Montreal blog on Internet Security Software

Blog

August 15

New Windows 7 blog online

This should be interesting to see the progression of the Vista successor..

"Over the past 18 months since Windows Vista’s broad availability, the team has been hard at work creating the next Windows product."

http://blogs.msdn.com/e7/

2:31 PM | Add a comment | Send a message | Permalink | View trackbacks (0)

June 10

Binary vulnerabilities and Exploit Writing

I've been writing assembly all day at the recon 2008 security conference with Gerardo 'gera' Richarte.

This is really really really fun. Hands on buffer overflows and exploits using OllyDbg....

http://recon.cx/2008/training2.html

8:02 PM | Add a comment | Send a message | Permalink | View trackbacks (0)

June 06

http://www.superconfigure.com/home.html

I wrote a small Windows (XP & Vista) reset & harden like tool, check it out: http://www.superconfigure.com/home.html

7:37 PM | Add a comment | Send a message | Permalink | View trackbacks (0)

Windows Vista

Top Security Features in Windows Vista

http://technet.microsoft.com/en-us/magazine/cc546565.aspx

User Account Control

Internet Explorer Protected Mode

Standard User Support

BitLocker Drive Encryption

Windows Resource Protection

Services Hardening

Advanced Firewall

Windows Vista SP1 UAC improvements

http://edge.technet.com/Media/Windows-Vista-SP1-UAC-improvements/

3:46 PM | Add a comment | Send a message | Permalink | View trackbacks (0)

May 28

MSFT Live Mesh Beta..wtf?!

Oh come on..I can't upload a folder, I gotta do it file by file ?!

Thanks live mesh, but I'll stick with jungle disk for now....

2:47 PM | Add a comment | Send a message | Permalink | View trackbacks (0)

View more entries

Other Security Bloggers, and articles on software



Programatically setting Wininet/Internet Explorer's Proxy settings From Windows Core Networking Blog

PaulDotCom Episode98 DLL Injection

Google Online Security Blog The latest news and insights from Google on security and safety on the Internet

The Ghost In The Browser - Analysis of Web-based Malware by Google's Niels Provos 2007 9 pages Other link to doc: http://www.usenix.org/event/hotbots07/tech/full_papers/provos/provos.pdf

All Your iFRAMEs Point to Us by Google's Niels Provos February 4th, 2008 22 pages

Password Strength Checker This application is designed to assess the strength of password strings. The instantaneous visual feedback provides the user a means to improve the strength of their passwords, with a hard focus on breaking the typical bad habits

Microsoft Password checker Password Checker can help you to gauge the strength of your password. It is for personal reference only. Password Checker does not guarantee the security of the password itself.

Default Router Password Database This is the internets most complete default router password database available.

Google Sparsehash Package The Google sparsehash package consists of two hashtable implementations: sparse, which is designed to be very space efficient, and dense, which is designed to be very time efficient. For each one, the package provides both a hash-map and a hash-set

IDN Conversion tool Putting [räksmörgås.josefßon.org] in IE7, gets puny coded to [http://xn--rksmrgs-5wao1o.josefsson.org/] use this tool to convert unicode characters to punycode as IE 7 does.

How long should my passphrase be? To provide adequate protection against the most serious threats... keys used to protect data today should be at least 75 bits long. To protect information adequately for the next 20 years ... keys in newly-deployed systems should be at least 90 bits long

Draft Technical Report on C++ Library ISO/IEC DTR 19768 Doc No: N1836=05-0096 Date: 2005-06-24 Reply to: Matt Austern austern@google.com

Jeffrey's Exif Viewer Great util for viewing more data on your image files than you care to know. Exchangeable Image File Format.

McAfee Avert Labs Blog Computer Security Research

Microsoft® Windows® Software Development Kit for Windows Vista™ and .NET Framework 3.0 Runtime Components The Windows SDK includes documentation, samples, and tools designed to help you develop Windows applications and libraries using both Win32® and .NET Framework 3.0 technologies targeting Windows Vista.

Anton Stiglic A senior IT security advisor with a strong background in information theory and a keen interest in the business aspects involved around IT decisions. He has been involved in security in the IT industry since 1999, and in academia since 1996

Virus Bulletin News Latest news from the anti-virus industry

StopBadware Blog Stop Badware Blog

Virus Total Blog Blog VirusTotal

Norman Sandbox Upload malware for analysis

Susceptible Api's Build Security In - Setting a Higher Standard for Software Assurance. This catalog provides a set of Coding Rules to assist software developers, whether manually or in conjunction with tools, to discover, explore, remove and eventually prevent security vul

Windows Wireless Networking Using WMI to verify WEP status - 2006 Article, Me

Uniform Resource Identifiers (URI): Generic Syntax This document defines the generic syntax of URI, including both absolute and relative forms, and guidelines for their use; it revises and replaces the generic definitions in RFC 1738 and RFC 1808.

RFC 3552 Guidelines for Writing RFC Text on Security Considerations

Should I check the parameters to my function? Larry Osterman's blog - May 18 2004

Agile Alliance We are uncovering better ways of developing software by doing it and helping others do it.

Exploit Prevention Labs Exploit and 0day prevention

got API A great website for ANY developer!

STL.NET Primer Stanley B. Lippman Architect, Microsoft Visual C++ team August 2004 Applies to: Microsoft Visual C++ 2005 Standard Template Library (STL) and STL.NET

STL/CLR STL/CLR – Version of Standard Template Library for managed code 4/4/2007

AV Test project of the Business-Information-Workgroup at the Institute of Technical and Business Information Systems at the Otto-von-Guericke-University Magdeburg (Germany) in cooperation with AV-Test GmbH. In regular intervals we test anti-virus, anti-spyware...

AV Comparatives Independent comparatives of Anti-Virus software

VS2005 SP1 update for Vista http://support.microsoft.com/default.aspx?scid=929470

Peter Gutmann's Cryptlib Better than OpenSSL?

Why Crunch Mode Doesn't Work slashdot article, 2005

Top 50 Msdn security Articles MSDN Magazine Security CD, 19,95$

The Six Dumbest Ideas in Computer Security by Marcus Ranum

Adam Shostack Security Blog

Stefan Brands Postings on anything related to digital identity management.

Montreal blog on Internet Security Software

Profile

marioc@computer.org

Xbox Live GamerCard