Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 48 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow How paranoid has your information security career made you?
EH-Net
May 21, 2013, 12:19:43 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1] 2   Go Down
  Print  
Author Topic: How paranoid has your information security career made you?  (Read 10516 times)
0 Members and 1 Guest are viewing this topic.
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« on: February 26, 2010, 12:58:51 PM »

My information security career has made me very paranoid!  For example, I only read my email in plain text to prevent any rogue links or other issues.  I also use Firefox with add-ons like No Script and Ad-Block Plus.  At home, I have replaced Adobe Reader with FoxIt Reader and I am in the middle of looking for an Adobe Flash replacement (Gnash seems appropriate).

I still use Windows Firewall because I've been lazy about finding a replacement, and I prefer to use OpenOffice at home as well.

In regards to hardware, I just bought a Kensington lock because I am bringing my laptop to school.

What paranoia have you been driven to since you know all the evils of the internet?
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
hayabusa
Hero Member
*****
Offline Offline

Posts: 1632



View Profile
« Reply #1 on: February 26, 2010, 01:32:25 PM »

I wouldn't say it's made me paranoid.  In my case, though, I pay close attention to my boxes, anyway.  (My primary machine is Linux - has been, will be for the foreseeable future.)  I run Apparmour on top of it, and I regularly monitor my logs on the machine, etc.  But I certainly worry a bit more about my kids' PC's, as they haven't moved to Linux yet, and I DO run a number of utils their boxes to monitor and protect...   Wink
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
nebu10uz
Sr. Member
****
Offline Offline

Posts: 368



View Profile WWW
« Reply #2 on: February 26, 2010, 02:38:29 PM »


Same here, thanks to what I do, I'm more aware of the threats that exist out there and I feel confident that my computers are well protected. Now, that doesn't mean that my computers aren't vulnerable, there's always a way in but at least I have the necessary protections in place to make my computers hard to hack into.
Logged

Security+, OSCP, CEH
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #3 on: February 26, 2010, 03:58:47 PM »

I use only the Lynx browser.
Logged

~~~~~~~~~~~~~~
Ketchup
jimbob
Guest
« Reply #4 on: February 26, 2010, 04:27:55 PM »

I use only the Lynx browser.

Pfft! Real hackers use netcat for surfing teh interwebs.
Logged
partek
Newbie
*
Offline Offline

Posts: 27


View Profile
« Reply #5 on: February 26, 2010, 06:54:23 PM »

The more I learn, the more paranoid I become I think. I just finished PWB and learning just how easy client side attacks are really kicked up the paranoia a bit..
Logged

CISSP, CISM, CISA, CCNA Security, OSCP, CEH
n0on3
Newbie
*
Offline Offline

Posts: 11



View Profile WWW
« Reply #6 on: February 27, 2010, 04:02:59 AM »

I think paranoia is part of my nature, knowing how (some) things works and "be aware of which the threats may be" just gives you a better chance to avoid them and be somehow more serene...

I mean, if i don't know what's going on with something that manage anything important to me, i'll probably be more 'paranoid' than knowing what is the risk and what i can do in order to mitigate it, or why am i accepting that.
This is just because i usually don't trust what i don't understand, and even less what i don't know anything about.

Obviously you can't get deep knowledge about everything, but the more you know, the more you can be good at evaluating risks, and this should decrease your paranoia level.

In short, there's nothing bad in using countermeasures, but since some of them require time or resource charge or makes your experience poor, you shold become good to evaluate, case by case, when they are appropriate or not.
Logged

zeroflaw
Full Member
***
Offline Offline

Posts: 208



View Profile
« Reply #7 on: February 27, 2010, 05:07:56 AM »

I've always been slightly paranoid when it comes to computers and what to trust. About a year ago I started checking security logs and processes that run on my system on a regular basis. Sometimes I even check open TCP connections Tongue

ZF
« Last Edit: February 27, 2010, 06:07:45 AM by zeroflaw » Logged

ZF
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #8 on: February 27, 2010, 06:12:32 AM »

My information security career has made me very paranoid!  For example, I only read my email in plain text to prevent any rogue links or other issues.  I also use Firefox with add-ons like No Script and Ad-Block Plus.  At home, I have replaced Adobe Reader with FoxIt Reader and I am in the middle of looking for an Adobe Flash replacement (Gnash seems appropriate).

I still use Windows Firewall because I've been lazy about finding a replacement, and I prefer to use OpenOffice at home as well.

In regards to hardware, I just bought a Kensington lock because I am bringing my laptop to school.

What paranoia have you been driven to since you know all the evils of the internet?

all sounds very familiar! sometimes when i want to order stuff on the internet and see oscommerce i get suspicious! however, i think you can throw that kensington lock away, or did you get some improved version?

http://www.youtube.com/watch?v=0SkKJ4yOKo8
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
teedge77
Newbie
*
Offline Offline

Posts: 9


View Profile
« Reply #9 on: February 27, 2010, 07:39:16 AM »

The Kensington lock is a deterrent, like the 4 foot fence around the building. It'll stop some jackass from just walking away with it; but it won't stop someone determined to get it. If they're really determined.....they'll just take it from you with force and go. The Kensington lock is better than nothing at all.
Logged
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #10 on: February 27, 2010, 08:00:46 AM »

The Kensington lock is a deterrent, like the 4 foot fence around the building. It'll stop some jackass from just walking away with it; but it won't stop someone determined to get it. If they're really determined.....they'll just take it from you with force and go. The Kensington lock is better than nothing at all.

All locks are just a deterrent or a method to slow someone down.  99% of the students at my school do not use locks like this.  If someone had the opportunity, would you rather take a computer with a lock or without?

I am just using the lock for when I am in class and take a break, if I am in the library or open area the laptop comes with me.  I'm also going to use it in my next SANS class, so I do not have to carry around my laptop.
« Last Edit: February 27, 2010, 08:05:38 AM by unsupported » Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
teedge77
Newbie
*
Offline Offline

Posts: 9


View Profile
« Reply #11 on: February 27, 2010, 10:34:11 AM »

I am confused, were you agreeing with me? You restated exactly what I was saying.

The Kensington lock is a deterrent, like the 4 foot fence around the building. It'll stop some jackass from just walking away with it; but it won't stop someone determined to get it. If they're really determined.....they'll just take it from you with force and go. The Kensington lock is better than nothing at all.

All locks are just a deterrent or a method to slow someone down.  99% of the students at my school do not use locks like this.  If someone had the opportunity, would you rather take a computer with a lock or without?

I am just using the lock for when I am in class and take a break, if I am in the library or open area the laptop comes with me.  I'm also going to use it in my next SANS class, so I do not have to carry around my laptop.
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1632



View Profile
« Reply #12 on: February 27, 2010, 10:58:23 AM »

I think he was generally in agreement, and was solely noting that he'd prefer to at least have a deterrent, to slow down the probability of his being the first one in sight to be grabbed...
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #13 on: February 27, 2010, 11:37:45 AM »

I was paranoid before I started playing in InfoSec. First GSP NOC I worked for required us to be so.

I'm using the same thing for browsing. on my laptop (main computer right now), I'm running linux, with denyhosts (running ssh open on the firewall on port 22), tripwire, snort, and logwatch.

When I'm traveling with it, I use a live cd only.
Logged

OSWP, Sec+
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #14 on: February 27, 2010, 04:31:43 PM »

I am confused, were you agreeing with me? You restated exactly what I was saying.

Yes. Smiley 
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
Pages: [1] 2   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.123 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.