800-810-1885
Home > Blog > Archives for Les Jones

Author Archives: Les Jones

No Script Kiddie Left Behind – Firesheep Makes Stealing Logins Over WiFi Easy

Firesheep by Erik SoHow easy? This easy.

Firesheep is a new Firefox plugin that makes it easy for you to hijack other people’s social network connections. Basically, Facebook authenticates clients with cookies. If someone is using a public WiFi connection, the cookies are sniffable. Firesheep uses wincap to capture and display the authentication information for accounts it sees, allowing you to hijack the connection.

Slides from the Toorcon talk.

Protect yourself by forcing the authentication to happen over TLS. Or stop logging in to Facebook from public networks.

Chris Wage from Nashville’s Centre Source posted a more technical description.

Robert Graham has some additional notes:

First of all, the plug-in “Force-TLS” does not protect you, as some have suggested. I proved this with Twitter, where I was able to sidejack the connection with both FireSheep and Hamster. I’m not sure what Force-TLS does, but it doesn’t force a connection to be TLS/SSL. I configured *.twitter.com (the domain and all subdomains), and the URL “http://twitter.com” still appeared in the address bar.

Second, FireSheep works only as well as the underlying packet-capture. On a Macintosh, the adapter can be fully promiscuous, capturing everybody’s traffic on the local access-point. On Windows, some adapters (like Broadcom) will see all the traffic, others (like Intel) will only see your own traffic (useful for watching which of your own websites can be sidejacked, but not useful for sidejacking others).

If you’re interested in experimenting with Firesheep, Phoneboy cautions that using it may be illegal, so the  usual legal precautions apply.

Age of the Script Kiddie

In the hacking world, there are elite hackers who write their own tools to exploit computer vulnerabilities. Then there are script kiddies – people who don’t really know how to hack anything, but who have enough technical skills to run various hacking programs that somebody else wrote and put into an easy-to-use package. If the Mac was the computer for the rest of us, then script kiddie software is hacking for the rest of us.

Firesheep is the latest step in the trend of kiddie-friendly hacking software. It brings the technical qualifications for being a script kiddie down to being able to install a Firefox browser plug-in. It’s No Script Kiddie Left Behind. Firesheep is already putting pressure on companies like Facebook whose Web sites are vulnerable to cookie session hijacking – Facebook Responds to Firesheep WiFi Security Controversy.

Posted in Security News, Social Media | Tagged , | 1 Comment

Google Offers Two-Factor Authentication with Google Authenticator

Matt CuttsRecapping Google’s new two-factor authentication:

I wanted to post about Google’s new two-factor authentication announcement. Two-factor authentication is something you have (e.g. a phone) and something you know (e.g. a password). It’s a Big Deal because if your account or business has two-factor authentication, those accounts are immediately less likely to be phished, hijacked, or otherwise abused. There’s a neat Google Authenticator application that runs on Android, iPhone, and Blackberry:

For the “something you have,” Google provides lots of ways to authenticate:
- SMS, e.g. for cell phones
- a voice phone call, e.g. for landline phones
- authentication apps, e.g. for smartphones that might be abroad or not have a signal. Android, iPhone, and Blackberry phones are supported.
- one-time/single-use codes that you can print out as a final fallback and put in your wallet, desk or a safety deposit box.

Google Authenticator for Gmail will appear in the next few months. Two-factor authentication is a good thing, and Google’s move will introduce millions of people to the concept.

Posted in Security News | Tagged , | Leave a comment

Free Volatile Data Collection Kit

In Who Needs COFEE? Bill Dean put together a package of free software resources for collecting volatile data. All of the tools will fit on a USB thumb drive, ready for incident response and forensic investigations.

Download the Volatile Data Collection Kit

Contents

The kit has tools to collect important information about the system and its history:

  • Registry Information
  • Event Logs
  • File Hashes
  • Network Information
  • Memory Images
  • Recently-executed Program List
  • Driver Information
  • DLL Information
  • Clipboard Contents
  • System Date and Time
  • Screenshots

Posted in Computer Forensics | Tagged | Leave a comment

Free Gartner Group Reports: Network Access Control (NAC), Enterprise LAN

Juniper is in the Challengers Quadrant for Enterprise LAN and in the Leaders Quadrant for NAC.

PREVIOUSLYFree Gartner Group Report: Content-Aware DLP June 2, 2010

Posted in Network Security Products | Tagged | Leave a comment

Anything You Say on Facebook May Be Used Against You in a Court of Law

Orlando SentinelFoes may use your Facebook info against you in divorce, custody fights:

Facebook and other social networks, such as Twitter, Flickr, Photobucket and MySpace, are becoming the latest legal tool in divorce and child-support battles.

Attorneys and private investigators collecting background on a client’s ex-spouse are trolling the websites as a quick and easy way to catch someone doing something they don’t want brought up in court — snapshots of snuggling with a mistress, semi-nude photos with children nearby or drunken party pictures from a bar on a weekend a child is visiting.

Wall Street JournalIs ‘Friending’ in Your Future? Better Pay Your Taxes First:

Tax deadbeats are finding someone actually reads their MySpace and Facebook postings: the taxman.

State revenue agents have begun nabbing scofflaws by mining information posted on social-networking Web sites, from relocation announcements to professional profiles to financial boasts.

