stoQ:



Tweet

Introduction to stoQ

Simply put: we were tired of wasting time.  As network defenders, we have seen the market explode with countless security tools promising better awareness, functionality, and speed (we'll make you taller AND better looking!!!).  Unfortunately, most of these solutions have one thing in common -- they don't talk to each other, and in many cases, results are lost the moment our screen scrolls away or our browser window closes. As analysts, we have been frustrated by this inefficiency for some time now.  It doesn't have to be this difficult. We just want our data, and we want to be able to easily search it in our datastore of choice.  So, we decided to do something about it.

More:
https://stoq-framework.blogspot.com/2016/01/introduction-to-stoq.html

No, sir, I have no experience but I'm a big fan of money.



Tweet

I like it, I use it, I have a little. I keep it in a jar on top of my refrigerator. I'd like to put more in that jar. That's where you come in.

Interesting Phish



Tweet

Interesting phish attempt. Emailed to my work account. It links to what looks like an Outlook Web Access page.

Links to this page. Yeah, sure. I'm gonna just login right now...

Cyber Chip - Scouting info



Tweet

Today's youth are spending more time than ever using digital media for education, research, socializing, and fun. To help families and volunteers keep youth safe while online, the Boy Scouts of America introduces the Cyber Chip. In developing this exciting new tool, the BSA teamed up with content expert NetSmartz®, part of the National Center for Missing and Exploited Children® and training expert for many law enforcement agencies.

Netsmartz® has created a Scouting portal showcasing Cyber Chip resources, including grade-specific videos, for each level. Check it out here. 

Topics include cyberbullying, cell phone use, texting, blogging, gaming, and identity theft.

http://www.scouting.org/Training/YouthProtection/CyberChip.aspx

Pi zero



Tweet

Raspberry Pi Zero package 

http://www.adafruit.com/products/2817

Pentagon Farmed Out Its Coding to Russia



Tweet

The Pentagon was tipped off in 2011 by a longtime Army contractor that Russian computer programmers were helping to write computer software for sensitive U.S. military communications systems, setting in motion a four-year federal investigation that ended this week with a multimillion-dollar fine against two firms involved in the work.

...

On Monday, NetCracker and the much larger Virginia-based Computer Sciences Corporation—which had subcontracted the work—agreed to pay a combined $12.75 million in civil penalties to close a four-year-long Justice Department investigation into the security breach. They each denied Kingsley's accusations in settlement documents filed with the court.

More:

http://www.thedailybeast.com/articles/2015/11/04/pentagon-farmed-out-its-coding-to-russia.html

Rare and red supermoon lunar eclipse to present Sunday night spectacle - The Washington Post



Tweet

With clear skies on the evening of Sept. 27, the plump Harvest Moon takes on crimson coloring – during a total lunar eclipse. Don your fall jackets, grab a hot mug of hot chocolate – with marshmallows, of course – and meet the neighbors outside for a cosmic chat. Watch heavenly glory unfold.

To make matters more interesting, the reddish, eclipsing moon will be in "perigee" phase – which means it is closest to the Earth for September, and in fact, it is the closest point all year – what some call a "supermoon." A so-called supermoon appears 14 percent bigger and 30 percent brighter than when the moon is farthest away from Earth.

https://www.washingtonpost.com/blogs/capital-weather-gang/wp/2015/09/24/rare-and-red-supermoon-lunar-eclipse-is-sunday-night-spectacle/

SharpKeys | randyrants.com



Tweet

Remap those annoying, poorly placement laptop keys. Looking at you HP G840...


http://www.randyrants.com/category/sharpkeys/

This is the same "group of veterans" that Trump praised and raised money for on the USS Iowa...



Tweet

Meet the Astroturfer Planning to Swift Boat Obama | Mother Jones

http://www.motherjones.com/politics/2012/05/swift-boat-obama-bin-laden-video

Elon Musk's Hyperloop - the futuristic transportation system that’s faster than an airplane to start construction in 2016



Tweet

 

Remember the hyperloop – the futuristic transportation system that's faster than an airplane that no one thought possible just years ago? Well, the visionary Elon Musk's idea just got a new lease on life: we could see construction as early as 2016. 

