ESET Nod32 Antivirus | Antispyware | Console d administration
Chercher :
Newsletter :  

Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs




Abonnez vous � Nessus Professional Feed !

Sponsors :

Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


Secumail :
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS/XML :
- Articles
- Brèves
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis


RSS SecuObs :
- sécurité
- exploit
- windows
- microsoft
- réseau
- attaque


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- vmware
- security
- virus
- biometric
- windows
- lockpicking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International









Abonnez vous � Nessus Professional Feed !


Revue de presse francophone :
- CERT-XMCO La vulnérabilité 0-day affectant Firefox sera corrigée dans la version 3.6.2 disponible le 30 mars
- Vigilance - CiscoWorks débordement de IPM CORBA GIOP
- Analyse de winpcap - Petite rectification
- Attaques en DDoS et guerres entre mondes virtuels
- Vigilance - Noyau Linux déni de service du routage
- Vigilance - SAP WebAS exécution de code via ITS
- Vigilance - gunzip exécution de code via Huffman
- Vigilance - gunzip exécution de code via LZW
- Vigilance - Noyau Linux déni de service via NFS
- Triton de Websense la sécurité unifiée
- L'Internet des objets doit encore apprendre à interpréter
- Alvin et les Chipmunks contre les Majors
- Frédéric Renard, Arkeia Software la virtualisation, un enjeu à ne pas louper
- CERTA-2010-ACT-011 Bulletin d'actualité numéro 011 de l'année 2010 19 mars 2010
- CERTA-2010-AVI-128 Multiples vulnérabilités dans CA ARCserve Backup 19 mars 2010

Dernier articles de SecuObs :
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- Hogger automatise la création des tables d'attributs Snort à partir des scans Nmap
- Edenwall obtient une subvention de la DGA
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- Une faille dans l’implémentation RSA de OpenSSL
- Flint un scanner pour simuler, vérifier et nettoyer les règles de filtrage
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- 100 000 dollars pour le Pwn2own 2010
- Un botnet qui rapporte gros
- Webraider offre un reverse shell contre une simple injection SQL

Revue de presse internationale :
- The Meaning of 7
- Traces of reading, writing, and thinking for 2010-03-20
- Mailing list and monthly newsletter
- Every British Citizen To Have a Personal Webpage
- News Buggy Firefox confirmed
- News Russia rises to clean the .ru domain
- News 5000 spies- With love from UK
- ZKSoftware Biometric Attendence managnmnet Hardware MIPS Improper Authentication
- DELAYACHRON REPLACETHEFILTERACHRON
- Mozilla Labs To Bring Address Book To Firefox
- Mac vs. PC Security In One Sentence
- Keeping Money Mule Recruiters on a Short Leash - Part Three
- Spymaster Same Old Lies About FOIA Compliance
- G20 Security Brief Law Enforcement Sensitive 1.5MB
- Israel Police Photos 4

Annuaire des videos
- Pwn2Own 2010 Contest Participant Order Drawing
- Shmoocon 2010 Becoming Jack Flack Real Life Cloak Dagger 3 6
- Building a Hackerspace Learning how to play again by FedeK at BlueHat
- IBM Virtual Server Security for VMware
- Avast AntiVirus 4 8 Professional with Life Time Keygen
- Comodo 4 Internet Security Review and Tests Part 1
- Root Kit Hacker Defender aufsp ren
- Remove a Virus Worm Spyware Adware Rootkit or Potentially Unwanted
- Xmas Special Crypto Encryption Protect Your Sensitive Data
- User Rights Management For Databases
- Hacking Websites You think you are secure
- Security12 Introduction Ep 01
- CAPeD Calm Audio controlled Personalized Display
- Business Logic Automatons Friend or Foe Amichai Shulman
- Shmoocon 2010 Cyborg Information Security Defense Against the Dark Arts 2 5

