|
 |
dijous, 26 / octubre / 2006 |
|
|
[Treonauts] Treo Family Comparison Chart: Understanding the Differences. Útil comparativa de les característiques de tots els models de Treo:
Following my post about Choosing Your Next Treo so many Treonauts have emailed me asking to better understand the specific differences between the six current and future Treo smartphones that I thought the time had come to put together a comparative chart for all of these. I have included all the specifications and highlighted the areas where there are clear differences between one or more Treo smartphones (most accessories will work across all Treo smartphones except the cases). Please click on the chart below to open a full resolution image.
|
11:23 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
 NuFW és un tallafocs per a Linux, integrat amb Netfilter (el tallafocs que forma part del nucli de Linux), que realitza autenticació per a cada connexió que passa a través del filtre IP, demanant de forma transparent les credencials de l'usuari abans de realitzar el filtrat del tràfic. Això en la pràctica vol dir que podem definir una política d'accés basada en l'usuari i no l'adreça IP. Disposa de clients per a Linux, Mac OS X, FreeBSSD i Windows.
NuFW can :
- Authenticate any connection that goes through your gateway or only from/to a chosen subset or a specific protocol (iptables is used to select the connections to authenticate).
- Perform accounting, routing and quality of service based on users and not simply on IPs.
- Filter packets with criterium such as application and OS used by distant users.
- Be the key of a secure and simple Single Sign On system.
NuFW is :
- Scalable : NuFW is composed of two daemons that can be put on different systems and the main daemon is heavily multithreaded.
- Modular : User authentication and Access control list verification are performed via loadable module (system, ldap, dbm, plaintext modules are provided). User activity logging can be done via syslog, mysql or postgresql.
- Open : NuFW is released under the GNU GPL licence v2 and all protocols are fully documented.
|
10:09 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
[eWeek] Security Vendor Bypasses Microsoft's Vista PatchGuard. Una de les proteccions que incorpora el nucli de Windows Vista, PatchGuard, per prevenir diverses formes de malware pot ser ignorada gràcies al fet que Windows permet utilitzar controladors de dispositiu de versions prèvies.
Security software maker Authentium says that it has created a new version of its flagship product that circumvents the PatchGuard kernel protection technology being added to Microsoft's next-generation Vista operating system.
(...)
PatchGuard, part of the KPP (Kernel Patch Protection) system being included in the 64-bit version of Vista to help protect the OS against rootkits and other advanced forms of malware, has become the center of a storm of controversy between Microsoft and major security software makers.
(...)
At its core, PatchGuard is meant to block any application from accessing, or "hooking" Vista's kernel commands, a technique utilized by vendors in sophisticated anti-tampering and behavior monitoring tools, and used by hackers in attacking computer systems with rootkits.
(...)
When a program of any kind attempts to modify the kernel on a system running PatchGuard, which is already available in 64-bit versions of Microsoft's Windows XP OS, the computer produces a blue screen and stops all other Windows applications from running.
|
09:55 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
Web-style Wireless IDS attacks
Wireless intrusion detection systems (WIDS) are not yet as popular as their wired counterparts, but current trends would suggest that their number is set to grow. One positive factor in this respect is the integration of such programs with active network equipment and Management awareness of the risks associated with the unauthorised use of wireless devices. This awareness has led to an increase in the number of WIDS installations - even where wireless networks are not used.
In view of this situation, specialists in the field of security are now aware of the need to evaluate not only the quality features of any product, but also of the need to predict any possible negative influence arising from its implementation on the security of a corporate network.
This article looks at the results of research into wireless intrusion detection systems from the point of view of the specialist in the field of applications security. Design faults discovered are not discussed in the article as their correction requires significant effort on the part of the manufacturer.
|
09:50 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
© Copyright 2003-2006 Xavier Caballe.  . Si no s'indica expressament el contrari, el material publicat en aquest weblog es distribueix d'acord amb la llicència Creative Commons. El contingut és responsabilitat única i exclusivament del seu autor i no té cap relació amb les seves activitats professionals.
|
 |
 |
 |
 |
Contingut actualitzat
Categories
Darrers comentaris
Arxiu
Contingut antic
(ja no s'actualitza)
Versions anteriors
d'aquesta pàgina
|
 |
 |
 |
 |
|
