June 15th, 2004

More on network switches taking on a security role

Here's another article around the idea of policy enforcement, this time on Switches.
As I said previously I think that this is the right way to go about it. If it is possible to block a machine from getting on the network if it doesn't meet certain criteria, then it would be possible not only to reduce the incidence of virii/worms in corporate networks, it might also provide some defence from non-corporate machines being placed on the network.

June 7th, 2004

List of Web Services

Over at www.xmethods.net there's a really cool list of functional web services.
With each there's a link so you can try them out. It's a pretty diverse bunch including practical things like curency conversion and less practical things like... random George W Bush quotes

June 6th, 2004

Wireless Security raises its head again... and again

It definately looks like Wireless insecurity issues will be here to stay for the time being. With 2 vulnerabilities in popular wifi products being announced here and here .
The main problem with these types of vulnerabilities is that I don't think that they will be patched anytime soon in the majority of affected devices. People are hardly waking up to the concept that software needs to be regularly patched, let alone the idea that hardware requires patches as well... Also a lot of wifi products tend to be deployed in smaller organisations and homes, where there is, typically, less security knowledge than in larger firms...
Also a problem is as noted here in a lot of cases you don't even need a vulnerability to hack into a wireless network as many vendors ship Access Points in a wide open config!