RE: Do you think the security industry exaggerates the threat of mobile malware?

2012-03-15 Thread Marc Maiffret
and android? Grab our free Retina CS community edition that I have mentioned previously: http://go.eeye.com/LP=68 -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.comhttp://www.eeye.com/ BLOG: http://blog.eeye.comhttp://blog.eeye.com/ TWITTER: http://twitter.com

RE: Patch management software...

2012-02-10 Thread Marc Maiffret
environments. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Fri, Feb 10, 2012 at 1:19 AM, Marc Maiffret mmaiff...@eeye.com wrote: Just an update folks we released version 3.0 of Retina CS Community which now on top

RE: Patch management software...

2012-02-09 Thread Marc Maiffret
heard from folks. Can download here: http://www.eeye.com/Products/Retina/Community and read more about what is new here: http://www.eeye.com/company/News-and-Events/Press-Releases/2012/eEye-Retina-CS-3-0-to-Close-the-Security-Gaps-Asso.aspx -Marc Signed, Marc Maiffret Founder/CTO eEye Digital

RE: Patch management software...

2012-02-02 Thread Marc Maiffret
for a free version. Any chance you could sneak Java in there as well? However, even without it that's great for a lot of small clients I know On 31 January 2012 06:25, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Indeed it does Adobe Reader, Flash, Shockwave, Acrobat and also

RE: Patch management software...

2012-01-30 Thread Marc Maiffret
Check out the free version of our Retina CS Community Edition. It is good up to 128 systems for free. Includes full vulnerability management and patching including patching for some third party apps. http://www.eeye.com/products/retina/community http://go.eeye.com/LP=68 -Marc Signed, Marc

RE: Patch management software...

2012-01-30 Thread Marc Maiffret
programs that need vigilant patching. Alex Eckelberry www.eckelberry.com (c) 727 – 644 – 8830 Sent from my iPhone (Please excuse the occasional typos) On Jan 30, 2012, at 11:26 PM, Marc Maiffret mmaiff...@eeye.com wrote: Check out the free version of our Retina CS Community Edition

RE: Whitelisting Pros Cons?

2011-11-16 Thread Marc Maiffret
, and in the wild exploits that myself and my research team track. And more than just knowing where you are vulnerable it also includes free third party application patching for things like Microsoft, Adobe and Mozilla. This is all free for up to 128 assets. http://go.eeye.com/LP=68 Signed, Marc Maiffret

RE: Duqu, Son of Stuxnet, Destroyer of Worlds!

2011-10-23 Thread Marc Maiffret
, Destroyer of Worlds! LOL Hype sells, unfortunately... ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Thu, Oct 20, 2011 at 8:30 PM, Marc Maiffret mmaiff...@eeye.com wrote: Early Friday humor for you all! J

RE: Android Handset Makers - Adding Value or Vulnerabilities?

2011-10-12 Thread Marc Maiffret
but I digress... :-) -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret -Original Message- From: Bill Humphries [mailto:nt...@hedgedigger.com] Sent: Tuesday, October 11, 2011 7:03 AM

RE: Android Handset Makers - Adding Value or Vulnerabilities?

2011-10-12 Thread Marc Maiffret
models and wanting to see if we can get work to foot the bill until the next hardware release from MS/Nokia camp. On Wed, Oct 12, 2011 at 1:12 AM, Marc Maiffret mmaiff...@eeye.com wrote: I would wait until the phones from Nokia come out. They should have some pretty solid unibody designs

RE: AV and malware protection?

2011-10-12 Thread Marc Maiffret
Random factoid, anyone see that there was a vulnerability patched today that ONLY affected IE9? And it is reliable code execution. We are discussing it on eEye's VEF tomorrow, its pretty silly awesome. -Marc -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Monday,

RE: AV and malware protection?

2011-10-12 Thread Marc Maiffret
of their own doing, or through regulatory necessity, make that time or care about that level of knowledge (aka funds!). PCI perhaps is at least a start in terms of introducing some of these concepts to otherwise unregulated verticals. a From: Marc Maiffret

RE: Android Handset Makers - Adding Value or Vulnerabilities?

