All Tags » General Security (RSS)

Browse Site by Tags

Showing related tags and posts across the entire site.

  • Microsoft TechFest

    Last week, I went to Microsoft’s TechFest as part of their “Public Day”. This is the first time MVPs as a group have been invited to this event, and although it’s clear we missed some of the demonstrations that are not public-ready, this is something that I hope can be extended to us in future, even...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Tue, Mar 3 2009
    Filed under: General Security, Things I Learned At Microsoft, Miscellany - not security

  • If Your GPS Worked Like An Information Security Team

    … it would fend off dangerous drivers from hitting you. … it would give you regular statistics on the number of accidents on your daily route, so you could make decisions to avoid newly bad parts of town. … it would help you plan your route to avoid the sorts of areas that have bad...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Fri, Feb 6 2009
    Filed under: General Security

  • When “All” isn’t everything you need – Terminal Services Gateway certificates.

    Setting up Terminal Services Gateway on Windows Server 2008 the other day. It’s an excellent technology, and one I’ve been waiting for for some time – after all, it’s fairly logical to want to have one “bounce point” into which you connect, and have your connection request forwarded to the terminal server...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Mon, Feb 2 2009
    Filed under: General Security, Why is PKI so hard?, Windows Server 2008

  • Debugging SSTP error -2147023660

    Setting up an SSTP (Secure Socket Tunneling Protocol) connection earlier, I encountered a vaguely reminiscent problem. [SSTP allows virtual private network – VPN – connections between clients running Vista Service Pack 1 and later and servers running Windows Server 2008 and later, using HTTP over SSL...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Wed, Jan 28 2009
    Filed under: General Security, Why is PKI so hard?, TCP/IP, Windows Server 2008

  • The CWE Top 25 Programming Mistakes

    I’ve read some debate about the top 25 programming mistakes as documented by the CWE (Common Weakness Enumeration) project, in collaboration with the SANS Institute and the MITRE . That the list isn’t complete, that there are some items that aren’t in the list, but should be, or vice-versa. I think we...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Thu, Jan 22 2009
    Filed under: General Security, Programmer Hubris, Why is PKI so hard?, Alun's code

  • “Fully Stealthed” means fully spoofable

    Every so often, someone on one of the security mailing lists to which I subscribe will post a frothing rant from someone who has discovered their own personal “magic bullet” which solves all their security woes. This time, it’s a guy who was convinced that Microsoft’s recent out-of-band Internet Explorer...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Tue, Jan 20 2009
    Filed under: General Security, Programmer Hubris, Bad names

  • Microsoft Security Advisory – MD5 collisions

    I would hardly be able to call my blog “Tales from the Crypto” if I didn’t pass at least some comment on the recent Microsoft Security Advisory , and the technical pre-paper on which it is based . To an uninformed reader, the advisory (and especially the paper) doesn’t make a whole lot of sense, as with...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Thu, Jan 1 2009
    Filed under: General Security, Why is PKI so hard?

  • Redmond Report says “Vista Kernel Flawed”

    This is just some lovely reporting: Vista Kernel Ready To Pop? Vista, due largely to its lockdown of user rights, is far more secure than XP. But it's not 100 percent safe. In fact, the kernel itself has an issue that could lead to buffer overflow attacks, or so says security company Phion. Well...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Tue, Dec 9 2008
    Filed under: General Security, Windows Vista

  • Nobody stopped me, as I put the second laptop into my bag...

    I have two laptops that I carry with me most places I go. This isn't showing off, it's just something I do for a number of reasons. (One laptop is for work, the other is personal) On a recent trip, I wanted to leave one with my wife as she dropped me off at the airport (flying with more than...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Sat, Nov 8 2008
    Filed under: General Security, What my wife knows

  • FAQ on 2nd Auth

    I’ve already received a number of questions about my secondary authentication tool, 2ndAuth . Here’s a few answers: You only show it working for Windows Server 2003 and Windows XP – does it work on other platforms? Currently, we only support using it for Windows Server 2003 and Windows XP, although it...
    Posted to Tales from the Crypto (Weblog) by Alun Jones on Tue, Oct 14 2008
    Filed under: General Security, Alun's code
Page 1 of 20 (200 items) 1 2 3 4 5 Next > ... Last »