Tonight was held a joined OWASP and ISSA Belgium Chapters meeting with three speakers. Very interesting content, here is a small wrap-up in “bullet-point” mode due to a lack of free time… First speaker, Tom Van Der Mussele from Verizon Business spoke about the “non-conventional attacks“. Tom explained that those
Tag: Security
IPv6 Backdoor for the Best and Worst!
I’d like to come back to an issue I faced yesterday with one my servers. I think that this story could be a good example as part of an IPv6 awareness program… One of my servers in my home lab runs several virtual machines. This server is reachable from outside
HITB Amsterdam 2011 Coverage
In exactly one week, the 2nd edition of HITB Amsterdam (“Hack In The Box“) will be already over. As you see their logo on the left, I’ll attend the event and perform a coverage via Twitter and my Blog (Thanks against to the organization for the invitation!). I’ll be in
ISSA Belgium Chapter Review of the Verizon DBIR
I’m just back from the last ISSA Belgium event organized tonight at Verizon premises. Wade Baker, director of risk intelligence for Verizon and creator, author and primary analyst for Verizon’s DBIR series, presented the analysis, findings and recommendations of the 2011 version of Verizon’s DBIR. If you are an infosec
Log Management: Don’t be an Ostrich!
I would like to tell you about the situation I experienced this afternoon. The goal of a log management solution is to collect and store events from several devices and applications in a central and safe place. By using search and reporting tools, useful information can be extracted from those
BSidesLondon Wrap Up
It was a long but wonderful day! I woke up very early to catch my train from Brussels to London and arrived just in time. The room was already full of security guys, some well known faces and new ones. Let’s grab some coffee, some muffins and my bag full
BSidesLondon D-Day – 2
Still two times to sleep (like say children) and it’s the first edition of B-Sides London! The laptop is patched and hardened, tickets are printed, my slides are (almost) ready, Wednesday in the early morning, I’ll travel to London. It’s time to prepare my selection of talks! As usual, I’ll
All Your Passwords Are Belong to France?
A few days ago, a buzz hit the information security landscape. /. relayed a BBC article announcing that a new French decree will make hashed passwords illegal. Really? Honestly, when I read this, I also twitted about it. For security professionals, it looks totally unacceptable! Now, the buzz seems over
My OSSEC DashBoard
For a while, I was looking for a good solution to display my OSSEC server status in (near) real time. For most of us, the classic log file monitoring tool still remains based on the “tail | grep | awk | less” commands. If it catches perfectly the events you
La Nuit du Hack in Paris
“La Nuit du Hack” is a well-known event organized since 2004 (!) by Sysdream and HZV in Paris. I went to the 2010 edition, my wrap-up is available here. This last edition was victim of its success and access to the boat (yes, it was organized on a boat!) was