2011-10-11 Thread Marc Maiffret
. Wait until the end of the year (November even) and Nokia and others should have some other new phones out for WP7 that will rock. HTC has a couple of new ones, but I think Nokia will out do them hardware wise... -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http

RE: Android Handset Makers - Adding Value or Vulnerabilities?

2011-10-11 Thread Marc Maiffret
your data as it relates to attacks coming across the wire etc... -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com/marcmaiffret -Original Message- From: Sam Cayze [mailto:sca...@gmail.com] Sent

RE: AV and malware protection?

2011-10-10 Thread Marc Maiffret
. Now of course you could have the time and knowledge and not a product that allows for customization. But that is a different thing all together. -Marc Signed, Marc Maiffret Founder/CTO eEye Digital Security WEB: http://www.eEye.com BLOG: http://blog.eeye.com TWITTER: http://twitter.com

Android Handset Makers - Adding Value or Vulnerabilities?

2011-10-10 Thread Marc Maiffret
I thought some of the NTSYSADMIN'ers would enjoy this post as I saw the HTC vuln. was mentioned the other day here. http://blog.eeye.com/vulnerability-management/android_security If nothing else fun hack to mess with your HTC/Samsung Android using co-workers. :-) -Marc Signed, Marc Maiffret

RE: Interesting Article about secure hard disk overwrites

2011-09-02 Thread Marc Maiffret
like this Brian Smithson saying stuff like Blame Gutmann. Marc Maiffret Founder/CTO eEye Digital Security BLOG: http://blog.eeye.com/author/mmaiffret/ TWITTER: http://twitter.com/#!/marcmaiffret WEB: http://www.eEye.com From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, August 29

RE: VIPRE Alternatives?

2011-09-02 Thread Marc Maiffret
Tossing that link into the mix... http://www.eeye.com/products/blink -Marc From: David Lum [mailto:david@nwea.org] Sent: Wednesday, August 24, 2011 10:24 AM To: NT System Admin Issues Subject: RE: VIPRE Alternatives? eEye has a product that looks compelling as well... From: Roger Wright

RE: Free vulnerability management software

2011-05-25 Thread Marc Maiffret
The link to Retina community has been corrected. Apologies for the inconvenience. -Marc -Original Message- From: techconnect [mailto:techconn...@bellsouth.net] Sent: Wednesday, May 25, 2011 6:55 AM To: NT System Admin Issues Subject: Re: Free vulnerability management software Here

RE: More cracker fun!

2011-05-13 Thread Marc Maiffret
It has been profitable for the long time, hence why Stuxnet was able to happen. From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Tuesday, May 10, 2011 6:12 AM To: NT System Admin Issues Subject: RE: More cracker fun! After STUXNET, selling 0day's to the G is likely profitable... -sc

Late or Early Friday Humor Videos/CNN Hacking Interview

2010-12-13 Thread Marc Maiffret
of the NTSYSADMIN'ers whom helped a ton behind the scenes to shape our newest release of our vulnerability management product Retina CS 2.0. Owe you a ton as always! http://www.eeye.com/Issues -Marc Signed, Marc Maiffret Co-Founder/CTO eEye Digital security BLOG: http://blog.eeye.com TWITTER: http

RE: Possibly interesting security tool

2010-10-12 Thread Marc Maiffret
going to be out speaking at a conference. Two of my researchers however, the smart guys, will be rocking it though and answering *any* questions you have. -Marc Signed, Marc Maiffret Co-Founder/CTO eEye Digital Security Web: http://www.eeye.com Blog: http://blog.eeye.com VEF: http://www.eeye.com

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-08 Thread Marc Maiffret
... On Thu, Oct 7, 2010 at 7:33 PM, Marc Maiffret mmaiff...@eeye.com wrote: Privilege escalation bugs are pretty much here and now and being used more commonly in attacks as the sophistication level is not necessarily as high as one would think

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Marc Maiffret
/Company/News-and-Events/Minute-With-Maiffret.aspx Signed, Marc Maiffret Co-Founder/CTO eEye Digital Security Web: http://www.eeye.com Blog: http://blog.eeye.com Twitter: http://www.twitter.com/marcmaiffret From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Thursday, October 07, 2010 11:25 AM