Revue Twitter
- RT @mikemurr: Learn Python from Google http://bit.ly/bBDgK8
- RT @securityshell: Exploiting hard filtered SQL Injections http://websec.wordpress.com/2010/03/19/exploiting-hard-filtered-sql-injections/
- dear Ruby lib devel, reset KCODE from 'NONE' to 'UTF8' on lib init and earn the MSF team's eternal wrath. Shellcode != UTF8 (via @hdmoore)
- Cracking WPA WPA2 with Hidden SSID (Aircrack and Airolib) Video Tutorial - http://is.gd/aQI5f
- Facebook, Malware e a OWASP - http://is.gd/aQI7d
- News Update: ask rooted - stackoverflow for security http://ow.ly/16QPPu
- News Update: Skype Security: Is the Popular VOIP Service Safe for Business? http://ow.ly/16QS7Q
- News Update: Use Linux to Scan Unusable Windows Drives for Viruses - antivirus - Lifehacker http://ow.ly/16QTik
- News Update: A List of FREE VMware vSphere Tools | Tech Blog http://ow.ly/16QUl3
- News Update: ModSecurity: Open Source Web Application Firewall http://ow.ly/16QUl2

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter



Top bi-hebdo des articles de SecuObs
- Apprendre à parler Skype pour mieux le faire taire !
- Une faille dans l’implémentation RSA de OpenSSL
- Imposter 0.9 une plateforme de phishing ciblant les navigateurs Web
- VASTO une extension Metasploit dédiée à l'exploitation des infrastructures virtuelles
- SET 0.4.1 - Social Engineering Toolkit - une plateforme de Social Engineering
- Keimpx un outil d'audit pour les réseaux Microsoft Windows
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Comment changer un mot de passe perdu pour un compte WINDOWS
- Edenwall obtient une subvention de la DGA
- Webraider offre un reverse shell contre une simple injection SQL

Top bi-hebdo de la revue de presse
- Sun Ray interception de données des DTU
- How to Jailbreak iPhone 3.1.3 IPSW with PwnageTool 3.1.5
- Dev Team Confirms iPhone 3.1.3 IPSW Jailbreak
- Rozlyn Papa sex tape rumours lead to malware
- FREE Kaspersky Internet Security 2010 Activation Code Valid for 6 Months
- installer backtrack 4 [tuto]
- Nouveau dictionnaire WPA Livebox
- IIS 6 may stop responding after you install Microsoft update KB 973917
- La Face cachée de Facebook
- Téléchargements Ados de mal en pis

Top bi-hebdo de l'annuaire des videos
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- vSphere 4 0 update 1 VMware Update Manager and EMC PowerPath VE
- Ettercap Tutorial Man In The Middle Arp Attack
- Shmoocon 2010 Firetalks SHODAN for Penetration Testers 1 2
- install MacOSX Snow Leopard in Windows PC using Vmware Workstation as virtual machine
- Blaze botnet in action www opensc ws
- Windows XP Pro SP3 in VMWare off iSCSI Target using gPXE over 802.11n
- Running Wireshark on Mac OS X 10 6 Snow Leopard
- Avast Internet Security 5 0 396 Final Free Full Download Licensed with Serial Key
- Ch0ry Euro iPhone 3G 3GS 30 Hack WIFI key

Top bi-hebdo de la revue Twitter
- How to secure a Cisco router http://ping.fm/FkG7O
- RT @manicode: Very interesting Java ESAPI-like library coming out of Apache : http://bit.ly/9poefg
- Wirshark + SSH = Wireshark Remote Capturing - http://www.howtoforge.com/wireshark-remote-capturing (via @welias)
- Nessus Scan through a Meterpreter Session (demo) http://vimeo.com/10203481 #PaulDotCom #nessus #meterpreter
- Nux Keylogger 0.0.1 http://packetstormsecurity.org/filedesc/nuxkeylogger0.0.1.c.html
- Collection of security checks for Linux http://bit.ly/a7IH7m
- RT @FrikiFeeds: The newbie's guide to hacking the Linux kernel | TuxRadar Linux http://dlvr.it/6sQp
- Exploit for Apache mod_isapi = 2.2.14 Dangling Pointer (CVE2010-0425) vulnerability ported to Metasploit http://bit.ly/ctDQjk
- Discoverer: Automatic Protocol Reverse Engineering from Network Traces #pdf http://ow.ly/1gHd1
- New Weblog Post -- Finding Malware on your network via cached DNS entries http://bit.ly/ajpcmU

