<?xml version="1.0" encoding="utf-8"?><!-- generator="WordPress/2.7" -->
<rss version="0.92">
<channel>
	<title>Webmilhouse</title>
	<link>http://www.webmilhouse.com/7b</link>
	<description>my blog on security, Linux, BSD, and other computer stuff</description>
	<lastBuildDate>Mon, 07 Sep 2009 17:11:39 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>iPhone applications keep quitting - Fix</title>
		<description><![CDATA[So something weird happened with my iPhone over vacation and any application that I had downloaded (not included with the default iPhone) and all my DRM&#8217;d music and movies from iTunes would open and then quit quickly. At one point on vacation, my iPhone rebooted by itself and said that it was activated and couldn&#8217;t [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=150</link>
			</item>
	<item>
		<title>ShmooCon 2009</title>
		<description><![CDATA[ShmooCon 2009 is starting tomorrow in Washington DC and it promises to be a good security conference. If you have never been, I highly encourage you to check out the videos from past conferences on youtube. 
]]></description>
		<link>http://www.webmilhouse.com/7b/?p=147</link>
			</item>
	<item>
		<title>How to Suck at Information Security</title>
		<description><![CDATA[I thought this was pretty funny because of how true most of it is: How to Suck at Information Security
What struck me was the following line: &#8220;Ban the use of external USB drives while not restricting outbound access to the Internet.&#8221;
This sums up some of the most egregious mistakes in the information security &#8212; taking [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=146</link>
			</item>
	<item>
		<title>Happy New Year</title>
		<description><![CDATA[Happy New Year, 2009. Every one makes some kind of resolution for the new year. I think it is the hope that we can somehow change the things that we least like about ourselves or our lives that causes us to make promises. Every year I resolve to lose weight, but somehow by the end [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=144</link>
			</item>
	<item>
		<title>7 Things You Can&#8217;t Say in Infosec</title>
		<description><![CDATA[So, in honor of George Carlin, here is a list of 7 things that you can&#8217;t say if you are a security consultant:
7. Anti-virus has not and never will work. 
6. Your vendor&#8217;s security product (X) will NEVER make you more secure.
5. Compromise is inevitable and there is nothing you can do to stop it. [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=143</link>
			</item>
	<item>
		<title>Firefox Web site Security Testing Plugins</title>
		<description><![CDATA[I stumbled upon these Firefox plugins the other day that allow you to test websites against a set of predetermined XSS or SQL injection parameters on a given website. The tools include XSS-Me, SQL Inject-Me, and Access-Me, all designed to test the security of the website in an easy fashion:
http://www.securitycompass.com/exploitme.shtml 
I thought these were pretty cool. [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=142</link>
			</item>
	<item>
		<title>Break this code</title>
		<description><![CDATA[This is freaking interesting. In case you haven&#8217;t heard about the encrypted letter that Fermilab was sent and asked for help breaking, here is some more information:
http://www.symmetrymagazine.org/breaking/2008/05/15/code-crackers-wanted/ 
http://www.jgc.org/blog/2008/05/breaking-fermilab-code.html

http://www.gmilburn.ca/2008/05/17/fermilabs-strange-letter-progress/ 
]]></description>
		<link>http://www.webmilhouse.com/7b/?p=141</link>
			</item>
	<item>
		<title>Secure your Secure Shell (SSH)</title>
		<description><![CDATA[Also, a report of spiking scans for SSH brute force logins using common username and passwords:
http://www.securityfocus.com/news/11518
You can always run SSH over a different port than 22 if the firewall is configured for that. How about 2222? Make sure root is not allowed, and the username/password isn&#8217;t easy to brute force (30 character passwords with upper/lowercase [...]]]></description>
		<link>http://www.webmilhouse.com/7b/?p=140</link>
			</item>
	<item>
		<title>AV Doesn&#8217;t Work?</title>
		<description><![CDATA[That shouldn&#8217;t come as a shock to anyone, but for those who still doubt and put their faith in AV for protection, read this article:
http://www.darkreading.com/document.asp?doc_id=153760&#038;WT.svl=news1_2
]]></description>
		<link>http://www.webmilhouse.com/7b/?p=139</link>
			</item>
	<item>
		<title>Botnet Map</title>
		<description><![CDATA[Thought this was a pretty nice graphic from CSO Magazine (of all places) showing different botnets and how they map to the IPs and domains that serve as command and control:
http://www.csoonline.com/article/348317/What_a_Botnet_Looks_Like 
]]></description>
		<link>http://www.webmilhouse.com/7b/?p=138</link>
			</item>
</channel>
</rss>
