Information Security, Privacy and Regulatory Compliance - Comments

school grants: RANT: Non-existent 'analyst' befriends security experts

nospam@example.com (school grants) — Wed, 28 Jul 2010 13:57:47 -0400

Pretty nice post. I just stumbled upon your blog and wanted to say that I have really enjoyed browsing your blog posts. In any case I’ll be subscribing to your feed and I hope you write again soon!

seto: Nmap 5 UDP Application Recognition

nospam@example.com (seto) — Thu, 22 Jul 2010 12:42:14 -0400

nice post...thx

Tyler Krpata: UPDATED - Money Laundering - The Next Generation

nospam@example.com (Tyler Krpata) — Fri, 30 Apr 2010 20:56:37 -0400

Please feel free to report this kind of activity originating from Constant Contact to abuse@constantcontact.com. This particular account has already been terminated. Sorry for the inconvenience.

Jason 'XenoPhage' Frisvold: Evolution of the USB Malware Device

nospam@example.com (Jason 'XenoPhage' Frisvold) — Mon, 26 Apr 2010 16:55:39 -0400

Couple of quick notes here..

First off, this is PHP specific security, so if an attacker can get a perl or bash script in there, all bets are off. Using something else like mod_security might help here, but there are still ways around that as well.

I highly recommend using Stefan Esser's excellent Suhosin module.. By default it secures a good portion of PHP, including auto-encryption of session files, better random number handling, and more. http://www.hardened-php.net/suhosin/index.html

If you're running apache, make sure you set up some general apache security as well. At the very least, set ServerTokens to ProductOnly to prevent too much information leakage. It's a bit of security by obscurity, but it helps.. Defense in depth, eh?

Modern Celt: The Bot(net) evolution...

nospam@example.com (Modern Celt) — Mon, 07 Dec 2009 23:02:18 -0500

Very nicely done.