Security Blog 


7.6.2002

Damn Blogger!
It's been down all day. Starting to play around with Moveable Type, but we'll have to see. Can't expect much from a free service.


7.5.2002

Status
Not a lot going on news wise due to the holiday. I'll be around, but don't expect a flurry of posts.



1984
Facial recognition software is being tested in Virginia Beach.


7.4.2002

4th
Have a good holiday everyone. I'm working on a new article. Hoping it'll go up early next week - detecting and removing malicious code.


7.3.2002

Wireless Sec
ZDNet has a story on wireless security woes. One point I disagree with - warchalking is a product of the wifi sharing movement, not a tool of hackers. They don't need chalk marks, they'll find access points without them.


7.2.2002

The Pulpit
Cringley has a scary take on Palladium. He thinks MS will use it to replace TCP/IP with something proprietary. I'm glad people are discussing the ramifications of such a system. If this goes through, as Cringley says, the Internet will become MSN.
Let's understand here that not all Microsoft products are bad and many are very good. Those products serve real customer needs and do so with genuine purpose, not marketing artifice. But Palladium isn't that way at all. This is NOT about making things better for the user. This is about removing the ability for the end user to make decisions about how his or her computer functions. It is an effort by Microsoft to take literal ownership of Internet technology, Microsoft's "embrace and extend" strategy applied for the Nth time, though on a grander scale than we've ever seen before.




Cell tracking




Read this
It blew me away. A fascinating look into the infrastructure of the drug cartel. It's scary to think that the criminals might be more organized and advanced (technically) than the authorities.
On a rainy night eight years ago in the Colombian city of Cali, crack counter-narcotics troops swarmed over the first floor of a low-rise condominium complex in an upscale neighborhood. They found no drugs or guns. But what they did find sent shudders through law enforcement and intelligence circles around the world.

The building was owned by a front man for Cali cocaine cartel leader José Santacruz Londono. Inside was a computer center, manned in shifts around the clock by four to six technicians. The central feature of the facility was a $1.5 million IBM AS400 mainframe, the kind once used by banks, networked with half a dozen terminals and monitors.



7.1.2002

Bad Geek
We're moving into the age of the criminal geek. The article also mentions how IT workers can be the target of intimidation and bribery.
Criminal gangs were also likely to start hiring more people with technological know-how as computers increasingly become an important tool in crime, he said.




Finally
I've waited a long time to see this in print:
"The notion that somebody armed with a laptop in Peshawar, Pakistan, could bring down California's power grid is pretty far-fetched," said Kevin Terpstra, communications director for the California Department of Information Technology, an agency responsible for assessing the security of the state's computer systems.

Nice to see some reality based reporting.



Kevin Mitnick - Author?
The Art of Deception - a fictional account of social engineering techniques. Keyword - fictional. Wink, wink.



Anomaly Detection
My new article on the state of Anomal Detection was published today at SecurityFocus. It's a fascinating technology which will help Intrusion Detection become more effective. Let me know what you think.


6.30.2002

More Palladium
While reading the P2P article below, this piece on Palladium caught my eye. Lots of quotes.



We wouldn't have guessed
Surprise. The representative pushing a new P2P vigilance law is from California. I wonder where his campaign contributions come from?