yes. the government is sans largest customer.
You know send em to a sans class, wow them with some code, tell some stories and their an insto presto expert. then they go on to teach :)

...

[ more ]  [ reply ]

Great read, really makes one understand how things are working nowadays and get an idea of how things will keep on working in the future.

Regards,

Ed...

[ more ]  [ reply ]

"are the FBI using SAN's material?"

Isnt everyone?...

[ more ]  [ reply ]

You said "Every technique you posted about is exact carbon copy, tool for tool, and scenario for scenario from the introduction course of the SANS hacking project." Are you implying the FBI would stoop so low as to steal techniques from abroad? You sound like a terrorist, perhaps al Qaeda? Perceptio...

[ more ]  [ reply ]

hmmm how is it you can claim ownership of information like this.. you totally missed the point of the entire article.

stupid people using computers are the problem, so educate them. ...

[ more ]  [ reply ]

SANS teaches people how to in class. If he taught something that looked like SANS courseware, it's probably made the lecture circuit by way of HOPE or one of the countless other hacker conventions years before it was ever mentioned at SANS. SANS is Infosec for middle management.

...

[ more ]  [ reply ]

Every technique and idea taught by SANS is lifted from somewhere else. Watermarks in your slides prove it.
What is your point? This GS or SES level guy doesn't have time to play with powerpoint. He understands the material and chooses to augment his speech with a few canned demos.
Big whoop....

[ more ]  [ reply ]

Minsh IS in Eastern Europe....

[ more ]  [ reply ]

No it is not but given that your average American could not find Belarus on a map or even care that existed I say Russia as well. Why, because it saves on giving the ignorant a geography lesson...

[ more ]  [ reply ]

I guess you completely missed the point: He is a good teacher and a mentor, as abiding regulations is not being "sissy" about being predated, it's really childish to think that.

If you're a computer security expert, you know well enough that you protect against the CHANCE of getting attacked, jus...

[ more ]  [ reply ]

Unplugging the network cable is the ultimate in security. ;)

I would certainly hope that the FBI is telling its agents not to connect their laptops to the Internet except when it's strictly necessary. *Especially* if they're running Windows. Too many 0-day exploits.
...

[ more ]  [ reply ]

I would suspect that the regulation is not taht connecting to the internet is forbidden or even discouraged - but rather something more along the lines of when visiting a facility with an in house network do not connect to their network unless you can first verify what type of security from virus an...

[ more ]  [ reply ]

Are you stupid? Most government comps with sensitive info are banned from hooking up to the net...for obvious reasosn. ...

[ more ]  [ reply ]

The only 100% surefire way to prevent babies is not to have sex. In the same way, the only 100% surefire way to prevent all kinds of hacking is not to hook up to any network anywhere ever.

Hope your condom doesn't break....

[ more ]  [ reply ]

Hey Nevada,

Are you upset because they wouldn't hire you?

Keep in mind what their job really is - to investigate and report. They're not reseachers!

Lighten up big fella....

[ more ]  [ reply ]

> You know what I recommend? A Parent-Teacher-FBI Weekend...

What I would recommend: A Parent-Teacher-FBI/CIA weekend with smart and honest person. Hard to find this one.

BTW, better run background check on your financial advisor. You'll be amazed... Forget about that sysadmin - he's too busy ...

[ more ]  [ reply ]

True. All laws that I can think of regulate economic behaviour....

[ more ]  [ reply ]

If you are likening the Russian Mafia to Santa Claus- maybe you had better stop for lunch one day in any Russian cafe in Denver. :o) They are alive and well my friend...

[ more ]  [ reply ]

¨ i think that FBI folks knows geography. ¨

No, that would be the CIA folks.
...

[ more ]  [ reply ]

Eastern European crooks are clever, you know why, many of them are former engineers and military workers who lost their jobs during the fall of communism. Now they are looking to exploit and find new ways of making money....

[ more ]  [ reply ]

High probability......

[ more ]  [ reply ]

My guess is they just haven't put money into the tools and training for it, since Macintosh is such a minority architecture in the U.S. The article mentioned that they get the RCMP to do Mac forensics for them. If only, say, 5% of your cases involve a Macintosh, it probably makes sense to outsourc...

[ more ]  [ reply ]

well..for one thing macs don't keep a backup of every e-mail you've ever recieved in the registry.

macs are actually secure...so they have to get through passwords and permissions.

third..with the latest revision of OS X you can encrypt your entire home directory with 128 bit encryption. this ...

[ more ]  [ reply ]

ok thanks for help...

[ more ]  [ reply ]

Assuming you won't stay off the internet completely:

Simply, I recommend the following:

* Norton Internet Security (You're on the right track). Set it to "paranoid", and block outside traffic. Blockups, too.
* Mozilla - get rid of Internet Explorer. While it may or may not be "better", it...

[ more ]  [ reply ]

You should use a hardware gateway product with
stateful packet inspection (firewall) capabilities. These are available for under $100, and protect you much better than software firewalls. Brand names that come to mind are Linksys, Dlink, and Netgear, but there are others. A software firewall that r...

[ more ]  [ reply ]

Here's a helpful site on the net, that is dedicated to security.
http://grc.com/
If you are willing to spend some time reading on this site, there's a lot to learn. One of the useful services on their site is a page where you can test your firewall. You find it here: https://grc.com/x/ne.dll?bh0bk...

[ more ]  [ reply ]

Look for a local computer users group at www.apcug.com. There are often pros who participate in these groups (I'm secretary of mine) who would be happy to point you in the right direction. That said: Windows update (auto update helps), Firewall (Norton 2004 is fine), Antivirus software (again, you ...

[ more ]  [ reply ]

Are you saying that they're insecure out of the box? They come with pretty much nothing running. So they're pretty secure, in addition to 'being able to run everything'....

[ more ]  [ reply ]

But, as always, if you have physical access to the machine you've pretty much won the game.

Besides. Ever hear of "rubber hose cryptography"? The technique consists of "Tell us the passphrase or something bad will happen to you."

128-bit encryption keeps out the thief, the common hacker, the c...

[ more ]  [ reply ]

"Want root on Jaguar? all you need is an install CD and physical access."

Don't be stupid. All you need is physical access. CMD-S during boot gets you into single-user mode with root privileges.

MacOS X is far from the only UNIX to provide an easy-to-enter single user mode. This because the...

[ more ]  [ reply ]