Comments for ITSec Packets http://www.itsecpackets.com/blog A Progammer explores the IT Security field; offering packets of useful information he picks up along the way. Tue, 05 Jan 2010 01:34:42 -0700 http://wordpress.org/?v=2.8.4 hourly 1 Comment on OWASP 2008 and Fortify by John Moyaree http://www.itsecpackets.com/blog/2008/10/06/owasp-2008-and-fortify/comment-page-1/#comment-355 John Moyaree Tue, 05 Jan 2010 01:34:42 +0000 http://itsecpackets.com/blog/?p=59#comment-355 There is also this program which I recommend: http://www.netsparker.com/ There is also this program which I recommend: http://www.netsparker.com/

]]> Comment on To https or not to https by Ari http://www.itsecpackets.com/blog/2009/09/08/to-https-or-not-to-https/comment-page-1/#comment-335 Ari Fri, 11 Sep 2009 14:49:04 +0000 http://www.itsecpackets.com/blog/?p=130#comment-335 I agree with you, and I would do the same thing (not fill out the form). Even if they were submitting the form via https, the right way to do this is to make the entire page https for exactly the reasons you outline. I agree with you, and I would do the same thing (not fill out the form). Even if they were submitting the form via https, the right way to do this is to make the entire page https for exactly the reasons you outline.

]]> Comment on To https or not to https by Josh http://www.itsecpackets.com/blog/2009/09/08/to-https-or-not-to-https/comment-page-1/#comment-331 Josh Wed, 09 Sep 2009 04:26:06 +0000 http://www.itsecpackets.com/blog/?p=130#comment-331 How do you access Gmail over an encrypted line? How do you access Gmail over an encrypted line?

]]> Comment on Sandboxie by Peter Owens http://www.itsecpackets.com/blog/2009/02/05/sandboxie/comment-page-1/#comment-328 Peter Owens Sun, 06 Sep 2009 05:14:31 +0000 http://itsecpackets.com/blog/?p=71#comment-328 All very well for a very competent & experienced user like yourself. The facts are Sandboxie is a great concept very poorly executed in terms of easy or intuitive use. I get really annoyed at reviews like yours that are hardly relevant to an average user (you know what I mean Here). How often do such reviews really point out poor interface design. For God's sake, why would anyone use a process description like "Recover files" - the files re not lost! A simple question "Do you want to save outside the sandbox" would be much more helpful. That's just an example. The program is riddled with such hard to understand questions & labels, the designer even saw fit to post a 6 part "Getting Started" guide. Did you read that? NO ........ I thought so. I gave up at part 5 & exited Sandboxie, trying to do so intuitively, so that the stuff inside would be "wiped clean" (thats my description which you won't find anywhere in Sandboxie). I knew it would happen ....... YES the desktop icon that the guide set out to show would NOT remain was there plain as day. Very disappointing, I can't use what I can't reasonably understand or feel sure about. Now I give you full permission to post my "review". Peter Owens All very well for a very competent & experienced user like yourself.
The facts are Sandboxie is a great concept very poorly executed in terms of easy or intuitive use.
I get really annoyed at reviews like yours that are hardly relevant to an average user (you know what I mean Here). How often do such reviews really point out poor interface design.
For God’s sake, why would anyone use a process description like “Recover files” – the files re not lost!
A simple question “Do you want to save outside the sandbox” would be much more helpful. That’s just an example.
The program is riddled with such hard to understand questions & labels, the designer even saw fit to post a 6 part “Getting Started” guide.
Did you read that?
NO …….. I thought so.
I gave up at part 5 & exited Sandboxie, trying to do so intuitively, so that the stuff inside would be “wiped clean” (thats my description which you won’t find anywhere in Sandboxie).
I knew it would happen ……. YES the desktop icon that the guide set out to show would NOT remain was there plain as day.
Very disappointing, I can’t use what I can’t reasonably understand or feel sure about.
Now I give you full permission to post my “review”.
Peter Owens

