Tag Archives: security

Ignoring out-of-band network policy systems with iptables

Posted on 7 August 2019 by stuff writer

I’ve been working on parental controls using an out-of-band policy engine. It is easy to subvert, if you care to, since the controls it implements are very light, and it is not actually part of the conversation between you and … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Ignoring out-of-band network policy systems with iptables

Man in the mailbox fraud (MITMB) HOWTO

Posted on 18 May 2018 by stuff writer

This has come up twice, so it’s time to tell the world how it’s done.  Basically, if someone has control of your mailbox (e-mail address and password), then you’re going to lose your money: someone (not you, and not your … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Man in the mailbox fraud (MITMB) HOWTO

Invasion of the evil androids

Posted on 17 November 2016 by stuff writer

Google says you are too stupid to rule your own life.  They say this by their Android phone operating system, in which they do not give you, the owner and operator of the device, root permissions.  This means: You cannot … Continue reading →

Posted in Stuff | Tagged , , , , , , , , | Comments Off on Invasion of the evil androids

Search-engine assisted fraud HOWTO

Posted on 26 April 2016 by stuff writer

As many of the readers of this fine site are career criminals, it seems good to explain a new and popular procurement fraud scam.  Here’s a piccie to muddy the waters, followed by the blow-by-blow account, in which the numbers … Continue reading →

Posted in Stuff | Tagged , , , , , , , | Comments Off on Search-engine assisted fraud HOWTO

Cloudflare doesn’t help your DDOS

Posted on 3 April 2014 by stuff writer

Ever since CloudFlare helped out Spamhaus with their big deal big DNS reflection DDOS attack, conventional wisdom has said that if you are faced with a DDOS attack, you should give CloudFlare a shot. By all means, give it a … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Cloudflare doesn’t help your DDOS

My new password

Posted on 4 March 2014 by stuff writer

I’m changing all my passwords to asterisks: ******** Now, when I enter my password, I can see what I’m typing.

Posted in Stuff | Tagged , , | Comments Off on My new password

Not your regular bot driven UDP flood

Posted on 26 April 2013 by stuff writer

After weeks of battling Joomla/JCE sites that insist on running evil code and spewing denial of service traffic, we had a machine today sending UDP floods. This, it turns out, is not a hacked machine sending spews of botnet traffic … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Not your regular bot driven UDP flood

The core is secure

Posted on 24 August 2011 by stuff writer

In the documentation for that wonderful content management software, joomla, you can read the following statement: Although the Joomla! core is secure when configured correctly, third party extensions come in all flavors of age and quality. Unless you absolutely trust … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on The core is secure

Unicast flooding meets promiscuous routing

Posted on 29 June 2011 by stuff writer

To make a disaster, you need a perfect storm of mistakes. A single mistake is insufficient, but a stack of sub-obtimal configuration choices stacked together will give you rampant failure and poor network quality. For today’s mistake we have massive … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Unicast flooding meets promiscuous routing

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!

Posted on 8 June 2011 by stuff writer

If you use ssh for a while, you are sure to get this message sooner or later: WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!. This means more or less what it says – the machine formerly known as somemachine suddenly smells … Continue reading →

Posted in Stuff | Tagged , , | Comments Off on WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!