Browse by Tags

All Tags » Security » Integration (RSS)
Sat, Aug 25 2007 2:18

How to stop Skype using ISA server, and why

Skype is a good example of how defying open standards can result in a better product. H.323, the first attempt at VoIP standard, failed miserably. SIP stands much better chance but there are numerous issues with SIP operator interconnections and crossing...
Posted by Slav | 1 comment(s)
Filed under: , ,
Sun, Aug 5 2007 4:26

VoIP Scaremongers

DEF CON , an "underground" information security conference (appropriately held in an upscale hotel in the entertainment capital of the US) is on, together with sister Black Hat Briefings, and the fresh crop of FUD is already making it to the...
Posted by Slav | 1 comment(s)
Filed under: ,
Tue, Jun 5 2007 4:09

Integrating Java, JDBC and Kerberos

This notes are to help integrating Java applications into Kerberos environments (most likely Active Directory-based). It's not a cookbook but gives few pointers that I find useful. Background I have integrated Windows Kerberos environment with alien...
Posted by Slav | 3 comment(s)
Filed under: ,
Sat, Jun 2 2007 20:25

Smart card logon error 0xC00000BB

When you implement smart card logon on a Windows domain, sometimes you may receive the following error message: The system could not log you on. The server authenticating you reported an error (0xC00000BB). You can find further details in the event log...
Posted by Slav | 1 comment(s)
Filed under: ,
Sun, Mar 25 2007 1:15

SPF and Sender ID won't help fighting email abuse

Email abuse - spam and phishing - is a big problem. There are different methods of fighting those. SPF and Sender ID propose standard of authenticating emails using DNS records: owners of certain email domain will publish information about legitimate...
Posted by Slav | with no comments
Filed under: ,
Mon, Mar 19 2007 23:31

Update on SSL VPN standards

I recently wrote that adopting PPP over SSL as common standard would be the best apporoach to standardasing SSL VPN . I must have been living on Mars: no other than Microsoft is already putting effort right into that! They call it SSTP - the Secure Socket...
Posted by Slav | with no comments
Filed under: ,
Sat, Mar 17 2007 22:44

Architecting enterprise for federated identity

InfoCard is the way to go. The concept is very well engineered. It is commonly accepted by various influentials of the IT industry, and some other industries (think of showbiz); it has a number of open-source implementations, as well as Microsoft one...
Posted by Slav | 5 comment(s)
Filed under: , ,
Wed, Mar 7 2007 3:29

The most secure modern OS, Part II

Part I was about the OS with zero known vulnerabilities and no real trend towards worse situation. Mind you, source code for that OS's kernel is available , so it must be really hard target indeed. My next favourite provides the best platform for security...
Posted by Slav | 2 comment(s)
Filed under: ,