SecuObs.com http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com Wow, companies need to know about an 0day before they can patch it OhEmGee unacceptable The outrage2012-09-27 23:11:59 - lonervamp : Wow, companies need to know about an 0day before they can patch it OhEmGee unacceptable The outragehttp://www.secuobs.com/twitter/news/346542.shtmlhttp://www.secuobs.com/twitter/news/346542.shtml moving to sophos from mcafee endpoint sec; like mgmt console, but firewall mgmt very annoying in sophosSecuobs.com : 2012-09-12 23:04:06 - lonervamp - moving to sophos from mcafee endpoint sec; like mgmt console, but firewall mgmt very annoying in sophoshttp://www.secuobs.com/twitter/news/343303.shtmlhttp://www.secuobs.com/twitter/news/343303.shtml Is a good time for articles about resilient domain/hosting/DNS resolution for big and small co's alike Cloud/email Screwed/wait it outSecuobs.com : 2012-09-11 14:27:01 - lonervamp - Is a good time for articles about resilient domain/hosting/DNS resolution for big and small co's alike Cloud/email Screwed/wait it outhttp://www.secuobs.com/twitter/news/342870.shtmlhttp://www.secuobs.com/twitter/news/342870.shtml been putting off learning python try a kickstarter hands-on e-book: http://tco/eBmHFIaGSecuobs.com : 2012-08-15 02:24:11 - lonervamp - been putting off learning python try a kickstarter hands-on e-book: http://tco/eBmHFIaGhttp://www.secuobs.com/twitter/news/340147.shtmlhttp://www.secuobs.com/twitter/news/340147.shtml beautiful morning; 75F, fluffy clouds, cool wind alternating with hot sungorgeous if I had a convertibleSecuobs.com : 2012-07-28 17:27:46 - lonervamp - beautiful morning; 75F, fluffy clouds, cool wind alternating with hot sungorgeous if I had a convertiblehttp://www.secuobs.com/twitter/news/336628.shtmlhttp://www.secuobs.com/twitter/news/336628.shtml IT outages push devs/biz to cloud Cloud outages and less agility Tears Blame cloud vendors for clouding expectationsSecuobs.com : 2012-07-02 09:31:34 - lonervamp - IT outages push devs/biz to cloud Cloud outages and less agility Tears Blame cloud vendors for clouding expectationshttp://www.secuobs.com/twitter/news/331592.shtmlhttp://www.secuobs.com/twitter/news/331592.shtml If you and competitors are doing same things on the same clouds, your tech advantages are goneSecuobs.com : 2012-07-02 09:31:34 - lonervamp - If you and competitors are doing same things on the same clouds, your tech advantages are gonehttp://www.secuobs.com/twitter/news/331591.shtmlhttp://www.secuobs.com/twitter/news/331591.shtml awesome, mediacom is back in that 30s online, 30s offline, dhcp problem state againSecuobs.com : 2012-04-03 11:08:58 - lonervamp - awesome, mediacom is back in that 30s online, 30s offline, dhcp problem state againhttp://www.secuobs.com/twitter/news/308898.shtmlhttp://www.secuobs.com/twitter/news/308898.shtml for as sippin'-smooth as templeton rye whiskey is, ri rye whiskey makes up the bite/burnSecuobs.com : 2012-03-17 10:06:42 - lonervamp - for as sippin'-smooth as templeton rye whiskey is, ri rye whiskey makes up the bite/burnhttp://www.secuobs.com/twitter/news/304261.shtmlhttp://www.secuobs.com/twitter/news/304261.shtml RDP patch today is poignant, as I know someone who had an RDP-accessible server hacked last year bruted I sshould pub that storySecuobs.com : 2012-03-14 04:40:37 - lonervamp - RDP patch today is poignant, as I know someone who had an RDP-accessible server hacked last year bruted I sshould pub that storyhttp://www.secuobs.com/twitter/news/303180.shtmlhttp://www.secuobs.com/twitter/news/303180.shtml I wouldn't have a SEIM without PCI DSSSecuobs.com : 2012-03-11 16:45:03 - lonervamp - I wouldn't have a SEIM without PCI DSShttp://www.secuobs.com/twitter/news/302346.shtmlhttp://www.secuobs.com/twitter/news/302346.shtml My credit card database would be accessible by the whole company and on a shared database but for PCISecuobs.com : 2012-03-11 16:45:03 - lonervamp - My credit card database would be accessible by the whole company and on a shared database but for PCIhttp://www.secuobs.com/twitter/news/302345.shtmlhttp://www.secuobs.com/twitter/news/302345.shtml @snipeyhead a rogue cheap smoke detector with low batteries makes for a great what the fuck is that beep jokeSecuobs.com : 2012-03-02 19:29:47 - lonervamp - @snipeyhead a rogue cheap smoke detector with low batteries makes for a great what the fuck is that beep jokehttp://www.secuobs.com/twitter/news/299449.shtmlhttp://www.secuobs.com/twitter/news/299449.shtml a little bit of sapphire tonic as I prepare to make some after-hours firewall changesSecuobs.com : 2012-02-16 03:56:14 - lonervamp - a little bit of sapphire tonic as I prepare to make some after-hours firewall changeshttp://www.secuobs.com/twitter/news/294534.shtmlhttp://www.secuobs.com/twitter/news/294534.shtml After 3 years/300+ EV SSL certs, @netsolcares network solutions has a problem in their site preventing me from getting new EV certsSecuobs.com : 2012-02-10 19:17:58 - lonervamp - After 3 years/300+ EV SSL certs, @netsolcares network solutions has a problem in their site preventing me from getting new EV certshttp://www.secuobs.com/twitter/news/292863.shtmlhttp://www.secuobs.com/twitter/news/292863.shtml I can only hope that this whole EV SSL thing is over with globally :Secuobs.com : 2012-02-10 19:17:58 - lonervamp - I can only hope that this whole EV SSL thing is over with globally :http://www.secuobs.com/twitter/news/292862.shtmlhttp://www.secuobs.com/twitter/news/292862.shtml love attempting to post comments on a blog, fail captchas 4 times, need to enable scripting for strange things, then log in come onSecuobs.com : 2012-02-05 19:03:56 - lonervamp - love attempting to post comments on a blog, fail captchas 4 times, need to enable scripting for strange things, then log in come onhttp://www.secuobs.com/twitter/news/291023.shtmlhttp://www.secuobs.com/twitter/news/291023.shtml none of those captchas were real words, half I couldn't read, and one had a pi symbolSecuobs.com : 2012-02-05 19:03:56 - lonervamp - none of those captchas were real words, half I couldn't read, and one had a pi symbolhttp://www.secuobs.com/twitter/news/291022.shtmlhttp://www.secuobs.com/twitter/news/291022.shtml I tried the sound version of the captcha, and I think I got thrown 7 wordssome of which I couldn't hear either bull or bowlSecuobs.com : 2012-02-05 19:03:56 - lonervamp - I tried the sound version of the captcha, and I think I got thrown 7 wordssome of which I couldn't hear either bull or bowlhttp://www.secuobs.com/twitter/news/291021.shtmlhttp://www.secuobs.com/twitter/news/291021.shtml oh noes, anonymous tricked people into being a ddos participant via shortened URLs #nosympathyhereSecuobs.com : 2012-01-21 04:04:02 - lonervamp - oh noes, anonymous tricked people into being a ddos participant via shortened URLs #nosympathyherehttp://www.secuobs.com/twitter/news/286074.shtmlhttp://www.secuobs.com/twitter/news/286074.shtml Came in today to find overnight work resulted in corrupt DNS, downed domain controllers Rather take hackers anydaySecuobs.com : 2011-12-22 17:23:07 - lonervamp - Came in today to find overnight work resulted in corrupt DNS, downed domain controllers Rather take hackers anydayhttp://www.secuobs.com/twitter/news/277532.shtmlhttp://www.secuobs.com/twitter/news/277532.shtml @carnal0wnage maybe sqli counts as 15 pointsSecuobs.com : 2011-12-14 13:23:39 - lonervamp - @carnal0wnage maybe sqli counts as 15 pointshttp://www.secuobs.com/twitter/news/275033.shtmlhttp://www.secuobs.com/twitter/news/275033.shtml harvard business review article illustrates the lost battle for the term cloud oh well article a bit light on the costs/risks/negativesSecuobs.com : 2011-10-27 08:24:52 - lonervamp - harvard business review article illustrates the lost battle for the term cloud oh well article a bit light on the costs/risks/negativeshttp://www.secuobs.com/twitter/news/260481.shtmlhttp://www.secuobs.com/twitter/news/260481.shtml if biz needs to report data theft risks, does that include cloud postures data leakage possible risks ignoranceSecuobs.com : 2011-10-17 04:51:35 - lonervamp - if biz needs to report data theft risks, does that include cloud postures data leakage possible risks ignorancehttp://www.secuobs.com/twitter/news/257444.shtmlhttp://www.secuobs.com/twitter/news/257444.shtml RT @Sellak: The live DD game videos from PAX Prime with @cwgabriel @wilw @pvponline @tychobrahe and @paulandstorm are up