Security-Protocols

I have had a few people, and reporters ask me what browser is used most to hit my site?  Well believe it or not, Internet Explorer outnumbered Firefox by almost 10%.  This really surprises me because I thought more savvy people came to my site for information, but I guess thats not true.  Also I guess its worth mentioning that 92.55% are IE6, and  5.41% were IE7.  As for Firefox 22.71% were version 1.5.0.1, 10.76% version 1.0.7 and 4.27% were version 2.0.

Below are stats for the entire year of 2006.

Below are stats for December of 2006.  As you can see, IE and Firefox are almost at 50/50.

So if you are using Internet Explorer, or any other browser I would suggest you install Firefox not only for security reasons but for an overall better Internet experience!  These stats were taken from Google Analytics.

• Pirates has already cracked the Vista registration.  These crackers are already distributing a crack file which can let anyone use Vista.
• Password management with IE and Firefox.  Lets admit it, password storage mechanisms are a bad idea!
• No fix out yet for the Word flaw.  Microsoft plans to release six security patches next Tuesday, but doesn’t have any immediate plans to fix the Word 0day of this week.
• Jeremy “Shoemoney” responds to the Forbes article, on the way it was written.  Sounds to me like he said some things he really wishes he wouldn’t of.  But as we know, im sure the journalist twisted his words a bit right?  I thought the article was a bit fish myself though…
• Matt Cutts debunks the “Google is in bed with the CIA” claims using some rap lyrics.. Nice!
• NMAP 4.20 gets released..
• The guys over at Matasano Security have posted a really nice write up some recommendations as to why you should “Just Say No!” to Agent-based software.

Looking to make a few bucks off of your blog?  Check out AzoogleAds.. Hope everyone has a good weekend.

Bitten by the Google Spider : Google is working on cracking down on arbitrage sites which are using Google AdWords to send traffic to there affiliate sites. I really have to agree with Shoemoney on this, because it is going to be impossible to stop arbitrage. The only way Google will be able to stop it is getting rid of AdWords all together, because they are going to have a hard time deleting the sites out of the index.

• Microsoft Issues a warning regarding a Word 0day being exploited in the wild.
• eEye Digital Security launches a “Zero-Day Tracking” site.  Good, bad or just regurgitated info?
• HexFiend - OS X Hex Editor goes open source.
• Joxean Koret releases an Oracle PL/SQL Fuzzer.
• Patch for GnuPG gets released, we highly suggest you update.

So I had some time to kill on the train and figured I would give iSec Partners filep file fuzzer a whirl.  I tested it out against BOM (default zip compression tool on OS X) and it fell over, and basically puked all over place.  This isn’t the first time I have looked at BOM, but figured it would be an easy target to test against.. Disclaimer: I have not yet researched these issues..

Read the rest of this entry »