My Apologies

I haven’t posted in  and I have gotten some flack. Between several major changes this has been put on the back burner.  I am now back in the saddle though.  I have changed roles at WWT where I have been for over a year.  They have moved me into the Consulting Systems Engineering role.  This has been a huge change, exciting and intense.

On the security front, I went down to LA last weekend and took my CISSP.  It is pretty much what everyone everywhere has said.  Not very deep but incredibly wide.  Also many of the questions are poorly worded.  I believe I passed but won’t find out for another week or two.  I would be happy to answer questions in a broad sense if anyone has any on the CISSP.

Additionally outside of the security realm I will be tackling both the NetApp ASAP and VMWare exams here this month.

Finally in working on my GIAC GOLD paper for the Incident Handler branch I am trying to get a copy of the COFEE program from Microsoft.  If I can get it I will definitely complete a write up on it.

Thwart Windows Authentication through Firewire

Adam Boileau (Metlstorm) has released a script (winlockpwn) written in Python, which allows a device running Linux to be connected to the FireWire port of a target workstation running Windows XP to get full read/write memory access and bypass Windows authentication. He demonstrated the tool in 2006, but didn’t release it until a few days ago. And this type of attack is also apparently effective against other OSes such Linux and OS X. And if the device doesn’t have a FireWire port, you’re not necessarily out of luck. If it has a slot for a PCMCIA card, a PCMCIA FireWire card will do the trick. And if you don’t have Linux on your laptop, just run your favorite Linux Live CD distro and grab the winlockpwn code and go.

Dogbert the Security Consultant Strikes Again: Online Storage of Passwords

Ok maybe I need to rethink associating all Online Password Storage groups in the same realm as Dogbert. Think think think think…hmmmm….NOPE!

A nice aspect of the blog that I put out for me is the backend shows me where a referral comes from and recently one came from http://www.notsorelevant.com/2008-01-30/is-giving-away-passwords-cool-again/ while the information with in the article was interesting especially the new German application Allyve I thought the author missed the mark comparing this product to OpenID or OAuth. Allyve works more along the lines of any of the top 3 hits that Google brings back when searching for Online Password Storage. Agatra – Comodo – Handypassword

Concerns: More on Password Cracking

I was talking with a coworker the other day about password cracking and I wanted to write up another post regarding that conversation and Michael Coates comments on a previous article that I wrote.

http://secauditor.wordpress.com/2008/02/21/what-is-more-important-password-expiration-complexity-or-something-else/

There are two main areas that must be looked at anytime an organization enters into password cracking. First is the transportation and storage of the password database and the non-repudiation aspect of users once password cracking is entered into. For this article I want to look at the later. Let’s look at a scenario to start with.

Crack in the Armor - Windows Mobile Phone Security

Today a notice hit http://www.sophos.com about a Trojan infecting phones utilizing Microsoft Windows Mobile. This is making its way across China when the phone accesses one of several websites over there. It is only a matter of time before this affects Europe and North America.

The trojan, called winCE//infojack, it is wrapped together with several legitimate mini-games, including Mahjongg and a version of Tetris. The trojan is written in such a way that an unsuspecting user will install the package” on the mobile device.