Thursday, June 16, 2011

Mass SQL Injection Attacks

This is where malicious code is injected into your browser to direct you to a website that attempts to compromise your computer.

Wednesday, June 8, 2011

IPv6 Connectivity

IPv6 can address individual devices on a network - even separate computers, tablets, phones and other Internet connected devices even when they are connected behind a network router.

This is the reason for security and privacy concerns in that your computing device will be identifiable even though you have taken steps to obscure your IP address. Although the primary need for Network Address translation is alleviated, I guess this means that you will be able to connect multiple computers in your home to the Internet via your ISP without the need for a router, it will probably a good idea that you don't.

Strange observations of neighboring networks appearing in network listing on  peer computers. The theory is that due to the interim nature of the IPv6 implementation in Windows 7 that individual computers, that are not on your local network, can been seen but not accessed.

 This was only theory at the time of writing (June 2011) - see screen-shot below - could this be due to Teredo tunneling?

The implications of this are that for some reason Windows 7 is capable of idetifying computers connected to other wireless networks (presumably but they could be just computers on the same cable node of the WAN). These computers are also presumably behind network routers and their idendities are still seen in Windows Explorer. If this can be done in a somewhat local situation it could also be achieved it the computers were connecting through  a VPN.


The computers shown in the shot above are NOT ALL IN MY LOCAL NETWORK. In any case I tend not to name my computers with a real name (or the user), rather than describe the computer, as in ZOTEC_SEVEN-PC.

I am not saying that there is a security threat here in itself, only that it appears that computers that are not on your local network can be seen, not accessed, from your local neighborhood.

What is a Shill?

Tuesday, June 7, 2011

Unsafe Web Form

Web forms are notoriously vulnerable to injection attacks.

The scripts that are used for the processing of web-based email are particularity easy to hack.

The examples that I feature on my pages are taken from real-life observations. The exact data is not important it is the principle of what is going on here. The examples may use real data, but more likely just dummy data - either would still illustrate my point.

Windows Updates

Windows Updates not only update your computer to the most recent version of the operating system they also provide a method to keep the drivers on your computer current.

The drivers will depend on the hardware that you are using. Therefore it is good idea to run the optional updates so that the driver/hardware related drivers are downloaded.

Some specific device functionality cannot be made to work by applying Windows updates. Often a BIOS update needs to be made. An example of this is the activation and recognition of 6 and 8 cores in processors that are so equipped.