Unfortunately there aren’t any.
I really am happy that they’re going to down-port the NAP features from Vista into SP3, but why the hell aren’t they giving XP’s firewall egress capability like it has in Vista? I mean, outbound firewalling isn’t anything new, and the inbound filtering works okay. Why don’t they just give us this feature too?
On the train to work yesterday I did a small amount of shoulder surfing of the passenger next to me who was reading the latest edition of the Australian Cosmopolitan magazine. After my eyes drifted away from the photoshoot of some drop-dead gorgeous girl asleep on a cloud of stark, white cotton sheets I realised that the article was all about “How to protect your identity whilst you sleep”. It was an article on the growing trends of identity theft, particularly in Australia.
The article discussed a number of topics broken down into a summary, the “Danger Zone”, and recommendations. The topics included online shopping, ebay (or other online bidding systems), phishing, and other miscellaneous activities that may disclose your personal information to foreign parties (such as, try to cover the pin-pad as much as possible at ATMs or EFTPOS terminals).
Good on ya Cosmo. I commend you for putting together an article on such an important issue, and one that you probably where aware most of your demographic did not know about.
Recently came across this fantastic presentation by Tom Stripling from the webappsec mailing list on the Dangers of 3rd Party Content. If you happen to be involved in any web development, or web content management or providing security/risk feedback to people who implement this stuff this presentation is a must-read.
Some of the key points I got from this presentation:
- The different risk implications depending on the use of iframe or inline 3rd party content
- The motives for a malicious attacker wanting to deface or compromise your website VS The motives for a malicious attacker wanting to deface or compromise a 3rd party who provides content to numerous websites
- How mature are your due diligence processes?
- “Would you ever allow anyone to deploy any kind of HTML/Javascript/whatever to your production applications without checking it first?”