Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 38 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum
Ethical Hacker Community Forums
December 01, 2008, 04:11:46 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 ... 10 11 [12] 13 14
166  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Zero Day on: May 05, 2008, 11:51:31 AM
New 0-day alert!

Morse Code Rickroll 0-day… no, seriously, I mean it

 Cheesy

(and congrats to Nathan and his new fiance!)
167  Columns / Hoffman / Re: [Article]-Step by Step Guide to the Advanced Mobile Hacks Video on: May 05, 2008, 09:10:00 AM
Try this link

There are several white papers and videos available from Fiberlink.
168  Ethical Hacking Discussions and Related Certifications / Other / Re: Encryption and regulations on: May 02, 2008, 02:24:23 PM
Thanks a lot, guys!  Very helpful stuff from both of you.

I'd actually already read the article in the Register...very good to keep in mind for anyone traveling out of the country
169  Ethical Hacking Discussions and Related Certifications / Other / Encryption and regulations on: May 02, 2008, 01:41:16 PM
Years ago when I implemented a laptop encryption solution for my former employer, we had received a list of countries into which the import/export of encrypted data was permissible, and vice versa.

I'm now in a situation where I need to find that list, but through my painstaking consultation with the great oracle of Google, I'm having no luck.  All that I seem to be able to find in my searches are stories about people trying to sneak into or out of the US with kiddie-toucher pics.  That's not exactly what I'm looking for, obviously, and is leaving a rather nasty taste in my mouth, as well as increasing my disdain for humanity.

It is my understanding that as long as travel isn't to one of the recognized states that sponsor terrorism, that everything is ok.  Understandably, I'm feeling the need to verify this before I find out the hard way (or worse, my CEO gets stopped at an airport).

Does anyone know where I might be able to find this information?

Thanks in advance.
170  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / DEFCON 16 on: May 01, 2008, 09:23:48 AM
August 8 - 10

Just booked my room at the Riviera!

Who's meeting me at the bar?

http://www.defcon.org/index.html
171  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: is it possible????? on: April 30, 2008, 10:38:57 AM
wow...

 Roll Eyes
172  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Crashing a server on: April 30, 2008, 09:36:07 AM
I'm a little confused, and please correct me if I'm out of line. I mean no disrespect to anyone.

If, as you stated, this is for your dissertation, shouldn't you already have built a pretty solid foundation of knowledge on the subject?  Especially if you're planning on testing your theories in an environment other than a lab?
173  Ethical Hacking Discussions and Related Certifications / Other / TEMPEST Revisited on: April 30, 2008, 09:09:38 AM
New stuff in the news related to Chris' article from last year.

NSA has recently de-classified a paper from 1972 that decribes the first account of TEMPEST, and the skeptism that accompanied it.

Quote from: Ryan Single of Wired Magazine
It was 1943, and an engineer with Bell Telephone was working on one of the U.S. government's most sensitive and important pieces of wartime machinery, a Bell Telephone model 131-B2. It was a top secret encrypted teletype terminal used by the Army and Navy to transmit wartime communications that could defy German and Japanese cryptanalysis.

Then he noticed something odd.

Far across the lab, a freestanding oscilloscope had developed a habit of spiking every time the teletype encrypted a letter. Upon closer inspection, the spikes could actually be translated into the plain message the machine was processing. Though he likely didn't know it at the time, the engineer had just discovered that all information processing machines send their secrets into the electromagnetic ether.

Call it a TEMPEST in a teletype.

Quote from: The article from the 1972 NSA Cryptologic Spectrum states
Bell Telephone faced a dilemma. They had sold the equipment to the military with the assurance that it was secure, but it wasn't. The only thing they could do was to tell the [U.S. Army] Signal Corps about it, which they did. There they met the charter members of a club of skeptics who could not believe that these tiny pips could really be exploited under practical field conditions. They are alleged to have said something like: "Don't you realize there's a war on? We can't bring our cryptographic operations to a screeching halt based on a dubious and esoteric laboratory phenomenon. If this is really dangerous, prove it."