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- Microsoft Gazelle, mini-OS virtuel basé sur MashupOS pour une navigation Web sécurisée par isolation
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- GreenSQL un proxy MySQL pour filtrer les requêtes SQL et contrer les injections

Microsoft Link Dump: Load #5
Les derniers commentaires publiés sur SecuObs (1-5):
- ESRT @mikkohypponen @carnal0wnage - Spoofing your Foursquare location with Me
- ESRT @mikkohypponen - Yes, that just might work, license plate SQL injection
- ESRT @mikkohypponen The Android phone with a Win32 USB worm on it's memory ca
- opennhrp 0.11.5
- Mozilla confirmed a critical vulnerability in the newest version of Firefox

Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

S'abonner au fil RSS global de la revue de presse



Microsoft Link Dump: Load #5

Par Grand Stream Dreams
Le [2009-06-21] à 03:21:43



Présentation : MSDump CC Photo Credit: by Choctopus on Flickr Got Shovel? Virtualization Stuff Dual-booting Windows 7 from a VHD setup on our laptops is rocking solid. I almost never drop into the main Vista system anymore. Neither does Lavie. So even though I currently have a pretty good handle, it never hurts to learn just a bit more. Here are some great tips and info. * How to use the new VHD features of Windows 7 / Server 2008 R2 - TechNet Edge. Ten minute guided video on how to set up a VHD file under Win7 or Server 2008. * Dual Boot from VHD with Windows 7 and Windows Sever 2008 R2 - TechNet Edge. Twenty-three minute video from MS pro Keith Combs on specifically dual-booting systems from VHD files. It?s quite good. * Creating virtual machines with Windows Virtual PC. ? Virtual PC Guy?s WebLog ? Basic stuff but a reminder that Windows 7 XP-Mode virtualization isn?t just for running XP?ish app under Win7. It is a full-features virtualization platform and you aren?t limited to just one virtualized XPM system. Make many?covering other supported OS?s as well. UAC Under Win 7 ? The Controversy Continues * User Account Control: Inside Windows 7 User Account Control. ? TechNet magazine ? Mark Russinovich goes to bat to try to defend MS?s positioning of UAC and try to define it?s relationship with security. I get the points but unfortunately, I think UAC has been engrained in many folk?s minds as being ?solely? a security measure. MS it trying to make it more nuanced from their technical understanding of the Windows platform architecture. This is going clear over the heads of common users. From Mark?s post: The primary goal of UAC is to enable more users to run with standard user rights. However, one of UAC's technologies looks and smells like a security feature: the consent prompt. Many people believed that the fact that software has to ask the user to grant it administrative rights means that they can prevent malware from gaining administrative rights. Besides the visual implication that a prompt is a gateway to administrative rights for just the operation it describes, the switch to a different desktop for the elevation dialog and the use of the Windows Integrity Mechanism, including User Interface Privilege Isolation (UIPI), seem to reinforce that belief. As we've stated since before the launch of Windows Vista, the primary purpose of elevation is not security, though, it's convenience: if users had to switch accounts to perform administrative operations, either by logging into or Fast User Switching to an administrative account, most users would switch once and not switch back. Thing is, most tech-pros and security folks just aren?t buying it. Particularly when the default user profile level in a Windows 7 setup is at ?admin? level. There is just so little encouragement offered to set up the user account as a ?standard? user rights. And, it appears that even with a standard-level account AND UAC that malware or maliciously coded apps can still work their magic against the user. * Windows 7 UAC code-injection vulnerability: video demonstration, source code released - istartedsomething. How applications can take advantage of Win7 and elevate permissions without UAC prompting. Darn. * UAC in Windows 7 still broken, Microsoft won?t/can?t fix code-injection vulnerability - istartedsomething. More thoughts by Long Zheng on UAC. * UAC, UAC, go away, come again some other day - Within Windows. Rafael Rivera provide the quote-byte of the week on UAC: ?Here?s my million dollar question: If UAC wasn?t designed to ultimately protect us from anything, why does its icon resemble a damn shield?? * 4sysops - Thoughts about User Account Control?s (UAC) primary design goal. ? 