Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

My take on the SSL MITM Attacks – part 3 – the FTPS attacks

[Note - for previous parts in this series, see Part 1 and Part 2 .] FTP, and FTP over SSL, are my specialist subject, having written one of the first FTP servers for Windows to support FTP over SSL (and the first standalone FTP server for Windows!) Rescorla and others have concentrated on the SSL MITM...

Posted to Tales from the Crypto by Alun Jones on Wed, Nov 18 2009
Filed under: Filed under: SSL Tutorial, General Security, FTP, Why is PKI so hard?, Alun's code
Why .NET apps keep crashing on your Tablet PC

I’ve been struggling with this issue for some time. I have a small, simple .NET application I wrote in Visual C# a few months ago – I’ve tentatively titled it “ iFetch ”, because it fetches radio shows from the BBC iPlayer . It really is very little more than a simple data grid view that displays the...

Posted to Tales from the Crypto by Alun Jones on Sat, Nov 7 2009
Filed under: Filed under: Miscellany - not security, Windows Vista, Alun's code, Windows 7
How FTP Data Connections Work Part 2 (OR: Fun With Port 20)

As we mentioned in the 1st part of this series , FTP is a more complex protocol than many, using one control connection and one data connection. A recap of the first post… In typical Stream Mode operation, a new data connection is opened and closed for each data transfer, whether that’s an upload, a...

Posted to Tales from the Crypto by Alun Jones on Tue, Jul 14 2009
Filed under: Filed under: General Security, FTP, What my wife knows, Alun's code
How FTP Data Connections Work Part 1 (OR: Don’t Open Port 20 in your Firewall!)

This will be the first of a couple of articles on FTP, as I’ve been asked to post this information in an easy-to-read format in a public place where it can be referred to. I think my expertise in developing and supporting WFTPD and WFTPD Pro allow me to be reliable on this topic. Oh, that and the fact...

Posted to Tales from the Crypto by Alun Jones on Thu, Jul 9 2009
Filed under: Filed under: General Security, FTP, What my wife knows, Alun's code, TCP/IP
The CWE Top 25 Programming Mistakes

I’ve read some debate about the top 25 programming mistakes as documented by the CWE (Common Weakness Enumeration) project, in collaboration with the SANS Institute and the MITRE . That the list isn’t complete, that there are some items that aren’t in the list, but should be, or vice-versa. I think we...

Posted to Tales from the Crypto by Alun Jones on Thu, Jan 22 2009
Filed under: Filed under: General Security, Programmer Hubris, Why is PKI so hard?, Alun's code
FAQ on 2nd Auth

I’ve already received a number of questions about my secondary authentication tool, 2ndAuth . Here’s a few answers: You only show it working for Windows Server 2003 and Windows XP – does it work on other platforms? Currently, we only support using it for Windows Server 2003 and Windows XP, although it...

Posted to Tales from the Crypto by Alun Jones on Tue, Oct 14 2008
Filed under: Filed under: General Security, Alun's code
HTML Help in MFC

I recently got around to converting an old MFC project from WinHelp format to HTML Help. Mostly this was to satisfy customers who are using Windows Vista or Windows Server 2008, but who don’t want to install WinHlp32 from Microsoft. (If you do want to install WinHlp32, you can find it for Windows Vista...

Posted to Tales from the Crypto by Alun Jones on Sun, Oct 12 2008
Filed under: Filed under: Programmer Hubris, Miscellany - not security, Windows Vista, Alun's code, Windows Server 2008
Shared accounts got you down?

Here’s a description of a tool I’ve been itching to release for some time now - “2ndAuth”, short for “secondary authentication”. This is how it works: 1. The user logs on using a shared account – an account that is known to be shared by a number of different people. Often this is a service account, or...

Posted to Tales from the Crypto by Alun Jones on Tue, Sep 23 2008
Filed under: Filed under: General Security, Alun's code
FTP - Untrustworthy? I Don't Think So!

Lately, as if writers all draw from the same shrinking paddling-pool of ideas, I've noticed a batch of stories about how unsafe, unsecure and untrustworthy is FTP. SC Magazine says so. First it was an article in the print version of SC Magazine , sadly not repeated online, titled "2 Minutes...

Posted to Tales from the Crypto by Alun Jones on Tue, Jul 29 2008
Filed under: Filed under: General Security, FTP, What my wife knows, Alun's code
Vistafy Me.

I have a little time over the next couple of weeks to devote to developing WFTPD a little further. This is a good thing, as it's way past time that I brought it into Vista's world. I've been very proud that over the last several years, I have never had to re-write my code in order to make...

Posted to Tales from the Crypto by Alun Jones on Fri, Jul 11 2008
Filed under: Filed under: FTP, Windows Vista, What my wife knows, Alun's code, Windows Server 2008
Searching for Weak Debian / Ubuntu SSL Certificates

I've seen a number of people promote packages that have shipped for Debian and Ubuntu, which allow users to scan their collected keys - OpenSSH or OpenSSL or OpenVPN, to discover whether they're too weak to be of any functional use. [See my earlier story on Debian and the OpenSSL PRNG ] These...

Posted to Tales from the Crypto by Alun Jones on Thu, May 22 2008
Filed under: Filed under: General Security, Programmer Hubris, Why is PKI so hard?, Alun's code
Wireless PC Lock - part 2

Over the last several days, I've been getting more and more requests for my updated Wireless PC Lock software that I described way back last year . Possibly, it's because of stories like this one : At New York-based Big Four accounting firm Ernst & Young, the security department confiscates...

Posted to Tales from the Crypto by Alun Jones on Thu, Jun 28 2007
Filed under: Filed under: General Security, Programmer Hubris, Windows Vista, Alun's code

Page 1 of 1 (12 items)

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.

Recent Posts

Tags

Browse Blog Posts by Tags