Video:When Web 2.0 Attacks - Rafal Los
Recorded at: Louisville OWASP Chapter - Fourth Meeting, Friday January 29th, 2010
Speaker: Rafal Los will be discussing Flash and Web 2.0 security

I used the same rig I hope to use for recording the Fireside talks at Shmoocon.

link

Link:XSS, SQL Injection and Fuzzing Barcode Cheat Sheet
I was listening to an episode of Pauldotcom, and Mick mentioned something about attacks on systems via barcode. Because of the nature of barcodes, developers may not be expecting attacks from that vector and thus don’t sanitize their inputs properly. I had previously written "XSS, Command and SQL Injection vectors: Beyond the Form" so this was right up my alley. I constructed this page that lets you make barcodes in Code 93, Code 39, Code 39ext and Code 128A, B and C.

link

In the past 48 hours I’ve been added to 100+ twitter lists and I’m mortified. Normally I’m elated when I’m added to someone’s list. It’s a a form of validation and (usually) a sincere recommendation that can increase your reputation and visibility. Then came Twibes. Enter the Beast I discovered twibes and upon first look it seemed like [...]

link

This post was originally published by Alex T. Cone on his blog “Condividiamo”. Alex is an activist, thinker, leader, and has quickly become the point man for social meda interaction for several charities. I’ve republished this post with his permission because this open letter to the news media deserves attention. I originally bought into [...]

link

Infosec Daily Podcast Episode 51
We are recording tonight, so it should be up by the morning. This time the tech segment will be on Tracking users, malware and data leaks via the USB serial numbers on flash drives, smart phones and MP3 players.

link

link

In case you haven’t seen this TED talk from Jun 2009 it is a must see. Clay Shirky does a brilliant job of outlining how radically the world is changing.

link

Yesterday Network World published this ground breaking prediction by Gartner, “20% of businesses will get rid of all I.T. assets as they move to cloud” It makes for a good headline but as a prediction it’s woefully ignorant and incomplete. I assume the truth doesn’t translate into pageviews.  The truth is that I.T. infrastructure is on [...]

link

I stumbled into a friendly passionate debate this evening about how and when to use RT or via. (Yes, my night on the town involves coffee, friends, and spirited opinions on twitter minutiae). I was surprised at the differing opinions so I’m carrying the debate to you, the enlightened masses.  Obviously how you use twitter [...]

link

While many are quick to proclaim the coming panacea and opportunities of mobile social networks what is usually left unsaid is that the current state of these services has little to offer for people interested in actual social networking. What are they good for? Finding your friends on a map Getting insider tips about certain businesses Receiving [...]

link

I keep hearing about businesses cutting costs and trimming their tech budget. Every day I see small business owners express shock at the cost of tech solutions. I’m a friend and advocate for private business and especially small business but I’m tired of explaining the price of tech. If I could only share one insight with [...]

link

The response to my initial Diigo post has been overwhelming. So many people immediately saw the benefit of using Diigo’s service. Since I had the pleasure of introducing Diigo to so many folks I wanted to follow up with a few out-of-the-box ideas to make your life mo’ betta. Books to Read List Every reader I know has [...]

link

Can bookmarks make you more productive? Admittedly, I’m more passionate about bookmarks than most but for good reason. My bookmarks are my digital memory. The story is told that a reporter once asked Einsten if he could have his phone number. Einstein picked up the phone directory, looked up his number, wrote it on a slip of paper, [...]

link

Link:WiGLE WiFi Database to Google Earth Client for Wardrive Mapping Tool Updated
Uploaded version 0.90. Once again, Wigle.net changed the way I had to query their database, so I had to fix IGiGLE so it worked again. I also changed how I got the zip code to lat/long to work. It may also now work with NAC, UTM or a Great Britain telephone area code, but this needs more testing so please let me know.

link

Ah the New Year… time for every blogger to bloviate and speculate on upcoming trends. I don’t practice the black art of predictions but I sure as heck have a list of things I’d love to see change in 2010. 1. The ultimate Address book Chris Brogan says you live and die by your database. If that’s the case [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

