I Am Security

Category: Aladdin

  • The oracle strikes again – “Browser OS” threats start to appear

    —

    by

    iamit
    in ,

    Moving on from the social networking issues we outlined in the past couple of weeks, after following the predictions, and their materialization (here, here, here in the announcement of Gmail offline, here, and here), we can already see the “Browser OS”, as we dubbed it in our annual threat and predictions report, begin to materialize…

  • Social networking threats – the “hacker” story

    —

    by

    iamit
    in ,

    As the social networking threats angle is picking up a lot of traction lately <pat_on_own_back>,  the folks at Netragard have posted a great write-up on using social networks as an attack tool – involving both social engineering as well as technical exploits. The post can be found here, and I just want to quote a couple of…

  • Blocking Facebook? Not popular, and not effective

    —

    by

    iamit
    in ,

    OK, so we know that social networking sites have their issues and threats associated with them, we’ll be the first to admit it. But on the same note, we also know that just blocking/censoring them (pick the more politically correct term) is not working either. This is in light of the Maryland general assembly’s decision…

  • Fighting an infection vector with new standards – ClickJacking

    —

    by

    iamit
    in

    If you haven’t heard yet, the newest version of Microsoft’s Internet Explorer 8 (RC1) have been endowed with support for “Anti-Clickjacking” (for more background on clickjacking, check out: http://ha.ckers.org/blog/20080915/clickjacking/). This new feature is basically an implementation for a new header (X-FRAME-OPTIONS) that is returned from a server which defines the scope of “netsing” that is…

  • BlueHat post on the state of web security

    —

    by

    iamit
    in ,

    I’ve been asked to contribute once again to the Microsoft BlueHat blog, and have written a quick “state of the web security” post. Check it out, and as always, feel free to comment or discuss whether in agreement or not. The post is located here. Cheers.