SecuObs.com http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com RT @sniferl4bs: norby E-Book: https://tco/XWJ29lUg - Installing Snorby for use with Snort/Suricata/Sagan with OpenFPC in progress, fre 2012-10-03 22:56:48 - leonward : RT @sniferl4bs: norby E-Book: https://tco/XWJ29lUg - Installing Snorby for use with Snort/Suricata/Sagan with OpenFPC in progress, fre http://www.secuobs.com/twitter/news/348006.shtmlhttp://www.secuobs.com/twitter/news/348006.shtml A policy that prevents split tunnelling on a VPN only makes sense when it doesn't prevent people from being able to work #FAIL #ANGERSecuobs.com : 2012-10-02 11:06:09 - leonward - A policy that prevents split tunnelling on a VPN only makes sense when it doesn't prevent people from being able to work #FAIL #ANGERhttp://www.secuobs.com/twitter/news/347588.shtmlhttp://www.secuobs.com/twitter/news/347588.shtml RT @adamshostack: Dear reporters: if your security expert is shocked that social engineering works, find an actual security expertSecuobs.com : 2012-10-02 04:38:32 - leonward - RT @adamshostack: Dear reporters: if your security expert is shocked that social engineering works, find an actual security experthttp://www.secuobs.com/twitter/news/347475.shtmlhttp://www.secuobs.com/twitter/news/347475.shtml @andrewsmhay I'm with the other comments on mitigating SSH passwd attacks +use a stable distro that publishes rapid sec update packagesSecuobs.com : 2012-09-28 19:29:02 - leonward - @andrewsmhay I'm with the other comments on mitigating SSH passwd attacks +use a stable distro that publishes rapid sec update packageshttp://www.secuobs.com/twitter/news/346804.shtmlhttp://www.secuobs.com/twitter/news/346804.shtml I keep getting calls from The dispatch unit for O2 trying to dispatch me an upgraded phone Total scam Social engineering at its worstSecuobs.com : 2012-09-20 09:55:41 - leonward - I keep getting calls from The dispatch unit for O2 trying to dispatch me an upgraded phone Total scam Social engineering at its worsthttp://www.secuobs.com/twitter/news/345395.shtmlhttp://www.secuobs.com/twitter/news/345395.shtml RT @number007: Internet Explorer use-after-free 0-Day vulnerability http://tco/7IACILjz #VRT #SourcefireSecuobs.com : 2012-09-19 10:37:00 - leonward - RT @number007: Internet Explorer use-after-free 0-Day vulnerability http://tco/7IACILjz #VRT #Sourcefirehttp://www.secuobs.com/twitter/news/345077.shtmlhttp://www.secuobs.com/twitter/news/345077.shtml Todo list for the day- 200 emails- Haircut- Competitive 'stuff'- Order iPhone 5- Write ugly Perl- Be Awesome- @NeilSinky GigSecuobs.com : 2012-09-14 11:42:22 - leonward - Todo list for the day- 200 emails- Haircut- Competitive 'stuff'- Order iPhone 5- Write ugly Perl- Be Awesome- @NeilSinky Gighttp://www.secuobs.com/twitter/news/343877.shtmlhttp://www.secuobs.com/twitter/news/343877.shtml RT @Sourcefire: We are growing and have MANY positions to fill Support, Engineering, Sales and others http://tco/JlnoZAbY Please RT fo Secuobs.com : 2012-09-14 01:26:10 - leonward - RT @Sourcefire: We are growing and have MANY positions to fill Support, Engineering, Sales and others http://tco/JlnoZAbY Please RT fo http://www.secuobs.com/twitter/news/343726.shtmlhttp://www.secuobs.com/twitter/news/343726.shtml @xrad9 To manage chrome plugins, navigate to chrome://settings/content you'll see plug-ins listed thereSecuobs.com : 2012-09-11 14:46:27 - leonward - @xrad9 To manage chrome plugins, navigate to chrome://settings/content you'll see plug-ins listed therehttp://www.secuobs.com/twitter/news/342874.shtmlhttp://www.secuobs.com/twitter/news/342874.shtml RT @JoelEsler: From Fellow coworker: Apache Web software overrides IE10 do-not-track setting http://tco/HVACQui7Secuobs.com : 2012-09-11 14:46:27 - leonward - RT @JoelEsler: From Fellow coworker: Apache Web software overrides IE10 do-not-track setting http://tco/HVACQui7http://www.secuobs.com/twitter/news/342873.shtmlhttp://www.secuobs.com/twitter/news/342873.shtml The Java 7 0day persuaded me to set all of my chrome plugins to the more safe click to run My browsing experience has improved++ sinceSecuobs.com : 2012-09-10 19:52:40 - leonward - The Java 7 0day persuaded me to set