]]> Comment on Perfect Paper Passwords by ITSec Packets | VIP Access on your IPhone/ITouch http://www.itsecpackets.com/blog/2007/12/20/perfect-paper-passwords/comment-page-1/#comment-326 ITSec Packets | VIP Access on your IPhone/ITouch Sun, 30 Aug 2009 03:54:16 +0000 http://www.itsecpackets.com/blog/?p=21#comment-326 [...] Appolgies for not writting in a while. I hope to make it up to you with this post and future posts with, hopefully, much less than 5 months between. Found a great little app for iPhone/iTouch that gives us home users multi-factor authentication with a cryptographically strong OTP (one time password). Many of us have a similar device to log onto our corporate networks. I have an RSA token from work that spits a new six digit one time code. The OTP adds an additional layer of security when logging onto to a site on the net and makes brute force attacks impossible. We discussed OTP in the post about Steve’s PPP  authentication system. [...] [...] Appolgies for not writting in a while. I hope to make it up to you with this post and future posts with, hopefully, much less than 5 months between. Found a great little app for iPhone/iTouch that gives us home users multi-factor authentication with a cryptographically strong OTP (one time password). Many of us have a similar device to log onto our corporate networks. I have an RSA token from work that spits a new six digit one time code. The OTP adds an additional layer of security when logging onto to a site on the net and makes brute force attacks impossible. We discussed OTP in the post about Steve’s PPP  authentication system. [...]

]]> Comment on Sandboxie by Internet Security Blog http://www.itsecpackets.com/blog/2009/02/05/sandboxie/comment-page-1/#comment-291 Internet Security Blog Tue, 14 Apr 2009 13:50:38 +0000 http://itsecpackets.com/blog/?p=71#comment-291 <strong>Safe Internet Browsing with SandBoxie...</strong> Importance of Safe Internet Browsing Internet is an interesting place. On one hand it is a treasure of information, where you get as much information as you have time, energy and patience, but on the other hand it is a complete jungle out there, where ... Safe Internet Browsing with SandBoxie…

Importance of Safe Internet Browsing
Internet is an interesting place. On one hand it is a treasure of information, where you get as much information as you have time, energy and patience, but on the other hand it is a complete jungle out there, where …

]]> Comment on Parallels – VM Software for the MAC by ITSec Packets | Sandboxie http://www.itsecpackets.com/blog/2007/08/07/parallels-vm-software-for-the-mac/comment-page-1/#comment-275 ITSec Packets | Sandboxie Sun, 29 Mar 2009 00:35:22 +0000 http://www.itsecpackets.com/blog/?p=11#comment-275 [...] we talked a little bit about a Virtual Machine and how I was able to run Windows on my Mac using Parallels. With Parallels you need to set aside memory and actually install the OS you want to run in the VM [...] [...] we talked a little bit about a Virtual Machine and how I was able to run Windows on my Mac using Parallels. With Parallels you need to set aside memory and actually install the OS you want to run in the VM [...]

]]> Comment on My Hard Drive Failure by Ron http://www.itsecpackets.com/blog/2009/03/16/my-hard-drive-failure/comment-page-1/#comment-273 Ron Tue, 17 Mar 2009 19:25:42 +0000 http://itsecpackets.com/blog/?p=86#comment-273 It wasn't so recent , it's a IMAC from Feburary 2006 - AppleCare just ran out. Bummer. You know Apple just a did a refresh on the IMAC line , they are looking real nice ..... ;-) It wasn’t so recent , it’s a IMAC from Feburary 2006 – AppleCare just ran out. Bummer. You know Apple just a did a refresh on the IMAC line , they are looking real nice ….. ;-)

]]> Comment on My Hard Drive Failure by jake http://www.itsecpackets.com/blog/2009/03/16/my-hard-drive-failure/comment-page-1/#comment-272 jake Tue, 17 Mar 2009 16:49:35 +0000 http://itsecpackets.com/blog/?p=86#comment-272 ...also, you're the second person I know to experience a total Mac hard drive failure on a recent (presumably) model. I wonder... …also, you’re the second person I know to experience a total Mac hard drive failure on a recent (presumably) model. I wonder…

]]> Comment on My Hard Drive Failure by jake http://www.itsecpackets.com/blog/2009/03/16/my-hard-drive-failure/comment-page-1/#comment-271 jake Tue, 17 Mar 2009 16:48:18 +0000 http://itsecpackets.com/blog/?p=86#comment-271 I also recommend Mozy to back up to the cloud. Mozy has a simple price plan for home users and is very flexible for the enterprise. It's by EMC, so you know it's industrial strength. My work PC (laptop) is backed up to a Western Digital My Book, which was $89 for 650 gigs at Costco. My main family PC which has my precious, precious photo collection has the added security of a RAID 0 (mirrored) array. I also recommend Mozy to back up to the cloud. Mozy has a simple price plan for home users and is very flexible for the enterprise. It’s by EMC, so you know it’s industrial strength. My work PC (laptop) is backed up to a Western Digital My Book, which was $89 for 650 gigs at Costco. My main family PC which has my precious, precious photo collection has the added security of a RAID 0 (mirrored) array.

]]>