http://tco/Cj Secuobs.com : 2011-10-08 15:10:49 - lonervamp - RT @Sellak: The live DD game videos from PAX Prime with @cwgabriel @wilw @pvponline @tychobrahe and @paulandstorm are up http://tco/Cj http://www.secuobs.com/twitter/news/255517.shtmlhttp://www.secuobs.com/twitter/news/255517.shtml RT @Sellak live DD game vids from PAX with @cwgabriel @wilw @pvponline @tychobrahe and @paulandstorm are up http://tco/2NfovzRlSecuobs.com : 2011-10-08 15:10:49 - lonervamp - RT @Sellak live DD game vids from PAX with @cwgabriel @wilw @pvponline @tychobrahe and @paulandstorm are up http://tco/2NfovzRlhttp://www.secuobs.com/twitter/news/255516.shtmlhttp://www.secuobs.com/twitter/news/255516.shtml Bah, so many pc gaming headsets are USB-only these days Want high quality without the USB and added softwareSecuobs.com : 2011-09-13 23:39:54 - lonervamp - Bah, so many pc gaming headsets are USB-only these days Want high quality without the USB and added softwarehttp://www.secuobs.com/twitter/news/247604.shtmlhttp://www.secuobs.com/twitter/news/247604.shtml Are there any active pci web forums around anymoreSecuobs.com : 2011-09-10 12:02:26 - lonervamp - Are there any active pci web forums around anymorehttp://www.secuobs.com/twitter/news/246800.shtmlhttp://www.secuobs.com/twitter/news/246800.shtml @securitytwits What tools are you using to scan whole networks/systems for PCI cardholder data #infosecqSecuobs.com : 2011-09-08 17:17:45 - lonervamp - @securitytwits What tools are you using to scan whole networks/systems for PCI cardholder data #infosecqhttp://www.secuobs.com/twitter/news/246249.shtmlhttp://www.secuobs.com/twitter/news/246249.shtml consumer device security sideeffect: far more persistent login failures on poorly configured devices look like slow bruteforcesSecuobs.com : 2011-08-30 23:01:36 - lonervamp - consumer device security sideeffect: far more persistent login failures on poorly configured devices look like slow bruteforceshttp://www.secuobs.com/twitter/news/243153.shtmlhttp://www.secuobs.com/twitter/news/243153.shtml overheard today: We're trying to meet PCI compliance, not have security Yes, that's an elephant in the cornerSecuobs.com : 2011-08-29 23:14:11 - lonervamp - overheard today: We're trying to meet PCI compliance, not have security Yes, that's an elephant in the cornerhttp://www.secuobs.com/twitter/news/242642.shtmlhttp://www.secuobs.com/twitter/news/242642.shtml Today is a perfect day to skip work for the afternoon, sit out in the grass, and just watch the clouds/sky for a whileSecuobs.com : 2011-08-25 09:24:51 - lonervamp - Today is a perfect day to skip work for the afternoon, sit out in the grass, and just watch the clouds/sky for a whilehttp://www.secuobs.com/twitter/news/241198.shtmlhttp://www.secuobs.com/twitter/news/241198.shtml Today is a perfect day to skip work for the afternoon, sit out in the grass, and just watch the clouds/sky for a whileSecuobs.com : 2011-08-12 06:14:47 - lonervamp - Today is a perfect day to skip work for the afternoon, sit out in the grass, and just watch the clouds/sky for a whilehttp://www.secuobs.com/twitter/news/237659.shtmlhttp://www.secuobs.com/twitter/news/237659.shtml anyone have testimonials on open-pandoraorg open source handheld linux/emulator/retro gaming deviceSecuobs.com : 2011-08-11 06:10:36 - lonervamp - anyone have testimonials on open-pandoraorg open source handheld linux/emulator/retro gaming devicehttp://www.secuobs.com/twitter/news/237302.shtmlhttp://www.secuobs.com/twitter/news/237302.shtml only @GregoryDEvans would step foot in vegas as defcon ends so he says and call it attending while not attending anything #ligattSecuobs.com : 2011-08-08 09:19:32 - lonervamp - only @GregoryDEvans would step foot in vegas as defcon ends so he says and call it attending while not attending anything #ligatthttp://www.secuobs.com/twitter/news/236111.shtmlhttp://www.secuobs.com/twitter/news/236111.shtml a vow to get back to defcon next yearSecuobs.com : 2011-08-08 09:19:32 - lonervamp - a vow to get back to defcon next yearhttp://www.secuobs.com/twitter/news/236110.shtmlhttp://www.secuobs.com/twitter/news/236110.shtml @gattaca the best news so far on defcon weekend can't really top thatSecuobs.com : 2011-08-07 06:46:43 - lonervamp - @gattaca the best news so far on defcon weekend can't really top thathttp://www.secuobs.com/twitter/news/235823.shtmlhttp://www.secuobs.com/twitter/news/235823.shtml @iamnowonmai for just a domain registrar and dns, I've had no complaints on godaddySecuobs.com : 2011-07-30 07:01:38 - lonervamp - @iamnowonmai for just a domain registrar and dns, I've had no complaints on godaddyhttp://www.secuobs.com/twitter/news/233155.shtmlhttp://www.secuobs.com/twitter/news/233155.shtml got my new metasploit: the penetration tester's guide today stokedSecuobs.com : 2011-07-26 06:55:22 - lonervamp - got my new metasploit: the penetration tester's guide today stokedhttp://www.secuobs.com/twitter/news/231438.shtmlhttp://www.secuobs.com/twitter/news/231438.shtml if i'm going to pay for netflix streaming separately, I'd really like it to work on linux/firefoxSecuobs.com : 2011-07-19 07:24:30 - lonervamp - if i'm going to pay for netflix streaming separately, I'd really like it to work on linux/firefoxhttp://www.secuobs.com/twitter/news/229035.shtmlhttp://www.secuobs.com/twitter/news/229035.shtml anyone have any early good/bad experience with cisco ise new nacSecuobs.com : 2011-07-13 00:02:21 - lonervamp - anyone have any early good/bad experience with cisco ise new nachttp://www.secuobs.com/twitter/news/226965.shtmlhttp://www.secuobs.com/twitter/news/226965.shtml I'm glad my McAfee IPS upgrade changed SSL decryption behavior I love chasing excrutiatingly strange problems with no alerts/logsSecuobs.com : 2011-07-08 04:52:45 - lonervamp - I'm glad my McAfee IPS upgrade changed SSL decryption behavior I love chasing excrutiatingly strange problems with no alerts/logshttp://www.secuobs.com/twitter/news/225353.shtmlhttp://www.secuobs.com/twitter/news/225353.shtml Hai You pay us, give us evidense, we comply you EZ complyance nmap and nessus scan extra via custom laptop applyanceSecuobs.com : 2011-07-08 04:52:45 - lonervamp - Hai You pay us, give us evidense, we comply you EZ complyance nmap and nessus scan extra via custom laptop applyancehttp://www.secuobs.com/twitter/news/225352.shtmlhttp://www.secuobs.com/twitter/news/225352.shtml tempted to dive into that PCI usefulness discussion, but I got nothing new :Secuobs.com : 2011-06-29 05:12:49 - lonervamp - tempted to dive into that PCI usefulness discussion, but I got nothing new :http://www.secuobs.com/twitter/news/222394.shtmlhttp://www.secuobs.com/twitter/news/222394.shtml Am of a mind to say, if it involves a free app or 'cloud' then you can't know the risk to your data you simply can't yeah u 2 chromeSecuobs.com : 2011-06-24 01:06:59 - lonervamp - Am of a mind to say, if it involves a free app or 'cloud' then you can't know the risk to your data you simply can't yeah u 2 chromehttp://www.secuobs.com/twitter/news/220822.shtmlhttp://www.secuobs.com/twitter/news/220822.shtml any1 transitioned a web/developer env from iis6 to iis7 how'd it go have to do developers and servers at same time, roughlySecuobs.com : 2011-06-23 00:51:34 - lonervamp - any1 transitioned a web/developer env from iis6 to iis7 how'd it go have to do developers and servers at same time, roughlyhttp://www.secuobs.com/twitter/news/220370.shtmlhttp://www.secuobs.com/twitter/news/220370.shtml anyone dealt with securitymetricscom before for PCI scanning their site makes me a sad panda vendor linked me thereSecuobs.com : 2011-06-18 02:21:24 - lonervamp - anyone dealt with securitymetricscom before for PCI scanning their site makes me a sad panda vendor linked me therehttp://www.secuobs.com/twitter/news/218717.shtmlhttp://www.secuobs.com/twitter/news/218717.shtml skype outage hot on the heels of skype reverse engineering news just like outage on heels of public login server dos exploit ~8/2007Secuobs.com : 2011-06-08 04:22:24 - lonervamp - skype outage hot on the heels of skype reverse engineering news just like outage on heels of public login server dos exploit ~8/2007http://www.secuobs.com/twitter/news/215136.shtmlhttp://www.secuobs.com/twitter/news/215136.shtml 1st music revolution: mp3, napster, itunes 2nd one is now: pandora, mog, rdio, amazon, cloudSecuobs.com : 2011-05-26 00:30:08 - lonervamp - 1st music revolution: mp3, napster, itunes 2nd one is now: pandora, mog, rdio, amazon, cloudhttp://www.secuobs.com/twitter/news/210553.shtmlhttp://www.secuobs.com/twitter/news/210553.shtml keep reading that sony used no firewallI still feel someone has made a mistake in that descriptionSecuobs.com : 2011-05-09 23:01:48 - lonervamp - keep reading that sony used no firewallI still feel someone has made a mistake in that descriptionhttp://www.secuobs.com/twitter/news/203863.shtmlhttp://www.secuobs.com/twitter/news/203863.shtml web app firewall I can buy that local probably network firewall I'd love to hear the reason on that router aclsSecuobs.com : 2011-05-09 23:01:48 - lonervamp - web app firewall I can buy that local probably network firewall I'd love to hear the reason on that router aclshttp://www.secuobs.com/twitter/news/203862.shtmlhttp://www.secuobs.com/twitter/news/203862.shtml @RobotSpaf when you said sony lacked a firewall, did you mean a web app fw, network fw, or something elseSecuobs.com : 2011-05-09 23:01:48 - lonervamp - @RobotSpaf when you said sony lacked a firewall, did you mean a web app fw, network fw, or something elsehttp://www.secuobs.com/twitter/news/203861.shtmlhttp://www.secuobs.com/twitter/news/203861.shtml I'm surprised so many people are surprised with the amazon outage thing drama queens poor risk analysis denialSecuobs.com : 2011-04-24 07:28:27 - lonervamp - I'm surprised so many people are surprised with the amazon outage thing drama queens poor risk analysis denialhttp://www.secuobs.com/twitter/news/198808.shtmlhttp://www.secuobs.com/twitter/news/198808.shtml How many orgs make meeting PCI too complicated or spendy or faked the ones who meet PCi and not securitySecuobs.com : 2011-04-20 10:11:59 - lonervamp - How many orgs make meeting PCI too complicated or spendy or faked the ones who meet PCi and not securityhttp://www.secuobs.com/twitter/news/197390.shtmlhttp://www.secuobs.com/twitter/news/197390.shtml @imaguid Haha, I actually enjoyed most of Blade 3though much took multiple viewings to appreciate Always liked his part, thoughSecuobs.com : 2011-04-18 12:52:17 - lonervamp - @imaguid Haha, I actually enjoyed most of Blade 3though much took multiple viewings to appreciate Always liked his part, thoughhttp://www.secuobs.com/twitter/news/196779.shtmlhttp://www.secuobs.com/twitter/news/196779.shtml biggest cloud effect it's not cloud compute itself it's that orgs are finally giving away their IT infrast Rebranded hostingSecuobs.com : 2011-04-17 09:30:46 - lonervamp - biggest cloud effect it's not cloud compute itself it's that orgs are finally giving away their IT infrast Rebranded hostinghttp://www.secuobs.com/twitter/news/196572.shtmlhttp://www.secuobs.com/twitter/news/196572.shtml @SecRunner sounds like a defcon don't pass out *that* drunk again prankSecuobs.com : 2011-04-04 12:44:01 - lonervamp - @SecRunner sounds like a defcon don't pass out *that* drunk again prankhttp://www.secuobs.com/twitter/news/192132.shtmlhttp://www.secuobs.com/twitter/news/192132.shtml currently casually watching the 'decorah eagle nest' webcam on another system, one egg has what looks like cracks due to hatch any timeSecuobs.com : 2011-04-02 06:27:20 - lonervamp - currently casually watching the 'decorah eagle nest' webcam on another system, one egg has what looks like cracks due to hatch any timehttp://www.secuobs.com/twitter/news/191631.shtmlhttp://www.secuobs.com/twitter/news/191631.shtml fyi be sure you use metasploit at least once todayworth itSecuobs.com : 2011-04-02 06:27:20 - lonervamp - fyi be sure you use metasploit at least once todayworth ithttp://www.secuobs.com/twitter/news/191630.shtmlhttp://www.secuobs.com/twitter/news/191630.shtml Tryin out tweetdeck and tweetcaster on nook No indication of ssl is annoyingSecuobs.com : 2011-03-30 02:05:14 - lonervamp - Tryin out tweetdeck and tweetcaster on nook No indication of ssl is annoyinghttp://www.secuobs.com/twitter/news/190069.shtmlhttp://www.secuobs.com/twitter/news/190069.shtml why don't we move our power generation out to the cloudSecuobs.com : 2011-03-14 02:05:47 - lonervamp - why don't we move our power generation out to the cloudhttp://www.secuobs.com/twitter/news/184295.shtmlhttp://www.secuobs.com/twitter/news/184295.shtml we have no business being PCI tier 1, but our payment services provider has just required it wheeSecuobs.com : 2011-02-24 16:08:06 - lonervamp - we have no business being PCI tier 1, but our payment services provider has just required it wheehttp://www.secuobs.com/twitter/news/177799.shtmlhttp://www.secuobs.com/twitter/news/177799.shtml Hi, I teach digital security later How does a firewall work -red lightSecuobs.com : 2011-02-24 01:15:24 - lonervamp - Hi, I teach digital security later How does a firewall work -red lighthttp://www.secuobs.com/twitter/news/177526.shtmlhttp://www.secuobs.com/twitter/news/177526.shtml Wonder how many PCI-compliance firms are *really* doing file integrity monitoring properly who touched what when and not just abcdllSecuobs.com : 2011-02-16 03:26:42 - lonervamp - Wonder how many PCI-compliance firms are *really* doing file integrity monitoring properly who touched what when and not just abcdllhttp://www.secuobs.com/twitter/news/174429.shtmlhttp://www.secuobs.com/twitter/news/174429.shtml is there an owasp top 10 item on insecure file upload/unvalidated file uploadsSecuobs.com : 2011-02-11 21:23:34 - lonervamp - is there an owasp top 10 item on insecure file upload/unvalidated file uploadshttp://www.secuobs.com/twitter/news/172986.shtmlhttp://www.secuobs.com/twitter/news/172986.shtml ms11-010 soundsawesome like a persistent keylogger look out desktop support techsSecuobs.com : 2011-02-10 00:46:37 - lonervamp - ms11-010 soundsawesome like a persistent keylogger look out desktop support techshttp://www.secuobs.com/twitter/news/172221.shtmlhttp://www.secuobs.com/twitter/news/172221.shtml @ashyoungblood Well, if co pays bills, then blackhat And take your own time off to do defcon the next week I totally wouldSecuobs.com : 2011-02-03 14:20:23 - lonervamp - @ashyoungblood Well, if co pays bills, then blackhat And take your own time off to do defcon the next week I totally wouldhttp://www.secuobs.com/twitter/news/169858.shtmlhttp://www.secuobs.com/twitter/news/169858.shtml @ashyoungblood if you can't do both, well, I'd still almost say defcon for the fun/crowds $100=different audienceSecuobs.com : 2011-02-03 14:20:23 - lonervamp - @ashyoungblood if you can't do both, well, I'd still almost say defcon for the fun/crowds $100=different audiencehttp://www.secuobs.com/twitter/news/169857.shtmlhttp://www.secuobs.com/twitter/news/169857.shtml @ashyoungblood defconaffordable and funSecuobs.com : 2011-02-03 02:48:52 - lonervamp - @ashyoungblood defconaffordable and funhttp://www.secuobs.com/twitter/news/169621.shtmlhttp://www.secuobs.com/twitter/news/169621.shtml if you can't read a raw firewall config, why are you reviewing my PCI complianceSecuobs.com : 2011-01-11 07:27:11 - lonervamp - if you can't read a raw firewall config, why are you reviewing my PCI compliancehttp://www.secuobs.com/twitter/news/161302.shtmlhttp://www.secuobs.com/twitter/news/161302.shtml Seems Network Solutions has changed EV SSL cert signing They don't ship the correct CA root certs anymore, thoughSecuobs.com : 2010-12-22 23:22:29 - lonervamp - Seems Network Solutions has changed EV SSL cert signing They don't ship the correct CA root certs anymore, thoughhttp://www.secuobs.com/twitter/news/156539.shtmlhttp://www.secuobs.com/twitter/news/156539.shtml @diami03 way I read that PR, I can make an AWS app that displays CCs to the world and *think* I am PCI-compliantSecuobs.com : 2010-12-08 02:36:33 - lonervamp - @diami03 way I read that PR, I can make an AWS app that displays CCs to the world and *think* I am PCI-complianthttp://www.secuobs.com/twitter/news/150248.shtmlhttp://www.secuobs.com/twitter/news/150248.shtml nice to hear, finally, a decent reason for honeypots on latest EL jimmy won't get boredSecuobs.com : 2010-12-05 20:05:18 - lonervamp - nice to hear, finally, a decent reason for honeypots on latest EL jimmy won't get boredhttp://www.secuobs.com/twitter/news/149393.shtmlhttp://www.secuobs.com/twitter/news/149393.shtml then again, if jimmy is so bored in security that he needs to play with a honeypot, there are big issues afootSecuobs.com : 2010-12-05 20:05:18 - lonervamp - then again, if jimmy is so bored in security that he needs to play with a honeypot, there are big issues afoothttp://www.secuobs.com/twitter/news/149392.shtmlhttp://www.secuobs.com/twitter/news/149392.shtml I still don't get why Random Organization X needs a honeypot Should I keep a fake open door on my home that leads to a mantrapSecuobs.com : 2010-11-20 11:28:04 - lonervamp - I still don't get why Random Organization X needs a honeypot Should I keep a fake open door on my home that leads to a mantraphttp://www.secuobs.com/twitter/news/144505.shtmlhttp://www.secuobs.com/twitter/news/144505.shtml @andywillingham the 2 types of 0day views are interesting: 0day vulns vs 0day exploit/malwareSecuobs.com : 2010-11-12 04:26:03 - lonervamp - @andywillingham the 2 types of 0day views are interesting: 0day vulns vs 0day exploit/malwarehttp://www.secuobs.com/twitter/news/141521.shtmlhttp://www.secuobs.com/twitter/news/141521.shtml @andywillingham 0day: a vuln without a patch or official fix So even if known, it's 0day to me until official responseSecuobs.com : 2010-11-11 13:32:43 - lonervamp - @andywillingham 0day: a vuln without a patch or official fix So even if known, it's 0day to me until official responsehttp://www.secuobs.com/twitter/news/141209.shtmlhttp://www.secuobs.com/twitter/news/141209.shtml @andywillingham I *do* get how some define 0day with the key phrase previously unknown, however Either by vendor or public/defenderSecuobs.com : 2010-11-11 13:32:43 - lonervamp - @andywillingham I *do* get how some define 0day with the key phrase previously unknown, however Either by vendor or public/defenderhttp://www.secuobs.com/twitter/news/141208.shtmlhttp://www.secuobs.com/twitter/news/141208.shtml 0day is sec geek jargonSecuobs.com : 2010-11-10 22:18:34 - lonervamp - 0day is sec geek jargonhttp://www.secuobs.com/twitter/news/140905.shtmlhttp://www.secuobs.com/twitter/news/140905.shtml if shmoo tickets are too scarce, and defcon grows too large, what's the target size for a friendly security con without the fluffSecuobs.com : 2010-11-05 03:27:59 - lonervamp - if shmoo tickets are too scarce, and defcon grows too large, what's the target size for a friendly security con without the fluffhttp://www.secuobs.com/twitter/news/139141.shtmlhttp://www.secuobs.com/twitter/news/139141.shtml and defcon is excellent, but you do end up being pretty anonymous in the seaSecuobs.com : 2010-11-05 03:27:59 - lonervamp - and defcon is excellent, but you do end up being pretty anonymous in the seahttp://www.secuobs.com/twitter/news/139140.shtmlhttp://www.secuobs.com/twitter/news/139140.shtml much stink raised on pci 311 about DLP but, thankfully, I don't see that specifically spelled out in 20Secuobs.com : 2010-10-29 04:15:30 - lonervamp - much stink raised on pci 311 about DLP but, thankfully, I don't see that specifically spelled out in 20http://www.secuobs.com/twitter/news/136412.shtmlhttp://www.secuobs.com/twitter/news/136412.shtml stillgood luck properly scanning for rogue pieces of stored card data on your ownSecuobs.com : 2010-10-29 04:15:30 - lonervamp - stillgood luck properly scanning for rogue pieces of stored card data on your ownhttp://www.secuobs.com/twitter/news/136411.shtmlhttp://www.secuobs.com/twitter/news/136411.shtml 'free' PCI scan and web seal: like having a doc look you up and down, nod his head, and give you a clean billSecuobs.com : 2010-10-29 04:15:30 - lonervamp - 'free' PCI scan and web seal: like having a doc look you up and down, nod his head, and give you a clean billhttp://www.secuobs.com/twitter/news/136410.shtmlhttp://www.secuobs.com/twitter/news/136410.shtml RT: @briankrebs: Mozilla opens up the bug report on the Firefox zero-day vulnerability http://bitly/bBG8p1Secuobs.com : 2010-10-28 10:49:30 - lonervamp - RT: @briankrebs: Mozilla opens up the bug report on the Firefox zero-day vulnerability http://bitly/bBG8p1http://www.secuobs.com/twitter/news/136141.shtmlhttp://www.secuobs.com/twitter/news/136141.shtml Anyone seen any details on this Firefox 0day Not really interested in the payload BelmooSecuobs.com : 2010-10-27 03:03:16 - lonervamp - Anyone seen any details on this Firefox 0day Not really interested in the payload Belmoohttp://www.secuobs.com/twitter/news/135341.shtmlhttp://www.secuobs.com/twitter/news/135341.shtml B/n Win patches, WoW patches, MOH, PayPal XSS last week, and Win Cred Editormy pants are messy already todaySecuobs.com : 2010-10-14 01:22:17 - lonervamp - B/n Win patches, WoW patches, MOH, PayPal XSS last week, and Win Cred Editormy pants are messy already todayhttp://www.secuobs.com/twitter/news/130983.shtmlhttp://www.secuobs.com/twitter/news/130983.shtml watching awesomeness-- RT @cwgabriel : DD game at PAX with @wilw, @pvponline, @cwgabriel @tychobrahe - http://bitly/9oucBXSecuobs.com : 2010-10-07 08:26:16 - lonervamp - watching awesomeness-- RT @cwgabriel : DD game at PAX with @wilw, @pvponline, @cwgabriel @tychobrahe - http://bitly/9oucBXhttp://www.secuobs.com/twitter/news/129147.shtmlhttp://www.secuobs.com/twitter/news/129147.shtml forgot I needed to make security concessions on my firewalls host/net to watch a security webinar :PSecuobs.com : 2010-10-06 12:31:14 - lonervamp - forgot I needed to make security concessions on my firewalls host/net to watch a security webinar :Phttp://www.secuobs.com/twitter/news/128873.shtmlhttp://www.secuobs.com/twitter/news/128873.shtml @ken5m1th I'm waiting for the book, 'how to cheat at pci dss'Secuobs.com : 2010-09-26 19:39:18 - lonervamp - @ken5m1th I'm waiting for the book, 'how to cheat at pci dss'http://www.secuobs.com/twitter/news/125890.shtmlhttp://www.secuobs.com/twitter/news/125890.shtml *blink* *blink* there are 6 digits in that captcha I see only 3I guess I'm not humanSecuobs.com : 2010-09-26 19:39:18 - lonervamp - *blink* *blink* there are 6 digits in that captcha I see only 3I guess I'm not humanhttp://www.secuobs.com/twitter/news/125889.shtmlhttp://www.secuobs.com/twitter/news/125889.shtml is urlscan still useful on iis7Secuobs.com : 2010-09-25 08:46:45 - lonervamp - is urlscan still useful on iis7http://www.secuobs.com/twitter/news/125615.shtmlhttp://www.secuobs.com/twitter/news/125615.shtml just unpacked my cowon j3 mp3/pmp playerlove it works native on linux/windows, doesn't do all the crap I don't want ipod/itunesSecuobs.com : 2010-09-17 03:50:44 - lonervamp - just unpacked my cowon j3 mp3/pmp playerlove it works native on linux/windows, doesn't do all the crap I don't want ipod/ituneshttp://www.secuobs.com/twitter/news/121164.shtmlhttp://www.secuobs.com/twitter/news/121164.shtml time to figure out how to update my ipod on ubuntu or I could fall back to my ok method of winamp on windows down with itunes/bloatSecuobs.com : 2010-09-17 03:50:44 - lonervamp - time to figure out how to update my ipod on ubuntu or I could fall back to my ok method of winamp on windows down with itunes/bloathttp://www.secuobs.com/twitter/news/121163.shtmlhttp://www.secuobs.com/twitter/news/121163.shtml my seim has been logging every ssl handshake boo, I don't care about those 10k/30min hitsSecuobs.com : 2010-09-17 03:50:44 - lonervamp - my seim has been logging every ssl handshake boo, I don't care about those 10k/30min hitshttp://www.secuobs.com/twitter/news/121162.shtmlhttp://www.secuobs.com/twitter/news/121162.shtml @imaguid Hell, I still can't bring myself to use spear phishing I have problemsSecuobs.com : 2010-09-17 03:50:44 - lonervamp - @imaguid Hell, I still can't bring myself to use spear phishing I have problemshttp://www.secuobs.com/twitter/news/121161.shtmlhttp://www.secuobs.com/twitter/news/121161.shtml catching up with/watching notacon presos todaySecuobs.com : 2010-07-04 05:11:56 - lonervamp - catching up with/watching notacon presos todayhttp://www.secuobs.com/twitter/news/110882.shtmlhttp://www.secuobs.com/twitter/news/110882.shtml @gillis57 best bet is to ask around about simulations or even cheap/loaner gear The simulations/exper with cisco gear is keySecuobs.com : 2010-07-01 17:29:48 - lonervamp - @gillis57 best bet is to ask around about simulations or even cheap/loaner gear The simulations/exper with cisco gear is keyhttp://www.secuobs.com/twitter/news/109826.shtmlhttp://www.secuobs.com/twitter/news/109826.shtml defcon needs more recorded chill-out room and b/w ball sets postedSecuobs.com : 2010-06-26 10:03:03 - lonervamp - defcon needs more recorded chill-out room and b/w ball sets postedhttp://www.secuobs.com/twitter/news/107979.shtmlhttp://www.secuobs.com/twitter/news/107979.shtml it's a good idea to do an it mgmt/sec general purpose miniproject before tackling