Disconnect browser extension keeps pesky cookies in check, blocks third-party tracking requests

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCykahkX531hn2gO0kvpfUnhoZi5DJk7TI9xmPDHy040wYGEwqs004hoB2x3gQwUyZhciUxdm0MDG9tsrhHdMf1up_-72aw5sZscWlw_zu8awlntMn_4iJx-AaxH9s6x4AsdUJ7e_zAGc/s1600/cookies-2010-12-03-500.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCykahkX531hn2gO0kvpfUnhoZi5DJk7TI9xmPDHy040wYGEwqs004hoB2x3gQwUyZhciUxdm0MDG9tsrhHdMf1up_-72aw5sZscWlw_zu8awlntMn_4iJx-AaxH9s6x4AsdUJ7e_zAGc/s320/cookies-2010-12-03-500.jpg" width="320" /></a></div><br /> Internet Explorer 9 may block 'em in 2011, and the US government's on the case too, but you don't have to wait for Microsoft or bureaucracy to keep your privacy paramount if you browse with Rockmelt or Chrome. That's because former Google developer Brian Kennish just released Disconnect, an extension for either one, that banishes Digg, Facebook, Google, Twitter and Yahoo tracking requests (more companies are on the way) as you make your merry way across the web. Install and you'll find a nice little "d" icon on your browser's status bar, with a drop-down menu exposing exactly how many requests you've blocked from each service, and the option to manually disable blocking at will. Why bother? Don't you want to keep that secret love of Thanko products all to yourself?

Disconnect browser extension keeps pesky cookies in check, blocks third-party tracking requests

Internet Explorer 9 may block 'em in 2011, and the US government's on the case too, but you don't have to wait for Microsoft or...

Continue Reading>>

How To Check Unix Logical Security And Report Them

<br /> <p>Test Logical security of Unix servers.</p><p>This area covers the technical security assessment of Unix, Linux servers (commands are similar but some are different. Please check with the respective man pages).</p><p>Stage 1 scan using Nessus and check for vulnerabilities and Nmap for ports. Highlight the ports and refer to IANA for details. Print report.<br /><br>Scan using Nessus (ensure latest updates are done).</p><p>Stage 2 more etc/passwd and /etc/shadow > to password.txt and shadow.txt in home directory. Check the security of these files, check IDs and /etc/group.</p><p>1. This is like the basic security measure that any server MUST take. i.e. IDs and Groups.</p><p>2. What to check. More /etc/passwd and /etc/shadow.</p><p>3. Look out for normal IDs - are all these active and belongs to users that have resigned ?</p><p>4. Lookout for system IDs - active, are they required - they may be powerful</p><p>5. Test ID, Developer IDs, Root equivalent IDs - active ? Why ?</p><p>6. Intruders often use finger or ruser to discover account names and then try simple passwords. Please let your users know that complex passwords are a must. Simple passwords just make the hacker's job easier.</p><p>7. If intruders can get a password file, they usually move or copy it to another machine and run password guessing programs on it. These programs involve large dictionary searches and run quickly even on slow machines. Most systems that do not put any controls on the types of passwords used probably have at least one password that can be easily guessed.</p><p>8. It is a good practice to change all your passwords. For extremely critical servers, passwords should be change everytime root equivalent, developer IDs are used. If this is not practical, perhaps 3 months or 6 months interval.</p><p>9. Intruders exploit system default passwords that have not been changed since installation,including accounts with vendor-supplied default passwords. Be sure to change all default passwords when the software is installed. There are software upgrades that can change account passwords to a new default at the background. Review and change passwords after updates are done.</p><p>More /etc/passwd > /home/Gabriel/password.csv</p><p>More /etc/shadow > /home/Gabriel/shadow.csv</p><p>Stage 3 Check world writable files and directories. This is also a must. Imagine your most critical business files are accessible to everybody. Find them and take the necessary steps to control their rights.</p><p>find / -type f -perm -22 -exec ls -l > /home/Gabriel/worldfiles.csv ;</p><p>find / -type d -perm -22 -exec ls -l > /home/Gabriel/worlddirectory.csv ;</p><p>Stage 4 Search for SUID and GUID files</p><p>* SUID and GUID can allow normal users to become root equivalent when these programs are owned by Root.</p><p>* To mitigate this risk, it will be prudent that these files are not world readable as power users may find ways to run these programs. Or remove them if not necessary</p><p>* SUID and GUID are normally found in /bin, /etc, /usr/bin, /usr/ucb, /usr/etc, pay attention if they are found in other directories.</p><p>* Look for SUID files (especially SUID root files) everywhere on your system. Intruders often leave SUID copies of /bin/sh around to allow them root access at a later time. The UNIX find program can be used to search for setuid files.</p><p>Find / -user root -perm -4000 -exec ls -l > /home/Gabriel_ng/rootsuid.csv ;</p><p>Find SUID and GUID on root directory.</p><p>Find / -xdev -perm -004000 -exec ls-l {} > /home/Gabriel_ng/suid.csv ;</p><p>Find / -xdev -perm -002000 -exec ls-l {} > /home/Gabriel_ng/guid.csv ;</p><p>Stage 5 Check for network files - /etc/hosts.equiv, .rhosts, /etc/hosts.allow, hosts.deny</p><p>* Important factor in network security is controlling network access. The /etc/hosts.equiv, .rhosts and /etc/passwd control whether access is given to rlogin, rcp, and rsh. The /etc/hosts.equiv contain a list of hosts that can be trusted or considered equivalent to that machine. Some systems uses /etc/hosts.allow and /etc/hosts.deny rather than a single /etc/hosts.equiv. The .rhosts files holds a list of hosts that are permitted access to a specific user.</p><p>* Because .rhosts files allow access to the system without using a password it is recommended that users do not create them in their home directories.</p><p>Check for /etc/hosts.equiv, .rhosts , /etc/hosts.deny and /etc/hosts.allow<br /><br>Find /home -name .rhosts -print</p><p>Stage 6 Check system monitoring - logs.</p><p>Check /etc/sudoers - ability for users to run commands as "root" with sudoers.</p><p>More /etc/sudoers > /home/Gabriel/sudoers.csv</p><p>Other includes /var/adm/acct, /var/adm/wtmp, var/adm/btmp, var/adm/syslog/syslog.log</p><p>Check /var/adm/sulog</p><p>1. SU 10/19 14:15 + tty q3 root-test1 - list the date and time, + indicate successful and - failure. If there is repeat failure could be indication that someone is trying to break in using su.</p><p>Stage 7 By piping all files in csv or text files, it will be easier to analyze the details and work with the relevant parties to tighten the security.</p> <br /> <br /> <br /> <br /> <br /> <br /><br /> <p>Gabriel Ng is the author of [http://www.comsectutorial.com] This site is setup to provide information, recommendation on hacking prevention, controls to minimise security threats from viruses, trojans, spywares, hacking based real life experience while conducting security assessment and penetration tests. This video touches a bit on unix security.</p><p>[http://www.comsectutorial.com/server-vulnerabilities.html] Enjoy!</p> <br />