RE: Interesting run-down on Stuxnet from F-Secure

2010-10-07 Thread Marc Maiffret
/AndrewBaker Exploiting Technology for Business Advantage... On Thu, Oct 7, 2010 at 7:33 PM, Marc Maiffret mmaiff...@eeye.commailto:mmaiff...@eeye.com wrote: Privilege escalation bugs are pretty much here and now and being used more commonly in attacks as the sophistication level

RE: eeye eeye eeye oh! (www.eeye.com)

2010-10-01 Thread Marc Maiffret
Indeed we hate web visitors, especially to our online store! :) Happy Friday! -Marc From: Webster [mailto:carlwebs...@gmail.com] Sent: Tuesday, September 28, 2010 10:10 AM To: NT System Admin Issues Subject: RE: eeye eeye eeye oh! (www.eeye.com) Don't you get it, Marc wants you to stay away

RE: DLL hijacking vulnerabilities

2010-08-24 Thread Marc Maiffret
not matter if your Windows Update is up to date. So yes, not new, but an extremely big deal. -Marc Signed, Marc Maiffret Co-Founder/CTO eEye Digital Security Web: http://www.eeye.com Blog: http://blog.eeye.com Twitter: http://www.twitter.com/marcmaiffret -Original Message- From: Ben

RE: DLL hijacking vulnerabilities

2010-08-24 Thread Marc Maiffret
It is being exploited all over the place that we are tracking. We are writing a blog post on the matter right now to be posted on http://blog.eeye.com soon given the massive number of exploit servers and exploit frameworks (criminal ones, not just metasploit) that have all been weaponized for this

Massive Patch Tuesday

2010-08-06 Thread Marc Maiffret
that are left out from the very generic Microsoft bulletins. If you are interested in cutting through this mountain of vulnerabilities to get some specifics you should join the conference and ask any questions you might have: http://www.eeye.com/vef Happy Friday NTSYSADMIN'ers! -Marc Signed, Marc

RE: Passwords on paper? Seriously?

2010-07-15 Thread Marc Maiffret
place for your naughty passwords. Friday yet? J Signed, Marc Maiffret Co-Founder/CTO eEye Digital Security Web: http://www.eeye.com Blog: http://blog.eeye.com Twitter: http://www.twitter.com/marcmaiffret From: David Lum [mailto:david@nwea.org] Sent: Thursday, July 15, 2010 7:47 AM

Cisco MARS

2010-07-14 Thread Marc Maiffret
Does anyone have access or experience with Cisco MARS? Replies off list thanks -Marc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

1gbps+ traffic?

2010-03-17 Thread Marc Maiffret
I am curious to talk to any folks on this list whom are peaking over 1gig in bandwidth usage to the internet etc... Reply to me directly if you can. Thanks! -Marc Marc Maiffret Chief Security Architect FireEye, Inc. http://www.FireEye.com ~ Finally, powerful endpoint security that ISN'T

RSA Security Conference

2010-02-24 Thread Marc Maiffret
Hello folks, I wanted to send out some word on RSA to see whom of my NTSYSADMIN friends might be attending. My company, FireEye, has a booth and also our Chief Scientist is giving a great technical talk on modern web malware and obfuscation etc... On top of that I wrote a small pamphlet, or

RE: Has anyone seen BSOD's when applying MS10-015 Patch for Windows Kernel

2010-02-12 Thread Marc Maiffret
screen share) whom is having this problem as I would like to investigate further. -Marc Signed, Marc Maiffret Chief Security Architect FireEye, Inc. http://www.FireEye.com -Original Message- From: John Aldrich [mailto:jaldr...@blueridgecarpet.com] Sent: Thursday, February 11, 2010 4:36

BSOD MS10-015

2010-02-12 Thread Marc Maiffret
I know it was mentioned here before but it has now been confirmed through multiple sources that the blue screen issues that are happening as it relates to MS10-015 are because of rootkits be installed on machines. So for those of you whom posted, or whom have seen it in your environment, that

RE: Penetration Testing

2010-02-11 Thread Marc Maiffret
Metasploit is going to be the best free tool you can use to do pentesting around software vulnerabilities etc... Backtrack is a good free linux boot cd/image that has basically every major pentest tool on it should you want to do wireless testing etc... This is a good documented framework