A public opening of the five-mile test track in Quay Valley, California is slated for 2018.

More:

http://www.futurologyalert.com/2015/08/elon-musks-hyperloop-to-start.html

fsn - "It's a UNIX system! I know this!"



Tweet

Even though it was never developed to a fully functional file manager, it gained some fame after it appeared in the movie Jurassic Park in 1993.^[1] In a scene in the film, the character Lex Murphy, played by Ariana Richards, finds a computer displaying the interface. She exclaims "It's a UNIX system! I know this!" and proceeds to restart the building's access control system, locking the laboratory's doors. 

More:

https://en.m.wikipedia.org/wiki/Fsn

Why We’re Not Recommending “FIPS Mode” Anymore - Microsoft Security Guidance - Site Home - TechNet Blogs



Tweet

Straight talk from Microsoft, but I'm not sure they have given us much we can use to convince our auditors.

More:
http://blogs.technet.com/b/secguide/archive/2014/04/07/why-we-re-not-recommending-fips-mode-anymore.aspx

Stop Everything: There’s a New Seaweed That Tastes Like Bacon and Is Better for You Than Kale



Tweet

http://time.com/3960421/seaweed-bacon-dulse-kale-super-food/

OPM hack includes 1.1 Million fingerprints too...



Tweet

Ugg.
An entire biometric factor is now worthless.

http://money.cnn.com/2015/07/10/technology/opm-hack-fingerprints/index.html

Like PuTTY In a Hacker’s Hands



Tweet

Be careful where you get your PuTTY...

http://blog.fortinet.com/post/like-putty-in-a-hacker-s-hands

US jets intercepted Russian bombers off the California and Alaska coasts on July 4



Tweet

On July 4th, two pairs of Russian Tupolev Tu-95 bombers approached the US West coast, causing the Air Force to scramble to intercept the planes before they breached US airspace, two senior defense officials told Fox News.

The first incident reportedly occurred at 10:30 am ET off the coast of Alaska, when NORAD identified the Russian planes and two F-22s hurried to intercept them. Another incident occurred at 11 am ET off the coast of central California, and was responded to by two F-15s.

The Russian bombers they intercepted are capable of carrying nuclear weapons, but sources do not indicate whether or not they were armed.

More:

http://finance.yahoo.com/news/us-jets-intercepted-russian-bombers-203100631.html

Some clearance information is released to the public under FOIA... WHO KNEW?



Tweet

Industrial Security Clearance Decisions

http://www.dod.mil/dodgc/doha/industrial/

5 Dysfunctions of Teams



Tweet

Give this a look.

http://youtu.be/w42Sfbh91vU

Sourceforge Hijacks the Nmap Sourceforge Account



Tweet

---

From: Fyodor <fyodor () nmap org>
Date: Wed, 3 Jun 2015 00:56:23 -0700

---

Hi Folks!  You may have already read the recent news about Sourceforge.net  hijacking the GIMP project account to distribute adware/malware.  Previously GIMP used this Sourceforge account to distribute their Windows  installer, but they quit after Sourceforge started tricking users with fake  download buttons which lead to malware rather than GIMP.  Then Sourceforge  took over GIMP's account and began distributing a trojan installer which  tries to trick users into installing various malware and adware before  actually installing GIMP. 

More:

http://seclists.org/nmap-dev/2015/q2/194

Google: Security questions across websites are very easy to guess



Tweet

FTA:

For example using a single guess an attacker would have a 19.7% success rate at guessing English-speaking users' answers for the question "Favorite food?"

… With 10 guesses an attacker would be able to guess 39% of Korean-speaking users' answers to "City of birth?"

As for English-speakers favorite food, the most common answer is, not too surprisingly, "pizza."

More:

http://bgr.com/2015/05/22/google-security-passwords-secure-easy-guess/