So the Bell engineers were place in a building on Varick Street in New York. Across the street and 80 feet away was Signal Corps Varick Street cryptocenter. The engineers recorded signals for about an hour. Three or four hours later, they produced about 75% of the plain text that was being processed--a fast performance, by the way, that has been rarely equaled.


Click here for the full Wired article and a link to the original NSA document.
174  Ethical Hacking Discussions and Related Certifications / Forensics / Re: "New" tool on: April 30, 2008, 08:43:31 AM
Quote from: SynJunkie
I would suggest that this tool is nothing new and once again the defenders are playing catchup.

Hence the quotation marks in the title of the thread...

 Grin
175  Ethical Hacking Discussions and Related Certifications / Forensics / "New" tool on: April 29, 2008, 03:04:10 PM
Quote from: vnunet.com
Microsoft has built a USB thumb drive for the police that scans computer hard drives.

The Computer Online Forensic Evidence Extractor can be used in police raids to map hard drives and decrypt passwords without shutting the computer down and losing evidence.

The device was shown off at a three-day security conference for 350 law enforcement officials in Redmond, Washington.

"These are things in which we invest substantial resources, but not from the perspective of making money," Microsoft general counsel Brad Smith told the Seattle Times. "We're doing this to help ensure that the internet stays safe."

The thumb drive has 150 commands and can log hard drive activity, check on surfing history and decrypt some passwords.

Microsoft has distributed the device for free since last year, and claims that it is in use by over 2,000 officers in 15 countries.

However, Smith acknowledged that there is a financial upside for Microsoft in giving away the device, since it makes money selling ancillary software and services.

Microsoft has been holding law enforcement meetings since 2006 in an effort to educate police about cyber-crime.

Story
176  Resources / Tutorials / Re: hiding a programme__help on: April 25, 2008, 07:52:54 AM
Could be the flux capacitor...
177  Ethical Hacking Discussions and Related Certifications / Other / Re: Meh.. I wouldn't say it's all 100% on... but some of it's pretty good. on: April 24, 2008, 09:55:28 AM
Either that's a coincidence or an intentional quote, either way brightened my work day, cheers Cheesy

Credit where credit is due...probably the funniest thing ever said on Friends
178  Resources / Tutorials / Re: hiding a programme__help on: April 24, 2008, 08:24:18 AM
again...

Quote from: dean
Google is your friend there is a substantial amount of information on this topic out there. Show that you actually did some research before posting.
179  Ethical Hacking Discussions and Related Certifications / Other / Re: Meh.. I wouldn't say it's all 100% on... but some of it's pretty good. on: April 24, 2008, 08:18:00 AM
Quote from: g00d_4sh
... hense it's a bit of a mute point.

I believe the term you're looking for is "moo point."  Like what a cow says...it doesn't make sense or matter...it's moo.   Wink
180  Ethical Hacking Discussions and Related Certifications / Certification / Re: What will a CISSP do for me? on: March 03, 2008, 01:16:29 PM
Quote from: Chris
just study, knock it out, pay your 85 bucks a year, and then go research and learn the stuff the cert is supposed to represent :-)

That's what I'm doing...kind of.  Like Don said, this cert covers a LOT, so very few people will actually have hands on expertise with all of it...hence it being considered a "Management" cert.  But just passing it has gotten me the opportunity to interview for positions that otherwise may not have given me a second glance(along with glowing references and a stellar resume  Wink).  Living in the DC Metro area, there are a ridiculous number of security positions available, be they working directly for the government, or for a defense contractor, but very few will hire without you already having a clearance.  Until the 85-70 came along at any rate.  Now, having one of the required certs is a great way to get your foot in the door.

The bootcamp I attended also got me some fantastic contacts who have helped me to learn more along the way, as well as putting me in touch with their management for possible future employment.  It's a nice club to be in, for sure.
Pages: 1 ... 10 11 [12] 13 14
Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.061 seconds with 21 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.