Re: [funsec] Sony Just Hired a Chief Information Security Officer (CISO)

2011-09-08 Thread Jeff Kell
On 9/8/2011 4:01 PM, valdis.kletni...@vt.edu wrote: Anybody want to guess what Sony's coffee/itsec ratio was? Black-hat or White-hat? It took some nontrivial effort to create the now infamous Sony rootkit... Jeff ___ Fun and Misc security discussion

Re: [funsec] China vs. U.S.: The cyber Cold War is raging

2011-07-28 Thread Jeff Kell
On 7/28/2011 10:28 PM, Dave Paris wrote: On Thu, Jul 28, 2011 at 7:17 PM, Jeffrey Walton noloa...@gmail.com wrote: http://money.cnn.com/2011/07/28/technology/government_hackers/ (This is part four of a week-long series on the ecosystem of cybercrime) On April 8, 2010, traffic to about 15% of

Re: [funsec] Firefox slow?

2011-01-13 Thread Jeff Kell
On 1/13/2011 8:13 PM, Randal T. Rioux wrote: Because I'm talking out my ass here, I'll pose a question. Has there been any study done on what data Chrome collects and passes along to Google? How many places do you already more-or-less send your browsing history (Google SafeBrowsing, McAfee

Re: [funsec] California opts out of 4th Amendment

2011-01-06 Thread Jeff Kell
What if your cell/PDA/smartphone is locked w/a password? Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

Re: [funsec] Man facing charges for checking wife’ s e-mail

2010-12-30 Thread Jeff Kell
On 12/30/2010 9:37 AM, Juha-Matti Laurio wrote: Leon Walker, 33, is being charged under a state statute that prohibits unlawful access to a computer system, program or network. Hmm... does that actually cover cloud-based services? The system/program/network provision is more about hacking

Re: [funsec] University Begins Reporting All P2P Users to the Police

2010-11-13 Thread Jeff Kell
On 11/13/2010 10:34 AM, Shawn Merdinger wrote: “Once individuals are identified, VSU hands responsibility over to police. Users can face felony punishments, including a possible prison sentence of up to five years and a fine of up to $250,000 per offense,” reports the

Re: [funsec] Snoop Dogg's Magic Symantec Bus

2010-09-06 Thread Jeff Kell
On 9/6/2010 10:26 PM, Rob, grandpa of Ryan, Trevor, Devon Hannah wrote: Date sent:Mon, 06 Sep 2010 13:22:15 -0700 From: Tomas L. Byrnes t...@byrneit.net I bet they're doing the Cabbage Patch @ Trend watching their competitors make fools of themselves. Hmmm.

Re: [funsec] 'Cyber Attack' Aimed At Texas Electricity Provider

2010-04-04 Thread Jeff Kell
Sorry for top-post, I'm relegated to webmail for the moment... :-( -Original Message- From: valdis.kletni...@vt.edu If I had a nickel for every ssh woodpecker we see, I could retire to a bungalow on a nice beach somewhere in the cheaper part of the Pacific Rim. If I counted the ones

Re: [funsec] Vegas

2010-01-09 Thread Jeff Kell
On 1/9/2010 1:18 PM, Randall M wrote: Heading to Vegas Sunday, am I safe? At least until you get there, yes :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public

Re: [funsec] Network loads

2010-01-01 Thread Jeff Kell
All quiet (load-wise) in the .edu front, faculty/staff/students cleared out, and we were partly off the air for infrastructure changes to accomodate a new construction project. Our OTDR utilization, on the other hand, has gone through the roof :-) Jeff

Re: [funsec] Microsoft denies it build backdoor in Windows 7

2009-11-20 Thread Jeff Kell
Juha-Matti Laurio wrote: http://www.computerworld.com/s/article/9141182/Microsoft_denies_it_built_backdoor_in_Windows_7 Who needs a back door when the front door is a screen door? :-) Jeff ___ Fun and Misc security discussion for OT posts.

Re: [funsec] Real Spam

2009-06-10 Thread Jeff Kell
RandallM wrote: Unwanted spam is Apple trying to load Safari on my computer everyday just because I have Itunes intstalled. That's spam. If I WANTED Safari I would go get it and even ask for it!! Or the latest Microsoft .NET update which installs an un-installable Firefox extension so that

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Jeff Kell
Steve Pirk wrote: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? You didn't catch the bit about using all the local user's caches in the common pool? One nice big fat file

Re: [funsec] OT: Queen Bohemian Rhapsody old school computer Remix

2009-04-26 Thread Jeff Kell
rac...@mcs.anl.gov wrote: There was also the fun of setting a radio in specific places on the main control panel and listen to the music it played. Somewhat better than the printer banging away as you'd get actual tones to play. An AM radio in the vicinity of an IBM 360/30 and 360/40 would

Re: [funsec] Conficker Worm Hits University of Utah Computers

2009-04-13 Thread Jeff Kell
valdis.kletni...@vt.edu wrote: Now taking bets whether this sucker waltzed onto the campus via a USB stick rather than Internet. ;) ...and propagated from that point via some Active Directory One Big Happy Family shared resource? Jeff ___ Fun and

Re: [funsec] religious war!

2009-03-22 Thread Jeff Kell
Drsolly wrote: On Fri, 20 Mar 2009, Rob, grandpa of Ryan, Trevor, Devon Hannah wrote: On Thu, 19 Mar 2009, David M Chess wrote: But, but...! Perl is the One True Programming Langauge! From:Gadi Evron g...@linuxbox.org C or nothing! Wimps. Just like

Re: [funsec] A candidate for the 'worst idea ever' award?