4sysops - Michael Pietroforte thoughtfully sums up the problem and frustration with folks-in-the-know on UAC. Most either tolerate it and some just turn the thing off. Windows 7 Mashup More news and various interesting bits to sort through regarding Windows 7. * Windows 7 Kernel Architecture Changes - api-ms-win-core files. ? NirSoft. Nir takes the time to explain function changes internal to some key Windows 7 dll files. This means that some calls previously used in application code might not be as efficient as newer ones. It?s interesting stuff. * New DLL Information site for Windows 7. ? Nir Sofer?s NirBlog ? Nir has created a new website ?containing information about every DLL in the system32 directory of Windows 7 Release Candidate?: DLL File Information for Windows 7. It?s tech-head stuff but good to bookmark if you are into DLL stuff. * Will the Windows 7 price be right? - Ed Bott?s Microsoft Report * Best Buy memo leaks Windows 7 pricing? Upgrades might cost less than half than Vista equivalent. - istartedsomething. I?m still not sure what the final prices will be, but if upgrade pricing come in as teased, I?d seriously consider dropping Windows 7 Home premium (x64) on both Lavie and Alvis?s laptops as soon as it is released. I?m not sure if I will go for Windows 7 Professional (x64) for mine. I?d actually use some of the XPM features so I might be able to justify the price which might be 2x that of the Home Premium tag. * Microsoft Hardware to Take Advantage of Windows 7 - Windows 7 Team Blog. Hardware interfacing support for Win7 gets a big enhancement. * Admiring Windows 7?s high-resolution device icons - istartedsomething. Pretty icons?and they mean something this time as well! * Creating, Saving, Sharing Themes in Windows 7 - Engineering Windows 7 ? I?ve dropped a static wallpaper on my Win7 desktop, but I keep going back to the provided themesets. It?s really neat. However, creating your own theme-sets isn?t quite an intuitive thing. This is a must-read post if you want to spin your own. Turn?s out it is pretty easy-peasy! * Windows 7: Personalize your PC ? Microsoft ? Turns out that you can download some more ?official? themes that weren?t bundled in the Win 7 release disks. These are the real-deal and quite beautiful. * Windows 7 to officially support logon UI background customization - Within Windows. Since we are on a tweaking bend, don?t forget you can tweak the login background with a bit of clever editing. * Tweak your Windows 7 Logon UI ?button set? - Within Windows. Of course, you might find that if you do change the logon background you might have some default text issues. These tips will help you cycle through some native adjustments to make the login dialogs easier to see. Microsoft Goodies * Test Your Website?s Compatibility with SuperPreview ? On10 ? Neat little tool for website developers that allows you see how your website looks in different browsers. What is cool is that you can open the same site in multiple browser versions at once and then ?stack? them transparently. These overlays make it very easy to see rendering differences. MS Download: Expression Web SuperPreview for Internet Explorer. Spotted on Calendar Of Updates. * Sysinternals Site Discussion : Updates: VMMap v2.0, ClockRes v2.0. ? Changes to two Sysinternals tools including the very cool VMMap to display memory usage details. * Use FAT16 with 64K cluster size for best performance on =4GB ReadyBoost devices - Aaron Tiensivu?s Blog. Clever tip to enhance ReadyBoost performance. Is it just me or is ReadyBoost a non-issue with Windows7. Sure it is supported but there?s been no buzz this go round. Maybe because Win7 performs so much better with available system RAM that no one feels a need for ReadyBoost under Win7 to eek out needed performance? Besides with lessons learned from Vista from most Windows OEM platform sellers, you rarely see consumer systems offered for Vista now with less than 2 GB. 3-4 GB seems standard. I expect Windows 7 systems when they hit the market will be the same. Compare that with XP and early Vista system releases where standard system consumer configurations offered 512 MB or 1 GB. Yikes! * ImageX GUI (GImageX) ? freeware ? New beta version released in May by Jonathan Bennett. This new beta version supports the WAIK for Windows 7 RC. I loaded that one on my ?new? laptop system along with this beta version, but found that it sometimes won?t open my Vista WAIK ImageX version WIM files. Those that it does takes a loooong time to mount. It?s a pain but there are good improvements in the Win7 Imagex version. For more info on the benefits (and the mounting delay) see this GSD post: WIM tool enhancements and Fiddling with VHD?s. Microsoft Security Essentials: Free MS AV Solution Beta ? Coming soon. Microsoft announced that it would be entering the freely-provided AV market soon. Microsoft Security Essentials (MSE)?previously code-named Morro?this product would pick up where Windows Defender (malware focused) left off. In fact install this version and Windows Defender gets disabled as it is an ?up-version? of that protection. It should appeal to the non-techie pc buyers who have a light (but growing) understanding of security needs. It will also probably play into SO/HO and small business users who need some MS-stable AV solutioning without the advanced administration requirements of larger corporations or businesses. Interface is very basic?which is probably a good thing. Though not ?cloud-based? it still packs a ?cloud-supported? feature to provide added protection for emergent threats and will be offered in both 32-bit and 64-bit Windows OS versions. That alone seems noteworthy. * Microsoft announces free antivirus, limited public beta - Ars Technica. * Microsoft Security Essentials: What wannabe testers need to know ? Mary-Jo Foley?s All about Microsoft * How good is Microsoft?s free antivirus software? - Ed Bott?s Microsoft Report. Contains great pre-beta screenshots. Whew! --Claus V. []