RE: New Adobe ZeroDay

2009-12-16 Thread Marc Maiffret
, Marc Maiffret Chief Security Architect FireEye, Inc. http://www.fireeye.com/ From: David Lum [mailto:david@nwea.org] Sent: Wednesday, December 16, 2009 10:23 AM To: NT System Admin Issues Subject: RE: New Adobe ZeroDay I have this page as one of my six home page tab, even though I'm signed

New Adobe ZeroDay

2009-12-16 Thread Marc Maiffret
to for example detect the above malicious PDF zeroday at the network level, and through virtual machine verification within the appliance, across your entire organization by simply dropping in a box. http://www.fireeye.com/news_events/pr/20091209_PR.html More fun research to come! Signed, Marc

Re: IDS appliance

2009-12-06 Thread Marc Maiffret
Most network based IDS/IPS is becoming more and more useless each day as attacks move away from the server type of RPC/worm/etc vulnerabilities and continuing into client application and related vulnerabilities. One interesting solution in the place that I have heard great things about from an

Re: Firefox for corporate use?

2009-11-21 Thread Marc Maiffret
process? And if your idea of updating is having your users running as administrator updating FireFox themselves, well godspeed my sons. This is similar in response to people whom ask me if they should switch to using Mac's because they are not doing well managing a Windows environment. -Marc

Re: Conficker Help!

2009-11-21 Thread Marc Maiffret
http://www.eeye.com/Downloads/Security-Tools/Conficker-Worm-Scanning-Utility.aspx -Marc Maiffret www.marcmaiffret.com On Fri, Nov 20, 2009 at 5:33 AM, Kelsey, John jckel...@drmc.org wrote: Looks like we're getting hit the Conficker this morning.  Sophos is reporting several hundred 'conficker

Re: Ransomware

2009-10-29 Thread Marc Maiffret
above whom now are looking for people to help clean up the mess. -Marc Maiffret www.marcmaiffret.com On Wed, Oct 28, 2009 at 12:05 PM, Roger Wright rhw...@gmail.com wrote: Spyware, Malware, Scareware, etc now we have Ransomware. http://blogs.zdnet.com/security/?p=4748 Roger Wright

Re: Personal firewalls on XP inside LANs

2009-10-21 Thread Marc Maiffret
signature. -Marc Maiffret [1] - As most know I am the co-founder/cto/cho of eEye for about 10 years. On Wed, Oct 21, 2009 at 12:42 PM, Angus Scott-Fleming angu...@geoapps.comwrote: WRT XP workstations, do people here who manage networks of 50-100 users use the firewalls from security suites

Re: [OT]-Apple's UnFairPlay?

2009-07-28 Thread Marc Maiffret
There is of course this other new gem from Apple today in which they say Jailbreak iPhones could be used to crash cell towers and therefore is the reason it should be banned. iPhone Jail Break Cyberterrorism$%$% Were all gona die! http://www.wired.com/threatlevel/2009/07/jailbreak/ -Marc

RE: The industrialization of hacking

2009-05-15 Thread Marc Maiffret
Ben Nagy use to work for me at eEye Digital Security where we helped pioneer some of the earliest forms of fuzzing before fuzzing was even a word used by the security industry. The field has changed dramatically in recent years as one that started with simply spewing randomized data at various

Free Conficker Scanner

2009-03-31 Thread Marc Maiffret
identity Conficker and related. -Marc Maiffret www.marcmaiffret.com P.S. If you are looking to be proactive and find this and more: http://www.eeye.com/html/products/retina/index.html ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business

RE: Out of Cycle Critical Windows Patch to be released today, stay tuned

2008-10-23 Thread Marc Maiffret
never detect this type of an attack. http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx http://www.nytimes.com/external/idg/2008/10/23/23idg-Microsoft-says.html http://www.theregister.co.uk/2008/10/23/emergency_windows_update/ - Marc Maiffret Director of Professional Services

RE: Out of Cycle Critical Windows Patch to be released today, stay tuned

2008-10-23 Thread Marc Maiffret
that going in Marc, thanks for the reminder tho, I am sure the stab wound is fresh right now... ( Just kidding) Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 -Original Message- From: Marc Maiffret [mailto:[EMAIL

