Sources: Amazon and CIA ink cloud deal



Tweet

In a move sure to send ripples through the federal IT community, FCW has learned that the CIA has agreed to a cloud computing contract with electronic commerce giant Amazon, worth up to $600 million over 10 years.

Amazon Web Services will help the intelligence agency build a private cloud infrastructure that helps the agency keep up with emerging technologies like big data in a cost-effective manner not possible under the CIA's previous cloud efforts, sources told FCW.

Amazon officials would not confirm the existence of the contract, and a CIA spokesperson likewise declined to comment on the matter.

"As a general rule, the CIA does not publicly disclose details of our contracts, the identities of our contractors, the contract values, or the scope of work," a CIA spokesperson told FCW.

More:
fcw.com/articles/2013/03/18/amazon-cia-cloud.aspx

DCAA gets its own bad review



Tweet

The Defense Contract Audit Agency got a bit of a slap from the Defense Department's inspector general.

DCAA audits are the bane of many contractors existence because they are seen as nitpicking and slow. It takes years for some audits to be closed. One executive told me that he has audits just now being closed from 2007.

The inspector general looked at 50 cases from fiscal 2010, and found deficiencies in 37 of them; in fact, the IG is recommending that some reports be rescinded, or have supplemental information added to them.

More:
http://washingtontechnology.com/blogs/editors-notebook/2013/03/dcaa-audit-review.aspx

 

VUPEN Security - The Leading Provider of Defensive and Offensive Cyber Security Intelligence



Tweet

VUPEN Vulnerability Research Solutions

Binary Analysis & Exploits (BAE)   For defensive security. Get access to private and reliable exploits with detailed technical analysis of the most significant public vulnerabilities. Threat Protection Program (TPP)   For defensive security. Get access to advanced vulnerability research and guidance to protect against zero-day exploits and targeted attacks. Exploits for Offensive Security   For offensive security. Get access to extremely sophisticated and government grade exploits specifically designed for offensive missions.

More:
http://www.vupen.com/english/

Is BYOD helping or hurting your company’s productivity?



Tweet

In 2012, any remaining arguments against BYOD were seemingly put to rest, and the practice of "bring your own device" to work gained broad acceptance.

Most companies approving a BYOD policy consider it a win-win situation — at least at first. Employees are free to use their favorite devices, and can seamlessly integrate their professional and personal digital worlds. Companies save some money and enjoy a productivity boost since employees tend to stay more connected to their jobs when they're using their own devices.

More:

http://venturebeat.com/2013/03/10/it-byod-productivity/

Crack Hashes using Hashcat



Tweet

In this tutorial will describe the main options of Hashcat. Will explain the basic operation of using it to crack Hashes Passwords (LM, NTML, MD5, etc) with different attack methods such as Brute-Force attack, Combinator attack, Dictionary attack, Hybrid attack and much more.

More:

http://mobile.dudamobile.com/site/liatsisfotis?url=http%3A%2F%2Fwww.liatsisfotis.com%2F2013%2F02%2Fcrack-hashes-using-hashcat.html%3Fm%3D1#2855

About ISSA - Information Systems Security Association



Tweet

Developing and Connecting Cybersecurity Leaders Globally.

ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure.

The Information Systems Security Association (ISSA)® is a not-for-profit, international organization of information security professionals and practitioners. It provides educational forums, publications, and peer interaction opportunities that enhance the knowledge, skill, and professional growth of its members. Join today.

Goals

The primary goal of the ISSA is to promote management practices that will ensure the confidentiality, integrity, and availability of information resources. The ISSA facilitates interaction and education to create a more successful environment for global information systems security and for the professionals involved. Members include practitioners at all levels of the security field in a broad range of industries such as communications, education, healthcare, manufacturing, financial, and government.

ISSA is dedicated to providing the following services to the information security community

• Promote the education and expand the knowledge and skills of its members in the interrelated fields of information systems security and information data processing
• Encourage a free exchange of information security techniques, approaches, and problem solving by its members
• Provide communication to keep members abreast of current events in information processing and security, providing benefits to them and their employers
• Communicate to management, and to systems and information processing professionals the importance of establishing controls necessary to ensure the secure organization and utilization of information processing resources

Activities

• Organize and provide international conferences, local chapter meetings and seminars that offer educational programs, training and valuable networking opportunities
• Provide access to information through the ISSA Website as well as online E-Newsletters and in the monthly ISSA Journal
• Earn CPE credits by attending chapter meetings, ISSA Web Conferences, subscribing to the ISSA Journal or serving as a chapter or international council leader
• Offer opportunities for members to volunteer by joining committees, which provide leadership opportunities in the security industry
• Enhance professional stature and advance the profession by sharing your expertise as a event speaker or contributor to the ISSA Journal

