WPA and WPA2 cracked 100 times faster

Sunday, October 12th, 2008

The days of relying on WPA or WPA2 as your online layer of wireless security may be numbered. A new technique that makes use of NVIDIA’s newer GPU’s to do some of hte processing means that it’s possible to break “forgotten” keys about 100 times faster than was previously possible. This means a key could […]

Varying Degrees of Password Security

Monday, March 3rd, 2008

Last week we talked about creating strong passwords, but should we use different passwords for every site? It’s best practice to do just that. Do they all have to be really hard passwords? Again ideally, yes. So, how can we keep up password spreadsheet? Big sheet of paper? Password management program. Some advantages of password […]

WiFi Locator

Thursday, February 15th, 2007

There are all sorts of these things out there on the market – I saw an ad for the Hawking HWL1 802.11b/g WiFi Locator… and it looked interesting (directional)… I’ve seen mixed reviews, but some might find it good/useful. I know, I know…. “why buy a wifi locator when you could pull out a laptop/pda”…. […]

Banks and Web security

Tuesday, August 1st, 2006

George Ou has a good post on Banks cheating their way to meet web security guidelines. Many of the observations that he notes come from the Between the Lines column here and are SPOT ON. The biggest I see is related to “multifactor authentication”….    Send article as PDF   

Fun way to mess with wireless freeloaders….

Monday, July 31st, 2006

Some people spend a lot of time finding ways to block the freeloaders from their wireless internet. Others find fun ways to mess with them…. They start off by settup up dhcpd.conf to carve out two subnets a “good” one with known mac addresses and an untrusted…. then the fun begins with some proxy side […]

The security of remote tech support (ultravnc sc or x11vnc with wrapper script)

Tuesday, June 6th, 2006

Well, I’ve got a nice way of doing “easy” one click (or one cut and paste) light desktop support for windows or linux, one uses ultravnc sc, the other uses x11vnc with a special wrapper script. So, what security flaws are there in this process? Well, for starters, I see the biggest vulnerability for the […]

OpenVPN

Monday, January 16th, 2006

The last time I used openvpn, it was version 1.x and only supported a single connection per running process. So, if you had a server that you wanted to support multiple clients connecting, you had to… have multiple ports open to the outside world (unless you did something VERY fancy), and had to have as […]

The D-Link DWL-800AP+ as a wireless repeater to extend wireless range – Part 7

Monday, January 2nd, 2006

So, according to D-Link there is a short list of access points that the DWL-800AP+ will repeat for. They are all d-link branded access points. It seems that there have been firmware updates to improve the compatibility with more models (of d-link access points.) Some of the incompatibilities have been with WEP encryption from what […]

New variation of Sober virus coming in January

Wednesday, December 7th, 2005

Now, we seem to be getting “coming attractions” previews in virus-land…. Anyway, I’ve read at several sources that we are to expect a new variation on the sober worm around January 5th, 2006. It’s said that the date was chosen to mark the formation of the Nazi Party. In the past, variants have spouted pro-nazi […]

Steganography with flickr

Monday, August 22nd, 2005

This caught my attention for some reason. I guess because steganography is such an unusual word and because the list of uses has been covered so much in the news. I found this article talking about how someone tested to see if there was any kind of filtering on flickr for images containing documents hidden […]

Google
 
Web www.averyjparker.com