Don’t Forget the Little Things!
On January 31st, Deusen disclosed what was described as a Same Origin Policy Bypass flaw called “Universal XSS” in IE 9 through 11 on Full Disclosure.
Thumb Drives.. Can you tell the difference?
During a physical penetration test, it is not uncommon for the tester to drop usb thumb drives out in the parking lot or someplace within the building.
Oversharing: Who Has Access?
What types of information do you copy to a shared folder? Who has access to the share? This can be a difficult problem within many organizations…
Decoding Security Jargon
Just about any security textbook will begin by describing security using terms such as threats, risks, vulnerabilities, exposures, agents, and so on.
Password Sharing Across Accounts
Over the past few years we have seen a large number of databases get compromised leading to the disclosure of user passwords.
Security Tubthumping
I have a friend who is an alcoholic. A few weeks ago after 5 years of sobriety, she stumbled and had a relapse.
Your Passwords Were Stolen: What’s Your Plan?
If you have been glancing at many news stories this year, you have certainly seen the large number of data breaches that have occurred.
GSA Database May Have Leaked Information: Kevin Johnson was Interviewed
It was announced that there was a security flaw found in one of the GSA systems that could have allowed for vendors to see other vendor information.
Podcast Show Notes: Why are Passwords so Difficult
Kevin and James just finished up recording episode 2 of the Professionally Evil Perspective podcast.
The Watering Hole: Is it Safe to Drink?
How many times have you been told you have a vulnerability that you just don’t understand its relevancy?