Discussions on computers and beyond

Welcome to Topsight.net
Tuesday, September 07 2010 @ 05:11 AM EDT

View Printable Version

How to crack a wireless network

SecurityTomsnetworking has released an excelent series of guides that explain how to detect, crack, and defend wireless networks.

Part 1:Recon & Setup
http://www.tomsnetworking.com/Sections-article118.php

Part 2:Performing the Crack
http://www.tomsnetworking.com/Sections-article120.php

Part 3: Securing your WLAN
http://www.tomsnetworking.com/Sections-article124.php
View Printable Version

Microsoft rolls out patches to keep tire rolling

MicrosoftAccording to TheReigster:

Microsoft's patch bandwagon rolled into town yesterday loaded with three critical updates and seven other new bulletins. A cumulative security update for Internet Explorer (MS05-025), a vulnerability in Windows HTML Help that could allow hackers to inject hostile code into vulnerable systems (MS05-026) and a security bug in Windows Server Message Block that could likewise allow remote code execution (MS05-027) all earn Redmond's dreaded critical sobriquet.

Read more at:
http://www.theregister.co.uk/2005/06/15/ms_june_patch_batch/
View Printable Version

Meet the teen who’s teaching policemen how to be ethical hackers

HackingNews Source:- http://cities.expressindia.com/fullstory.php?newsid=130813

Neeraj Pattath is one of an elite group of youngsters bringing cops up-to-date about cyber crime

Mumbai, May 24: NEERAJ Pattath (17) is quite the average teenager. He’s appeared for his SSC exams. He hates maths. He loves surfing the Net.

There’s just one major difference. For the last three months, Pattath has been helping teach policemen how to detect and solve cyber crimes at Worli’s Mumbai Cyber Lab. A joint venture by the National Association of Software and Service Companies (Nasscom) and the Mumbai Police, the lab was initially meant exclusively for city police officers.
View Printable Version

A Basic introduction to ham radio

Radio FrequencyWired news is running an article describing some basic information about the ham radio hobby.

http://www.wired.com/news/digiwood/0,1412,67615,00.html
View Printable Version

Fun with Freenet: Anarchist Black Cross

Interesting StuffAfter the story theregister ran regarding statistical attacks against freenet nodes, I decided to give freent a try. To start, freenet is unlike any other p2p file sharing network in current existence (that I know of). The network works by searching for keys. This is basically how the network functions. Once done running though the install process and waiting a good 24 hours (for routes to build and connections to be established), you'll have links to web portals via the web based interface that runs local on your freenet node. This system of portals works much like normal html except clicking on a link merely starts a search for another key to another page or file. As keys are not similar (based on sha-1) doing traditional searches on freenet don't really work. Instead main index sites are built that link to other sites, which link to other sites forming a sort of web. All content is transferred over the network is encrypted and cached. So you never who you’re receiving data from, and even the people sending the data to you don’t know what there sending because there cache is also encrypted. The system while slow is extremely anonymous, so you can imagine some of the content contained on the network.

Installing Freenet was rather simple, I downloaded the installer, made a few edits to freenet.ini so it would work with my NAT network setup and I was good to go. For freenet to work I needed to wait twenty four hours for the program to run and build cache and routes. After that time I began using freenet. The main portal I used was the freedom engine which contained a multitude of links to other sites. Click read more to see an example site
View Printable Version

[Update]Better then T1 Speeds for free

Interesting StuffOver the past few few years the bandwidth that I consume seems to grow at an ever multiplying rate. With file sharing, video, multi downloads, oh and lets not forget bit torrent all being used simultaneously the meager 5mb’s down / 384kb/s up that my cable company provides just doesn’t seem to be doing the job. A friend of mine was recently had to tear down his datacenter because the cost of a true T1 just wasn’t affordable for him any more, but he had a backup plan. His plan was simply to aggregate bandwidth from two cable connections each with similar bandwidth to my own, his problem was simply how to accomplish this task.

After some very quick research I found the hawking H2BR4, a very cheap dual wan load balancing router. With this router my friend could now effectively aggregate the bandwidth of both cable modems (10mb down, 768kb up). I found this to be a very effective means to get lots of bandwidth at a very cheap price. But I wonder, is there a way to get more bandwidth for less money or no money at all?
View Printable Version

M$ IP exploit

MicrosoftYesterday zdnet, released a news story about how microsoft was silent in addressing a vulnerability in it's TCP/IP stack. Today the nice people at eclipse.org.il (Yuri Gushin & Alex Behar) have released Proof of concept code specific to the windows platform on both bugtraq and full disclosure. The PoC code can be found on Yuri and Alex's site.
View Printable Version

Apple OS 10.4 A step in the right direction

AppleFor some time now, apple has begun to come under some scrutiny for lax file permissions and an increased perception that apple is becoming complacent in the realm of security. Not so, reports computerworld.com with there brief review of Apples next generation operating system. According to Douglas Schweitzer of computerworld.com Apple’s OS X 10.4 has a number of features to improve the security of its operating system. These features include all ports being closed by default, and all remote services disabled. A new file encryption scheme called File vault provides on the fly 128 bit file encryption. Also, apple will be releasing what it calls its “Secure trash can” which instead of merely deleting directory entries actually physically overwrites data so that it can’t be restored.

for more information see apple.com

View Printable Version

Paranoid Penguin - Linux VPN Technologies

LinuxFrom LinuxJournal.com: "Which virtual private network is right for you? Mick runs down the options and comes up with some winners and some warnings."

Read more at LinuxJournal.com

View Printable Version

OpenOffice .doc document Heap Overflow

SecurityFrom EWeek.com: "The OpenOffice.org community on Tuesday confirmed the existence of a potentially serious heap-overflow vulnerability in its freely distributed office productivity suite.

The flaw affects OpenOffice Version 1.1.4 and prior and OpenOffice Version 2.0-dev and prior and could put users at risk of code execution attacks."

Read more about this from Eweek.com

Here is the BugTraq email with details about this exploit.

Security patch from OpenOffice.org