tcpipprimer.com

trustsecurityconsulting.com

Trust Security Consulting: Apple Lock-screen woes continue

http://www.trustsecurityconsulting.com/2013/09/apple-lock-screen-woes-continue.html

Tuesday, September 24, 2013. Apple Lock-screen woes continue. After the lock screen problems with IOS6 where you could bypass the lock screen using the emergency call function, now IOS7 has a lock screen problem all it's own. Videos online show the procedure but don't readily give an idea of how to reproduce it because timing is everything. Here's the HOW:. 1) Push the home button to wake up the phone if it's turned off. 3) Push the home button to go back to the locked home screen. If you have an iPhone ...

trustsecurityconsulting.com

Trust Security Consulting: Audits

http://www.trustsecurityconsulting.com/p/audits.html

We can provide audit services in-house or with one of our certified partners. Through risk assessments, security reviews, pen tests, remediation help and policy creation, we can help get your business on track for compliance. Subscribe to: Posts (Atom). Auditing tools - Packetstorm. Auditing tools - Security Focus. Big list of Linux security links. Bug Traq - the classic. Code auditing tools and resources. DDos testing and defense. DOS defense more specific. Hardening Debian, Mandrake, Red Hat.

trustsecurityconsulting.com

Trust Security Consulting: September 2012

http://www.trustsecurityconsulting.com/2012_09_01_archive.html

Friday, September 07, 2012. Duplicate Section Defined in Web.config. I looked into a web.config parsing error which troubled me on one web server and not another. After finding that there was no duplicate and that all the tags were closed properly I checked it with another IIS instance and it worked fine. This told me that it was probably related to the framework version on the app pool. I right-clicked the site name in IIS, clicked Manage Application and picked Advanced Settings. Bug Traq - the classic.

trustsecurityconsulting.com

Trust Security Consulting: Whitepapers and APIs

http://www.trustsecurityconsulting.com/p/whitepapers-and-apis.html

In Certificates We Trust. See what critical and long-standing flaw poses a threat for transaction based sytems relying on digital certificates. Of course we also tell you how to mitigate this potential disaster. Value-added Data De-Identification for Research. How can your organization provide health researchers with life saving data while keeping the data solidly anonymous? Instant Gratification in the Age of SOA. SOA is all the rage but why does it still poll for asynchronous data under the covers?

trustsecurityconsulting.com

Trust Security Consulting: The New Face of Pen Testing

http://www.trustsecurityconsulting.com/2013/02/the-new-face-of-pen-testing.html

Wednesday, February 06, 2013. The New Face of Pen Testing. A recent pen test changed my viewpoint on the industry standard practices. The old ways are no longer working. Not only are industry standard pen tests not working they are providing a false sense of security. A day and a half later with 138 vulnerabilities and counting and a full network diagram including IPs, servers, web sites, email addresses, technologies, phone numbers, all laid out in perfect searchable and browseable order. A couple h...

trustsecurityconsulting.com

Trust Security Consulting: June 2014

http://www.trustsecurityconsulting.com/2014_06_01_archive.html

Saturday, June 07, 2014. New significant issues - IE and OpenSSL. One Extremely Important Patch Tuesday! Open SSL was cracked wide open again. If you believe that only poorly made products are vulnerable to security issues or if you're one of those who believe that only open software is exploit free then you might want to rethink your position. Open SSL has been made much more "open" by a new CSS Injection bug. (here). A) the Snowden revelations. B) the Eye of Mordor principle. Friday, June 06, 2014.

trustsecurityconsulting.com

Trust Security Consulting: January 2013

http://www.trustsecurityconsulting.com/2013_01_01_archive.html

Sunday, January 13, 2013. Rapid 7 published an exploit for Java versions prior to 7.7 which gives an attacker full control of the affected computer. All that needs to happen is to lure a user to a web site that has a particular set of code running on it. Now that this exploit is in the wild (available in public to hackers and wannabe's alike) you need to take action. So now what can be done? Uninstall Java from Mac. So upgrade and take your chances is always an option. I hope this helps! Big list of Linu...

trustsecurityconsulting.com

Trust Security Consulting: Software

http://www.trustsecurityconsulting.com/p/software.html

Our award winning developers are trained in agile and waterfall methods and are experienced with CMMI and ISO compliance. We can develop systems from requirements to completion or can provide help in finishing a troubled project. We believe in re-using systems and projects where possible rather than discard work completely. Services in ASP, C, C#, VB, Java, Delphi and PHP. Subscribe to: Posts (Atom). Auditing tools - Packetstorm. Auditing tools - Security Focus. Big list of Linux security links.

trustsecurityconsulting.com

Trust Security Consulting: February 2013

http://www.trustsecurityconsulting.com/2013_02_01_archive.html

Wednesday, February 06, 2013. The New Face of Pen Testing. A recent pen test changed my viewpoint on the industry standard practices. The old ways are no longer working. Not only are industry standard pen tests not working they are providing a false sense of security. A day and a half later with 138 vulnerabilities and counting and a full network diagram including IPs, servers, web sites, email addresses, technologies, phone numbers, all laid out in perfect searchable and browseable order. A couple h...