AppliedUsers
8Oct/100

GMail Security Checklist

The folks at Google have been nice enough to create a checklist to help you secure your system - it's mostly a collection of best practices known to those in information security, but maybe less obvious to the general user populace.  Either way, it would be beneficial for any GMail user to work through the checklist and tighten up their defenses.

The GMail Checklist

7Oct/106

Why SORBS sucks.

I like RDNSBLs - they are extremely useful, and when used properly, they can reduce your SPAM intake by 90% or more easily.  When they don't work well though, they kind of suck.  No, actually, they really suck.  One big problem with SORBS is it's overly aggressively blacklist of supposed dynamic IP addresses - many of which are not dynamic.  Add to that the mandatory registration process required to de-list an ip, the molasses-like slowness of their website and their moronic use of a self-signed SSL certificate.  I would consider it a joke if there was humour to be found in the situation.

While the use of SORBS might offer some SPAM reduction - I do not think it is worth the additional hassle, there are plenty of other perfectly good blacklists out there to choose from - SpamCop, SpamHaus, UCEProtect being a few.

SORBS was also acquired in 2009 by GFI Software.

3Aug/100

Windows LNK Out-of-Band Patch

As reported by SANS Internet Storm Center:

http://isc.sans.edu/diary.html?storyid=9313

Microsoft release patch to address this rather serious vulnerability.

28Jul/100

Windows LNK vulnerability

There has been quite a bit of talk in security circles with regard to the latest 0day Windows LNK (short-cut) vulnerability, which has potential to be fairly serious.  There are partial fixes and workarounds but not a complete patch as yet.  The following links should help you get informed and cover your bases:

http://www.sophos.com/products/free-tools/sophos-windows-shortcut-exploit-protection-tool.html

http://www.sophos.com/security/topic/shortcut.html

26Mar/100

RU listening?

Russia to try to clean-up it's .ru TLD.  I mean - file this under "about time" - that top level domain has become synonymous with malware, spam and criminal activity. It's a great concept if put into action and enforced, so we will have to wait and see.

read the article

   

Page optimized by WP Minify WordPress Plugin