RE: exploit tests on security suites

2008-10-20 Thread Marc Maiffret
some kind of data encryption there won't be a single app to handle endpoint security. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 -Original Message- From: Marc Maiffret [mailto:[EMAIL PROTECTED] Sent: Saturday, October 18

RE: exploit tests on security suites

2008-10-18 Thread Marc Maiffret
might have done their testing wrong, but their point is real and accurate. -Marc Maiffret -Original Message- From: Stu Sjouwerman [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2008 1:08 PM To: NT System Admin Issues Subject: RE: exploit tests on security suites Alex has some

RE: PDF Editing Software

2008-10-11 Thread Marc Maiffret
Foxit, free PDF editing, http://www.foxitsoftware.com/pdf/rd_intro.php -Original Message- From: Phil Brutsche [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2008 12:11 PM To: NT System Admin Issues Subject: Re: PDF Editing Software Have you tried Adobe Reader? I'm pretty

RE: Website security checking service

2008-09-29 Thread Marc Maiffret
vulnerability assessment software will fine) however they do not find custom coded web sql injection bugs. - Marc Maiffret Director of Professional Services The DigiTrust Group, LLC. 5757 W. Century Blvd, Ste. 700 Los Angeles, CA 90045 p: 310.348.2901 f: 310.469.0103 w: http

RE: BGP Hole?

2008-08-27 Thread Marc Maiffret
for sensitive things act accordingly. -Marc Maiffret -Original Message- From: Andy Ognenoff [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 7:27 AM To: NT System Admin Issues Subject: BGP Hole? Anybody see this? Scary. http://blog.wired.com/27bstroke6/2008/08

RE: Smartphone Recommendations

2008-08-01 Thread Marc Maiffret
.hp.com/wwpc/us/en/sm/WF06a/215348-215348-64929-314903-335 2590-3551665.html Comes unlocked to use with any standard GSM chip. I seriously get giddy every time I go to use it and I don't usually get that excited about uhhh hardware. -Marc Maiffret www.inveniosecurity.com -Original Message

RE: Hackers get hold of critical Internet flaw

2008-07-31 Thread Marc Maiffret
system on the company's network that used Sun Java. Example ATT DNS Servers hit http://www.securityfocus.com/news/11529 Definitely not the end of the Internet, but a lot of people are going to get run over with this one, especially the ones debating it rather than patching. Signed, Marc Maiffret

Exploit released, DNS Vulnerability...

2008-07-24 Thread Marc Maiffret
-oarc.net/oarc/services/porttest Marc Maiffret Founder/CEO Invenio Security Security Services Training http://www.inveniosecurity.com ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

Managed Security Services, NTSYSADMIN'ers only!

2008-07-14 Thread Marc Maiffret
would be past that, ok I'm digressing.. -Marc Marc Maiffret Founder/CEO Invenio Security Security Services Training http://www.inveniosecurity.com ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

RE: Get fired for using outlook

2008-07-08 Thread Marc Maiffret
Your email reminds me of the movie Office Space and it sounds like somebody had a case of the Mondays :-) Marc Maiffret Founder/CEO Invenio Security Security Services Training http://www.inveniosecurity.com -Original Message- From: Jeff Williams [mailto:[EMAIL PROTECTED] Sent: Monday

RE: WiFi setup

2008-06-30 Thread Marc Maiffret
Do not forget to use IPSEC or related to secure access between WiFi systems and your main network. Almost all of the built-in WiFi protection mechanisms such as MAC filtering, WEP, disabling broadcast, etc are all prone to attacks. Marc Maiffret Founder/CEO Invenio Security Security Services

RE: WiFi setup

2008-06-30 Thread Marc Maiffret
You shouldn’t have any problems then. It is more of a track record on WEP/WPA and related that is to worry about, but you can always handle that when the time comes. Currently the only WPA2 that can be cracked is that which uses pre-shared keys. Marc Maiffret Founder/CEO Invenio Security

