Comments for Adventures in SecurityCommentary, reviews, and tips relevant to anyone responsible for information security. Including how to build and manage a security program, editorials about the state of information security, and do's and don't's based on my 25 years of IT experience.Comment by Goddy EPIE NGENE on SSO: It isn't just about security- August 26, 2008 I have been on Yubico web site and it doesn't answer to any of my preoccupations. Yubico is design for web users and when speaking of SSO i don't think it is sufficiently secure because credentials are carried on the network. Worst of it what happen if the yubico key is stolen What I need is a platform which permits me to have a single sign on over a secure network and with a kerberos configuration in background (credential not carried on network) and more to that integrate all posshttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecu... Comment by steelhoof on It is, too, cyberwarfare... no it isn't... yes it is...- August 24, 2008 It has long been possible to do this. In the old days, 10 to 15 years ago we would use multiple instances of a ping utility to test the robustness of a server to access requests. All we had to do was change the port and toss in appropriate strings. It is only a matter scale to bring this to a DDoS attack. If you do it right, and the server is missing certain security settings you could even do an insertion of code. The key is having easy access to a wide ranghttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecu... Comment by Romeo Ninov on Protect laptop traffic in hot-spots and hotels - Part 1- August 11, 2008 Thank You To, for interesting post, the product is very interest, especially for enterprises. And to help people with decision let me add one open initiative (and software) named TOR: http:tor.eff.org !! Entry Link: Protect laptop traffic in hot-spots and hotels - Part 1!!http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecu... Comment by "Mathew Newton" on Find stolen laptops with open-source Adeona- August 6, 2008 I had such high hopes for Adeona... nice and simple and multi-platform thus giving me a 'one size fits all' solution to all my PCs... Alas, the reliance on OpenDHT is the single point of failure... At the time of writing (and for several days prior) OpenDHT is apparently 'down' (now confirmed on the Adeona site... within the Contacts page presumably as it's not something you want to advertise) and hence all bets are off - the client cannot update its status, and you cannot retrieve trahttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/adventuresinsecu... |