full PCI projectSecuobs.com : 2010-06-26 01:12:42 - lonervamp - it's a good idea to do an it mgmt/sec general purpose miniproject before tackling full PCI projecthttp://www.secuobs.com/twitter/news/107824.shtmlhttp://www.secuobs.com/twitter/news/107824.shtml RE: hotel hackers @ken5m1th Just wait, the hospitality industry hates PCI Sure more to comeSecuobs.com : 2010-06-24 04:24:29 - lonervamp - RE: hotel hackers @ken5m1th Just wait, the hospitality industry hates PCI Sure more to comehttp://www.secuobs.com/twitter/news/107059.shtmlhttp://www.secuobs.com/twitter/news/107059.shtml @rybolov I take comfort in clicking your link only in the fact I run Linux day-to-daybad rybolovSecuobs.com : 2010-06-20 18:30:39 - lonervamp - @rybolov I take comfort in clicking your link only in the fact I run Linux day-to-daybad rybolovhttp://www.secuobs.com/twitter/news/105857.shtmlhttp://www.secuobs.com/twitter/news/105857.shtml @anton_chuvakin PCI will save us PCI expands consciousness Oh, and I bought into LogRhythmSecuobs.com : 2010-06-16 08:35:27 - lonervamp - @anton_chuvakin PCI will save us PCI expands consciousness Oh, and I bought into LogRhythmhttp://www.secuobs.com/twitter/news/104299.shtmlhttp://www.secuobs.com/twitter/news/104299.shtml PCI scope is hard having devs stay in scope as they develop may be harder Just bc that system exists doesn't mean u use it how u wantSecuobs.com : 2010-06-16 08:35:27 - lonervamp - PCI scope is hard having devs stay in scope as they develop may be harder Just bc that system exists doesn't mean u use it how u wanthttp://www.secuobs.com/twitter/news/104298.shtmlhttp://www.secuobs.com/twitter/news/104298.shtml how do u do net diagrams one master/monster many little ones phys vs layer 2 vs layer 3 auto or manual upkeep by special need ie pciSecuobs.com : 2010-06-11 08:10:50 - lonervamp - how do u do net diagrams one master/monster many little ones phys vs layer 2 vs layer 3 auto or manual upkeep by special need ie pcihttp://www.secuobs.com/twitter/news/102479.shtmlhttp://www.secuobs.com/twitter/news/102479.shtml @diami03 do you like PCI-only diagrams or showing everything maybe with non-PCI blanked outSecuobs.com : 2010-06-11 08:10:50 - lonervamp - @diami03 do you like PCI-only diagrams or showing everything maybe with non-PCI blanked outhttp://www.secuobs.com/twitter/news/102478.shtmlhttp://www.secuobs.com/twitter/news/102478.shtml no time in ops to get PCI done so company is hiring contractors to get PCI done by 11/1 Yes, men can cry ughSecuobs.com : 2010-06-05 04:06:30 - lonervamp - no time in ops to get PCI done so company is hiring contractors to get PCI done by 11/1 Yes, men can cry ughhttp://www.secuobs.com/twitter/news/100241.shtmlhttp://www.secuobs.com/twitter/news/100241.shtml help our site is slow me: What changed we just put in some amazonaws integration me: And you think I can speed them upSecuobs.com : 2010-05-22 08:38:49 - lonervamp - help our site is slow me: What changed we just put in some amazonaws integration me: And you think I can speed them uphttp://www.secuobs.com/twitter/news/95775.shtmlhttp://www.secuobs.com/twitter/news/95775.shtml @armorguy Not exactly opposite, but security shouldn't only watch small slivers PCI data can be a small sliverSecuobs.com : 2010-05-18 11:25:55 - lonervamp - @armorguy Not exactly opposite, but security shouldn't only watch small slivers PCI data can be a small sliverhttp://www.secuobs.com/twitter/news/94042.shtmlhttp://www.secuobs.com/twitter/news/94042.shtml @anton_chuvakin I agree with your point on scope : Just, strikes me odd when ~90 pourcents of PCI DSS effort is scope-fightingSecuobs.com : 2010-05-18 11:25:55 - lonervamp - @anton_chuvakin I agree with your point on scope : Just, strikes me odd when ~90 pourcents of PCI DSS effort is scope-fightinghttp://www.secuobs.com/twitter/news/94041.shtmlhttp://www.secuobs.com/twitter/news/94041.shtml *kicks vmware server* stop disabling my guest CPU damn youSecuobs.com : 2010-05-18 11:25:55 - lonervamp - *kicks vmware server* stop disabling my guest CPU damn youhttp://www.secuobs.com/twitter/news/94040.shtmlhttp://www.secuobs.com/twitter/news/94040.shtml What teams should run an app firewall devs netadmins sysadmins security analysts QA complianceSecuobs.com : 2010-05-15 05:17:13 - lonervamp - What teams should run an app firewall devs netadmins sysadmins security analysts QA compliancehttp://www.secuobs.com/twitter/news/93253.shtmlhttp://www.secuobs.com/twitter/news/93253.shtml anyone know any good web app security books specific to asp or net beyond wahh, that is IIS/server I imagine is as important to netSecuobs.com : 2010-05-13 09:55:46 - lonervamp - anyone know any good web app security books specific to asp or net beyond wahh, that is IIS/server I imagine is as important to nethttp://www.secuobs.com/twitter/news/92590.shtmlhttp://www.secuobs.com/twitter/news/92590.shtml RT @z3r0point: IT Security bubble has popped: http://isgd/c6xBs - Agree to a point aka risk; but hate how cloud is used in thisSecuobs.com : 2010-05-13 09:55:46 - lonervamp - RT @z3r0point: IT Security bubble has popped: http://isgd/c6xBs - Agree to a point aka risk; but hate how cloud is used in thishttp://www.secuobs.com/twitter/news/92589.shtmlhttp://www.secuobs.com/twitter/news/92589.shtml mmm citrix app firewall training all weekSecuobs.com : 2010-05-11 10:03:36 - lonervamp - mmm citrix app firewall training all weekhttp://www.secuobs.com/twitter/news/91731.shtmlhttp://www.secuobs.com/twitter/news/91731.shtml @diami03 RE earlier: I get the PCI angst people have, but if you did security *right* you'd meet PCI with little effortSecuobs.com : 2010-05-06 08:48:58 - lonervamp - @diami03 RE earlier: I get the PCI angst people have, but if you did security *right* you'd meet PCI with little efforthttp://www.secuobs.com/twitter/news/90449.shtmlhttp://www.secuobs.com/twitter/news/90449.shtml I feel PCI and then ISO 27001 coming on fastSecuobs.com : 2010-05-06 08:48:58 - lonervamp - I feel PCI and then ISO 27001 coming on fasthttp://www.secuobs.com/twitter/news/90448.shtmlhttp://www.secuobs.com/twitter/news/90448.shtml @anton_chuvakin PCI in a boxSecuobs.com : 2010-04-22 16:18:29 - lonervamp - @anton_chuvakin PCI in a boxhttp://www.secuobs.com/twitter/news/86086.shtmlhttp://www.secuobs.com/twitter/news/86086.shtml botnet operators jump on the bandwagon; to rename their ops to volcanic ash cloudsSecuobs.com : 2010-04-20 09:18:43 - lonervamp - botnet operators jump on the bandwagon; to rename their ops to volcanic ash cloudshttp://www.secuobs.com/twitter/news/85038.shtmlhttp://www.secuobs.com/twitter/news/85038.shtml google chrome, dev version, makes news by removing http:// from addy bar users next decry the www part sigh facepalmSecuobs.com : 2010-04-20 09:18:43 - lonervamp - google chrome, dev version, makes news by removing http:// from addy bar users next decry the www part sigh facepalmhttp://www.secuobs.com/twitter/news/85037.shtmlhttp://www.secuobs.com/twitter/news/85037.shtml 2 weeks ago my vendor told me I just need to turn my WAF on for PCI 2 days ago told me, I need lots of care and feeding for itSecuobs.com : 2010-04-18 07:04:38 - lonervamp - 2 weeks ago my vendor told me I just need to turn my WAF on for PCI 2 days ago told me, I need lots of care and feeding for ithttp://www.secuobs.com/twitter/news/84519.shtmlhttp://www.secuobs.com/twitter/news/84519.shtml really annoying that java has reversed their prompts Click yes to block the appSecuobs.com : 2010-04-13 03:55:44 - lonervamp - really annoying that java has reversed their prompts Click yes to block the apphttp://www.secuobs.com/twitter/news/82293.shtmlhttp://www.secuobs.com/twitter/news/82293.shtml and after updating java, I see mcafee nsm yeah right doesn't want me to updatecan we make IT more complicated pleaseSecuobs.com : 2010-04-13 03:55:44 - lonervamp - and after updating java, I see mcafee nsm yeah right doesn't want me to updatecan we make IT more complicated pleasehttp://www.secuobs.com/twitter/news/82292.shtmlhttp://www.secuobs.com/twitter/news/82292.shtml Years ago we had people doing drugs on webcams to show how hardcore they are Today, kids suicide over facebook harassmentSecuobs.com : 2010-03-31 00:18:32 - lonervamp - Years ago we had people doing drugs on webcams to show how hardcore they are Today, kids suicide over facebook harassmenthttp://www.secuobs.com/twitter/news/78248.shtmlhttp://www.secuobs.com/twitter/news/78248.shtml done listening to