RE: Code execution vulnerability found in Firefox 3.0

2008-06-20 Thread Marc Maiffret
internet data. Which has to make one wonder what the future is for hardware manufactures that are always pushing for more storage, more memory, more speed. You simply won't need all of that as things eventually top out and only gradually increase as bandwidth and visualization needs do. or not Marc

RE: Wireless Analyzer

2008-06-03 Thread Marc Maiffret
the tools to discover broadcast and hidden AP's, all for free. If your default laptop wireless card is not detected properly you can buy a cheap one from bestbuy that will work just fine. Signed, Marc Maiffret Founder/CEO Invenio Security Security Services Training http://www.inveniosecurity.com

RE: I hacked all of NTSYSADMIN

2008-06-02 Thread Marc Maiffret
. Less is more :-) Signed, Marc Maiffret Founder/CEO Invenio Security http://www.inveniosecurity.com -Original Message- From: Rod Trent [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2008 3:44 PM To: NT System Admin Issues Subject: RE: I hacked all of NTSYSADMIN Dude...you need a web

RE: I hacked all of NTSYSADMIN

2008-06-02 Thread Marc Maiffret
of web guy...who needs context-sensitive editors! LOL Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 ..remember that, in the past, those who foolishly sought power by riding the back of the tiger ended up inside - JFK -Original Message- From: Marc Maiffret [mailto:[EMAIL

RE: Enterprise client security - Sophos vs. ???

2008-05-28 Thread Marc Maiffret
of the Gartner and related statistics show, people are not rushing to adopt Vista. However, now things are at the point where people are switching to Vista as a necessity and hence Blink is there for them. -Marc Maiffret Former CTO/eEye -Original Message- From: Carl Houseman [mailto:[EMAIL PROTECTED

RE: Anyone have experience with Computrace?

2008-03-21 Thread Marc Maiffret
That is the funny part everyone leaves out when talking about datatheft is that the vast majority of the time when a laptop or computer is stolen (even with critical data) the people stealing it are not thinking about your data but the money they will make from simply selling the hardware. But

RE: Anyone have experience with Computrace?

2008-03-21 Thread Marc Maiffret
website. That is the real risk to worry about and mitigate, your organizations inability to control its flow of critical data. Data encryption is a safe band aid until your able to do that. -Marc Maiffret P.S. Obviously none of this direct at you/your company Steve, just speaking generally

RE: Anyone have experience with Computrace?

2008-03-21 Thread Marc Maiffret
One company while on the topic that maybe is worth checking out for some of you is http://www.verdasys.com I am not sure where they went with their product but I remember a couple of years ago they were doing a lot of cool things as far as controlling how data flows within our organization. For

RE: General AV Question - Scanning Extensions

2008-03-21 Thread Marc Maiffret
This is actually an ok option to take and the only thing you are not going to catch is malicious code within things like .zip files. However, once the zip file is extracted and the .exe is then attempted to run you will catch it anyways. I never really did understand why AV systems by default

RE: Anyone have experience with Computrace?

2008-03-21 Thread Marc Maiffret
Correct, the only product I know of that survives a reimage is Computrace, but that is only with specific laptop/desktop models where they have partnered with companies to embed their software within hardware. Which if someone has one of these laptops and they want to donate it to me I will let

OT: RE: Inside the Twisted Mind of the Security Professional

2008-03-21 Thread Marc Maiffret
have probably already figured out. -Marc Maiffret -Original Message- From: Angus Scott-Fleming [mailto:[EMAIL PROTECTED] Sent: Friday, March 21, 2008 7:45 AM To: NT System Admin Issues Subject: Inside the Twisted Mind of the Security Professional Very interesting article by Bruce Schneier

RE: Anyone have experience with Computrace?

2008-03-21 Thread Marc Maiffret
No problem, it is definitely a two way street for me. I have been on this list for over 10 years since I was 17 starting eEye and this list and all of you have been of invaluable help to educate me on where IT is going so I can think about what that means for security. As I have said in the

RE: Smart Phone

2008-03-07 Thread Marc Maiffret
From: Marc Maiffret [mailto:[EMAIL PROTECTED] Sent: Thursday, March 06, 2008 4:10 PM To: NT System Admin Issues Subject: RE: Smart Phone I think the two most popular are the Blackjack II and the Moto Q although those are the Cingular names I am not sure if they differ on other networks. I

RE: Smart Phone

2008-03-06 Thread Marc Maiffret
I think the two most popular are the Blackjack II and the Moto Q although those are the Cingular names I am not sure if they differ on other networks. I personally would take the Blackjack over the Q as I like the keyboard lay out a bit more. From: Joseph L. Casale [mailto:[EMAIL PROTECTED]

RE: File and Print Sharing on workstations - Security Risk?