How To Check Unix Logical Security And Report Them

Test Logical security of Unix servers. This area covers the technical security assessment of Unix, Linux servers (commands are similar bu...

Continue Reading>>

Easy Check Writer Software

<P><a applications="" are="" available="" check="" make="" several="" software="" title="#jsArticleIntroImageCredit rel=thinbox><IMG title=" to="" writing=""></A></P><br /><P>Several check writing software applications are available to make check writing easy.Fotolia.com</A>"> Check writing software provides the tools to make check writing easier as well as print checks on blank check stock. These types of software applications help an office run more efficient and reduce errors.</P><br /><P></P>Software ApplicationsSeveral easy check writing software applications are available. Three of these applications are VersaCheck Gold, CheckSoft 2010 and Quicken.AvailabilityYou can purchase these three check-writing software packages from online and traditional retail locations. VersaCheck can be downloaded from <a class="StrongLink"" href="http://www.ehow.com/internet/">the Internet</A> from Productivity Systems, Software.com and ShareMe.com. CheckSoft can be downloaded from Software.com and Brothersoft.com. Quicken can be downloaded from Quicken.com, Brothersoft.com and Download CNet.CostAs of November 2010, VersaCheck Gold is priced at $79.99, Check Soft 2010 for $49.95 and Quicken for $39.95. Older versions of these software applications are available for free download from Brothersoft.com. References <a href="http://check-writing-software-review.toptenreviews.com/" rel="nofollow" target="_blank">Top Ten Reviews: Check Writing Software Review 2011</A>

Easy Check Writer Software

Several check writing software applications are available to make check writing easy.Fotolia.com "> Check writing software provides ...

Continue Reading>>

Check Point Software Technologies

<br /> <p>You must have heard about the TCP/IP protocol. In all kind of transactions the internet is the key product. You will definitely be able to find out that at each layer there is some protocol working. Let me also tell you that you will definitely find out that there is some sort of protocol working at each level. You will be quite thrilled to know that each layer has its own importance and you will not be able to install one layer without installing the previous layer. Now as far as the checkpoint is concerned it is definitely related to security measures.</p><p>The electronic checks use the ACH channel which is supposed to be quite safe. But, would you like to know that how this software become so powerful? This is because of the firewall, gateway as well as the routers which are being used at the check points like data link layer or network layer.</p><p>1. Firewall</p><p>It is a device which is used to filter out the information which is being accessed from the network. You can deny any information which you find out to be malicious. I really feel that you will definitely have come across the firewall. There are several kinds of firewall techniques like packet filter, application gateway, circuit level gateway, proxy server etc. you should also know that the firewalls are being installed at the network layer.</p><p>2. Gateway</p><p>It is a computer or network that allows the controlled access to another computer or network.</p><p>3. Bridge</p><p>Bridge reduces online traffic on the LAN by dividing it into two half. The bridge works at the data link layer of the OSI model. It checks the incoming traffic and decides whether to discard it or not. The bridge offers four or more hardware ports.</p><p>4. Switches</p><p>The switches are generally called the multiport bridges. They offer more than four hardware ports. They are used in the creation of LAN.</p><p>These are some of the hardware that is used to give the network the security which it requires. As far as the check producing software is concerned, it is definitely in need of security. The main reason why it has become so popular is the safety which it provides. It is all done with the help of the ACH channels. However the ACH channel uses the hardware which I have discussed above. All of them are being used for the purpose of security as well an implementation of network.</p><p>Once a secure network is established then you can always go for the check printing software. Believe me that it will definitely be very comfortable for you.</p> <br /> <br /> <br /> <br /> <br /> <br /><br /> <p>Looking for how to accept <a href="http://www.q-check.com/" target="_new">Checks by Phone</a>? Find more about accepting <a href="http://www.q-check.com/" target="_new">Checks by Fax</a></p> <br />

Check Point Software Technologies

You must have heard about the TCP/IP protocol. In all kind of transactions the internet is the key product. You will definitely be able t...

Continue Reading>>