Posted in Electronic Discovery, Social Media | Tagged , | Leave a comment

Bruce Schneier on the Internet Kill Switch

Bruce Schneier:

Last month, Sen. Joe Lieberman, I-Conn., introduced a bill that might — we’re not really sure — give the president the authority to shut down all or portions of the Internet in the event of an emergency. It’s not a new idea. Sens. Jay Rockefeller, D-W.Va., and Olympia Snowe, R-Maine, proposed the same thing last year, and some argue that the president can already do something like this. If this or a similar bill ever passes, the details will change considerably and repeatedly. So let’s talk about the idea of an Internet kill switch in general.

It’s a bad one.

Posted in Security News | 1 Comment

Visit Sword & Shield on Your Mobile Phone

We recently made SSES.net mobile phone friendly. We automatically detect when visitors are using a mobile phone and send an iPhone-style version of our pages. All of the same content is there, but the layout is simplified for easy reading on a handheld device. The mobile layout uses a single column design so you never have to scroll sideways.

P.S. We tested our pages on iPad and they work great, so iPad users will still see our multi-column design.

Posted in Company News | Leave a comment

Foursquare Privacy Flaw Discovered

WiredWhite Hat Uses Foursquare Privacy Hole to Capture 875K Check-Ins:

If you have checked in with Foursquare in San Francisco in the last three weeks, Jesper Andersen probably knows where and when — even if you’ve set your check-ins to be published to friends only.

Andersen, a coder who recently built a service called Avoidr that helps you avoid social network “friends” you don’t really like, figured out that Foursquare had a privacy leak because of how it published user check-ins on web pages for each location.

On pages like the one for San Francisco’s Ferry Building, Foursquare shows a random grid of 50 pictures of users who most-recently checked in at that location — no matter what their privacy settings. When a new check-in occurs, the site includes that person’s photo somewhere in the grid. So Andersen built a custom scraper that loaded the Foursquare web page for each location in San Francisco, looked for the differences and logged the changes.

Even though he was using an old computer running through the slow but anonymous Tor network, Andersen estimates he logged about 70 percent of all check-ins in San Francisco over the last three weeks. That amounts to 875,000 check-ins.

Hat tip to Emergent Chaos.

Posted in Social Media | Tagged | Leave a comment

iPad and iPhone Security News

GawkerApple’s Worst Security Breach: 114,000 iPad Owners Exposed:

Apple has suffered another embarrassment. A security breach has exposed iPad owners including dozens of CEOs, military officials, and top politicians. They—and every other buyer of the cellular-enabled tablet—could be vulnerable to spam marketing and malicious hacking.

The breach, which comes just weeks after an Apple employee lost an iPhone prototype in a bar, exposed the most exclusive email list on the planet, a collection of early-adopter iPad 3G subscribers that includes thousands of A-listers in finance, politics and media, from New York Times Co. CEO Janet Robinson to Diane Sawyer of ABC News to film mogul Harvey Weinstein to Mayor Michael Bloomberg. It even appears that White House Chief of Staff Rahm Emanuel’s information was compromised.

SlashdotiPad Left Vulnerable After Record iPhone Patch Job:

With Monday’s iOS 4 upgrade, Apple patched a record 65 vulnerabilities in the iPhone, more than half of them critical. However, the first-generation iPhone and iPod Touch, as well as the much newer iPad, may have been left vulnerable to some or all of the 65 bugs. iOS 4 cannot be installed on 2007′s iPhone and iPod Touch, and the upgrade is not slated to reach iPad owners until this fall. The bug count is a record for the iPhone, surpassing the previous high mark of 46 vulnerabilities patched last summer with iPhone OS 3.0. Formerly known as iPhone OS 4, iOS 4 included 35 bugs, or 54% of the total, that were tagged with the phrase ‘arbitrary code execution.’ It’s unclear how many, if any, of the vulnerabilities affect Apple’s iPad. The media tablet runs an interim version of the operating system, dubbed iPhone 3.2, that followed the February iPhone 3.1.3 security update. It’s possible that some of the bugs patched Monday were fixed by Apple before it launched the iPad in early April. But according to the Common Vulnerabilities & Exposures database, it’s likely that many of the flaws fixed on Monday still exist in 3.2.

SecuriTeama new strong passcode feature in Apple IOS 4 for iPhone:

Stong passcodes means that you can finally do away with the standard 4 digit PIN to lock your iPhone and you can now set up complex passwords instead. To enable this, go into Settings->General->Passcode Lock and then turn off Simple Passcode. For more information on how to enable this feature, please see the Apple article HT4175.

SecuriTeam againthe potential for iPhones to be used in data exploits:

After Jailbreaking my phone, the first things that I installed were nmap, metasploit, tcpdump and an application to enable my phone as a USB drive. This allowed me to gain access to a corporate network via wireless on my phone, and exploit a windows host in about 10 minutes, all from sitting in the lobby. Also with a bit of scripting/or paid for applications, I was able to plug my iPhone into a PC and copy everything that was stored in the My Documents folder for that user. Some of this was company confidential data, some of it was personal photos and banking details. Don’t get me wrong, I love my iPhone, but I believe that corporations should really take smart phones as a serious security risk, and not just write them off as phones.

And it isn’t just Apple phones having problems: Report: A fifth of Android apps expose private data

PREVIOUSLYMore Questions About Apple iPad’s Security

Posted in Security News | Tagged , , | Leave a comment

Free Gartner Group Report: Content-Aware DLP June 2, 2010

The Gartner Group Magic Quadrant for Content-Aware Data Loss Prevention has four companies in the Leader’s Quadrant: RSA Security, Symantec, Websense, and McAfee. We’re proud to offer our customers 3 out of those 4 solutions.

You can download the report here.

PREVIOUSLYFree Gartner Group Report: SIEM May 2010

Posted in Network Security Products | Tagged | 1 Comment