Browse by Tags

Measure and counter measure – malware and anti-malware
21 April 08 09:04 PM
There is a small, high-tech and rather geeky war going on and the battlefield is your PC. Like any war, each side is trying to learn from the other. This war is for the ownership of resources – and ultimately for money. Maybe most wars are. Let us look Read More...
Postedby marklon | 1 Comments    
Filed under: , , ,
Malware that wants to stay - Some passive protection tricks
20 March 08 08:31 PM
Hello again I wanted to talk about some of the things that malware does to make itself hard to remove. Most Trojans are designed to work on an average XP workstation and make assumptions based on that – which typically breaks servers in rather nasty ways. Read More...
Postedby marklon | 0 Comments    
Filed under: , , ,
Security Updates - Are they the answer?
12 February 08 01:23 PM
Ah, another “update Tuesday” – known to the rest of the world as “patch Tuesday” but we are not supposed to call it that. We have a fine crop of updates for you but I am not going to talk about those, partially because we won’t be releasing them for several Read More...
Postedby marklon | 2 Comments    
Antimalware tools and tricks
21 January 08 04:50 PM
Ah, I am back in the office and settling into to my normal day to day work. I am fairly often asked to remove malware from systems which the anti-malware programs on that particular PC system can’t handle. In fairness, it is often not the AV products Read More...
Postedby marklon | 0 Comments    
Filed under: , , ,
Doing it yourself.
26 October 07 08:22 PM
Hello again Two blogs in less than 48 hours? Whatever could be happening? No, this is not a reference to the issue documented in http://www.microsoft.com/technet/security/advisory/943521.mspx which is interesting but certainly not widely exploited in Read More...
Postedby marklon | 2 Comments    
Filed under: , ,
You can't get the staff – Social engineering
24 October 07 05:17 PM
Sometimes I like to talk about software engineering but today I would like to ramble on about a different subject: Social engineering. Social engineering is a common technique for getting malware on systems and of course, for Phishing. The “419 scam” Read More...
Postedby marklon | 4 Comments    
Filed under: ,
Malware: mitigating maladies might matter
17 October 07 06:40 PM
Well, another update Tuesday done and dusted. We are not supposed to use the word "Patch" So, the question that I left you with was what could be done to make it safer to run on a compromised computer; that is to ask how could you mitigate the risks? Read More...
Postedby marklon | 1 Comments    
Filed under: ,
Can you break Law #1 and get away with it?
24 September 07 04:20 PM
To save you scrolling down, let me restate Law #1 of the immutable laws of security: " If a bad guy can persuade you to run his program on your computer, it's not your computer anymore" Is there any possibility that it is safe to do business with a computer Read More...
Postedby marklon | 1 Comments    
Filed under: , ,
Living in an unsafe world
18 September 07 04:20 PM
Hello ladies, gentlemen and others I am sorry that I have not blogged for a little while. I have been a little occupied with some pro-active stuff for a change. I was on training last week with David Solomon (smart fellow) and I have been preparing for Read More...
Postedby marklon | 1 Comments    
Filed under: ,
Trust me if you dare...
28 August 07 06:08 PM
Paranoia : baseless or excessive suspicion of the motives of others What percentage of computers are compromised in some way? No-one knows for sure but there are estimates. Not many servers – but compromises of those tend to be critical. Some of the systems Read More...
Postedby marklon | 1 Comments    
Filed under: ,
Targeted attacks - a sniper rifle, not a scattergun
25 July 07 05:44 PM
Malware is often thought of as an equal opportunity nasty. After all, real viruses affect the rich and poor equally. However, things are not as they once were. In the heady days of Blaster and Slammer and Nimda et al, the malware would infect anyone that Read More...
Postedby marklon | 1 Comments    
Filed under: , ,
Risky business whatever you do...
23 July 07 10:31 AM
Wow – The code review entry was really popular. I have to admit that I have never used a code review tool and they may be wonderful. I tend to plough on through the code just to be sure that I haven’t missed anything. I don’t do that many code reviews Read More...
Postedby marklon | 1 Comments    
Filed under: ,
How malware likes to hide
05 July 07 04:58 PM
Well, technically, how malware writers like to hide malware. In my last post, I talked about subversion – hacking the OS not to see the malware. That is part of the rootkit. Not all malware uses a rootkit and all malware has to avoid detection by signature Read More...
Postedby marklon | 1 Comments    
Filed under: , ,
Subversion... something nasty lurks
03 July 07 04:47 PM
Subversion is defined by our friends in the Princeton U’s English department as follows: subversion noun 1. destroying someone's (or some group's) honesty or loyalty; undermining moral integrity; "corruption of a minor"; "the big city's subversion of Read More...
Postedby marklon | 0 Comments    
Filed under: ,
Malware over the years. It is only paranoia if they are not out to get you
25 June 07 09:56 PM
In a slight change of pace, I would like to talk about malware and how things have evolved. I am not exactly a spring chicken which surprises some people because I am still part of the support organization. I like it here – I am working on real problems Read More...
Postedby marklon | 2 Comments    
Filed under: , ,

This Blog

Syndication

Page view tracker