A+ R A-

Legacy Security Articles

Assembly nowadays is a hard thing to learn, not because it's difficult but because people thinks that there is no reason to learn assembly! That's not true... With assembly you can have total power above the computer, and know exactly what he's doing. Try to remember that while trying to learn!

By The Infinity Concept Issue II Ok.....

You've been at it for all night. Trying all the exploits you can think of. The system seems tight. The system looks tight.

The system *is* tight. You've tried everything. Default passwds, guessable passwds, NIS weaknesses, NFS holes, incorrect permissions, race conditions, SUID exploits, Sendmail bugs, and so on... Nothing. WAIT! What's that!?!? A "#" ???? Finally! After seeming endless toiling, you've managed to steal root. Now what? How do you hold onto this precious super-user privilege you have worked so hard to achieve....?

By Donald Burleson, Builder.com 
Web-based applications have numerous entry points that can put your data at risk. See how to restrict access to those points and block potential attacks.

Many managers are concerned about opening up mission-critical applications to the Internet. With dozens of potential entry points and almost daily news about large companies being hacked, proper database security is critical. In general, security concerns over Internet access are similar to security issues in an internal network.

Author: beardednose
As more companies are deploying the multifunctional copier/printer/fax/ftp/email machines, they are leaving themselves open to attack. 
General multi-functional security issues
One of the issues that spans most of these types of machines across the manufacturers is that the audit trails are almost non-existent. In other words, you can ftp or email any document you want across the Internet (to a competitor or other evil-intentioned folk) without a full audit trail. Most of the machines will provide the ftp site or email address that the message was sent to, but the sender is not identified. A couple of manufacturers allow you to assign everyone a user ID code (usually 3 or 4 digits) that you have to enter to send anything, but I haven't seen this implemented at any of the companies I've visited.

By SLy FoX Another tutorial by the SLy FoX.If u have any questions u can   ask me at (no flames) This e-mail address is being protected from spambots. You need JavaScript enabled to view it .

If u have to always click on the right arrow button at he bottom of your page because the tutorial keeps going of the page,and u find this time wasting u   can click on edit and then WORD WRAP   and your problem will be solved.

By William Hugh Murray

Article pulled from Security-Protocols

By User Liaison Section

UNIX Bourne Shell Programming Developed by: User Liaison Section, D-7131 Denver Office [Name and number removed at author's request]

 

Revision Date: February 7, 1991

 

By security-protocols.com

Article pulled from Security-Protocols

Until a few years ago Internet security wasn't even recognized as a need. The culture of the Internet encouraged the sharing of data and ideas; the common goals of Internet users made boundaries and restrictions unnecessary--or so it seemed to many at the time.

By Mike Fahland and Eric Schultze Earlier this month, Microsoft released version 1.1 of the Microsoft Baseline Security Analyzer (MBSA). MBSA is the first product deliverable from the recently formed Microsoft Security Business Unit (SBU), a key division within Microsoft's Trustworthy Computing Initiative.

Page 7 of 14

Get email updates