2008-02-26 Thread Marc Maiffret
It seems you could find a nice middle ground of disabling all connectable shares yet leaving the functionality enabled for remote management. From a pure security risk perspective though most of the vulnerabilities that pertain to having file sharing (rpc/smb/blabla) enabled have been discovered

RE: Anyone using Pen-testing tools from Canvas or Core-impact in there system deployments?

2008-02-08 Thread Marc Maiffret
right now out there in cyberspace, and has been for a while. And hopefully to spawn a few of you to start thinking about your business and your web presence (Like my man Edward is) and how secure it really is or is not. Signed, Marc Maiffret Freelance Security/Technology Consultant From: Ziots

RE: [OT] Gmail in the workplace

2008-01-24 Thread Marc Maiffret
of that product. In the long-term, well, I can't say. Good post. Have you blogged it? I'd like to link to it. :-) Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: Marc Maiffret [mailto:[EMAIL PROTECTED] Sent: Thursday, January 24, 2008 4:20

RE: Kind of OT: Home PC Hacking

2008-01-11 Thread Marc Maiffret
archaic. -Marc Maiffret Freelance Security Consultant p.s. thanks to the one who pointed out my freelance typo :-p From: Lee Douglas [mailto:[EMAIL PROTECTED] Sent: Friday, January 11, 2008 2:48 PM To: NT System Admin Issues Subject: Re: Kind of OT: Home PC Hacking I downloaded

RE: Kind of OT: Home PC Hacking

2008-01-11 Thread Marc Maiffret
, then you can turn off that functionality in Blink. -Marc Maiffret From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Friday, January 11, 2008 3:04 PM To: NT System Admin Issues Subject: RE: Kind of OT: Home PC Hacking When I downloaded the Blink beta a while back, the performance

orange county, california

2008-01-10 Thread Marc Maiffret
and exchange ideas. Probably best to email me back directly! -Marc Maiffret Freelance Security Consultant ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~

RE: WM5 or WM6 ?

2007-12-30 Thread Marc Maiffret
) but there is a 6.1 update coming soon which improves usability even more so. Generally with Microsoft it seems the latest, the greatest, although Vista might be the first exception to that rule. -Marc Maiffret From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Sunday, December 30, 2007 6:00 AM

OT: Most impactful technology Was: Silverlight?

2007-12-30 Thread Marc Maiffret
that has had the most impact on you? Could be something that makes your IT job easier, or could be your car that parallel parks itself. -Marc Maiffret Freelance Security Consultant http://www.marcmaiffret.com From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: Sunday, December 30, 2007 8:37

RE: OT: Fwd: [ISN] IT security goes Prime Time

2007-12-29 Thread Marc Maiffret
is very fun and actually technically accurate. If any of your companies want to have a free physical/network security assessment in exchange for allowing to be on the show please send me an email. -Marc Maiffret Freelance Security Consultant http://www.marcmaiffret.com From: Micheal Espinola Jr

RE: Silverlight?

2007-12-29 Thread Marc Maiffret
provides as a platform. But even there Microsoft is trying their damndest to clone everything that Google and the likes are doing. -Marc Maiffret Freelance Security Consultant http://www.marcmaiffret.com From: Carl Houseman [mailto:[EMAIL PROTECTED] Sent: Thursday, December 27, 2007 2:56 PM

RE: congressional hearing on computer security (worms/virus's) [spam of sorts]

2001-08-23 Thread Marc Maiffret
Nah just the easy questions like How do we stop worms? Signed, Marc Maiffret Chief Hacking Officer eEye Digital Security T.949.349.9062 F.949.349.9538 http://eEye.com/Retina - Network Security Scanner http://eEye.com/Iris - Network Traffic Analyzer http://eEye.com/SecureIIS - Stop known