This is a great article describing how easy it is to utilize human nature to overcome security policy to gain covert access to remote systems with a VERY low detection probability.
The gist of this story is that USB thumb drives were loaded with trojans and left in the parking lot and break area around the target and curious employees then loaded them into their computers which then sent compromise details to an unauthorized hacker.
Be safe out there and beware the gift of the Trojans in USB drive form.
Norman
Full Article URL: http://www.darkreading.com/document.asp?doc_id=95556&WT.svl=column1_1
Social Engineering - Extremely Low Risk Infiltration Scheme
Security News: Reduce Brute-Force Attack Success
The following is an article with good information on how to reduce the effectiveness of brute-force attacks against web applications. The technology relies on mathematical algorithms on the client that require more time to compute than to verify to incur a transaction cost for authentication against a web application to make it computationally infeasible to implement a large-scale attack.
http://www.infosecwriters.com/text_resources/pdf/AntiBruteForceResourceMetering.pdf
Web-based AJAX messaging client
A friend of mine just showed me this URL for a web-based messaging client. I have not tried it out yet, but it looks interesting! It probably spells trouble for network administrators who can't firewall web traffic. I do suppose they could block the website, but that does not mean other people will not take up the technology and implement it elsewhere.
http://www13.meebo.com/
Norman
Subscribe to:
Posts (Atom)
