PAWS – Python Advanced Wardialing System

Tuesday, July 1st, 2008

Now this is an oldskool topic, wardialling! Some people still ask me about wardialling tools though, so here’s one I found recently written in Python. PAW / PAWS is a wardialing software in python. It is designed to scan for ISDN (PAWS only) and “modern” analog modems (running at 9.6kbit/s or ...

Blizzard’s Two-Factor Authentication

Tuesday, July 1st, 2008

Blizzard's announcement of two-factor authentication for World of Warcraft is more significant than people realize. Passwords are obsolete. They are broken. We all recognize this, yet we aren't quite ready to give up on passwords because we haven't an easy alternative. World of Warcraft (WoW) is a good test case. It is ...

How to stop data leakage inside your organization

Tuesday, July 1st, 2008

Sophos announced today that it has published a new white paper describing how businesses can tackle the growing challenge of data leaking by enforcing an acceptable use policy, by applying appropriate controls already available in existing security solutions. The white paper, entitled "Stopping data leakage: Exploiting your existing security investment", examines ...

Windows SteadyState Bulletproofs Your System

Tuesday, July 1st, 2008

So you're thinking, "Hey, I want to be totally irresponsible with my computer and load it up with crapware!" Really, isn't everyone getting tired of having to be so stinking responsible on the Internet all the time? We certainly are. We're ready for system protection that isn't afraid of our ...

Cross Environment Hopping

Tuesday, July 1st, 2008

Our research team has identified a web-based attack technique that exploits the growing number of applications that require a web server being run on a local machine. Cross-Environment Hopping (CEH) is a result of this trend combined with the current limitations in browsers’ same-origin policy access restrictions. The CEH technique enables ...