« December 2007 | Main | February 2008 »

January 2008 Archives

January 2, 2008

Oooh.

This Dell monitor is pure sex.

January 14, 2008

BaySec: Thursday, 1/17 @ Pete's Tavern

BaySec is going to be at Pete's Tavern this month, just down the block from O'Neill's. NYSEC (NYC) and BeanSec (Boston) are on Tuesday and Wednesday, respectively. I dare you to hit all three.

January 19, 2008

Yes, Virginia, there is a Santa Claus SCADA Attack

Long-predicted attacks against infrastructure control systems (SCADA) have arrived, according to the CIA. Bejtlich doubts its authenticity, but I have every reasons to believe it to be true for the following reasons:
  • Bellovin correctly pointed out that maintaining the air gap between critical networks and non-critical networks is nearly impossible, making the likelihood that at least a few critical networks are somehow connected to the public internet extremely high. Information behaves like heat, in that it leaks out unless tightly constrained, like hot coffee in a dewar flask.
  • My old business partner Ralph Logan was quoted in the article. Given the work we did together and the work that he does now, I consider him to be an absolute authority on the topic.
  • The early monetization techniques employed by attackers whenever they discover a tool are usually extortion-related schemes. The first botnet business model was based upon DDoS extortion, where victims were taken off of the network if they didn't pay the attacker protection money. Here we have attackers demanding protection money in exchange for not taking down the power grid. Botnets evolved into spam and phishing engines. I am willing to bet that the next step in the racket will involve selling the attacks to nation states now that infrastructure attacks have been reduced to practice.

January 31, 2008

Computer security solved, lets all write Sex Advice.

Eric Rescorla guest-wrote this week's Savage Love column.

About January 2008

This page contains all entries posted to NP-Incomplete in January 2008. They are listed from oldest to newest.

December 2007 is the previous archive.

February 2008 is the next archive.

Many more can be found on the main index page or by looking through the archives.

Powered by
Movable Type 3.33