Les mots clés de la revue de presse pour cet article : microsoft
Les videos sur SecuObs pour les mots clés : microsoft
Les mots clés pour les articles publiés sur SecuObs : microsoft
Les éléments de la revue Twitter pour les mots clé : microsoft



AddThis Social Bookmark Widget



Les derniers articles du site "Grand Stream Dreams" :

- Around the MS Office pool




S'abonner au fil RSS global de la revue de presse

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]



Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail





Les derniers commentaires publiés sur SecuObs (6-25):
- libnids 1.24
- XSSer Automate your XSS Injections
- Cross Application Scripting All you KDE are belong to US
- ESRT @ChrisJohnRiley @carnal0wnage - Exploiting hard filtered SQL Injections
- Malicious Code Evolution from IE Zero-Day Exploit Code
- Google Releases Skipfish Application Security Scanner
- ESRT @securityninja - Burp Suite Tutorial - Repeater and Comparer Tool
- ESRT @dinodaizovi - New metasploit blog post - analyzes the first public Perm
- ESRT @iagox86 @hdmoore - Using Metasploit to Locate and Exploit the Energizer
- ESRT @innismir - New Weblog Post -- Finding Malware on your network via cache
- Sniffing with Wireshark as a Non-Root User
- Focus on MacNikto v1.1.1
- New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabili
- ESRT @opexxx @synopsi - Remote stack overflows
- ESRT @postmodern_mod3 @tmm1 - memprof now displays stack frames and threads
- ESRT @_MDL_ @gollmann - Locking botnet agents to specific victim systems in o
- CsFire 0.4.1 autonomously protects against dangerous or malicious cross-domai
- Seccubus v1.4.1 - Nessus 4.2 compatibility release
- ESRT @JGamblin @threatpost - Hackers say they will definitely break into an A
- ESRT @hdmoore @iagox86 - Weaponizing dnscat - first version of dnscat shellco


SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Archives Failles Secunia :
- SA39038 SiteDone Custom Edition articleId SQL Injection Vulnerability
- SA38977 Ubuntu update for thunderbird
- SA38930 Debian update for php5
- SA39044 IBM HTTP Server Multiple Vulnerabilities
- SA38929 CA ARCserve Backup JRE Multiple Vulnerabilities

Archives Mailing Full Disclosure :
- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e).
- Full-disclosure Setting the record straight on The Return of Koobface
- Full-disclosure Malware 2010 Call for Papers
- Re: Full-disclosure Fingerprinting Paper with Laser
- Re: Full-disclosure Fingerprinting Paper with Laser

Archives Mailing Bugtraq :
- announcing skipfish, an automated web app security scanner
- Vulnerability Httpdx v1.5.3b
- IBM Lotus 6.x HTTP Response Splitting Vulnerability
- There are lost of xss vul in PHPWind v6.0 !
- CA20100318-01: Security Notice for CA ARCserve Backup
- SECURITY DSA-2018-1 New php5 packages fix null pointer dereference

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :