Home of ABS Computer Technoloogy, Linux and Security Consultants Network Security solutions from our security experts Security solutions for Internet and Network technologies Some of our services for Linux, security, and hosting Contact us







Click here to register.



Bookmark and Share

 

Best of Pittsburgh Award for Systems Engineering Consulting

 

Accept Credit Cards Online

 

More News

This section is for more news for you.

Security Basics

This list is for the new security administrator.

Security Basics

A high-volume list which permits people to ask "stupid questions" without being derided as "n00bs". I recommend this list to network security newbies, but be sure to read Bugtraq and other lists as well.
  • RE: VPN Service -

    Posted by David Gillett on Feb 03

    Traditionally, VPNs have been a service that corporate/institutional IT
    departments have implemented to allow their users to access internal
    resources remotely and securely. This doesn't appear to be what you have in
    mind.

    Only within the last 3-6 months, I've started getting spammed (NOT a
    recommendation!) by mysterious third parties offering VPN services "to the
    Internet", apparently as a way to secretly violate local...
  • Re: VPN Service -

    Posted by Jeffrey Walton on Feb 03

    Scratch the UK too. The long arm of the US reached in to the UK also.
    "VPN provider helped track down alleged LulzSec member",
    http://seclists.org/fulldisclosure/2011/Sep/286.

    ------------------------------------------------------------------------
    Securing Apache Web Server with thawte Digital Certificate
    In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how
    it benefits...
  • Re: VPN Service -

    Posted by xgermx on Feb 03

    Sounds like WiTopia might be a good fit for you.
    https://www.witopia.net/

    ------------------------------------------------------------------------
    Securing Apache Web Server with thawte Digital Certificate
    In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how
    it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase,...
  • Re: VPN Service -

    Posted by Pierre Jaury on Feb 03

    Additionally to my previous reaction: using Tor is almost no better than
    using VPN. At least it does not create artificial central communication
    points, yet it does not actually help with anonymity or obfuscation: you
    are not anonymous or safe using the remote application unless this
    application includes such features.

    The only actual interesting Tor use case remains hidden services imho.
  • Re: VPN Service -

    Posted by Nicolas Bazire on Feb 03

    Before looking at the price, the encryption level and the available
    bandwidth, you should really investigate on the privacy policy of the
    provider. More importantly, you should check the country in which the
    company is registered and the laws regarding privacy in that country.

    For instance, forget about any VPN provider operating in America.
    Thanks to the Patriot Act, law enforcement agencies can basically get
    any information from any company...
  • Re: VPN Service -

    Posted by Pierre Jaury on Feb 03

    Hello,

    Basically, VPN are not meant to act as encrypting gateways, but to
    securely and transparently connect remote sites. Using them for Internet
    anonymity is a common terrible mistake:
    - first, anonymity has nothing to do with networking, you are trying
    this the wrong way: anonymity and obfuscated communications is a matter
    of application, then use the right applications (first SSL, https, etc,
    then have a look at PGP and so before you spend...
  • Re: VPN Service -

    Posted by Glenn English on Feb 03

    Please excuse my possible ignorance, but I don't understand why you need a 'provider' for a VPN. I use OpenVPN on
    Linux, and I think it can be installed on other platforms as well. It's free. And if you're using Cisco or Juniper
    routers/firewalls, they will create an IPsec VPN. That's also free, once you pay for the box. The ones around here
    will, anyway...
  • Re: VPN Service -

    Posted by Kalka, Jean F DOD CIV \(US\) on Feb 03

    Agree on strong vpn. And it works well overseas
    Sent from US Delegation BlackBerry device

    ----- Original Message -----
    From: Voulnet [mailto:voulnet () gmail com]
    Sent: Friday, February 03, 2012 06:30 PM
    To: haZard0us <hazard0us.pt () gmail com>
    Cc: security-basics () securityfocus com <security-basics () securityfocus com>
    Subject: Re: VPN Service

    StrongVPN is one good choice. You can get an OpenVPN bundle which
    helps against VPN...
  • Re: VPN Service -

    Posted by John Hebert on Feb 03

    A VPN provider can secure your connection to them. However, the traffic between the VPN provider and the destination
    server is still as secure/insecure as before.

    ------------------------------------------------------------------------
    Securing Apache Web Server with thawte Digital Certificate
    In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how
    it benefits your company and how...
  • Re: VPN Service -

    Posted by Jeffrey Walton on Feb 03

    Does it have to be a VPN (IPSec or L2TP)? VPN providers have shown a
    penchant for selling out their customers to law enforcement and other
    authorities despite their claims.

