sandSite

BBC News – Details of 100m Facebook users collected and published.

And this is why I got off facebook.  Caught in the net.  Now that this ‘database’ is in a convenient file that can be loaded into a database, they’ll be able to trivially connect it with other information like credit cards, job listings, etc.  Personal Information is *too* open.

Harsh Words for Professional Infosec Certification.

Very interesting article.  Says alot about the state of affairs.  How many people have just Security + and are doing system engineering?  I’ve seen this many times.

ISC has us at yellow for the latest windows vulnerability. If you’re a security geek.. you should go here at least once every few days to see what’s up.

http://isc.sans.edu/index.html

Lock down your windows boxes

So found these on reddit.com this morning:

– http://www.damnvulnerablelinux.org/index.html .. a nice version of linux thats easier to hack than the normal version ( but not much

– http://www.wpacracker.com/ – a payware WPA cracking tool .. also nice .. passwords are getting WAY too easy .. everyone is using 12 characters or more right?

More fun soon.

So this is starting to come out in the press .. finally Apple is being evil. The funny part is android has been doing this exact thing for some time. While my tin-foil hat is fairly thin .. this is the kinda thing that really does bother me about unrestricted use of technology. Someone should create a “Privacy” rating along with a “Moral” rating ( PG, R etc.. ) that can be applied to things so that we as consumers have more awareness of what decisions we’re making. My N900 .. this is an active choice. Tho to be honest .. I dont’ know if AT&T can poll my N900 for the information. I know they can use their towers to DF to w/in 200 feet or so if they want.

Talked to a group for Security+ students about ‘trends’ in IT security at ECPI last night. Was a fun class and they enjoyed it (i think). I promised to post the slides.. so here they are Thanks to the students that came!