all of my chrome plugins to the more safe click to run My browsing experience has improved++ sincehttp://www.secuobs.com/twitter/news/342618.shtmlhttp://www.secuobs.com/twitter/news/342618.shtml RT @VRT_Sourcefire: Blog post with venti-sized ownage: CVE-2012-4618: Bypassing Built-in Java Security http://tco/xKLhL0GESecuobs.com : 2012-09-06 11:02:36 - leonward - RT @VRT_Sourcefire: Blog post with venti-sized ownage: CVE-2012-4618: Bypassing Built-in Java Security http://tco/xKLhL0GEhttp://www.secuobs.com/twitter/news/340941.shtmlhttp://www.secuobs.com/twitter/news/340941.shtml RT @DaveGorman: G'night RT @RichardWiseman: Amazing RT @davidblaine: Dubai above the clouds http://tco/BnvkNQt2Secuobs.com : 2012-09-06 11:02:36 - leonward - RT @DaveGorman: G'night RT @RichardWiseman: Amazing RT @davidblaine: Dubai above the clouds http://tco/BnvkNQt2http://www.secuobs.com/twitter/news/340940.shtmlhttp://www.secuobs.com/twitter/news/340940.shtml RT @Euti: La carrera contra el riesgo #2: Los 2 lados de la Botnet Es interesante ver donde residen geograficamente cada uno de…http:// Secuobs.com : 2012-08-06 04:05:24 - leonward - RT @Euti: La carrera contra el riesgo #2: Los 2 lados de la Botnet Es interesante ver donde residen geograficamente cada uno de…http:// http://www.secuobs.com/twitter/news/338385.shtmlhttp://www.secuobs.com/twitter/news/338385.shtml RT @VRT_Sourcefire: Blog Post, some large sporting event related thing, live, no need to wait for primetime: Phishing Games http://tco/ Secuobs.com : 2012-07-31 19:58:47 - leonward - RT @VRT_Sourcefire: Blog Post, some large sporting event related thing, live, no need to wait for primetime: Phishing Games http://tco/ http://www.secuobs.com/twitter/news/337225.shtmlhttp://www.secuobs.com/twitter/news/337225.shtml RT @KyleAlspach: Best @Rapid7 recruiting vid so far - Spartacus spoof http://tco/XdWjZtfn guy at the end is awesomeSecuobs.com : 2012-04-16 19:38:17 - leonward - RT @KyleAlspach: Best @Rapid7 recruiting vid so far - Spartacus spoof http://tco/XdWjZtfn guy at the end is awesomehttp://www.secuobs.com/twitter/news/312920.shtmlhttp://www.secuobs.com/twitter/news/312920.shtml @TheDanRobinson vim, gcc, perl and a any term What else could you need ; If you're looking for a light IDE, check out http://tco/nSrCFbCgSecuobs.com : 2012-02-09 00:25:43 - leonward - @TheDanRobinson vim, gcc, perl and a any term What else could you need ; If you're looking for a light IDE, check out http://tco/nSrCFbCghttp://www.secuobs.com/twitter/news/292204.shtmlhttp://www.secuobs.com/twitter/news/292204.shtml RT @nickifowler: IOActive Labs Research: I can still see your actions on Google Maps over SSL: http://tco/FPaHfCprSecuobs.com : 2012-02-09 00:25:43 - leonward - RT @nickifowler: IOActive Labs Research: I can still see your actions on Google Maps over SSL: http://tco/FPaHfCprhttp://www.secuobs.com/twitter/news/292203.shtmlhttp://www.secuobs.com/twitter/news/292203.shtml It's sometimes way easier to talk down your competition than it is to differentiate for the + http://tco/gvEdQkkE shakes head at CiscoSecuobs.com : 2012-01-21 14:27:11 - leonward - It's sometimes way easier to talk down your competition than it is to differentiate for the + http://tco/gvEdQkkE shakes head at Ciscohttp://www.secuobs.com/twitter/news/286157.shtmlhttp://www.secuobs.com/twitter/news/286157.shtml I'm finding that Chrome for me has become far less stable over the last month or soSecuobs.com : 2012-01-11 22:59:08 - leonward - I'm finding that Chrome for me has become far less stable over the last month or sohttp://www.secuobs.com/twitter/news/282824.shtmlhttp://www.secuobs.com/twitter/news/282824.shtml RT @djrbliss: OpenBSD is also affected by telnetd vuln Those six guys are probably pissedSecuobs.com : 2011-12-28 02:22:41 - leonward - RT @djrbliss: OpenBSD is also affected by telnetd vuln Those six guys are probably pissedhttp://www.secuobs.com/twitter/news/278627.shtmlhttp://www.secuobs.com/twitter/news/278627.shtml Had to pour another hour of my life away reading PVST+ vs IEEE STP docs again last night Grrr Cisco, grrrrrSecuobs.com : 2011-12-16 19:12:43 - leonward - Had to pour another hour of my life away reading PVST+ vs IEEE