This is probably the most surprising advice I give friends and family – Don’t pay for antivirus software. Why? It’s over priced, bloated, and doesn’t offer better protection than the free options. The ugly truth is that I’ve seen hundreds of infections on computers with lapsed subscriptions. The user always meant to get around to renewing but the [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Link: Setting up an Ethernet bridge in Ubuntu Linux
In a previous video, I showed how to set up an Ethernet bridge in Windows XP. This is very useful for sniffing traffic leaving your LAN for the purposes of IDS (Intrusion Detection System), network monitoring, statistics or just plain snooping. In this video, I cover setting up an Ethernet bridge in Linux. Other tools used in this video include Wireshark, TCPDump, Etherape and Driftnet.

link

Perhaps I’ve got some OCD tendencies but I really like order and since a large part of my life is lived in the digital space I have to maintain a clean digital working environment. That digital environment takes time and tools. Here are a few of my systems and how I’m reworking them for 2010 Firefox [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Since I started creating my own social media bar I’ve found that I really like AddThis share button. If you are interested in adding “AddThis” to your Wordpress or Tumblr Blog here’s the code. Integrating Addthis with Wordpress (without plugin) <!-- #### Start Addthis Wordpress Integration #### --> <a class="addthis_button" href="http://addthis.com/bookmark.php?v=250&amp;username=YOUR ADDTHIS ID HERE" addthis:url="<?php the_permalink(); ?>" addthis:title="<?php the_title(); ?>"> <img [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Video:Xmas scan with Nmap
Happy Hacking for the Holidays. I felt like making a gimmick video for the occasion. :)

link

There is no shortage of Social Media sharing plugins for Wordpress but they all leave a bit to be desired. Perhaps I’m too picky but here is my criteria for a social sharing tools: Native Tweetmeme integration: Tweetmeme is a recognized leader in the market. They provide good info and OAUTH authentication. Everyone knows how tweetmeme [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Social networking can be a very emotional experience. These networks aren’t just populated with binary bits and blinking lights, there are real people here and sometimes that can stir emotions like a 7th grader entering junior high. It’s an inescapable truth, We want to be liked. We carefully critique how many followers we have, what lists we [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

The ReTweet. That simple act that spreads your content to a larger community. It’s powerful, it’s viral, and it’s important to monitor these little acts of kindness. But are you missing some of your retweets? If you are using a twitter client the answer is probably Yes. You may not know that several twitter clients don’t show the [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Link:IndySec Metasploit Class Videos
When Steve invited me up to Indianapolis to help with a Metasploit class I jumped at the opportunity.&nbsp;&nbsp; We had a good time and IndySec puts on a great event. They let me record the talks, unfortunately I was testing out a new video rig and the audio failed on the first three parts (Intro/Welcome, Network Setup, Getting started with Metasploit). The rig worked great for the Social Engineering, Meterpreter and SQL Pwnage/Fast Track sections. My presentation was just a rehash of the video I put up last week on msfpayload/msfencoder/metasploit 3.3 so I decided not to post it on this page.

If you find these videos useful, consider going to the Metasploit Unleashed page and donating to the Hackers For Charity Kenya food for work program, or come to the next IndySec event. For best viewing, I recommend downloading the MP4 files below.

link

This is the 3rd post in my series, “Know the Flow: tools and theory for distributing social media content”. To effectively share your content though social networks you have to identify the roles of each service you employ. You can’t design a distribution strategy without understanding where your content resides and how it travels. Most web properties [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

I want to start blogging. What do I do? This question is coming up a lot lately. It’s easy for me to forget how many individuals and organizations have never maintained a blog but blogging is seeing a resurgence due in part to social media. Here is my quick guide on getting started and avoiding a [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

This is the 2nd post in my series, “Know the Flow: tools and theory for distributing social media content”. You can see Part 1 here. Do you create content? Do you want others to see your work? If you answered yes to both of these questions then it is vital that you understand how to share your content [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

