SSH Issues: Does Installing SSH Enable More Exploits Than it Solves?
- May 26, 2006
- Passwords: So Important, Yet So Misused
- Creating Apps for New Markets: Exploring the PocketPC Platform
- Text File Operations in .NET
- Desktop Search Tools — A Security Investigator's New Best Friend
- Zune: Reflections on the First Generation
- Seven Steps to Improving Your VB Code
- Moka5: Virtualization in Your Pocket
- SSH Security Primer: Server Security Settings
- SSH Security Primer: Client Security
- Security on a Dime: Low-Cost Alternatives to SSH
- Windows Media Encoder: Quality Video Training Done on the Cheap
- Mitigating the Security Risks of SSH
- Virtual PC and VMware: A Comparative Review
- SSH Issues: Does Installing SSH Enable More Exploits Than it Solves?
- Learning Linux the Easy Way - With Cygwin
- Rsyncing to New Heights in Linux Lore
- Converting Video for Your Pocket PC the Easy Way
- Pocket PC: The ONE Device for Portable Digital Media
- Visual Basic 2005: Maximizing the VB Experience with New and Old Features
- Faster Coding with the "My" Object in Visual Basic 2005
- Design and Install the Perfect PC—On Your Mac
- Evaluating Your Firewall
- UNIX Key Security
- UNIX Security 101
- Did You Know 4.0
There's an old video on You Tube that purports to be a true indicator of massive world changes. What do you think of it?
- For the Summer...
It's amazing how many songs, how many major events are recorded as Summer events. How will the summer of 2010 be remembered?
- How Long?
John is in shock as the Apple Juggernaut rolls forward. How long before Win Mobile gets the respect it deserves?
- 50 times in a minute
What happens fifty times each minute?
- How much is your FaceBook account worth?
1.5 Million Facebook accounts are being sold. How much is yours worth?
- Tenent 4: Storing Data? The 90's called...
The 90's called and they want their store-data-live-on-a-PC strategy back
- Slash & Burn Computing Tenent 3: Separate browsing from other work
So much Drive-By Malware, so much to protect...
- Slash & Burn Computing Tenent Number 2: Staying Online Persistently Is like Buying a House in a Bad Neighborhood
Staying Online Persistently is like Buying a House in a Bad Neighborhood; You gotta assume at least one successful break in--when you're not looking.
- Slash & Burn Computing Tenent I: Anything Internet is Similar to Sharing a Toothbrush
Today's computing experience is full of risks, with patches and security software moving too slowly to keep up. Cruising the Internet is like sharing a toothbrush with a tobacco chewer; you never know what you'll wind up getting out of the deal.
- Traenk's new Security Design: Slash & Burn
With so many new exploits among so many utilities announced, what is a boy to do???
- Guess who isn't abusing our public information?
How much of your information do you allow others to review?
- Just how much compter do you really need?
Patch Patch and Patch Some More! Not!
- Two Tier Fortressing
What can a trained security specialist provide; as much as your organization needs?
- It's Ba-ack!
It shutdown as mysteriously as it came back earlier. The TX, once dead, is now back
- Who can it be now?
The Google attack teaches many lessons.
- Steps You Might Take to Keep Your Laptop Running
It's an old HP tx1000 to you, but to me, it's a cool machine that's worthy of a second life.
- Good News; Surprising News
Why does the CISSP certification continue to thrill me?
- Windows 7: Status Update at Month 1
So far, Win 7 has pulled an old laptop from the ashes.
- You know me--Right???
How can I prove to a high school chum just who I am?
- So Far So Good
So far, Win 7 is making a thoroughbred of what has been a plough mule laptop
- Win 7, something to talk about.
How well does Win 7 accomodate truly junktacular gear?
- Out with the Old; In with the New
Time to think through last year's work and this year's goals
- Facebook does an About Face--of sorts
Have you tuned your Facebook privacy settings yet? How's that working out for you?
- Sharing Information Can Bring a Share of Problems
Do you really want coworkers to drag you into their own plans, thanks to social networking?
- You Can Check Out Any Time You Like, But You Can Never Leave
Much like the line from the song, "Hotel California", Traenk finds out that membership with key Internet II sites is eternal...
- Social Networking--Or Else!
Having De-Tweeted, it's time to go further
- DeTwitting-UnSocial Networking Redux
What happens when you snip strings to others or refuse to be your own Greek Chorus to your Life's happenings?
- Predictions and Predilections
Leaves are down; harvest is in, for the most part. Another year comes rushing up to us. What will it bring?
- Social Networking for the Anti-Socialites
How would Scrooge handle today's emphasis on social networking?
- Out of Sight
Must data be live for you to Live?
- Great password information at a small price
Where can cash-strapped security pro's get great information on security basics??
- It's Here; Put Away Your Pre-Conceptions on What an OS Must Be: Part III
Having witnessed the PC revolution, Traenk pauses to reflect on the GUI world...
- It's Here; Put Away Your Pre-Conceptions on What an OS Must Be: Part IV
Graphical User Interfaces were important. So was cost control. Just what must an OS be?
- It's Here; Put Away Your Pre-Conceptions on What an OS Must Be: Part V
It's been a long while since you had a chance to be excited about a new version of an 'old' OS. Now is your chance.
- Embedded finesse
What's need for Embedded Wave II
- It's Here; Put Away Your Pre-Conceptions on What an OS Must Be: Part II
In the last blog in this series, Traenk relates his first experiences with computers and with coding. But now, some years have passed. . .
- It's Here; Put Away Your Pre-Conceptions on What an OS Must Be: Part I
Traenk relates his past experience with Operating Systems that goes back 25 years, ok, more than that but he ain't tellin'
- Casting Out Daemons
It's a new computer, and it's also a chance to try out a new vendor.
- Step 1: Legislation
Not sure how we've associated improved and secure coding practice with legislation?
- Approaching People Versus Technical Approaches: More 2009 Security Predictions
Traenk loves computers and technologies. He loves to be a Technical Editor for books. But his views towards security seem to be straying from the Technical to the Personal.
- Are Intrusion Studies Worth the Money? Still more 2009 predictions
There are dozens of security vulnerability scanning tools. Increasingly security analysts take great pains to emphasize their hacking skills. Companies pay out great money to find if they are 'vulnerable'. And in the middle of this, Traenk wonders what the point is to the exercise.
- 2009 Security Predictions: Part II
It's that time of year to see what security developments and surprises are waiting for us in 2009
- Browser Password Managers
While exploring Chrome as a browser, I stumbled onto some excellent Browser Password Manager criteria and an online test that helps you assess your browser's security
- 2009 Info Security Predictions: Part I
Traenk ruminates over what's likely to hit security professionals in the coming year.
- Year End Ideas
It's that time of year for bold proclamations and year-end housekeeping
- Another semester done: Lessons Learned for me
I teach a Visual Basic .Net class at the local university. Today, I am tired because this was one special class.
- This Internet Thing! It's so Invasive!
New ISP = New Challenges and Worries
- Embedded Woes part II
The growing linkage of embedded controllers to the Internet may provide special risks to our lives. These controllers exist in automobiles, appliances, specialized electronics. What are likely to be some of those special risks that may occur?
- The People Side
Cisco has sponsored some excellent research on the People Side of Security
- Duty-Loaf designs and Security
Security isn't found in what you've bought or what patches are applied. It's in the process design.
- Embedded Security Woes: Part 1
What are the coming woes as the embedded world is increasingly linked to public networks like the Internet?
- Zune has finally arrived...None too soon
The latest Zune software and the Zune Marketplace (and the general death of DRM musicfication) have upped the Zune Joy Factor
- Learn Silverlight during Lunch
There's a lot of new technology to learn. What's Microsoft doing for you, the technology innovator who's got lots of learning but way too little time???
- NICE Security Site
You really need to add this to y0ur stack of security web links: http://enisa.europa.eu/
- More Embedded Basics
All of us developers are being pulled into the embedded world. What's that mean?
- Nice features in Visual Studio 2008
The class is going well, and this semester's gang is really doing well with Visual Studio 2008
- Embedded? We don't need no stinkin' embedded devices
Traenk is learning about embedded devices, and it is a confusing world to someone more comfortable with full-featured computers.
- The case for embedded anything
As the need more more pervasive, more secure embedded designs grows, JT offers a series of blogs on the embedded world
- One for All or All for one purpose?