STP docs again last night Grrr Cisco, grrrrrhttp://www.secuobs.com/twitter/news/275862.shtmlhttp://www.secuobs.com/twitter/news/275862.shtml RT @stevewerby: RT @suffert Nmap Hackers: C|Net http://tco/eS1wBDoC is now bundling Nmap with malware http://tco/0wSh3bYUSecuobs.com : 2011-12-06 11:22:06 - leonward - RT @stevewerby: RT @suffert Nmap Hackers: C|Net http://tco/eS1wBDoC is now bundling Nmap with malware http://tco/0wSh3bYUhttp://www.secuobs.com/twitter/news/272226.shtmlhttp://www.secuobs.com/twitter/news/272226.shtml RT @Sourcefire: Sourcefire Introduces Industry’s First Next-Generation Firewall With Integrated Next-Generation IPS #NGFW http://tco/ZH Secuobs.com : 2011-12-05 23:48:10 - leonward - RT @Sourcefire: Sourcefire Introduces Industry’s First Next-Generation Firewall With Integrated Next-Generation IPS #NGFW http://tco/ZH http://www.secuobs.com/twitter/news/271994.shtmlhttp://www.secuobs.com/twitter/news/271994.shtml @mroesch @d3tm4r @sourcefire Now that you mention it, I have seen a paradigm shift to IWISIFAAC-ization of late Cloud related most likelySecuobs.com : 2011-12-05 23:48:10 - leonward - @mroesch @d3tm4r @sourcefire Now that you mention it, I have seen a paradigm shift to IWISIFAAC-ization of late Cloud related most likelyhttp://www.secuobs.com/twitter/news/271993.shtmlhttp://www.secuobs.com/twitter/news/271993.shtml RT @SCmagazineUK: Sourcefire launches next generation firewall - SC Magazine UK http://tco/bFdkMCfFSecuobs.com : 2011-12-05 19:40:59 - leonward - RT @SCmagazineUK: Sourcefire launches next generation firewall - SC Magazine UK http://tco/bFdkMCfFhttp://www.secuobs.com/twitter/news/271951.shtmlhttp://www.secuobs.com/twitter/news/271951.shtml RT @DanRaywood: 14 months after the initial announcement, @Sourcefire launches its next generation firewall today Be me @scmagazineuk h Secuobs.com : 2011-12-05 19:40:59 - leonward - RT @DanRaywood: 14 months after the initial announcement, @Sourcefire launches its next generation firewall today Be me @scmagazineuk h http://www.secuobs.com/twitter/news/271950.shtmlhttp://www.secuobs.com/twitter/news/271950.shtml RT @jcn: USB Stick Contains Dual-Core Computer, Turns Any Screen Into an Android Station http://tco/Khp1NGuSSecuobs.com : 2011-11-20 11:02:30 - leonward - RT @jcn: USB Stick Contains Dual-Core Computer, Turns Any Screen Into an Android Station http://tco/Khp1NGuShttp://www.secuobs.com/twitter/news/267583.shtmlhttp://www.secuobs.com/twitter/news/267583.shtml Chrome, what the hell have you done to break printingSecuobs.com : 2011-11-04 19:54:42 - leonward - Chrome, what the hell have you done to break printinghttp://www.secuobs.com/twitter/news/263031.shtmlhttp://www.secuobs.com/twitter/news/263031.shtml RT @jbc22: Snorby E-Book: http://tco/UDl7LOBf - Installing Snorby for use with Snort/Suricata/Sagan with OpenFPC in progress, free to Secuobs.com : 2011-11-02 11:39:05 - leonward - RT @jbc22: Snorby E-Book: http://tco/UDl7LOBf - Installing Snorby for use with Snort/Suricata/Sagan with OpenFPC in progress, free to http://www.secuobs.com/twitter/news/262200.shtmlhttp://www.secuobs.com/twitter/news/262200.shtml The new Sourcefire calendar reminds me a bit of Monty Python You don't frighten us Ennngleash pig-dogs http://tco/wSYVNwbpSecuobs.com : 2011-10-18 17:44:54 - leonward - The new Sourcefire calendar reminds me a bit of Monty Python You don't frighten us Ennngleash pig-dogs http://tco/wSYVNwbphttp://www.secuobs.com/twitter/news/257808.shtmlhttp://www.secuobs.com/twitter/news/257808.shtml OMG how can it be that some people in Security still don't grok how DNS works #facepalmSecuobs.com : 2011-10-05 11:22:57 - leonward - OMG how can it be that some people in Security still don't grok how DNS works #facepalmhttp://www.secuobs.com/twitter/news/254550.shtmlhttp://www.secuobs.com/twitter/news/254550.shtml RT @node5: The greatest trick the devil ever pulled was convincing the world that large PERL scripts r consumable by anyone outside of o Secuobs.com : 2011-09-16 12:14:59 - leonward - RT @node5: The greatest trick the devil ever pulled was convincing the world that large PERL scripts r consumable by anyone outside of o