Archive for the ‘ Security ’ Category

Google and the Windows security debate

Following an article in the Financial Times where Google states they’re dropping Windows all across the company, out comes the response of the Windows Team, on their official blog. In short, Google are blaming Windows for the China attacks in January, and they’re ditching it in favor of Linux and MacOS. But is really blaming a 9-year-old browser the way to go?

To be honest, I find that the biggest security problem with Windows is actually it’s popularity: in the long run, using Linux or MacOS might in fact be less secure if attacked directly, even if there really are more known attacks/viruses/worms/trojans built  for Windows than there are for MacOS or Linux. After all, the security of a computer system depends very much on it being up to date and properly configured, while also running latest versions of any software being used. Having an outdated and/or badly configured version of any OS is a dangerous thing to do, no matter which OS it is. And switching to another OS simply because you can’t properly and securely configure the previous one is a really dumb move.

In any case, both links above are worth a read. :)

Later edit: Google have also announced that ChromeOS will be out “later this fall” -  do you really think this is just a coincidence?

Top 5 world botnets generate 80% of spam

I’ve been reading through the most recent Symantec MessageLabs Intelligence Report (April 2010), and one thing I noticed is that the top 5 botnets in the world generate over 80% of the total amount of spam being sent over the Internet, with the top 2 botnets (rustock and grum) getting a combined share of over 50%… And these botnets now spread over millions of computers worldwide (their estimate for the total number of computers that are part of a botnet is between 3.7 and 5.6 million).

The report is full of some pretty cool pieces of information. All in all, quite an interesting lecture. ;)

White Hat Hacking course round-up

Okay, now that the WHH course is over, here’s a quick link to all the presentations [in Romanian]:

Also, for all those who attended the course, I have some extra content available for download on whh.tudy.ro. For the ones that weren’t present at the last meeting: you may contact me directly for access. ;)

A big thanks to MAP UBB for their help in organizing this, and of course to all the attendees, along with a note that I’m still available for any questions/discussions you might want to raise on the subject. :)

White Hat Hacking course #3

This Saturday I’m holding the third and last part of my White Hat Hacking course.

This one is going to address information security (malware, botnets, phishing, crimeware, scareware, ddos attacks, etc), web threats (SQLi, XSS, CSRF, RFI) and some general network/security best practices.

The time and place are the same as previously announced.

White Hat Hacking course #2

After last week’s meeting, where we talked about hacking ethics and social engineering, tomorrow it’s time for the second part of my WHH course – this time about privacy, social media security and wireless networks.

The time and location are the same. :)

White Hat Hacking course

Just got back from Sinergija ’09 in Belgrade, thus the delay in announcing this: after last year’s course‘s positive feedback, I’ll be holding the White Hat Hacking course again this year, starting tomorrow.

Even if it’s roughly the same outline as last year, there’s going to be some extra/updated content. To sum things up, I’ll be addressing topics such as social engineering, hacking ethics, systems security attacks, penetration testing, web and wireless security.

You can find more details on the time and place of the event on the event page.

Microsoft Security Essentials is available!

Microsoft Security Essentials, the free antivirus from Microsoft is finally out of beta. :)

It’s available for XP, Vista and Windows 7 users (both x86 and x64), with the sole mention that your PC must run genuine Windows in order to install it.