Skip to main content

Posts

Showing posts from January, 2009

Let's be productive by minimizing clutter Part deux

As usual, when you start dealing with one thing in your life, you tend to narrow in and focus on it. Which is great, however, what if you have several things to do in your life, as most of us do, how do we manage creativity and productivity?


I find myself always on the quest for better productivity and better ways to perform things.


One thing that I find to increase productivity and generally lower stress is to clear. I didn’t say Clean, I said clear.


One of the basic things that is taught, on like Step 1, of Getting Things Done (GTD for those of you that love abbreviations) is to clear and empty. Take everything off your desk, empty your inbox, etc, and then perform actions on everything. Recently I wrote a blog post issuing my New Year’s Challenge to everyone about clearing off your desk and reducing clutter, paper, and digitizing everything you can. Because, you know, how easy is it for you to perform Boolean searches for post it notes?


So here comes the second part of my challen…

iWork 2009 Trojan

As I wrote on the Internet Storm Center:
It's already pretty widely reported in the media, take for instance here and here.
First reported by Intego, this trojan apparently is distributed by downloading Bittorrented copies of iWork 2009 from the Internet and installing them. The Trojan is installed as part of the software package, by, yup, you guessed it, you giving the software permissions to install by giving it your password.
Apparently this backdoor opens a hole on your computer, reporting back to a central server in order to allow the attacker to connect and issue commands to your system.
So, what can we learn from this?
1) If you Bittorrent software you are supposed to buy, and break the law in doing so... you have to deal with the ramifications...
2) Hey, you can download the Trial from Apple.com, and then buy it, and they give you a serial number! You don't even have to go to the store to get a boxed copy! You already spent the money and bought a mac, you cheepskate, no…

iWork 2009 Trojan

As I wrote on the Internet Storm Center:
It's already pretty widely reported in the media, take for instance here and here.
First reported by Intego, this trojan apparently is distributed by downloading Bittorrented copies of iWork 2009 from the Internet and installing them. The Trojan is installed as part of the software package, by, yup, you guessed it, you giving the software permissions to install by giving it your password.
Apparently this backdoor opens a hole on your computer, reporting back to a central server in order to allow the attacker to connect and issue commands to your system.
So, what can we learn from this?
1) If you Bittorrent software you are supposed to buy, and break the law in doing so... you have to deal with the ramifications...
2) Hey, you can download the Trial from Apple.com, and then buy it, and they give you a serial number! You don't even have to go to the store to get a boxed copy! You already spent the money and bought a mac, you cheepskate, no…

Snort is up and running, now what?

I’m often asked to write a document about the after effects, the post marital bliss, as it were, of going through the steps of installing Snort as your IDS, and what to do next. So I’ve decided, at great request, to sit down and write a blog entry about the “next steps”.
Now, let me be clear, any security device, yes, ALL of them, require tuning. If someone is out there saying “my device doesn’t require tuning”, not only are they wrong, but it’s an absolute falsehood. I don’t care if your system is being automatically tuned, its still being tuned. One device is not the end all-be all of security devices. Of course there are default settings that take into account the majority of networks out there, and yes, Snort is one of those. But each device you put on your network requires a small bit of tuning at least to adapt to your environment.
So what do I like to do first?
Variables -- Tune those variables. How you tune your Snort variables is up to you, but I always say at the very l…

Desk Clearing Challenge

Okay, here’s my Challenge for you all.
Take your desk. Work, home, wherever it is.
Take everything off it. Everything except your computer. (Mouse, Keyboard, Monitor, iPod/iPhone dock, maybe some speakers too can stay). Everything else comes off. Put it on a pile on the floor or in your inbox or something. Not even Post it Notes. If you one of those people that puts Post It Notes on your Monitor or Desk or something like that, take those off. Clean, use the picture attached to this post for reference of what it should look like.
Now, let’s go through this stuff.
Pile of stuff. Go piece by piece. Do you need to file it? Go file it, matter of fact, would you best be served by scanning whatever the piece of paper is, and put it into your computer?
What do you take notes on? Paper? How about you try taking all your notes digitally. Use something like Evernote, or Notepad, or Wordpad. Doesn’t matter what it is, just get your notes digital. If you are using Mail.app, use the Notes…