http://www.secuobs.com/twitter/news/248505.shtmlhttp://www.secuobs.com/twitter/news/248505.shtml RT @Sourcefire: Snort 291 Installation Guide for Ubuntu 1004 LTS has been posted - http://owly/6pb7xSecuobs.com : 2011-09-09 01:54:19 - leonward - RT @Sourcefire: Snort 291 Installation Guide for Ubuntu 1004 LTS has been posted - http://owly/6pb7xhttp://www.secuobs.com/twitter/news/246407.shtmlhttp://www.secuobs.com/twitter/news/246407.shtml “@jmeller: “@digithreat: Digital Threat Snorby – NSM on Rails: http://tco/2Qsg5iK” Thanks for the great writeup” Includes OpenFPCSecuobs.com : 2011-08-28 22:15:46 - leonward - “@jmeller: “@digithreat: Digital Threat Snorby – NSM on Rails: http://tco/2Qsg5iK” Thanks for the great writeup” Includes OpenFPChttp://www.secuobs.com/twitter/news/242308.shtmlhttp://www.secuobs.com/twitter/news/242308.shtml How flipping is it to find an ADSL router that allows me to forward GRE Linksys, dlink, netgear, someone please allow some basic fwdsSecuobs.com : 2011-08-22 23:23:08 - leonward - How flipping is it to find an ADSL router that allows me to forward GRE Linksys, dlink, netgear, someone please allow some basic fwdshttp://www.secuobs.com/twitter/news/240523.shtmlhttp://www.secuobs.com/twitter/news/240523.shtml @wdf_vrt Never screw with the OSX system provided perl That's a lesson I learned from @EnglishLFC Secuobs.com : 2011-07-20 05:06:36 - leonward - @wdf_vrt Never screw with the OSX system provided perl That's a lesson I learned from @EnglishLFC http://www.secuobs.com/twitter/news/229365.shtmlhttp://www.secuobs.com/twitter/news/229365.shtml Starting to see if I can fit in a visit to Defcon this year Current chance - 50/50 as I'll be in the right country at the right timeSecuobs.com : 2011-07-11 19:39:06 - leonward - Starting to see if I can fit in a visit to Defcon this year Current chance - 50/50 as I'll be in the right country at the right timehttp://www.secuobs.com/twitter/news/226457.shtmlhttp://www.secuobs.com/twitter/news/226457.shtml Right thats it Enough If we ever buy more USB keyfobs to give away lets make sure they use 512-byte sectors #wantmyafternoonbackSecuobs.com : 2011-06-21 21:59:37 - leonward - Right thats it Enough If we ever buy more USB keyfobs to give away lets make sure they use 512-byte sectors #wantmyafternoonbackhttp://www.secuobs.com/twitter/news/219811.shtmlhttp://www.secuobs.com/twitter/news/219811.shtml Trying to stay calm while waiting for a debootstrap to complete onto a usb stick Relax slow is good sometimes #writespeedfailSecuobs.com : 2011-06-21 16:29:41 - leonward - Trying to stay calm while waiting for a debootstrap to complete onto a usb stick Relax slow is good sometimes #writespeedfailhttp://www.secuobs.com/twitter/news/219642.shtmlhttp://www.secuobs.com/twitter/news/219642.shtml RT @dakami: The great thing about Java jokes is waiting for them to beginSecuobs.com : 2011-06-05 04:07:06 - leonward - RT @dakami: The great thing about Java jokes is waiting for them to beginhttp://www.secuobs.com/twitter/news/213999.shtmlhttp://www.secuobs.com/twitter/news/213999.shtml RT @admagazine: Snort helpers: Snorby, OpenFPC, and Pulled Pork http://isgd/7EBtGlSecuobs.com : 2011-05-04 02:27:58 - leonward - RT @admagazine: Snort helpers: Snorby, OpenFPC, and Pulled Pork http://isgd/7EBtGlhttp://www.secuobs.com/twitter/news/201808.shtmlhttp://www.secuobs.com/twitter/news/201808.shtml RT @hdmoore: RT @natronkeltner: @McGrewSecurity @timmedin ported nbnspoofpy over to Metasploit and wrote up a blog post: http://isgd Secuobs.com : 2011-04-01 16:16:43 - leonward - RT @hdmoore: RT @natronkeltner: @McGrewSecurity @timmedin ported nbnspoofpy over to Metasploit and wrote up a blog post: http://isgd http://www.secuobs.com/twitter/news/191376.shtmlhttp://www.secuobs.com/twitter/news/191376.shtml Cool, OpenFPC is in Linux Magazine this month http://tco/CQR3gHj - Has anyone read it yetSecuobs.com : 2011-03-10 16:08:14 - leonward - Cool, OpenFPC is in Linux Magazine this month http://tco/CQR3gHj - Has anyone read it yethttp://www.secuobs.com/twitter/news/183032.shtmlhttp://www.secuobs.com/twitter/news/183032.shtml RT @VRT_Sourcefire: Blog Post with pants and php trousers: Attack Obfuscation - Not Just For JavaScript