shmoocon 2010 podcasters audio man, gave me a headache for multiple reasonsSecuobs.com : 2010-03-12 19:59:56 - lonervamp - done listening to shmoocon 2010 podcasters audio man, gave me a headache for multiple reasonshttp://www.secuobs.com/twitter/news/73009.shtmlhttp://www.secuobs.com/twitter/news/73009.shtml neat, comodo and network solutions use the same ev ssl validation repsSecuobs.com : 2010-03-12 00:19:01 - lonervamp - neat, comodo and network solutions use the same ev ssl validation repshttp://www.secuobs.com/twitter/news/72718.shtmlhttp://www.secuobs.com/twitter/news/72718.shtml Has the excitement and desire to have EV SSL certs died off yetSecuobs.com : 2010-03-11 07:47:03 - lonervamp - Has the excitement and desire to have EV SSL certs died off yethttp://www.secuobs.com/twitter/news/72379.shtmlhttp://www.secuobs.com/twitter/news/72379.shtml you can solve APT in the cloud with cyberwar security planningSecuobs.com : 2010-03-07 10:05:32 - lonervamp - you can solve APT in the cloud with cyberwar security planninghttp://www.secuobs.com/twitter/news/71075.shtmlhttp://www.secuobs.com/twitter/news/71075.shtml a-effin-men to @diami03 oh how service providers are basically screwed by PCI Merchants, makes sense Services OuchSecuobs.com : 2010-03-06 10:33:15 - lonervamp - a-effin-men to @diami03 oh how service providers are basically screwed by PCI Merchants, makes sense Services Ouchhttp://www.secuobs.com/twitter/news/70659.shtmlhttp://www.secuobs.com/twitter/news/70659.shtml a-effin-men to @diami03 oh how service providers are basically screwed by PCI Merchants, makes sense Services Ouch #BSidesSF panelSecuobs.com : 2010-03-06 10:33:15 - lonervamp - a-effin-men to @diami03 oh how service providers are basically screwed by PCI Merchants, makes sense Services Ouch #BSidesSF panelhttp://www.secuobs.com/twitter/news/70658.shtmlhttp://www.secuobs.com/twitter/news/70658.shtml @McGrewSecurity Did you send them a pdf as well Take over a system and push your own order through :Secuobs.com : 2010-03-06 10:33:15 - lonervamp - @McGrewSecurity Did you send them a pdf as well Take over a system and push your own order through :http://www.secuobs.com/twitter/news/70657.shtmlhttp://www.secuobs.com/twitter/news/70657.shtml my headache: We need to meet PCI quickly Buy boxes/tools to cover items, turn them up, and not babysit themSecuobs.com : 2010-02-17 02:14:08 - lonervamp - my headache: We need to meet PCI quickly Buy boxes/tools to cover items, turn them up, and not babysit themhttp://www.secuobs.com/twitter/news/65839.shtmlhttp://www.secuobs.com/twitter/news/65839.shtml Has the push to rename Cloud to Mainframe 20 gotten any traction yetSecuobs.com : 2010-02-15 23:56:37 - lonervamp - Has the push to rename Cloud to Mainframe 20 gotten any traction yethttp://www.secuobs.com/twitter/news/65508.shtmlhttp://www.secuobs.com/twitter/news/65508.shtml @gdead quick grats on another successful and excellent shmoocon good job to all involvedSecuobs.com : 2010-02-10 02:17:10 - lonervamp - @gdead quick grats on another successful and excellent shmoocon good job to all involvedhttp://www.secuobs.com/twitter/news/63870.shtmlhttp://www.secuobs.com/twitter/news/63870.shtml thought i had a ghost in some servers who knew vmware will borrow resources from slack boxes when in needSecuobs.com : 2010-02-04 00:12:49 - lonervamp - thought i had a ghost in some servers who knew vmware will borrow resources from slack boxes when in needhttp://www.secuobs.com/twitter/news/61922.shtmlhttp://www.secuobs.com/twitter/news/61922.shtml Iowa state computer system hacked during firewall maint window logs showed patched but really wasn't wtfmake senseSecuobs.com : 2010-02-03 01:14:34 - lonervamp - Iowa state computer system hacked during firewall maint window logs showed patched but really wasn't wtfmake sensehttp://www.secuobs.com/twitter/news/61538.shtmlhttp://www.secuobs.com/twitter/news/61538.shtml listening to the great pci debatelots of great soundbytes and opinionsso far I think I agree with them all interestinglySecuobs.com : 2010-01-21 07:03:59 - lonervamp - listening to the great pci debatelots of great soundbytes and opinionsso far I think I agree with them all interestinglyhttp://www.secuobs.com/twitter/news/57705.shtmlhttp://www.secuobs.com/twitter/news/57705.shtml wow, second night in a row mediacom is having DNS issues; they really want me to go alternative DNSSecuobs.com : 2010-01-21 07:03:59 - lonervamp - wow, second night in a row mediacom is having DNS issues; they really want me to go alternative DNShttp://www.secuobs.com/twitter/news/57704.shtmlhttp://www.secuobs.com/twitter/news/57704.shtml why hello there mediacom, thanks for the packet loss to your dns serversSecuobs.com : 2010-01-20 06:23:37 - lonervamp - why hello there mediacom, thanks for the packet loss to your dns servershttp://www.secuobs.com/twitter/news/57358.shtmlhttp://www.secuobs.com/twitter/news/57358.shtml 50 pourcents loss to 1 dns server, 100 pourcents loss down to second, but to internet 0 pourcents lossSecuobs.com : 2010-01-20 06:23:37 - lonervamp - 50 pourcents loss to 1 dns server, 100 pourcents loss down to second, but to internet 0 pourcents losshttp://www.secuobs.com/twitter/news/57357.shtmlhttp://www.secuobs.com/twitter/news/57357.shtml hey look at that, gg mediacom 2nd DNS is back up, and loss on both settling downSecuobs.com : 2010-01-20 06:23:37 - lonervamp - hey look at that, gg mediacom 2nd DNS is back up, and loss on both settling downhttp://www.secuobs.com/twitter/news/57356.shtmlhttp://www.secuobs.com/twitter/news/57356.shtml @kriggins I set the xbox to google dns, that's all that matters and what I'll allow google to snoop onSecuobs.com : 2010-01-20 06:23:37 - lonervamp - @kriggins I set the xbox to google dns, that's all that matters and what I'll allow google to snoop onhttp://www.secuobs.com/twitter/news/57355.shtmlhttp://www.secuobs.com/twitter/news/57355.shtml MS patch next week that is critical only in Win2000 A beer says they cite firewall on by default as the reason it's just 2000Secuobs.com : 2010-01-09 01:16:03 - lonervamp - MS patch next week that is critical only in Win2000 A beer says they cite firewall on by default as the reason it's just 2000http://www.secuobs.com/twitter/news/53626.shtmlhttp://www.secuobs.com/twitter/news/53626.shtml compare to some other devices, it is amazing how frustring logging is on a cisco asaSecuobs.com : 2009-12-30 01:34:57 - lonervamp - compare to some other devices, it is amazing how frustring logging is on a cisco asahttp://www.secuobs.com/twitter/news/50913.shtmlhttp://www.secuobs.com/twitter/news/50913.shtml Travel industry and PCI are definitely fun bedmates Travel often acts as an agent for people, ie they're the cardholders and pass it onSecuobs.com : 2009-12-30 01:34:57 - lonervamp - Travel industry and PCI are definitely fun bedmates Travel often acts as an agent for people, ie they're the cardholders and pass it onhttp://www.secuobs.com/twitter/news/50912.shtmlhttp://www.secuobs.com/twitter/news/50912.shtml Is it ok to say if you don't have specific deny rules in your firewall above the default deny, you likely don't review your firewall logsSecuobs.com : 2009-12-24 20:27:29 - lonervamp - Is it ok to say if you don't have specific deny rules in your firewall above the default deny, you likely don't review your firewall logshttp://www.secuobs.com/twitter/news/49942.shtmlhttp://www.secuobs.com/twitter/news/49942.shtml nice simple ASP file upload vuln in IIS: http://soroushsecprojectcom/downloadable/iis-semicolon-reportpdfSecuobs.com : 2009-12-24 20:27:29 - lonervamp - nice simple ASP file upload vuln in IIS: http://soroushsecprojectcom/downloadable/iis-semicolon-reportpdfhttp://www.secuobs.com/twitter/news/49941.shtmlhttp://www.secuobs.com/twitter/news/49941.shtml I see mcafee IPS wants to stop 0days, but can they yet give me more than 1 packet on an alert :PSecuobs.com : 2009-12-16 21:12:48 - lonervamp - I see mcafee IPS wants to stop 0days, but can they yet give me more than 1 packet on an alert :Phttp://www.secuobs.com/twitter/news/47846.shtmlhttp://www.secuobs.com/twitter/news/47846.shtml still amazes me: as much engineering as google claims to do, they still cover the search button with the suggestions dropdownSecuobs.com : 2009-12-15 06:07:59 - lonervamp - still amazes me: as much engineering as google claims to do, they still cover the search button with the suggestions