Not logged in | Login

My Security Planet » terminal23 » December 28, 2011

Feeds

13620 items (0 unread) in 75 feeds

WebSecurity

Security

SEO

SEO

Tools

Tools

Opensourcetesting.org News

terminal23

asp.net dos vuln security advisory

Posted: December 28th, 2011, 4:36pm CST by michael

Tags: [edit]

If you're like me and you support Windows web servers running ASP.NET code, you'll want to at least read through today's Microsoft security advisory which talks about an anonymous, remote DoS vulnerability in said targets.
have started playing swtor

Posted: December 28th, 2011, 3:17pm CST by michael

Tags: [edit]

In light of recent penny-arcade-and-customer vs oceanmarketting [sic] drama, I was catching up on Penny-Arcade entries and came across one for >Star Wars: The Old Republic (SWTOR) which sums it all up [emphasis mine]:

While playing last night with Scott he explained that his bounty hunter was all about completing her contracts and getting credits. She didn’t let her feelings get in the way of the job. He was thinking about this before his character was even level 10. I’d be very surprised if he had any idea what sort of “person” his Troll Shaman was in WOW.

I went from 6ish years of WoW (wow!) over to Skyrim a month or two ago, which is a single-player story-driven game that is excellence. And then over to SWTOR. So the change was a slightly phased one for me, but I absolutely felt this same presence in SWTOR that Gabe/Mike mentioned above: you feel your character. And this is entirely because of the choices you make. And unlike other games where there is one "correct" answer and one "lesser" answer so you always want to make the "correct" answer, or even other games that waffle on the idea of irrecoverable choices, SWTOR gives players roughly equal, permanent choices, and they do so in a way that eventually becomes less agonizing and more beautiful. Thankfully I came into SWTOR from Skyrim, so it was Skyrim that started conditioning me to play the character because none of my choices are ever "wrong" (ok, so I still abuse the Quicksaves...).

Anyway, for those curious, I'm only a level 15 Sith Sorceror (heal/dps), but only because I enjoy the game so much and still agonize over some of the choices such that I've played 4 classes up to level 11 so far, just to experience the characters, storyline beginnings, and playstyles of the classes. That game may not be "better" than WoW, but it is a very, very welcome change from the same old MO in "that other MMO."
attack or legitimate email

Posted: December 28th, 2011, 1:23pm CST by michael

Tags: [edit]

You receive the following email:

You have received a secure message

Read your secure message by opening the attachment, securedoc_2011228T1023948.html. You will be prompted to open (view) the file or save (download) it to your computer. For best results, save the file first, then open it in a Web browser. For access from a mobile device, forward this message to mobile@res.cisco.com to receive a mobile login URL.

If you have concerns about the validity of this message, contact the sender directly.

First time users - need to register after opening the attachment. For more information, click the following Help link.
Help - [https:]
About Cisco Registered Envelope Service - [https:]

Attack or legitimate email?

There is certain behavior that we teach users to look for that are certain signs of something fishy. For instance, an attached file with instructions on how to open it in a more vulnerable application like a web browser. Which then brings you to some strange site to log in. The problem is the business desire to encrypt email contents. There really isn't a realistic solution to that problem that I'll personally ever be happy with. So this is a bit of a half-hearted bitching session by me.

Oh, and of course this is a legitimate email in support of delivering encrypted email. Which is to say it's not encrypting email at all, just forcing the recipient to go to a third party web site and download it over an HTTPS connection.

← December 27 (1 item) January 1 (1 item) →