http://bitly/giQOWHSecuobs.com : 2011-03-05 10:29:03 - leonward - RT @VRT_Sourcefire: Blog Post with pants and php trousers: Attack Obfuscation - Not Just For JavaScript http://bitly/giQOWHhttp://www.secuobs.com/twitter/news/181024.shtmlhttp://www.secuobs.com/twitter/news/181024.shtml RT @alien8: christer has a good pourcents of the room utterly transfixed subtle delivery the kernel has had a problem oops :- #dc4420Secuobs.com : 2011-02-24 01:22:50 - leonward - RT @alien8: christer has a good pourcents of the room utterly transfixed subtle delivery the kernel has had a problem oops :- #dc4420http://www.secuobs.com/twitter/news/177530.shtmlhttp://www.secuobs.com/twitter/news/177530.shtml @poojinky Ahhhh, I think maybe you're talking about @jmeller 's instaSnorby rather than Snorby itself Stick it in your pulledpork confSecuobs.com : 2011-02-22 19:49:13 - leonward - @poojinky Ahhhh, I think maybe you're talking about @jmeller 's instaSnorby rather than Snorby itself Stick it in your pulledpork confhttp://www.secuobs.com/twitter/news/176902.shtmlhttp://www.secuobs.com/twitter/news/176902.shtml @poojinky it's not a snorby thing, how did you install itSecuobs.com : 2011-02-21 15:42:42 - leonward - @poojinky it's not a snorby thing, how did you install ithttp://www.secuobs.com/twitter/news/176436.shtmlhttp://www.secuobs.com/twitter/news/176436.shtml RT @joshcorman: VIDEO: My 6m40s #PechaKucha Why Zombies Love PCI talk #RSAC PK Happy Hour http://youtube/JQEBYxp_vKs via my Flip RTSecuobs.com : 2011-02-20 10:07:05 - leonward - RT @joshcorman: VIDEO: My 6m40s #PechaKucha Why Zombies Love PCI talk #RSAC PK Happy Hour http://youtube/JQEBYxp_vKs via my Flip RThttp://www.secuobs.com/twitter/news/176157.shtmlhttp://www.secuobs.com/twitter/news/176157.shtml RT @Snort: Improving your Custom Snort Rules -- New Whitepaper Posted http://googl/fb/2qDk8Secuobs.com : 2011-02-19 00:38:20 - leonward - RT @Snort: Improving your Custom Snort Rules -- New Whitepaper Posted http://googl/fb/2qDk8http://www.secuobs.com/twitter/news/175792.shtmlhttp://www.secuobs.com/twitter/news/175792.shtml @enhancedx I've been using their editor rather than the full IDE It works well with remote file editing via SSH Vim keybindings rockSecuobs.com : 2011-02-08 06:38:44 - leonward - @enhancedx I've been using their editor rather than the full IDE It works well with remote file editing via SSH Vim keybindings rockhttp://www.secuobs.com/twitter/news/171367.shtmlhttp://www.secuobs.com/twitter/news/171367.shtml @nullthreat - Ping me an email if you want those perl instructions for OpenFPC/Centos I have them handySecuobs.com : 2011-02-04 13:10:19 - leonward - @nullthreat - Ping me an email if you want those perl instructions for OpenFPC/Centos I have them handyhttp://www.secuobs.com/twitter/news/170295.shtmlhttp://www.secuobs.com/twitter/news/170295.shtml Feature: Cloud Computing on ECM Plus - By me - http://tco/93UhzbGSecuobs.com : 2011-02-03 14:25:58 - leonward - Feature: Cloud Computing on ECM Plus - By me - http://tco/93UhzbGhttp://www.secuobs.com/twitter/news/169860.shtmlhttp://www.secuobs.com/twitter/news/169860.shtml RT @jmeller: Snorbyorg gets a big face-lift for Snorby 2 We'll be posting some screencasts of all the features soon http://tco/iy8wqlASecuobs.com : 2011-01-24 06:01:29 - leonward - RT @jmeller: Snorbyorg gets a big face-lift for Snorby 2 We'll be posting some screencasts of all the features soon http://tco/iy8wqlAhttp://www.secuobs.com/twitter/news/165679.shtmlhttp://www.secuobs.com/twitter/news/165679.shtml RT @Mephux: Snorby 221 drops in a few - Solera API, Exports, PCAP options, New Hotkeys epic bug fixes http://tco/P7Tfhng http://t Secuobs.com : 2011-01-19 12:37:18 - leonward - RT @Mephux: Snorby 221 drops in a few - Solera API, Exports, PCAP options, New Hotkeys epic bug fixes http://tco/P7Tfhng http://t http://www.secuobs.com/twitter/news/163971.shtmlhttp://www.secuobs.com/twitter/news/163971.shtml Fusion has died after installing the latest OSX security updates Could just be coincidence but the VMware kernel extensions wont load :Secuobs.com : 2011-01-16 10:35:05 - leonward - Fusion has died after installing the latest OSX security updates Could just be coincidence