This is the 2nd post in my series, “Know the Flow: tools and theory for distributing social media content”. You can see Part 1 here. It’s no secret that social media has changed how people discover the web and as a content creator you want to invite people to engage you and your work. Social media data [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

droops arduino talk at phreaknic 13 from droops on Vimeo.

link

If you take the time to create good content, take the time to share it well. There is no magic formula. It is thoughtfulness + tools. Know the Flow is my approach to social media data flow. Over the next week I’ll be sharing some of my theory and tips that I touched on in a recent [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Video:Using FOCA to collect Metadata about an organization
Applications can add all sorts of data into the documents they create or edit. DOC, PDF, XLS and other file types can contain all sorts of extra data, like usernames, network paths, printers and application version numbers. This sort of information is great for doing initial research about an organization before doing a pen-test. This video with cover using FOCA, pointing it at a domain name, and grabbing metadata from doc, ppt, pps, xls, docx, pptx, ppsx, xlsx, sxw, sxc, sxi, odt, ods, odg, odp, pdf and wpd files.

link

Link:IndySec Metasploit Unleashed Charity Event
For those in the Indiana area, the IndySec group in Indianapolis is having a Metasploit Unleashed Charity Event. Details can be found at:

http://indysec.blogspot.com/

Here are the core details:
When: December 12th from 1:00 PM to 5:00 PM
How much: $30.00 all donated to Hackers for Charity food program
Where: BlueLock, 6325 Morenci Trail, Indianapolis, IN
What to bring: A laptop with Backtrack or the MSF installed.

To register, and for more details on what to bring, check out their site.

link

As I experiment with favorite tweets to create a “best of twitter” shortlist I found there was no good way to (re)tweet these starred tweets. Favstar.fm and Twitter widgets are great ways to share favorites but there isn’t a good option if you want to send the tweet back out your twitter stream. The obvious answer [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Find more of my shared items here KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

For the many ways that social media connects us you’d think we’d have a decent address book to accommodate this new connected world. It’s darn near the Jetson’s out here and my address book has a field for a fax number but no twitter account. Really? My digital life revolves around some of the most used [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

The world of Social Media is obsessed with numbers. As we try to quantify the reputation economy we delve into the black art of measuring influence. Twitter stats, profile graders, twitter lists, RT reach, conversational stats…  ad nauseum. Understanding and measuring aren’t bad but we need to remember that these numbers appeal to the most basic [...]

KnowtheNetwork.com is focused on connecting People and Ideas through Technology. Connect with me on Twitter

link

Have you ever heard of Twitter tags? No, I’m not speaking of those search functionaries known as #hashtags, I’m talking about regular tags that are a staple of bookmarks and blog posts.The ability to sort and share are fundamental to how we interact with digital information. However, Twitter seems to have ignored the power of [...]

KnowtheNetwork.com is your resource for information about emerging technologies, social media, productivity tech tips, software reviews, network technologies, and tons of links to free guides and free software. Connect with me on Twitter, Friendfeed, or Tumblr.

link

Link: Building a Hacklab, and a little about the Louisville CTF event
This is a presentation I gave for the local Louisville ISSA. I took this as an opportunity to learn a bit about AVISynth and do a split screen video. Thanks to Gary for being my camera man.

link

DoJoCon Live Stream 2009
This is pretty neat. They are streaming the talks. Check it out today (Nov 6th) and tomorrow.

link

Your immediate reaction to this headline will place you into one of the following camps: Absolutely What? Are you insane? If you find yourself with the last reaction let me offer a challenge, find someone that is under age 35 and ask them 2 questions. When is the last time you used the Yellow Pages? How often [...]

KnowtheNetwork.com is your resource for information about emerging technologies, social media, productivity tech tips, software reviews, network technologies, and tons of links to free guides and free software. Connect with me on Twitter, Friendfeed, or Tumblr.

link