download unknown file from Evil Ethical Hacker.net?

Might give that one a miss...

Xmachine,

I've just taken a quick read through some of your previous blog posts and they look rather useful, bookmarked for future reference

Welcome on board.

The Honeynet Project (http://www.honeynet.org/), SANs Reading Room (http://www.sans.org/reading_room/) and Cyber-TA (http://www.cyber-ta.org/) are good places to start in this field.

I've mentioned this in another thread (http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1910.msg7621/#msg7621) but Steve Gibsons analysis of DDoS attacks using botnets make an interesting (but slightly dated read). Can be difficult to find though 

Happy Hunting

Shawal,

thanks for the link and snippet, looks like Firefox will start protecting against a lot of things out the box with extra features so you don't need a laundry list of add-ons. Should make setting up 'regular' users PC's simpler.

I'm with iSmith though as I'll wait for the stable release, looking good.

ATC,

welcome to EH-Net.

if I get a few minutes I'll try to have a crack at your encryption, however as my crypto-fu is weak and you've gone to the effort of creating your own I'm guessing (hoping) this is more advanced that anything I can break easily.

For me crpyto and crypto-analysis is definitely more of an interest than something I have an aptitude for. (I've read Simon Singh's Code Book many times but still couldn't implement a basic algorithm) As most encryption systems are only accepted as being secure after large scale analysis and long term testing by the crpyto community a lot of 'secure' systems only remain secure whilst no-one is interested in breaking them. (Same as the arguement by the Windows community to explain why there are less exploits for *nix, but thats another thread)

Are you able/willing to provide more information related to your encryption methods? Basically I would be interested to know what you are doing differently from anything else that makes your system more secure than X.

Knew there would be a neater way of doing it. I've left my linux machine at work as I'm meant to be in holiday mode for Easter weekend. Let me know if you have any more luck and I'll try a few things once I get mty hands on one of my linux boxes

I've looked at Russix before (actually have a burned CD sat on my desk now).

Problem that I've had is that I can't get it to find my wi-fi device on my laptop with an atheros chip and can't boot on my laptop with an Intel chip. Has anyone else had similar issues or do I just seem to buy strange hardware combinations? Think I'm a little behind, version wise, so if everything is looking stable I'd be interested in taking another look.

Bill,

I'm sure it's a nasty hack and someone will be able to provide a better solution. For the same issue I just set the command to pipe it's output through more/less/<chooseYourPoison>, that way the terminal should remain open waiting for interaction.

I've only tried this under KDE so your mileage may vary, but I'm assuming the principal should be the same.

Chris,

looks like you've done it again. Was out shopping with the missus (again), came across a new security book I hadn't seen and went 'ooh'. Glad I decided to wait till I got back home to read some reviews.

Are you my financial guardian angel?

Nice find Shawal, thanks for sharing.

I'm hoping that this project keeps running as it is an interesting area of research. Bookmarked under 'watch this space'

Congrats

Just had this link from ThinkGeeks http://www.thinkgeek.com/gadgets/electronic/a11e/ and it reminded me of this thread. Basically it plugs in a free USB port and randomly sends fake keyboard and mouse input.

My first thought was, 'oohhhh cool prank' but thinking about it a bit more, I'm sure this could end up being nasty in many cases. Don't think I'd want to find someone had added this to my machine whilst I'm in config mode of a live Cisco device for example.

Has anyone done or seen pranks that have gone wrong in similar ways? It's all fun an games until someone loses their job...

I think you hit the nail on the head, confidence for me (or lack of it) is the key to doing whats needed. Stick me in a room full of suits and directors and I'll quite happily discuss a vulnerability in layman's terms. Stick me on the phone to a security guard to convice him that "the BLT drive on my computer just went AWOL" and it's a whole different ball park 

Thanks to BillV know now what I was looking for,

quick Google and I've found the sample chapter that whet my appetite in the first place. Enjoy people
http://johnny.ihackstuff.com/downloads/task,doc_details&Itemid=/gid,36/

Just got it on order through Amazon, should have it in around a week. I'll keep you posted.