but the VMware kernel extensions wont load :http://www.secuobs.com/twitter/news/163082.shtmlhttp://www.secuobs.com/twitter/news/163082.shtml RT @Mephux: Darkreading Snorby coverage http://jmp/i7EhtB #snort #snorbySecuobs.com : 2011-01-04 22:12:51 - leonward - RT @Mephux: Darkreading Snorby coverage http://jmp/i7EhtB #snort #snorbyhttp://www.secuobs.com/twitter/news/159667.shtmlhttp://www.secuobs.com/twitter/news/159667.shtml @inuk_x Oh, and one time I ran in to a rule that would fire in my test lab every time the rule fired due to syslog outputSecuobs.com : 2010-12-25 08:04:04 - leonward - @inuk_x Oh, and one time I ran in to a rule that would fire in my test lab every time the rule fired due to syslog outputhttp://www.secuobs.com/twitter/news/157217.shtmlhttp://www.secuobs.com/twitter/news/157217.shtml @JoelEsler Mine is on order from AmazonSecuobs.com : 2010-12-12 17:17:48 - leonward - @JoelEsler Mine is on order from Amazonhttp://www.secuobs.com/twitter/news/152357.shtmlhttp://www.secuobs.com/twitter/news/152357.shtml RT @jmeller: Snorby 201 Insta-Snorby 05 with out of the box full-packet capture is out http://bitly/hKuJiSThanks to @leonward an Secuobs.com : 2010-12-10 10:07:37 - leonward - RT @jmeller: Snorby 201 Insta-Snorby 05 with out of the box full-packet capture is out http://bitly/hKuJiSThanks to @leonward an http://www.secuobs.com/twitter/news/151573.shtmlhttp://www.secuobs.com/twitter/news/151573.shtml @JoelEsler I find it's the Bluetooth that kills it No real scientific method Just a hunchSecuobs.com : 2010-12-08 15:04:51 - leonward - @JoelEsler I find it's the Bluetooth that kills it No real scientific method Just a hunchhttp://www.secuobs.com/twitter/news/150502.shtmlhttp://www.secuobs.com/twitter/news/150502.shtml RT @Mephux: Snorby 20 Report - Final Product: http://bitly/h1Gx9Z - Going to release Snorby 200pre within the next hour - Test timeSecuobs.com : 2010-11-29 15:55:28 - leonward - RT @Mephux: Snorby 20 Report - Final Product: http://bitly/h1Gx9Z - Going to release Snorby 200pre within the next hour - Test timehttp://www.secuobs.com/twitter/news/146799.shtmlhttp://www.secuobs.com/twitter/news/146799.shtml RT @Mephux: Two page article about Snorby in @Hakin9 http://bitly/d38lAD but no credit to the author #facepalmalthough a fairly de Secuobs.com : 2010-11-03 19:56:38 - leonward - RT @Mephux: Two page article about Snorby in @Hakin9 http://bitly/d38lAD but no credit to the author #facepalmalthough a fairly de http://www.secuobs.com/twitter/news/138454.shtmlhttp://www.secuobs.com/twitter/news/138454.shtml RT @CompuFirmUS: IBM in talks to buy Fortinet: report - http://newzforme/97i8Secuobs.com : 2010-10-31 05:14:08 - leonward - RT @CompuFirmUS: IBM in talks to buy Fortinet: report - http://newzforme/97i8http://www.secuobs.com/twitter/news/137189.shtmlhttp://www.secuobs.com/twitter/news/137189.shtml Probably the best big-budget HD Java trailer you'll watch all day - http://wwwyoutubecom/watchv=_JaIJWo90D0 FunnySecuobs.com : 2010-10-27 03:25:33 - leonward - Probably the best big-budget HD Java trailer you'll watch all day - http://wwwyoutubecom/watchv=_JaIJWo90D0 Funnyhttp://www.secuobs.com/twitter/news/135343.shtmlhttp://www.secuobs.com/twitter/news/135343.shtml Someone please remind me Why do I use OSX I do all my Dev, system testing, and IDS stuff under Linux All OSX does is get me angrySecuobs.com : 2010-10-22 20:57:26 - leonward - Someone please remind me Why do I use OSX I do all my Dev, system testing, and IDS stuff under Linux All OSX does is get me angryhttp://www.secuobs.com/twitter/news/134218.shtmlhttp://www.secuobs.com/twitter/news/134218.shtml @vrybdpkt Oh noes I'm doing it right The DNS local caching is evil $ host hostname IP=1111; $ ping IP=2222;Secuobs.com : 2010-10-22 20:57:26 - leonward - @vrybdpkt Oh noes I'm doing it right The DNS local caching is evil $ host hostname IP=1111; $ ping IP=2222;http://www.secuobs.com/twitter/news/134217.shtmlhttp://www.secuobs.com/twitter/news/134217.shtml RT @grecs: Metasploit One Year after Rapid7 Acquisition http://bitly/a9QbNw - Well handled Rapid7, keep up the good workSecuobs.com : 2010-10-20 22:21:10 - leonward - RT @grecs: Metasploit One Year after