Comments for JCSecurity

Comment on Stack Smashing – [Slightly Tricky] Buffer Overflow Exploitation Tutorial by ROBINSON

ROBINSON — Fri, 23 Apr 2010 10:29:01 +0000

Have bookmarked your site and will be back to visit.

Comment on Port Knocking on Linux with IPTables — Obscuring SSH Servers by jjMichael

jjMichael — Tue, 20 Apr 2010 22:01:44 +0000

No. But now i will. Thanks for that.

Comment on Qubes – New OS with Security via Isolation by Micchael W

Micchael W — Thu, 15 Apr 2010 21:17:26 +0000

I’d like this…kinda nice.

Comment on Current State of the MD5 Hash Function by Pennie Whack

Pennie Whack — Wed, 14 Apr 2010 00:07:59 +0000

Like the site.

Comment on Qubes – New OS with Security via Isolation by Marcus

Marcus — Thu, 08 Apr 2010 19:55:47 +0000

Hmm nice to finally see this form of sandboxing at OS level

Comment on Photocopiers & Hard Drives — Digital Dumpster Diving? by business stationery

business stationery — Wed, 07 Apr 2010 02:36:12 +0000

I wish I had read this article last month, it would have made my job easier…

Comment on Linux Hardening – Tripwire [Intrusion Detection Tutorial] by Jack

Jack — Tue, 06 Apr 2010 10:29:52 +0000

Thanks, haven’t heard of Nagios before, looks to have a nice feature list.
Good idea on Snort, the rules are indeed a nightmare to remember! Might have to guide it up, helps reinforce the learning

Comment on Linux Hardening – Tripwire [Intrusion Detection Tutorial] by SmallGods

SmallGods — Tue, 06 Apr 2010 09:45:19 +0000

Good stuff as usual! Not really looked into this kind of protection before, or at least certainly not so file specific. I believe the Nagios plugin suite covers some of this functionality, but not anywhere near so security focused..

I’d be interested to see you cover something like Snort maybe as well, getting it going is easy enough, but writing half decent detection rules can be a right pain!

Comment on Photocopiers & Hard Drives — Digital Dumpster Diving? by Saqib A Kakvi

Saqib A Kakvi — Mon, 05 Apr 2010 10:13:42 +0000

Amazing how people treat so many things as a black box and create security holes

Comment on Current State of the MD5 Hash Function by Linux Hardening – Tripwire [Intrusion Detection Tutorial] « JCSecurity

Fri, 02 Apr 2010 13:43:27 +0000

[...] of hash function. If you pick a weak hash like MD4 or MD5 with known collision attacks then you are asking for trouble Use something with decent strength > 256bits and you will be significantly better off (SHA-512, [...]