More:

http://www.issa.org/?page=AboutISSA

InfraGard - Public Private Partnership -Federal Bureau of Investigation (FBI)



Tweet

InfraGard is an information sharing and analysis effort serving the interests and combining the knowledge base of a wide range of members. At its most basic level, InfraGard is a partnership between the Federal Bureau of Investigation and the private sector. InfraGard is an association of individuals, academic institutions, state and local law enforcement agencies, and other participants dedicated to sharing information and intelligence to prevent hostile acts against the United States.InfraGard Chapters are geographically linked with FBI Field Office territories. Learn more about InfraGard

More:

https://www.infragard.net/

Venezuelan Leader Chávez Dies After Cancer Battle



Tweet

CARACAS, Venezuela—Hugo Chávez, a former tank commander turned populist politician who used Venezuela's oil riches to pursue his vision of socialism and challenge the U.S., died Tuesday from complications related to cancer. He was 58 years old.

With Mr. Chavéz just months into his fourth term, his death plunged Venezuela into political uncertainty. Vice President Nicolás Maduro will succeed Mr. Chávez as interim president, but must hold a new election within 30 days, according to the constitution.

http://m.wsj.com/articles/a/SB10001424052970203458604577265460960140008?mg=reno64-wsj

pwnieexpress/Raspberry-Pwn · GitHub



Tweet

 _____      ___  _ ___ ___   _____  _____ ___ ___ ___ ___   | _ \ \    / / \| |_ _| __| | __\ \/ / _ \ _ \ __/ __/ __|   |  _/\ \/\/ /| .` || || _|  | _| >  <|  _/   / _|\__ \__ \   |_|   \_/\_/ |_|\_|___|___| |___/_/\_\_| |_|_\___|___/___/  

Raspberry Pwn : A Raspberry Pi pentesting suite by Pwnie Express (pwnieexpress.com)

Release 0.2 (December 2012)

---

https://github.com/pwnieexpress/Raspberry-Pwn

Veterans Seen as Suffering as U.S. Scraps Health-Records System



Tweet

Feb. 27 (Bloomberg) -- The Pentagon and Department of Veterans Affairs may let veterans care fall through the cracks by scrapping a plan to build a joint health-records system, U.S. lawmakers said.

Last year, then-Defense Secretary Leon Panetta pledged to "meet or beat" a 2017 deadline to integrate the two agencies' networks, one for troops and the other for veterans.

The agencies instead this month scrubbed their plan because of cost and time concerns, and said they will integrate the data without building a new system. The move may hurt veterans struggling to access military medical records and seeking compensation for injuries, said Representative Jeff Miller, chairman of the House Committee on Veterans Affairs.

More:
http://www.healthdatamanagement.com/news/defense-veterans-affairs-integration-electronic-health-records-45773-1.html

Samsung Increases Business Security Features of Galaxy S3, Galaxy Note 2, Galaxy S4 via SAFE with Knox



Tweet

 

The Samsung Galaxy experience is no longer confined to the fun realm. With the introduction of Samsung SAFE with Knox, the South Korean firm offers secured productivity moments for Galaxy S3 and Galaxy Note 2 users.

The new security suite is geared for S3 and Note 2 deployment and will allow owners of the flagship handsets to "switch between their business and personal lives without switching phones," Gotta Be Mobile said in a report.

Clearly, Samsung's agenda is to encroach on the territory previously ruled by BlackBerry and now considered an Apple turf.

More:
http://m.ibtimes.co.uk/samsung-increases-business-security-features-galaxy-s3-439885.html

This one looks interesting - Sassy App Punishes You When You're Being Lazy



Tweet

Take heed, procrastinators: A new apprewards and punishes users based on how many items they check off on their to-do lists.

Promoted as "the world's first to-do list with a personality," Carrot aims to encourage productivity, but is more entertaining than motivating.

Each time users complete a task, they are rewarded with points, which they can later redeem for prizes (including gifts, compliments, jokes and quotes). In response, Carrot — represented on-screen by a blue dot — stays happy.

But when users fail to get things done — watch out. Carrot turns red, evoking the creepy aura of HAL 9000 from 2001: A Space Odyssey. As the description says on Apple's App Store: "You do not want to make Carrot upset."

More:
http://mashable.com/2013/02/28/carrot-app-lazy/

Yahoo Responds to Controversy Over Work-at-Home Ban



Tweet

As much as I like telework, I believe it should be used sparingly and only with clear tasks and assignments. Too often it is abused. 

I think this says it nicely:

To become the absolute best place to work, communication and collaboration will be important, so we need to be working side-by-side. That is why it is critical that we are all present in our offices. Some of the best decisions and insights come from hallway and cafeteria discussions, meeting new people, and impromptu team meetings. Speed and quality are often sacrificed when we work from home. We need to be one Yahoo! (Insert you organization name here), and that starts with physically being together.

