Hello all,

We are an online payments solution provider start-up in the UK and are
about to roll out our first web application, using fairly standard
technologies like MySQL, Apache, Java, NodeJS, Flash, Flex and so forth.

What we are looking for is a comprehensive security audit encompassing
ou

[ more ]  [ reply ]

PCI is limited
Maybe this can help
http://www.iso27001standard.com/en

Envoyé à partir de mon Windows Phone
De : Ricardo Raga
Envoyé : 04/07/2012 16:29
À : Anwar Khan; security-basics (at) securityfocus (dot) com [email concealed];
pen-test (at) securityfocus (dot) com [email concealed]
Objet : RES: Risk Assesment Tools

www.smart-ra.com

Ricardo Raga
Seg

[ more ]  [ reply ]

Krebs on Security has posted a new item.

How to Break Into Security, Grossman Edition (Author: BrianKrebs)
https://krebsonsecurity.com/2012/07/how-to-break-into-security-grossman-
edition/
I recently began publishing a series of advice columns for people who are
interested in learning more about sec

[ more ]  [ reply ]

Hi all, I've been assigned to evaluate AWS as an alternative to our current colocation situation and I'm wondering if anyone knows of any reports detailing the regularity, or lack thereof, of security incidents at AWS. I have been positing to the "deciders" an analogy of colos being like hot tubs..

[ more ]  [ reply ]

Hi,

This may not be the right forum ( if so please point me to the right
location) but here goes:

I am working on a project where we are integrating a SIEM into our
environment and I need to create a monitoring and alerting standard.

If I can explain some more:
- There are specific "isolated" sus

[ more ]  [ reply ]

Apologies for cross-postings.

Kindly email this call for papers to your colleagues,
faculty members and postgraduate students.

CALL FOR PAPERS

*********************************************************
The 7th International Conference for Internet Technology and Secured
Transactions (ICITST-2012

[ more ]  [ reply ]

Hi Erik
I assume that you have a standalone software that you give to your customers and which can be used offline. The software then is under the complete control of your untrusted customer.
In that case, I do not see how you can avoid hardcoding the root cert in your code (or a thumbprint that you

[ more ]  [ reply ]

Hi
I would also recommend visiting the ethical hacker.net forums to get good study and exam tips. The exam is very tough (at least for me, i took the full 24 hours to pass the first time) but the course itself is a LOT of fun and learning (and pain). You need to take atleast 2 months (assuming you a

[ more ]  [ reply ]

On Thu, Jul 5, 2012 at 5:30 PM, Trung Nguyen Chi <chitrungnguyen (at) me (dot) com [email concealed]> wrote:
> You are @gmail.com. It could be, that you subscribed with gmail.com but
> Google sents their mail with googlemail.com. So the server doesn't know,
> that you are you. I hope you know what I mean. You can change your
>

[ more ]  [ reply ]

Hi,

When I reply to a post in this list I get few mail delivery failuer
notices. I do remove other addreses in CC an do only keep
security-basics (at) securityfocus (dot) com. [email concealed]

Any clue why I do get mail delivery failuer notices from somtimes
dozens of address which I believe have subcribed to this list?

--

[ more ]  [ reply ]

On Thu, Jul 5, 2012 at 1:22 PM, Chad King <sirkemera (at) gmail (dot) com [email concealed]> wrote:
> Just a quick question for anyone that has taken the CEH or any offensive
> security certifications recently. How long did it take you to study the
> material and be ready for the tests?
>

I've done CEH v7 recently. It took me

[ more ]  [ reply ]

It obviously depends on your knowledge.

If you're skilled already, OSCP probably takes 1 month (not full time).
CEH is crap, don't do it.

Cheers
antisnatchor

On Thu, Jul 5, 2012 at 9:22 AM, Chad King <sirkemera (at) gmail (dot) com [email concealed]> wrote:
> Just a quick question for anyone that has taken the CEH or any off

[ more ]  [ reply ]

Dear All,

ClubHack 2012 onwards, we will concentrate our energies in empowering innovation & leadership development. Having loved our domain so much, we?d continue to do this in the domain of information security only. And that coins our new motto line
?Empowering Innovation & Leadership in Inform

[ more ]  [ reply ]