Bypassing Applicatio/DLL whitelisting in SRP and AppLocker

Didier Stevens has an interesting article on the ability to bypass DLL whitelisting by making the appropriate call. Apparently the reason you can do this is to help developers, and malware writers too....

Link Here

Application whitelisting paper

Really good paper on the effectiveness of application whitelisting and the practical implications and limitations of it.

Paper here

Wipe a disk using dd

You may need to wipe you hard drive to clean

up partition errors, bad installations, or for privacy. This will show you howto do this

These methods use a command called dd

Wiping the entire disk

This will overwrite all partitions, master boot records, and data.

Filling the disk with all zeros (This may take a while, as it is making every bit of data 0) :

dd if=/dev/zero of=/dev/sda bs=1M

If you are wiping your hard drive for security, you should populate it with random data rather than zeros (This is going to take even longer than the first example.) :

dd if=/dev/urandom of=/dev/sda bs=1M

When's a password good or bad?

A reasonable article on when good passwords don't matter.

Story here

Another story on the ability to crack 'good' passwords
here

NSA and compromised networks

Apparently the NSA think that their own networks can't be considered clean and security and take the appropriate actions based on that position including increased audit, new network sensors and standardisation.

Story here

Mounting a dd image

Interesting article on how to mount a dd image from a backup or when a hard drive is failing or copied

http://rackerhacker.com/2010/12/14/mounting-a-raw-partition-file-made-with-dd-or-dd_rescue-in-linux/

Hashing tool

New Hashing tool http://secure1st.com/