dropdownhttp://www.secuobs.com/twitter/news/47144.shtmlhttp://www.secuobs.com/twitter/news/47144.shtml it's fun and often appropriate to bash PCI DSS, but it's scads better to read/dig into than other poorly worded standardsSecuobs.com : 2009-11-13 01:15:35 - lonervamp - it's fun and often appropriate to bash PCI DSS, but it's scads better to read/dig into than other poorly worded standardshttp://www.secuobs.com/twitter/news/37400.shtmlhttp://www.secuobs.com/twitter/news/37400.shtml NTP is cloud timeSecuobs.com : 2009-11-07 21:14:07 - lonervamp - NTP is cloud timehttp://www.secuobs.com/twitter/news/36073.shtmlhttp://www.secuobs.com/twitter/news/36073.shtml a 'virtual firewall' via tcp resets doesn't sound like the best idea 'ips-gone-too-far' moreorlessSecuobs.com : 2009-11-06 01:43:06 - lonervamp - a 'virtual firewall' via tcp resets doesn't sound like the best idea 'ips-gone-too-far' moreorlesshttp://www.secuobs.com/twitter/news/35618.shtmlhttp://www.secuobs.com/twitter/news/35618.shtml virtual corporate desktops that get rebuilt nightly have no av or firewall good ideaSecuobs.com : 2009-11-05 04:15:52 - lonervamp - virtual corporate desktops that get rebuilt nightly have no av or firewall good ideahttp://www.secuobs.com/twitter/news/35286.shtmlhttp://www.secuobs.com/twitter/news/35286.shtml no plans for shmoocon this yearstill vow to someday get thereSecuobs.com : 2009-11-05 00:45:56 - lonervamp - no plans for shmoocon this yearstill vow to someday get therehttp://www.secuobs.com/twitter/news/35201.shtmlhttp://www.secuobs.com/twitter/news/35201.shtml the more people you put into a room to tackle PCI DSS, the less will be done and the more complex it will getSecuobs.com : 2009-11-04 20:16:10 - lonervamp - the more people you put into a room to tackle PCI DSS, the less will be done and the more complex it will gethttp://www.secuobs.com/twitter/news/35102.shtmlhttp://www.secuobs.com/twitter/news/35102.shtml crap question of the day: can we host php pages in iis technically, yes, but should you gahSecuobs.com : 2009-11-04 20:16:10 - lonervamp - crap question of the day: can we host php pages in iis technically, yes, but should you gahhttp://www.secuobs.com/twitter/news/35101.shtmlhttp://www.secuobs.com/twitter/news/35101.shtml and yes, I'd block it if it weren't coming from a shared IP at the client outbound proxySecuobs.com : 2009-11-01 17:34:02 - lonervamp - and yes, I'd block it if it weren't coming from a shared IP at the client outbound proxyhttp://www.secuobs.com/twitter/news/34203.shtmlhttp://www.secuobs.com/twitter/news/34203.shtml ugh cloud computing is only so big as it is because it's a wave of fail on what is cloud and what is the same old thing rebrandedSecuobs.com : 2009-10-27 09:13:43 - lonervamp - ugh cloud computing is only so big as it is because it's a wave of fail on what is cloud and what is the same old thing rebrandedhttp://www.secuobs.com/twitter/news/32766.shtmlhttp://www.secuobs.com/twitter/news/32766.shtml just got a call to confirm my signature on an EV SSL purchase I said yes They said ok They never said what SSLSecuobs.com : 2009-10-24 02:09:34 - lonervamp - just got a call to confirm my signature on an EV SSL purchase I said yes They said ok They never said what SSLhttp://www.secuobs.com/twitter/news/32149.shtmlhttp://www.secuobs.com/twitter/news/32149.shtml funny how corps are getting protective of their brand/image/domains NOW DNS/hosting just isn't built to support thatSecuobs.com : 2009-10-17 15:31:10 - lonervamp - funny how corps are getting protective of their brand/image/domains NOW DNS/hosting just isn't built to support thathttp://www.secuobs.com/twitter/news/30513.shtmlhttp://www.secuobs.com/twitter/news/30513.shtml PCI:135 -reminder of gap b/n bullet items and actual usefulness Traffic from DMZ-Internet should be DMZ only Hello awkward wordingSecuobs.com : 2009-10-13 00:47:11 - lonervamp - PCI:135 -reminder of gap b/n bullet items and actual usefulness Traffic from DMZ-Internet should be DMZ only Hello awkward wordinghttp://www.secuobs.com/twitter/news/29402.shtmlhttp://www.secuobs.com/twitter/news/29402.shtml happy moment of the day: FBI Director learns what email phishing is Hello y2khttp://tinyurlcom/yhz3ljp link to NetworkWorldSecuobs.com : 2009-10-12 20:37:30 - lonervamp - happy moment of the day: FBI Director learns what email phishing is Hello y2khttp://tinyurlcom/yhz3ljp link to NetworkWorldhttp://www.secuobs.com/twitter/news/29330.shtmlhttp://www.secuobs.com/twitter/news/29330.shtml anyone have suggestions on a python learning book for someone with some code/script exp or suggest something else like ruby as betterSecuobs.com : 2009-10-09 23:39:40 - lonervamp - anyone have suggestions on a python learning book for someone with some code/script exp or suggest something else like ruby as betterhttp://www.secuobs.com/twitter/news/28781.shtmlhttp://www.secuobs.com/twitter/news/28781.shtml Let's limit our PCI scope Which web apps can we exclude Me: None, you've built them so they all share components/access/dataSecuobs.com : 2009-10-07 13:06:54 - lonervamp - Let's limit our PCI scope Which web apps can we exclude Me: None, you've built them so they all share components/access/datahttp://www.secuobs.com/twitter/news/28022.shtmlhttp://www.secuobs.com/twitter/news/28022.shtml I really dislike interpreting PCI in the spirit of the rule, even though I know I need toSecuobs.com : 2009-10-03 15:43:50 - lonervamp - I really dislike interpreting PCI in the spirit of the rule, even though I know I need tohttp://www.secuobs.com/twitter/news/27428.shtmlhttp://www.secuobs.com/twitter/news/27428.shtml @haxorthematrix #2 endpoint security av, hips, firewall, whatever they call it now Still gotta protect the hosts Higher cost, thoSecuobs.com : 2009-10-02 02:36:35 - lonervamp - @haxorthematrix #2 endpoint security av, hips, firewall, whatever they call it now Still gotta protect the hosts Higher cost, thohttp://www.secuobs.com/twitter/news/27134.shtmlhttp://www.secuobs.com/twitter/news/27134.shtml @haxorthematrix #3 just bc I don't want to be a newb and leave it unspoken, network firewalls not a terrible cost, good risk reduceSecuobs.com : 2009-10-02 02:36:35 - lonervamp - @haxorthematrix #3 just bc I don't want to be a newb and leave it unspoken, network firewalls not a terrible cost, good risk reducehttp://www.secuobs.com/twitter/news/27133.shtmlhttp://www.secuobs.com/twitter/news/27133.shtml @davehull Cloud 20 mashup with Web 40Secuobs.com : 2009-10-02 02:36:35 - lonervamp - @davehull Cloud 20 mashup with Web 40http://www.secuobs.com/twitter/news/27132.shtmlhttp://www.secuobs.com/twitter/news/27132.shtml Do you put AV on your production SQL serversSecuobs.com : 2009-10-01 04:29:56 - lonervamp - Do you put AV on your production SQL servershttp://www.secuobs.com/twitter/news/26846.shtmlhttp://www.secuobs.com/twitter/news/26846.shtml up early for a prod sql upgrade to our DR servers; of course one small issue has to pop upSecuobs.com : 2009-09-27 23:50:22 - lonervamp - up early for a prod sql upgrade to our DR servers; of course one small issue has to pop uphttp://www.secuobs.com/twitter/news/25976.shtmlhttp://www.secuobs.com/twitter/news/25976.shtml always kinda strange calling my CA to validate EV SSL Can tell those reps don't use scripts on these calls Which may be goodSecuobs.com : 2009-09-24 00:26:11 - lonervamp - always kinda strange calling my CA to validate EV SSL Can tell those reps don't use scripts on these calls Which may be goodhttp://www.secuobs.com/twitter/news/25025.shtmlhttp://www.secuobs.com/twitter/news/25025.shtml @ax0n HiR is categorized as Criminal Activity in our Ironport web proxy Granted, I could always just allow me throughSecuobs.com : 2009-09-19 03:14:40 - lonervamp - @ax0n HiR is categorized as Criminal Activity in our Ironport web proxy Granted, I could always just allow me throughhttp://www.secuobs.com/twitter/news/24022.shtmlhttp://www.secuobs.com/twitter/news/24022.shtml still very skeptical of the growing acceptance of automated prevention products people want easy-outs for pciSecuobs.com : 2009-09-18 07:40:33 - lonervamp - still very skeptical of the growing acceptance of automated prevention products people want easy-outs for pcihttp://www.secuobs.com/twitter/news/23800.shtmlhttp://www.secuobs.com/twitter/news/23800.shtml does anyone use the cloud or are they just using pre-existing services rebranded as cloudsSecuobs.com : 2009-09-16 15:25:20 - lonervamp - does anyone use the cloud or are they just