Resources: Security Links

By Robert Nagle, Last Update: October 15, 2002

How-to's	News/Alerts
Scott Granneman wrote a 4 part series on basic security. This includes hardware , software (spyware) , email and browser/passwords Brian Hatch, has written about securing an email server with postfix Part 1 and Part 2 , Part 3 , and Part 4 .	net-security.org newsletter Recent Slashdot Security Topics Red Hat 7.2 Security Advisories SAN Top 20 Vulnerabilities 2002
Web Services/Passport	Theory/Cryptography
XML Security Resources Risks of the Passport Single Sign on Protocol and the Slashdot discussion highlight the inherent security risks of single sign in clients. Marc Slemko talks about the major security hole he detected on microsoft's passport system (which controls hotmail/passport). SAML Security Web Services (PDF ) XML Security: A Who's Who gives a rundown of all the XML standards for web services	Zero Knowledge Protocols Homeland Insecurity by Charles Mann describes Bruce Schneier's advocacy of small, ductile security. (Slashdot discussion ) Why CDMA is better by Dan Beste
Forums/Newsletters/Newsgroups	Wireless
Lavasoft Ad-Aware Forum Microsoft.public.security Comp.os.linux.security Alt.2600.hackerz	802.11 Wireless Security
Linux	Windows
Jay Beale's Article on Linux Security Beginner's Guide to Armoring Linux Securing a Php webserver by Dharmendra.T Secure PHP Programming by Oertli GRSecurity: Home Page , ACL How-to,Support Forum, Article on GRSecurity Brian Hatch writes a great weekly column on Linux Security CHROOT Jails made easy by John Gowin SNORT and LIDS by Michael Bauer	Greymagic's Unpatched IE Vulnerabilites Steve Gibson from GRC has written an longish piece on stopping a WinXP IRC Zombie DOS attack. He has written several articles about Microsoft security, especially the plug and play vulnerability in Windows XP Foon wrote an article about privilege escalation on Windows and the inherent vulnerabilities W2K has. IE/SSL Man in the Middle SSL attacks , with Slashdot discussion MS Word Exploit (9/2002)
Utilities	DRM
http viewer allows you to view the http messages from a server Hack Yourself Port Scan Dynamic DNS login Home LAN Security Tools (from "Practically Networked)" Find your IP Address! Web Site Monitoring Service WinSCP	DRM and Real Time Systems by Victor Yodaiken Brett Glass writes about MS Palladium
Antivirus	P2P/Subversive Hacking
	Hacktivismo is the site for the cult of the dead cow (see this profile).
Privacy/Certifications	Detection Tools
CIW Security Exam	Leak Test, Internet Connection Security for Win users
Network Security	Ecommerce
First Monday published a good overview of Internet Security 2002	7 SSL Pitfalls to Avoid by John Viega (from Network Security and SSL)
Debates/Strategies	Commercial Products
Security through Obscurity by Rob Limo (Slashdot Discussion ) Article: Open Source=Insecure? by Robert McMillan Warchalking: Pro and Con