More:
http://mashable.com/2013/02/27/yahoo-work-at-home/

59% of the 'Tuna' Americans Eat Is Not Tuna - Atlantic Mobile



Tweet

Nonprofit ocean protection group Oceana took 1,215 samples of fish from across the United States and genetically tested them in order to bring us the following astonishing facts:

• 59% of the fish labeled "tuna" sold at restaurants and grocery stores in the US is not tuna.
• Sushi restaurants were far more likely to mislabel their fish than grocery stores or other restaurants.

What's for dinner at your local sushi joint? Pretty much anything but what's on the menu.

• In Chicago, Austin, New York, and Washington DC, every single sushi restaurant sampled sold mislabeled tuna.
• 84% of fish samples labeled "white tuna" were actually escolar, a fish that can cause prolonged, uncontrollable, oily anal leakage.

More:
http://m.theatlantic.com/business/archive/2013/02/59-of-the-tuna-americans-eat-is-not-tuna/273410/

Meet ownCloud 5, The Open Source Dropbox



Tweet

ownCloud is a free software suite, written in PHP, that provides file storage, synchronization, and sharing. It provides the same basic features of Dropbox or Box.net. It also provides a whole lot more.

ownCloud was started three years ago when Frank Karlitschek wanted a free software alternative to proprietary solutions. In the time since the project has attracted a dedicated group of core contributors, made several significant releases, and is available in 42 languages. It's also spun off a commercial project to drive development of ownCloud for enterprise users.

The core ownCloud offering is file storage and synchronization. You also get optional contacts and calendar synchronization, if you want to use it. As an open source application, you can install it on any computer you control. This means you know how and where your data is stored, something which existing hosted solutions abstract away from you. Individuals and enterprises can install ownCloud on their own hardware, and define access policies according to their own needs.

More:

http://techcrunch.com/2013/02/24/meet-owncloud-5-the-open-source-dropbox

LMI Awarded $28.5 Million IDIQ to Support Army Deputy Under Secretary - MarketWatch



Tweet

LMI will lead a diverse, highly qualified team in competing for tasks to support the Deputy Under Secretary of the Army (DUSA) under a $28.5 million multiple-award indefinite delivery/indefinite quantity (IDIQ) contract. The scope of work is reflective of LMI's acclaimed expertise in deep analytics and organizational improvement.

Over the course of the contract's three years, LMI will compete for task awards to provide DUSA with advisory and assistance services for improving organizational alignment, performance management, cross-functional decision making, and knowledge and information management.

More:
http://www.marketwatch.com/story/lmi-awarded-285-million-idiq-to-support-army-deputy-under-secretary-2013-02-21

Former LMIer tasked with “the most distasteful task” of sequestration



Tweet

Developing plan to furlough of up to 750,000 civilian Defense Department employees

Calling it “the most distasteful task” of his four-year tenure, Pentagon Comptroller Robert Hale on Wednesday outlined the process for furloughing up to 750,000 civilian Defense Department employees should looming across-the-board-budget cuts take effect, hours after his department sent Congress notice that a 45-day furlough clock is now ticking.
Given the need to cut $46 billion, or 9 percent in all 2,500 Pentagon accounts if no new budget law is enacted by March 1, “we feel we don’t have any choice,” Hale told reporters. Reductions in force would be too expensive due to requirements for paying for unused vacation and severance, he added.
More:
http://www.govexec.com/defense/2013/02/pentagon-planners-detail-distasteful-sequestration-furloughs/61418/

It's Okay to Open More Than Nine Browser Tabs; Here's How to Easily Manage Them [feedly]



Tweet

Recently, we had a guest post on why you should never have more than nine browser tabs open, and it was quite controversial—even among some of us on staff. So, here's our counterpoint: it's okay to have a ton of tabs open, you just need a few tricks to keep them all organized.

More:

It's Okay to Open More Than Nine Browser Tabs; Here's How to Easily Manage Them

ADMIN HORROR: Enable TLS 1.1 and TLS 1.2 on Windows Server 2008 R2 and IIS 7.5



Tweet

This is worth looking at...

I would make the changes by hand though.

More:
http://www.adminhorror.com/2011/10/enable-tls-11-and-tls-12-on-windows_1853.html

10 Pro-Gun Myths, Shot Down



Tweet

Fact-checking some of the gun lobby's favorite arguments shows they're full of holes

By cutting off federal funding for research and stymieing data collection and sharing, the National Rifle Association has tried to do to the study of gun violence what climate deniers have done to the science of global warming. No wonder: When it comes to hard numbers, some of the gun lobby's favorite arguments are full of holes.

More:

http://m.motherjones.com/politics/2013/01/pro-gun-myths-fact-check