    TOR is a good alternative, but does not operate as low in the stack.
    TOR offer confidentiality and does a better job at anonymity.

    Additionally, the EFF's Https Everywhere will help you with HTTP
    (https://www.eff.org/https-everywhere).

    Jeff...

Information Security

Info Security News

Carries news items (generally from mainstream sources) that relate to security.

Security Wire - Search Security News

Zero Day

This is the Security Digest of Kapersky Labs.

Zero Day Blog RSS | ZDNet

Threat Post

Security News from Kapersky Labs.

threatpost - The First Stop for Security News

  • Privacy Fail: Is Uncle Sam Encouraging Bad Security? -

    CANCUN, MEXICO - A prominent privacy activist says that leading software vendors, and the U.S. government are failing the public when it comes to Internet privacy, and that big changes are needed to prevent consumers from criminals, advertisers and government spies.

    read more

  • State of SCADA Security 'Laughable', Researchers Say -

    SCADACANCUN--For people who follow the developments in the security and research communities, it's easy to get discouraged by the current state of affairs, given the rash of serious hacks on certificate authorities, military networks and companies such as RSA and VeriSign. But, if you think things are bad there, you may not want to look at what's happening in the ICS and SCADA communities. It's getting ugly early.

    read more

  • Cyber Cops Wrestle With Legal Hurdles, Public Perception -

    CANCUN, MEXICO -- A panel of top law enforcement officers in charge of cyber criminal investigations reveals that the guys with the white hats face an uphill climb if they want to take down cyber criminal kingpins, with outdated laws and processes on the one hand, and an increasingly skeptical and privacy-conscious public on the other.

    read more

  • Google Begins Security Review Process for Android Apps -

    Android securityAfter a couple of years of seeing headlines announcing a steady stream of pieces of malware and trojaned apps appearing the Android Market, Google finally has taken steps to find and remove malicious apps from the market automatically. The company has unveiled a service called Bouncer that scans apps and looks for known malware as well as potentially malicious behavior.

    read more

  • Infographic: How To Spot A Fake Facebook Friend Profile -

    A whopping 97 percent of fake Facebook profiles purport to be female, according to this infographic based on a new study, announced today, from security firm Barracuda Networks. In order to expand their networks and entice would-be victims, 58 percent of the phony profiles also claim to be bisexual and on average, have 726 friends while 68 percent claim to have attended college.

    read more

  • How to Win Friends and Steal Their Facebook Accounts -

    FacebookCANCUN--Facebook is a lot of things, and one of the things that it's become of late is a fertile green field for attackers and scammers of all stripes. The Koobface worm is perhaps the most famous threat to hit the network, but the more mundane ones, such as scammers generating fake profiles automatically to spread spam and malicious URLs are becoming more and more prevalent, researchers say.

    read more

  • Driving Up the Cost of Exploit Development Becomes a Key Defensive Strategy -

    CANCUN--The skill of attackers, combined with the difficulty and cost of finding and fixing vulnerabilities in software--especially after deployment--has reached the point that it's now more effective and efficient for vendors to concentrate on making life more difficult for those attackers looking to exploit bugs.

    read more

  • Apple Ships Huge Set of Patches for OS X -

    Apple patchApple has released a massive set of patches for a wide range of security vulnerabilities in a number of its products and components, including OSX Lion and QuickTime. The patches, which are rolled up in OS X 10.7.3, fix a slew of serious bugs, many of which can be used to execute remote code on vulnerable machines.

    read more

  • Update: Verisign Admits To Security Breaches in 2010 -

    VerisignVerisign, the Internet security company responsible for management of the .COM domain, told federal regulators that it was the victim of several successful attacks in 2010, but that those incidents were not reported to the company's management until September, 2011. The news was first reported by Reuters.

    read more

  • Market Fail: Regulations May Be Only Hope For Securing Critical Infrastructure -

    Threatpost's exclusive interview with Ralph Langner continues, as our conversation shifts from  the legacy of the Stuxnet worm to larger issues facing the critical infrastructure sector including mounting attacks, tensions between vendors and security researchers over responsible disclosure, and what's needed to secure critical infrastructure and industrial control systems.  

    read more

 

  

Contact Us - Home - Site Map
© 2005-2012 ABS Computer Technology, Inc. - All Rights Reserved
SpamZapper® is the registered trademark of ABS Computer Technology, Inc.

Site Design - Marc Dorsett Graphic Artist