat,
X is for X-rated wizardly chat,
Y's what's starts "You", not the twenty-first letter,
Z is for Zero. (Shoulda wrote this poem better.)
They couldn't think of an entry for "M" unfortunately. Would you have any suggestions?
I've been working in security for 5 years now, penetration testing, managed firewalls/IDS, BS7799 prep, etc... currently (among other bits and bobs) I run security for a UK motor insurance company.
Lots of security material is all about the tech, but really (outside of Hollywood) hacking or any form of abuse is largely about people. The tech makes it easier or harder for the people - but ultimately at some point there is still someone at a keyboard making the decision to do something.
For the last couple of years I've been doing what is essentially an MSc in traditional Criminology and it really is interesting how much of the traditional models of motivation and causation cross over into the online environment (and also how little traditional criminologists seem to understand the parrellels).
I'm actually running a survey for my dissertation at the moment looking at IT admin access to confidential information - if you'd like to take part (and be in with a chance of winning a £25 or $40 amazon voucher) take a look at:
https://msc-survey.priogenus.com/amazon.php
FTA
I'm guessing the average reader will either be a) a techy who'll read it for kicks or b) joe shmoe who is duped (read FUD) into buying it.
"No doubt one may quote history to support any cause, as the devil quotes scripture." - Learned Hand
Any Linux box has basically no virus weaknesses when compared to Windows.
Buy a Mac or Linux box instead.
Change all needed Windows boxes to use open source programs like Firefox instead of the virus prone shipped programs.
DRM is not your friend.
Exclude Linux users when sending warnings about Windows viruses.
Forget about stability if using Windows servers.
Go ahead, send a "virus" to my Linux email.
Hire Linux IT people. The MS "professionals" cannot think outside buying a new box.
Insert "Windows" in front of "Virus" in any warning emails.
Join the open source club, and understand why transparency helps security.
Kick out any "Linux is to hard to learn" sys-admins.
Look out for those that say that a new box will fix it.
Make plans to use open standards and avoid lock-ins.
Never spend thousands on external software, when Linux can do it for free.
Open source software that would never be your core business, but could benefit from thousands of eyes.
Put all windows boxes behind firewalls.
Quit your job if they are migrating from Linux to Windows.
Run Linux to avoid virus problems.
Stop all unused services, in Mac, Linux or Windows.
Try OpenOffice. Viruses are not compatible with it.
Understand which blackbox systems are hard to verify.
Value employee advice.
Windows will eventually go open source to compete
XP only added fisher price colors.
Your easy way out is to migrate away from Windows.
Zune DRM is not friendly.
Call me old fashioned, but I like a dump to be as memorable as it is devastating - Bender
I is for internet.
can somebody call Al Gore cause my internet is slow. he can fix it, he invented it.
Out of all his points the writer left out the most important factor of them all and that small detail makes the whole thing useless to me. What happened to "Knowing your system" or perhaps "Understanding the environment you're on" ?
'You' maybe the weakest link to him with regards to passwords or trickery, but if you know what you're doing you'll decrease that risk factor tremendously.
Now, unless they are big into crummy sites and downloads, they should be OK until the computer landscape changes.
The government can't save you.
It's quite funny some people try to write articles on security and speak of "hackers" without even knowing what it means.
HACKER (Originally, someone who makes furniture with an Ax.) n. 1. A person who enjoys learning the details of programming systems and how to stretch their capabilities, as opposed to most users who prefer to learn only the minimum necessary. 2. One who programs enthusiastically, or who enjoys programming rather than just theorizing about programming. 3. A person capable of appreciating hack value (q.v.). 4. A person who is good at programming quickly. Not everything a hacker produces is a hack.
I gave up with the idea of an useful sig...
Obviously you have zero experience or understanding of Windows servers. Its the same as any other OS, it just requires a skilled and knowledgeable admin to configure it stably.
And I honestly thought this was going to be some spoof article about ROT-26, or something.
http://xkcd.com/313/
Sorry to reply to myself, but now I realize that he was talking about Windows need to constantly reboot.
Even though some of that can be avoided, I admit that Linux is better at doing updates without reboot.
have you read the Moderation Guidelines Addendum?
If you take the paid-for AdAware you can automate some of the stuff they now have to manually do. In my experience, any manual operation will be omitted within weeks from taking your hands off the system..
Insert