http://www.frameloss.org Computer security thoughts, tips, and musings Fri, 26 Feb 2010 20:32:28 +0000 http://backend.userland.com/rss092 en It is always a danger with open-source security tools that are maintained by companies that they will move to a commercial license.  Some have gone the crippled version route (ie OSSIM,) some the exclusive non-free route (Nessus, which honestly wasn't really commercial quality software anyway--true it was useful, but not ... http://www.frameloss.org/2010/02/26/helix-forensics-is-no-longer-free/ Instructions are at nerdvittles . . . Ya, it's been spammed all over the web by now--I know.  But, I actually set it up and have tested it.  The only downsides I have noticed is that call-setup takes more than 15 seconds, I can't set my outbound caller-id to my "real" ... http://www.frameloss.org/2009/12/30/google-voice-sipgate-piaf-orgasmatron-free-home-phone-service/ I will be at defcon again this year.  Be sure to stop by the hackers-for-charity booth in the vendors area!  I will be there tomorrow (Thursday) at 2pm signing autographs and giving out my social security number (no not really, just manning the booth actually.)  I should be pretty easy ... http://www.frameloss.org/2009/07/29/defcon-is-a-go/ Nmap 5.0 is out.  Fortunately, after a very preliminary and unscientific test, it appears that the XML output is still compatible with MyNmap. http://www.frameloss.org/2009/07/21/nmap-50-released/ I am back in school, and that means research papers, hooray.  I am being smarter about it all these days though--templates and citation management software are definitely the way to go! It would sure be nice if Apple would include templates for the major paper formats with their word processor.  And ... http://www.frameloss.org/2009/07/16/apple-still-doesnt-have-an-apa-template-for-pages/ A very common military tactic is to damage the communication ability of an enemy before the bullets and bombs start to fly.  Here in the US we couldn't imagine the government blocking all SSL encrypted traffic on the Internet, or disabling the ability to send SMS on our phones.  In ... http://www.frameloss.org/2009/06/19/iran/ Originally MyNmap wasn't intended to act as a tool to automate scans.  The real goal was to get the grid display with highlighting of what is new.  Looking at tons of Nmap scans makes my head spin, and digesting that information to determine what is new is best left to ... http://www.frameloss.org/2009/05/28/making-mynmap-more-useful/ Microsoft recently release the release candidate for Windows 7. Unfortunately, they forgot to add standard CDROM drivers (and wonder why people complain about their software.) After booting, it states that it can't find the CDROM driver (on Vista it uses cdrom.sys, so it isn't like I am using ... http://www.frameloss.org/2009/05/25/windows-7-64bit-fail/ I have received a few requests for an ESX version of the MyNmap virtual appliance.  It turns out that getting it running on ESX is actually pretty simple.  Instead of being redundant, there are great instructions over at Tony Vegue's website.  Thanks Tony! http://www.frameloss.org/2009/05/20/mynmap-on-esx/ I said I would post this once it was published, and a few days ago I picked up the latest copy.  This article is a bit longer than what 2600 put out, because they were space limited (yes, I tend to be verbose.) So here it is. Music is important, especially ... http://www.frameloss.org/2009/05/09/2600-article-dont-steal-music-or-how-to-catch-an-ipod-thief-using-forensics/