urlquery.net - Free URL scanner

urlquery.net - Free URL scanner: urlQuery.net is a service for detecting and analyzing web-based malware. It

Security of Cisco phones

https://www.youtube.com/watch?v=f3zUOZcewtA
Wow.

Red alert: HTTPS has been hacked | Security - InfoWorld

Security: Finding printers with Google

Why would someone put their printer on the internet????  I really don't know, but they are out there.


Finding Printers with Google


Sometimes for convenience admins will put links to there printers' web interfaces on an Intranet site so they can easily admin them or pull off stored documents. Well, sometimes an Intranet is not really just an Intranet but accessible via the Internet. Google is a great way to find these printers. Here are a few search strings that may be of interest:

Ricoh Savins (Since these printer frequently store documents where to can be downloaded this can be a real killer for security)
          intitle:"web image monitor"
          "/web/user/en/websys/webArch/mainFrame.cgi"
          inurl:"/en/sts_index.cgi"

HP Jetdirects (Varies greatly from model to model)
          inurl:hp/device/this.LCDispatcher

SMTP::From Address Spoofing

Sender Policy Framework
The Problem: Sender Address Forgery

Today, nearly all abusive e-mail messages carry fake sender addresses. The victims whose addresses are being abused often suffer from the consequences, because their reputation gets diminished and they have to disclaim liability for the abuse, or waste their time sorting out misdirected bounce messages.

The Solution: SPF

The Sender Policy Framework (SPF) is an open standard specifying a technical method to prevent sender address forgery. More precisely, the current version of SPF — called SPFv1 or SPF Classic — protects the envelope sender address, which is used for the delivery of messages. See the box on the right for a quick explanation of the different types of sender addresses in e-mails.

Security::Default Passwords

Default Password List

Opening Attachments Blocked by the Microsoft Outlook E-mail Security Update:
"Opening .exe Attachments with the Outlook E-mail Security Update"

Allow the user to use a registry key to open up access to blocked attachments. (Always make a backup before editing the registry.) To use this key: Run Regedit, and go to this key:

HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Security

(change 10.0 to 9.0 for Outlook 2000 SP3 or to 11.0 for Outlook 2003) Under that key, add a new string value named Level1Remove. For the value for Level1Remove, enter a semicolon-delimited list of file extensions. For example, entering this: .mdb;.urlwould unblock Microsoft Access files and Internet shortcuts. Note that the use of a leading dot was not previously required, however, new security patches may require it. If you are using "mdb;url" format and extensions are blocked, add a dot to each extension. Note also that there is not a space between extensions. If you are using this registry entry, a glance at Help About Microsoft Outlook will show Security Mode: User Controlled above the license information. See OL2002 You Cannot Open Attachments for more information on this registry entry. To force users to save *.zip files to the hard drive before opening, add .zip to the extensions step 3. See How to configure Outlook to block additional attachment file name extensions for more information. If you prefer not to edit the registry directly, you can use one of these tools to make the change; not all support both Outlook 2002 and 2000:

nonadmin - DropMyRights: "DropMyRights is a tool written by Michael Howard that allows administrators to run internet-facing applications (such as email clients and web browsers) as a non-administrator. You can read about it and download it from his MSDN article
Browsing the Web and Reading E-mail Safely as an Administrator

XSS, Cookies, and Session ID Authentication ? Three Ingredients for a Successful Hack > The Fixes: "There are a few things that the web developers could do to help prevent these types of attacks. First, all form fields should be filtered to prevent XSS attacks. This is typically as simple as filtering just the '<' and '>' characters, but can be extended beyond that to also include '&*^%%$#@!(){}[]\|';:/?.,>'. The point is to think about what characters are actually needed. Second, a user should never be allowed to upload a file that could be executed on the server. In other words, an upload script should be limited to just those files that are necessary for business. In addition to this, I would suggest uploading files to a non-executable directory on the webserver (e.g. /home/files vs. /home/www/files)."

Instant Messaging

Instant Messaging Security Issues
http://www.symantec.com/avcenter/reference/malicious.threats.instant.messaging.pdf

Instant Messaging

ENT Mag:
The Business Case Against Instant Messaging"

Links::Forensics

Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations
http://www.cybercrime.gov/s&smanual2002.htm#_IB1_

Very interesting read.

How to force Kerberos to use TCP instead of UDP in Windows Server 2003, in Windows XP, and in Windows 2000