So the Security Summit 2010 has come to an end. Featuring speakers such as Moxie Marlinspike, Joe Grand and Jeremiah Grossman (again), it’s a pity to say that there wasn’t much new that was presented. With repeated concerns about input- and output-validation, as the OWASP Top 10 for 2010 highlight and were used as a repeated example, and a call for a holistic approach to a company’s security posture, the idea of making the thought (and practice) of security part of the organisation’s culture came through over and over again. (more…)
Archive for the ‘synch.cc’ Category
synch.cc has just launched systemsaudit.co.za
2010
04.03
04.03
Now you get to kick back - a dog's life!
It’s up – the full network and business system audit and asset tracking service by synch.cc, tracking hardware, software and assets using a background scheduler – more at systemsaudit.co.za!
A systems auditing service with clean reporting and charts like this has never been easier!
Had to just add a plug for it here, too 
And the picture of the puppy was just too cool to resist!
Step-by-step virus disassembly
2010
03.30
03.30
Over at SkullSecurity they’ve done a great job of a step-by-step disassembly of the Energizer Trojan using IDA. Using a sterile/insight environment, they go through the code to give you an insight into the workings of “obfuscation” (or lack thereof), backdoor management (on port 7777) and more.
Good beginner’s intro with pretty pictures
Mono in Debian (for C# projects)
2009
06.27
06.27
Richard Stallman has published an opinion on the matter of Debian including the Mono project in order to support some C# projects.
He warns that it “leads the community in a risky direction” citing Microsoft’s possible enforcement of patents as seen at http://swpat.org and http://progfree.org.
His point is the dependence on the C# for applications “means that writing them and using them is taking a gratuitous risk.” “We should discourage people from writing programs in C#,” he continues. It’s not the language, but the dependence that causes the problem.
Make it an option, don’t include it by default, simply for Tomboy (“Tomboy is a desktop note-taking application which is simple and easy to use. It lets you organise your notes intelligently by allowing you to easily link ideas together with Wiki style interconnects.”) etc.
I dare say he has a point.
The League of Programming Freedom’s website is at http://progfree.org and synch.cc, the Cape Town based open source consultancy on secure network communications is at http://synch.cc – but you knew that already
