Dilbert close to the truth again

Uncomfortably too close to the truth

Pass word xkcd style

vSphere 4.1 Hardening guide

VMWare just published a security guide to hardening vSphere 4.1

http://communities.vmware.com/servlet/JiveServlet/previewBody/15413-102-2-18829/vSphere%204.1%20Hardening%20Guide%20April%202011.pdf

Live malware analysis tool

Tool to look at for live exe analysis, Carbon Black.

http://www.kyrus-tech.com/faq-2/

Interesting IPv6 video

Informative IPv6 video and implications for security on VIMEO

Rick Hayes - Assessing and Pen-Testing IPv6 Networks from Adrian Crenshaw on Vimeo.

When is a VPN not a VPN?

When its based on SSH and just seems to work out of the box...

https://github.com/apenwarr/sshuttle#readme

IPv6 view from Cisco

Interesting article on IPv6 from Cisco Blog, with more to come.

Cisco Blog

Egypt severs Internet connection

Article on BBC News website about how Egypt has removed itself from the Internet whilst the unrest is ongoing. Interesting to consider the implications for companies that rely on the Internet for their WAN connectivity for any offices they have in countries like this.

Bypassing Applicatio/DLL whitelisting in SRP and AppLocker

Didier Stevens has an interesting article on the ability to bypass DLL whitelisting by making the appropriate call. Apparently the reason you can do this is to help developers, and malware writers too....

Link Here

Application whitelisting paper

Really good paper on the effectiveness of application whitelisting and the practical implications and limitations of it.

Paper here

Wipe a disk using dd

You may need to wipe you hard drive to clean

up partition errors, bad installations, or for privacy. This will show you howto do this

These methods use a command called dd

Wiping the entire disk

This will overwrite all partitions, master boot records, and data.

Filling the disk with all zeros (This may take a while, as it is making every bit of data 0) :

dd if=/dev/zero of=/dev/sda bs=1M

If you are wiping your hard drive for security, you should populate it with random data rather than zeros (This is going to take even longer than the first example.) :

dd if=/dev/urandom of=/dev/sda bs=1M