Net Security
 In the Spotlight | More Topics
  from Tony Bradley, your Editor and Guide

On October 15 Microsoft released their monthly vulnerability patch alert for the month of October. It contained details and patches for 5 vulnerabilities: 4 critical and 1 important. See Microsoft Releases 5 New Vulnerabilities.

There are links below to some interesting industry information and news from the past week as well as a book review of an excellent book- both educational and entertaining: Stealing The Network.

I am continuing to work on my software product review of the Windows backup and recovery program Backup For One and a new series of lessons to carry on where Computer Security 101 left off. Look for some more great things to be posted this week.


 
 

In the Spotlight
Book Review: Stealing The Network
Stealing The Network is a series of engaging and educational short stories. The authors have taken real-life scenarios of network hacking and turned them into fictitious stories that help to illustrate and demonstrate how blackhat hackers think and the steps and tools they use to get into your network. This is an excellent resource to use in conjunction with books such as Hacking Exposed or Counter Hack to breathe some life into the lessons and show you how to apply the knowledge you gain from those books. This is a great book and should be read by just about anyone with a computer.
 
      
More Topics
DHS Spearheading Cybersituation-Awareness Program
Hacker Tools
Free Computer Security 101 Class
Polls and Quizzes
Software Profile: Nessus Vulnerability Scanner
Free Port Scanner Software
Free Vulnerability Scanning Software
Encryption Law Stands- But Government Promises Not To Use It
It seems a little silly to me really. If I were to walk into a movie theater with a loaded handgun I don't think the "how about if I keep the gun, but promise not to use it" defense would work. But, it seems that this is the government's stance regarding various laws on the books relating to encryption. University of Chicago math professor, Daniel Bernstein, had sued the United States to overturn Cold War-era laws banning the "export" of encryption techniques or technology. Because of the global nature of the Internet, these laws also effectively kept encryption and cryptography researchers from being able to post or publish any of their research on the World Wide Web. Read this News.com article to learn more.
 
The Solution May Be Worse Than The Problem
Tim Mullen has written a brilliant response to the Computer and Communications Industry Association (CCIA) paper which asserts that the government's overwhelming reliance on Microsoft products creates a national security issue. The CCIA paper recommends that to secure the national infrastructure and protect sensitive and confidential government data the government should be required to diversify and use other platforms such as Linux. Tim Mullen states that "the same guy who insists on opening attachments in Outlook will open attachments in whatever newly-developed Just-Like-Outlook software they'll be using on Linux. The same guy who runs as Administrator will run as "root." The same guy who doesn't use IPSec won't use IPChains. And the same guy who doesn't patch now, won't patch then." And therein lies the real issue. I recommend that you read Tim Mullen's full article at SecurityFocus.com.
 
Resource Links - Get Listed HereWhat Is This?
 
Featured Offer
 

 
Visit Related About GuideSites:
Antivirus Software Electronic Commerce Focus on PC Support
Focus on Windows Wireless / Networking  
 
    Search About  

More Newsletters: To sign up for more free newsletters on What You Need to Know About your favorite topics, visit: http://talk.about.com

You are receiving this newsletter because you subscribed to the About Net Security newsletter as #EmailAddr#. If you no longer wish to receive emails from us, please visit:
http://about.com/nl/usgs.htm?nl=netsecurity&e=#EmailAddr#

About respects your privacy. Our Privacy PolicyOur Contact Information.
© 2003 About, Inc.