Wednesday, January 2, 2008
Tor is great if you are already encrypting your traffic. It isn’t the best idea if you are doing a lot of clear text related activities.
OSX Instructions here
The Tor Overview is worth reading through and I can see good uses for this type of tech for globe trotters who may need to bypass certain filters.
Some advanced tips:
If you want to forward multiple virtual ports for a single hidden service, just add more HiddenServicePort lines. If you want to run multiple hidden services from the same Tor client, just add another HiddenServiceDir line. All the following HiddenServicePort lines refer to this HiddenServiceDir line, until you add another HiddenServiceDir line:
HiddenServiceDir /usr/local/etc/tor/hidden_service/
HiddenServicePort 80 127.0.0.1:8080
HiddenServiceDir /usr/local/etc/tor/other_hidden_service/
HiddenServicePort 6667 127.0.0.1:6667
HiddenServicePort 22 127.0.0.1:22
Wednesday, January 2, 2008
NYT article claiming to help with the issue of kiosk network connections. They could have keyboard sniffers, network sniffers, or just good old spyware.
Print edition
Wednesday, January 2, 2008
The filtering takes place in at least three ways:
de-listed domains: specific websites are removed entirely from search results; it is as if the website never existed.
de-listed urls: specific urls are removed from search results if they contain a de-listed domain.
restricted keywords: specific keywords are restricted to searches of web pages hosted in China only.
Wednesday, January 2, 2008
Wednesday, January 2, 2008
Wednesday, January 2, 2008
Wednesday, January 2, 2008
Paper by Berkman’s J Zittrain on Chinese Filtering (warn: PDF)!
/whois jzittrain
Jonathan Zittrain - Berkman Center for Internet & Society
Jonathan Zittrain is a co-founder of HLS’s Berkman Center for Internet & Society and served as its first executive director from 1997-2000.
- Control of digital property & content
- Cryptography
- Electronic privacy
- Internet governance
- Technology in education
Subject Areas for Supervising Written Work
- Cyberlaw
- Intellectual Property
- Torts
- Trademark
Subject Areas for Accepting Press Inquiries
- Cryptography
- Cyberlaw
- Electronic commerce
- Internet governance
- Privacy
Education
- Yale University B.S. 1991, Cognitive Science and Artificial Intelligence
- Harvard University John F. Kennedy School of Government M.P.A. 1995
- Harvard Law School J.D. 1995
Appointments
- Lecturer on Law, 1997
- Faculty Co-Director, Berkman Center for Internet and Society, 2000
- Assistant Professor of Law, 2000
- Jack N. and Lillian R. Berkman Assistant Professor for Entrepreneurial Legal Studies, 2001
- Jack N. and Lillian R. Berkman Visiting Professor for Entrepreneurial Legal Studies, 2005
- Chair, Internet Governance and Regulation, Oxford University, 2005
Wednesday, January 2, 2008
For more information:
from the bug logs:
There seems to me a consistant misuse of autoconf “localstatedir” variable. It is traditionally seen that localstatedir be $prefix/var if not supplied. In the following example from nessus-adduser.in there are two issues. One being that if $localstate dir was $prefix/var then this would create $prefix/var/lib/nesuss. And the second being that nessus-adduser.in is broken. If in this case the auth type is “pass” and MD5 is not present, it will make an auth password in an entirely different tree then if it did have MD5
Plug in count seems low or maybe I’m reading this wrong. Check out the nikto plugin.
The SSH DSA fingerprint is: 08:e9:69:cb:d6:42:9f:24:7d:40:de:12:ee:9e:92:23. The SSH RSA fingerprint is: 48:5f:a5:1c:7e:1c:b4:ef:53:b9:08:49:2d:c0:cb:1b.
Wednesday, January 2, 2008
Date: Mon, 9 Apr 2007 09:50:04 -0400
From: “Jon D”
Subject: Giving Nessus Reports to clients — Licensing, Legal, etc
To: nessus at list.nessus.org
Message-ID:
Content-Type: text/plain; charset=”iso-8859-1″
I’ve heard of PenTesters giving a Nessus scan report to the client as part
of their final report.
I read through the nessus licensing agreement, and I didn’t say where it
said it’s not allowed.
Is this legal?
Also, is it legal to copy text from the nessus scan for a report?