What are your thoughts on those all in one boxes?
- New sparks for a smokin' good time
You're a geek, a new-ground finder in the IT woods. What's waiting for you, and to be sure, what are you waiting for?
- Appliances Equal Ready-Made Security Risks
What does Embedded really mean?
- Vrtually Impossible
Virtualizing Sloppy Practice Makes Security Virtually Impossible
- Hacking as a Service (HaaS)
Remember stories of teens munching Doritos while making off with all your data? Those days of innocence are long gone.
- P2P Piloting Your Car
Will the coming computerization of our appliances and vehicles be implemented securely?
- Gary McGraw Does IT Again
Good books by Gary McGraw predict today's security issues again.
- Computer Welt
John, maybe like Dustin Sullivan, wonders if those who bring embedded systems are ready
- Old technology and Nostalgia
John wonders what to do with yesterday's dreams and how to implement Green IT at home
- Monitoring versus Privacy Rights?
Is there any right to privacy? Do modern monitoring systems go to far or not far enough?
- Independence from Clunky, Kludgy Forms of Input
Put a Fork in me, I'm Done!
- Need help from InformIT Readers
Need advice finding a portable Digital Recorder for my motorcycle rides
- guard your CISSP status
New procedures at (ISC)2 may foster your mistake
- Application security--the new unknown
I've been reading and enjoying Gary McGraw's three books on application security. Each and all is a phenomenal read. [And worth buying...Won't loan mine]
- Where is the computer?
Take a look around you. Can you spot the computer in your apartment, in your living room?
- Hack a Mac: New Pressures @ CanSecWest
I wrote this a few months ago. Now that the Mac crumbled in 2 minutes during the Pwn to Own contest at CanSecWest, the ideas are especially important
- Marcus Ranum has engaging security postings
Do you like despair.com's postings? Marcus provides a humor with a security bent.
- MVP again, with work, and Visual Studio 2008
- John Traenkenschuh writes about the continuing improvements made to Visual Basic...
- Physical security is Information Security
- Pundits predict the eventual merging of Physical Security and Information Security fields. That may not be a bad thing?
- 2008 Security predictions
- I think 2008 will be a real year of change for the Security Practitioner and Security field.
- Compact Irony
Have you studied the articles regarding the iPhone? Who knew a mobile device could inflict such damage? You did, of course...
- Giving Back: Act II
Center for Internet Security Benchmark is Done!
- Closed goes Open?
- What IS the real impact to the .Net Framework source code being available to developers?
- Giving Back
Anyone can complain about firewall security. Maybe you can do something about it?
- Open Source Security
I like Open Source, but I don't like vendors who munge versions or who don't update their code quickly enough. That said, can't you type 'make'?
- Are Certifications Worth It?
You scan the available certifications and wonder, "Are They Really Worth the Trouble?"
- VB goodies
VB .Net Free Learning Tools
Like this article? We recommend
Inside Network Security Assessment: Guarding Your IT Infrastructure
SSH as Salvation?
Some years ago I started doing research on SSH, the wonder tool of the security set. I read one article about a clever SSH setup. The administrator’s DMZ hosts could contact the intranet patching server, something normally verboten. The DMZ servers would route through the administrator’s PC and then access the internal patching server. After considering the author’s SSH design, however, I soon recognized definite security impacts to this approach.
Although several major security compromises are made possible through poor SSH design, does that mean that SSH is a likely target? Consider this: SSH is one of the most attacked services. As the SANS Institute states in its current top 20 vulnerabilities roundup, "Of particular interest this year are attacks against SSH." SSH is rated U1, the top UNIX vulnerability. Why is SSH such a target? In this article, you’ll learn why people are implementing SSH on Windows, mainframe, and UNIX devices. We’ll explore port forwarding, a cool SSH capability. Then we’ll take apart the clever administrator’s SSH design, including attacks against key authentication itself.
In a later article, I want to discuss what you can do if you’re a firewall or a UNIX administrator. You probably recently implemented SSH as a drop-in security precaution against Telnet and FTP exploits—if so, depending on your firewall and SSH design, you likely just enabled many more exploits.
Account Sign In
View your cart