2009-02-06 Thread Jeff Kell
John C. A. Bambenek, GCIH, CISSP wrote: They've done so much to help online crime, why quit while they are behind. On 2/6/09, Jim Murray j...@digitaldaemons.co.uk wrote: http://news.bbc.co.uk/1/hi/technology/7874151.stm Microsoft appears to now be encouraging users to run code directly

Re: [funsec] Microsoft Certified Professional examination passed by nine year old

2008-12-28 Thread Jeff Kell
Jon Kibler wrote: No surprise: MCSE: Must Call Someone Experienced Microsoft Claims as Substitute for Experience Microsoft Certified Solitaire Expert. Jeff ___ Fun and Misc security discussion for OT posts.

Re: [funsec] NORAD tracks Santa

2008-12-24 Thread Jeff Kell
Two XSS's (youtube and googleapi) and flash. NORAD needs a new web designer :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

Re: [funsec] ChamsCity: World’s Largest Cyber Ce ntre is in Lagos Nigeria

2008-11-08 Thread Jeff Kell
Paul Ferguson wrote: Somewhat ironic -- maybe they should call it ShamCity instead. :-) I especially liked the Nigerian information technology firm with specialisation in identity management and related solutions bit. Jeff ___ Fun and Misc security

Re: [funsec] WTF Watch: EstDomains, Inc Takes Next Step in Combating Spam and Malware

2008-10-23 Thread Jeff Kell
Paul Ferguson wrote: Today EstDomains, Inc (http://www.estdomains.com) is glad to introduce to the internet-oriented community advanced software created especially for browsing through the World Wide Web in order to detect corrupted and potentially dangerous websites. Well, they fscking

Re: [funsec] Stop The 70% Lie

2008-07-18 Thread Jeff Kell
Gadi Evron wrote: The original number is from some research in the 70s. Yeah. Before the internet :-) Jeff ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

2008-07-17 Thread Jeff Kell
Richard M. Smith wrote: So under HA, a Web browser can only show ASCII text files. After all, HTML itself is a programming language with intermingled code (ie., HTML tags) and data (text). Well, it's not *that* bad. HTML tags and other markup that affects the layout is fine. Tables, forms,

Re: [funsec] XP SP3 Installs Older, Vulnerable Version of Flash Player

2008-06-02 Thread Jeff Kell
Dave Nelson wrote: IIRC Microsoft's reasoning for not shipping SP3 with a newer version was that their license for flash only covered the older version that they include in the update. Does it reinstall the older ActiveX, the older plugin [e.g., Firefox], or both? Jeff

Re: [funsec] The World’s Oldest Sound Recordings P la

2008-03-28 Thread Jeff Kell
Juha-Matti Laurio wrote: OT but cool: http://www.firstsounds.org/press/032708/index.php Au Clair de la Lune - French folk song, back to 1860... And the RIAA can't be far behind in shutting down that website :-) Jeff ___ Fun and Misc security

[funsec] Spam mail authentic validation verified :-)

2008-03-20 Thread Jeff Kell
I received this little gem yesterday... Jeff -Registered and USDA/FDA apprvoved- You're invited to purchase! We are pleased that you were referred to us. We would like to invite you to our special website only available to existing customers. As a referral we are extending this

Re: [funsec] Math not Ironport's top suite?

2008-02-04 Thread Jeff Kell
Gadi Evron wrote: On Sun, 3 Feb 2008, Larry Seltzer wrote: I believe 24/7 covers it. Why the rest? Why not just 24? 24 hours means 24 hours. 24 hours 7 days a week means all the time. Reminds me of the old Steven Wright joke about the man walking up to a convenience

Re: [funsec] The Day The Routers Died

2007-11-04 Thread Jeff Kell
silky wrote: i'm australian and i would pronounce: route: equally correct as 'rowt' or 'root'. rout: always rowt root: always root router: always 'rowter' routed: 'rowted: networking meaning, rooted: localised meaning: stuffed || buggered || made love to ... Then there's the Row, row, row

Re: [funsec] on the university problem

2007-08-14 Thread Jeff Kell
Sean Donelan wrote: On Sun, 12 Aug 2007, Jordan Wiens wrote: Now if anyone wants to gather some /real numbers/ showing Universities are or aren't more of a problem, maybe we can stop making up guesses one way or the other. Universities are probably not any more OR less of a problem than any

Re: [funsec] Rogue DNS Servers

2007-03-28 Thread Jeff Kell
Fergie wrote: Researchers of Trend Micro have identified a network of more than 115 rogue DNS servers that are used by a certain variant of TROJ_DNSCHANG. These DNS servers exhibit interesting behavior. I get timeouts trying to reference the URL, so I can't get the details... but... If

Re: [funsec] NO monthly MS security bulletins coming in March

2007-03-08 Thread Jeff Kell
Michal Zalewski wrote: On Thu, 8 Mar 2007, Juha-Matti Laurio wrote: Believe or not... What, no bugs to fix? Nah, there was a delay in certifying them in Vista, and they now have to fix that first, ya know. Jeff ___ Fun and Misc

Re: [funsec] Don't click that link - it may re-program your router?

2007-02-19 Thread Jeff Kell
Gary Funck wrote (quoting newsfactor.com): An additional line of defense is to disable JavaScript on untrusted Web sites, he added. This is becoming an increasingly useless step at the macro level -- a trusted website. More and more websites are now allowing user supplied javascript. If you