Rapid7 Acquisition http://bitly/a9QbNw - Well handled Rapid7, keep up the good workhttp://www.secuobs.com/twitter/news/133267.shtmlhttp://www.secuobs.com/twitter/news/133267.shtml Why would anyone think that The Gadget Show would even half a clue about cloud computing #StupidIsAsStupidDoesSecuobs.com : 2010-10-05 06:45:48 - leonward - Why would anyone think that The Gadget Show would even half a clue about cloud computing #StupidIsAsStupidDoeshttp://www.secuobs.com/twitter/news/128425.shtmlhttp://www.secuobs.com/twitter/news/128425.shtml Come on Twitter, it's XSS Can't we just get onmouseover it :Secuobs.com : 2010-09-21 22:04:50 - leonward - Come on Twitter, it's XSS Can't we just get onmouseover it :http://www.secuobs.com/twitter/news/124100.shtmlhttp://www.secuobs.com/twitter/news/124100.shtml @EnglishHooligan @kpyke I had my first beer pong session it defcon last yearEvil game, but at least I got to show Swami some cricket skillzSecuobs.com : 2010-07-25 07:42:56 - leonward - @EnglishHooligan @kpyke I had my first beer pong session it defcon last yearEvil game, but at least I got to show Swami some cricket skillzhttp://www.secuobs.com/twitter/news/117913.shtmlhttp://www.secuobs.com/twitter/news/117913.shtml RT @hdmoore: We just released Metasploitable, a target virtual machine for testing Metasploit: http://bitly/aGZvuISecuobs.com : 2010-05-20 11:26:17 - leonward - RT @hdmoore: We just released Metasploitable, a target virtual machine for testing Metasploit: http://bitly/aGZvuIhttp://www.secuobs.com/twitter/news/94970.shtmlhttp://www.secuobs.com/twitter/news/94970.shtml Day 2 of #snort rule writing best practice workshop over with, 1 more to go Teaching byte_test AND operations on inverse DNS was hardSecuobs.com : 2010-05-19 22:23:11 - leonward - Day 2 of #snort rule writing best practice workshop over with, 1 more to go Teaching byte_test AND operations on inverse DNS was hardhttp://www.secuobs.com/twitter/news/94704.shtmlhttp://www.secuobs.com/twitter/news/94704.shtml RT @Sourcefire: Sourcefire Expands Intrusion Prevention Capabilities with New SSL Appliance: http://bitly/9dtDS5Secuobs.com : 2010-05-19 02:18:23 - leonward - RT @Sourcefire: Sourcefire Expands Intrusion Prevention Capabilities with New SSL Appliance: http://bitly/9dtDS5http://www.secuobs.com/twitter/news/94295.shtmlhttp://www.secuobs.com/twitter/news/94295.shtml OSX, CPAN, Macports and Perl together create a world of messSecuobs.com : 2010-03-01 00:08:02 - leonward - OSX, CPAN, Macports and Perl together create a world of messhttp://www.secuobs.com/twitter/news/69407.shtmlhttp://www.secuobs.com/twitter/news/69407.shtml Fighting with forking perl to speed up HTTP IPS evasion tests I'm forking myself into my own DOS corner : Scaling FAILSecuobs.com : 2010-02-24 06:19:30 - leonward - Fighting with forking perl to speed up HTTP IPS evasion tests I'm forking myself into my own DOS corner : Scaling FAILhttp://www.secuobs.com/twitter/news/67538.shtmlhttp://www.secuobs.com/twitter/news/67538.shtml @craiglawson Maybe I'm reading your link wrong, but that 03/06 coverage looks like it wasn't for this vuln Javascript shellcode detectSecuobs.com : 2010-01-18 06:00:09 - leonward - @craiglawson Maybe I'm reading your link wrong, but that 03/06 coverage looks like it wasn't for this vuln Javascript shellcode detecthttp://www.secuobs.com/twitter/news/56558.shtmlhttp://www.secuobs.com/twitter/news/56558.shtml RT @RonGula: #jobs #nessus Tenable is seeking a European sales engineer Must be familiar with scanning, logs , PCI, etc Email jobs@te Secuobs.com : 2010-01-09 01:28:51 - leonward - RT @RonGula: #jobs #nessus Tenable is seeking a European sales engineer Must be familiar with scanning, logs , PCI, etc Email jobs@te http://www.secuobs.com/twitter/news/53629.shtmlhttp://www.secuobs.com/twitter/news/53629.shtml RT @mishou: Insecure Programming by Example - gdb debugging stack2c: http://wpme/pJpiy-GSecuobs.com : 2009-12-06 22:14:51 - leonward - RT @mishou: Insecure Programming by Example - gdb debugging stack2c: http://wpme/pJpiy-Ghttp://www.secuobs.com/twitter/news/44657.shtmlhttp://www.secuobs.com/twitter/news/44657.shtml RT @TheCustos: Is trying to decide between sourcefire , mcafee, and cisco ips - Easy decision: SF FTW - but maybe I'm a little biased :Secuobs.com : 2009-10-20 13:10:08 - leonward - RT @TheCustos: Is trying to decide between sourcefire , mcafee, and cisco ips - Easy decision: SF FTW - but maybe I'm a little biased :http://www.secuobs.com/twitter/news/31261.shtmlhttp://www.secuobs.com/twitter/news/31261.shtml RT @DC4420 this Thursday and we have: Evoting machines + attacks, 'eye in the sky' howto and more Charity auction of Defcon stuff, bring £Secuobs.com : 2009-10-13 15:48:51 - leonward - RT @DC4420 this Thursday and we have: Evoting machines + attacks, 'eye in the sky' howto and more Charity auction of Defcon stuff, bring £http://www.secuobs.com/twitter/news/29579.shtmlhttp://www.secuobs.com/twitter/news/29579.shtml If there are any VMware license experts out there, please get in touch What's the minimum I have to buy to enable RCLI on 7x ESX35i hostsSecuobs.com : 2009-08-13 19:51:41 - leonward - If there are any VMware license experts out there, please get in touch What's the minimum I have to buy to enable RCLI on 7x ESX35i hostshttp://www.secuobs.com/twitter/news/16104.shtmlhttp://www.secuobs.com/twitter/news/16104.shtml Checked in for flight to vegas, does another defcon danceSecuobs.com : 2009-07-29 16:56:44 - leonward - Checked in for flight to vegas, does another defcon dancehttp://www.secuobs.com/twitter/news/12550.shtmlhttp://www.secuobs.com/twitter/news/12550.shtml On route to an isc2 event in the city I'm expecting it to be quite a departure from hardcore sessions I'm looking forward to at defconSecuobs.com : 2009-07-28 14:19:24 - leonward - On route to an isc2 event in the city I'm expecting it to be quite a departure from hardcore sessions I'm looking forward to at defconhttp://www.secuobs.com/twitter/news/12186.shtmlhttp://www.secuobs.com/twitter/news/12186.shtml @cuthbei No mate, I think ill keep the defcon dance all to myself I don't want to go viralSecuobs.com : 2009-06-24 16:56:39 - leonward - @cuthbei No mate, I think ill keep the defcon dance all to myself I don't want to go viralhttp://www.secuobs.com/twitter/news/4959.shtmlhttp://www.secuobs.com/twitter/news/4959.shtml Flight seats booked for defcon /me does another defcon danceSecuobs.com : 2009-06-24 05:31:00 - leonward - Flight seats booked for defcon /me does another defcon dancehttp://www.secuobs.com/twitter/news/4889.shtmlhttp://www.secuobs.com/twitter/news/4889.shtml Punching a huge TCP:80 hole in my kitchen firewall http://twitpiccom/86hazSecuobs.com : 2009-06-23 16:10:21 - leonward - Punching a huge TCP:80 hole in my kitchen firewall http://twitpiccom/86hazhttp://www.secuobs.com/twitter/news/4748.shtmlhttp://www.secuobs.com/twitter/news/4748.shtml @leonward Security Onion LiveCD 20090613 now available has dumbpigpl in /usr/local/bin/ http://bitly/jRRyW via @dougburksSecuobs.com : 2009-06-17 12:46:33 - leonward - @leonward Security Onion LiveCD 20090613 now available has dumbpigpl in /usr/local/bin/ http://bitly/jRRyW via @dougburkshttp://www.secuobs.com/twitter/news/3654.shtmlhttp://www.secuobs.com/twitter/news/3654.shtml The great ones above at Sourcefire have just given the OK for my Defcon trip this year Epic WIN does the defconorg danceSecuobs.com : 2009-06-01 18:53:11 - leonward - The great ones above at Sourcefire have just given the OK for my Defcon trip this year Epic WIN does the defconorg dancehttp://www.secuobs.com/twitter/news/1397.shtmlhttp://www.secuobs.com/twitter/news/1397.shtml Lolz @enhancedx : Yes, we need a military botnet http://tinyurlcom/5gaede via @enhancedxSecuobs.com : 2009-06-01 03:11:23 - leonward - Lolz @enhancedx : Yes, we need a military botnet http://tinyurlcom/5gaede via @enhancedxhttp://www.secuobs.com/twitter/news/1145.shtmlhttp://www.secuobs.com/twitter/news/1145.shtml Snort is 10 yrs old: That makes me feel old as well There were 100 rules Thanks Cazz when I first used it: http://tinyurlcom/kowt56Secuobs.com : 2009-06-01 03:11:23 - leonward - Snort is 10 yrs old: That makes me feel old as well There were 100 rules Thanks Cazz when I first used it: http://tinyurlcom/kowt56http://www.secuobs.com/twitter/news/1144.shtmlhttp://www.secuobs.com/twitter/news/1144.shtml