September 3, 2010

Firefox Patch Tuesday

praying_150

by Carl Anctil Background: A few months ago, Microsoft released (and silently installed through Windows Update) a .NET Framework Assistant add-on for the Firefox web browser. Microsoft installed this add-on to Firefox without warning the user that the add-on would be installed as part of the .NET Framework 3.5 Service Pack 1. Security professionals, bloggers, [...]

Social media versus your reputation

gossip girl

by Carl Anctil I was reading an article last week about social media and thought it would be a good idea to share it. The article is Social networking 101: Facebook and your digital reputation from The National Post. In my opinion, in terms of reputation, there seems to be very little concern in the [...]

Magic Formula for Passwords

Log in screen

by Carl Anctil Today, you are all very lucky. I am going to share my secret recipe when it comes to choosing passwords. I have been using this method for several years. It has served me well over the years and at this time, I feel it has passed the test of time (well, over [...]

Least Privilege

power

by Carl Anctil The principle of least privilege is quite simple. The concept is to provide users with just enough privilege to perform their duties. But how do you apply this guide in a home environment? For the home user, the least privilege principle is applied by using a normal, basic user account (not an [...]

Network Validation

validatecheck

by Carl Anctil Network validation is an important step or tool for designing or hardening a network. Something else that’s just as important to have is a valid, accurate and up-to-date network diagram. The act of correlating a network diagram against the actual network wiring is network validation. Why bother with validating a network? The [...]

How to Avoid Being a Target

therighttarget

by Carl Anctil How to avoid being a target? The quick answer is to move all essential, business critical or operational workstations and servers to a less targeted platform. If you’re less of a target, then the likelihood of a compromise significantly decreases. That’s all, folks; simple enough, huh? Okay, it’s not quite that easy, [...]

Scrubbing The Web

ethernet-cable

by Carl Anctil I have been using Privoxy for many, many years. It was actually called the Internet Junkbuster when I was first introduced to it. In early 2000 when I started getting into security and privacy, it was one of the first tools I began using to disguise my user-agent string. Modifying a user-agent [...]

Collaboration versus Privacy

glowingphone_150

by Carl Anctil The perceptions and concerns we have about disclosing to much personal information have a direct link between the sharing and the openness of collaboration. When peering is added to the equation, we end up with what we have today, which is often referred to as Web 2.0. The debut of dynamic content [...]

Openness over Privacy

lock_150

by Carl Anctil I’m presently reading the book Wikinomics by Don Tapscott. Early in Chapter One, the author explains how Wikinomics works and how it’s based on four powerful new ideas. These four ideas are: openness, peering, sharing, and acting globally. After reading about these four principles, I realized that this thing called Wikinomics actually [...]