using pre-existing services rebranded as cloudshttp://www.secuobs.com/twitter/news/23351.shtmlhttp://www.secuobs.com/twitter/news/23351.shtml @imaguid maybe a botnet of web servers as I just read about : Even botnets need middle managementSecuobs.com : 2009-09-15 02:04:39 - lonervamp - @imaguid maybe a botnet of web servers as I just read about : Even botnets need middle managementhttp://www.secuobs.com/twitter/news/22978.shtmlhttp://www.secuobs.com/twitter/news/22978.shtml we're the only DLP vendor to do captures How do you do SSL outbound *mumble mumble mumble*Secuobs.com : 2009-09-11 13:25:03 - lonervamp - we're the only DLP vendor to do captures How do you do SSL outbound *mumble mumble mumble*http://www.secuobs.com/twitter/news/22424.shtmlhttp://www.secuobs.com/twitter/news/22424.shtml @DrInfoSec in cloud-land, should it be 'evaporate data'Secuobs.com : 2009-09-11 03:50:45 - lonervamp - @DrInfoSec in cloud-land, should it be 'evaporate data'http://www.secuobs.com/twitter/news/22290.shtmlhttp://www.secuobs.com/twitter/news/22290.shtml nice, ms09-048 the tcp/ip one was also shared with cisco products patch your ASAsSecuobs.com : 2009-09-10 01:54:28 - lonervamp - nice, ms09-048 the tcp/ip one was also shared with cisco products patch your ASAshttp://www.secuobs.com/twitter/news/22039.shtmlhttp://www.secuobs.com/twitter/news/22039.shtml online backup is now called cloud too #diealreadySecuobs.com : 2009-09-06 17:56:22 - lonervamp - online backup is now called cloud too #diealreadyhttp://www.secuobs.com/twitter/news/21447.shtmlhttp://www.secuobs.com/twitter/news/21447.shtml honeypots aren't like leaving a light on when you're out at night to scare off thieveshoneypots don't scare/deterSecuobs.com : 2009-09-03 05:56:48 - lonervamp - honeypots aren't like leaving a light on when you're out at night to scare off thieveshoneypots don't scare/deterhttp://www.secuobs.com/twitter/news/20774.shtmlhttp://www.secuobs.com/twitter/news/20774.shtml honeypots don't give visibility on security posture; they give visibility to threats/attackers/tripwiresSecuobs.com : 2009-09-03 05:56:48 - lonervamp - honeypots don't give visibility on security posture; they give visibility to threats/attackers/tripwireshttp://www.secuobs.com/twitter/news/20773.shtmlhttp://www.secuobs.com/twitter/news/20773.shtml I suspect that ms sql server passwd issue is for sql accounts not domain/OS; in which case the dba knows it anyway he gave it to youSecuobs.com : 2009-09-03 05:56:48 - lonervamp - I suspect that ms sql server passwd issue is for sql accounts not domain/OS; in which case the dba knows it anyway he gave it to youhttp://www.secuobs.com/twitter/news/20772.shtmlhttp://www.secuobs.com/twitter/news/20772.shtml *glances at FD* Hrm, glad I don't use IIS FTPSecuobs.com : 2009-09-01 01:31:02 - lonervamp - *glances at FD* Hrm, glad I don't use IIS FTPhttp://www.secuobs.com/twitter/news/20084.shtmlhttp://www.secuobs.com/twitter/news/20084.shtml mehwin2k iis ftpSecuobs.com : 2009-09-01 01:31:02 - lonervamp - mehwin2k iis ftphttp://www.secuobs.com/twitter/news/20083.shtmlhttp://www.secuobs.com/twitter/news/20083.shtml got an iis ftp serv on win2k parse successful connects from logs and whitelist as stopgap measureSecuobs.com : 2009-09-01 01:31:02 - lonervamp - got an iis ftp serv on win2k parse successful connects from logs and whitelist as stopgap measurehttp://www.secuobs.com/twitter/news/20082.shtmlhttp://www.secuobs.com/twitter/news/20082.shtml It's a typical day when you can curse browsers firefox this time for how they handle SSL lately #youarebreakingitwiththislunacySecuobs.com : 2009-08-28 02:18:15 - lonervamp - It's a typical day when you can curse browsers firefox this time for how they handle SSL lately #youarebreakingitwiththislunacyhttp://www.secuobs.com/twitter/news/19263.shtmlhttp://www.secuobs.com/twitter/news/19263.shtml I already have a virtual private cloud I have a windows box which checks the internet for updates from microsoftand it does stuffSecuobs.com : 2009-08-26 20:57:34 - lonervamp - I already have a virtual private cloud I have a windows box which checks the internet for updates from microsoftand it does stuffhttp://www.secuobs.com/twitter/news/18878.shtmlhttp://www.secuobs.com/twitter/news/18878.shtml @rybolov cloud weather map Is this a buzzword post about malware in the cloud :Secuobs.com : 2009-08-25 01:53:21 - lonervamp - @rybolov cloud weather map Is this a buzzword post about malware in the cloud :http://www.secuobs.com/twitter/news/18340.shtmlhttp://www.secuobs.com/twitter/news/18340.shtml botnets in the cloud will be given human names starting with A down through Z, and every other year will change genderSecuobs.com : 2009-08-25 01:53:21 - lonervamp - botnets in the cloud will be given human names starting with A down through Z, and every other year will change genderhttp://www.secuobs.com/twitter/news/18339.shtmlhttp://www.secuobs.com/twitter/news/18339.shtml @chiefmonkey roomba's may have built-in microphones and TEMPEST eavesdropping devices You know you've seen it peeking around walls at youSecuobs.com : 2009-08-14 22:56:47 - lonervamp - @chiefmonkey roomba's may have built-in microphones and TEMPEST eavesdropping devices You know you've seen it peeking around walls at youhttp://www.secuobs.com/twitter/news/16528.shtmlhttp://www.secuobs.com/twitter/news/16528.shtml @anton_chuvakin out of ~3,000 employees, I should be able to guarantee someone there KNEW heartland wasn't 'secure' even with PCISecuobs.com : 2009-08-13 02:24:23 - lonervamp - @anton_chuvakin out of ~3,000 employees, I should be able to guarantee someone there KNEW heartland wasn't 'secure' even with PCIhttp://www.secuobs.com/twitter/news/15909.shtmlhttp://www.secuobs.com/twitter/news/15909.shtml Who let loose the floodgates on the pauldotcom mailing list, damnit I can't keep upSecuobs.com : 2009-08-04 01:03:04 - lonervamp - Who let loose the floodgates on the pauldotcom mailing list, damnit I can't keep uphttp://www.secuobs.com/twitter/news/14081.shtmlhttp://www.secuobs.com/twitter/news/14081.shtml let's see, SSL nulls, apple keyboard firmware, cbord door bustingany other facepalm moments from bh/defcon still catching upSecuobs.com : 2009-08-04 01:03:04 - lonervamp - let's see, SSL nulls, apple keyboard firmware, cbord door bustingany other facepalm moments from bh/defcon still catching uphttp://www.secuobs.com/twitter/news/14080.shtmlhttp://www.secuobs.com/twitter/news/14080.shtml anyone buy a * ssl cert yet :Secuobs.com : 2009-07-31 00:39:20 - lonervamp - anyone buy a * ssl cert yet :http://www.secuobs.com/twitter/news/13082.shtmlhttp://www.secuobs.com/twitter/news/13082.shtml RT @starev Well, and there goes the internet http://bitly/MMzEF -woot, SSL is srs businessoh waitSecuobs.com : 2009-07-30 06:19:54 - lonervamp - RT @starev Well, and there goes the internet http://bitly/MMzEF -woot, SSL is srs businessoh waithttp://www.secuobs.com/twitter/news/12833.shtmlhttp://www.secuobs.com/twitter/news/12833.shtml Why does Flash need to execute in a PDFSecuobs.com : 2009-07-24 19:39:09 - lonervamp - Why does Flash need to execute in a PDFhttp://www.secuobs.com/twitter/news/11403.shtmlhttp://www.secuobs.com/twitter/news/11403.shtml Anyone have a flash POC sample of CVE-2009-1862 Adobe 0day Or better yet, a workaround beyond delete itSecuobs.com : 2009-07-24 19:39:09 - lonervamp - Anyone have a flash POC sample of CVE-2009-1862 Adobe 0day Or better yet, a workaround beyond delete ithttp://www.secuobs.com/twitter/news/11402.shtmlhttp://www.secuobs.com/twitter/news/11402.shtml don't spend enough time just leaning back and staring at the clouds on a sunny daySecuobs.com : 2009-07-23 00:27:32 - lonervamp - don't spend enough time just leaning back and staring at the clouds on a sunny dayhttp://www.secuobs.com/twitter/news/10867.shtmlhttp://www.secuobs.com/twitter/news/10867.shtml elbow deep within a sql server nowughSecuobs.com : 2009-07-17 21:45:04 - lonervamp - elbow deep within a sql server nowughhttp://www.secuobs.com/twitter/news/9711.shtmlhttp://www.secuobs.com/twitter/news/9711.shtml @ghostnomad Yeah; pointing out SSL strength is such a low-hanging piece for most auditors Makes them happy to point that outSecuobs.com : 2009-07-17 00:53:53 - lonervamp - @ghostnomad Yeah; pointing out SSL strength is such a low-hanging piece for most auditors Makes them happy to point that outhttp://www.secuobs.com/twitter/news/9469.shtmlhttp://www.secuobs.com/twitter/news/9469.shtml