The following is an article with good information on how to reduce the effectiveness of brute-force attacks against web applications. The technology relies on mathematical algorithms on the client that require more time to compute than to verify to incur a transaction cost for authentication against a web application to make it computationally infeasible to implement a large-scale attack.
http://www.infosecwriters.com/text_resources/pdf/AntiBruteForceResourceMetering.pdf
Security News: Reduce Brute-Force Attack Success
Web-based AJAX messaging client
A friend of mine just showed me this URL for a web-based messaging client. I have not tried it out yet, but it looks interesting! It probably spells trouble for network administrators who can't firewall web traffic. I do suppose they could block the website, but that does not mean other people will not take up the technology and implement it elsewhere.
http://www13.meebo.com/
Norman
Social Engineering
This is a great introduction to the art of social engineering that is one of the biggest security threats that many organizations do not consider when reviewing security policies and procedures. This article is good information if you have friends that have not heard of the topic that work in IT.
Norman
Subscribe to:
Posts (Atom)
