Comments for Jabablog http://blog.jabawoki.com Nothing to see here, move along... Tue, 10 Jan 2012 12:18:18 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on The GCHQ Cipher Story you don’t know. by Jabs http://blog.jabawoki.com/2012/01/08/the-gchq-cipher-story-you-dont-know/comment-page-1/#comment-2754 Jabs Tue, 10 Jan 2012 12:18:18 +0000 http://blog.jabawoki.com/?p=1850#comment-2754 Funny... Autopatch Funny… Autopatch

]]> Comment on The GCHQ Cipher Story you don’t know. by SF http://blog.jabawoki.com/2012/01/08/the-gchq-cipher-story-you-dont-know/comment-page-1/#comment-2753 SF Tue, 10 Jan 2012 11:13:31 +0000 http://blog.jabawoki.com/?p=1850#comment-2753 Yjcv ku vjg pcog qh vjg uauvgo wugf da jco qrgtcvqtu vq ocmg htgg rjqpg ecnnu? Yjcv ku vjg pcog qh vjg uauvgo wugf da jco qrgtcvqtu
vq ocmg htgg rjqpg ecnnu?

]]> Comment on Awesome Sounds Part II by Jabs http://blog.jabawoki.com/2011/03/07/awesome-sounds-part-ii/comment-page-1/#comment-2574 Jabs Tue, 05 Apr 2011 21:20:49 +0000 http://blog.jabawoki.com/?p=1802#comment-2574 Subsequent update........ I have now wound the filter back round to about 80Hz and can confirm that now the sub is properly bedded in, this seems to be a better crossover point. I have also changed teh pgyisical dirction the sub faces, to fire accross me, rather than at me (its under my desk, despite initially shaking the platters loose in one of my hard disks, resulting in a failed disk, and then moving my computer onto a sound isolating stand to save the remaining disks! Subsequent update……..

I have now wound the filter back round to about 80Hz and can confirm that now the sub is properly bedded in, this seems to be a better crossover point. I have also changed teh pgyisical dirction the sub faces, to fire accross me, rather than at me (its under my desk, despite initially shaking the platters loose in one of my hard disks, resulting in a failed disk, and then moving my computer onto a sound isolating stand to save the remaining disks!

]]> Comment on Stompin Pumpin Hard House 17/12/2000 by Jabs http://blog.jabawoki.com/2000/12/17/stompin-pumpin-hard-house-17122000/comment-page-1/#comment-2489 Jabs Wed, 09 Mar 2011 10:43:24 +0000 http://blog.jabawoki.com/?p=1763#comment-2489 I removed the ;) hadn't noticed it! also fixed the 404 error. glad you enjoyed it! I removed the ;) hadn’t noticed it! also fixed the 404 error. glad you enjoyed it!

]]> Comment on Stompin Pumpin Hard House 17/12/2000 by Dantiumpro http://blog.jabawoki.com/2000/12/17/stompin-pumpin-hard-house-17122000/comment-page-1/#comment-2479 Dantiumpro Tue, 08 Mar 2011 18:22:58 +0000 http://blog.jabawoki.com/?p=1763#comment-2479 This is pure gold - just hope the ;) in the filename doesn't mean it has a VLC Client 0day inside! j/k - I am entirely reassured when I get my music from an ethical hacker :) ...a must have d/l, great stuff. This is pure gold – just hope the ;) in the filename doesn’t mean it has a VLC Client 0day inside! j/k – I am entirely reassured when I get my music from an ethical hacker :)

…a must have d/l, great stuff.

]]> Comment on Uplifting Trance Vibes – 10/02/2011 by Tweets that mention Uplifting Trance Vibes – 10/02/2011 | Jabablog -- Topsy.com http://blog.jabawoki.com/2011/02/10/uplifting-trance-vibes-10022011/comment-page-1/#comment-2293 Tweets that mention Uplifting Trance Vibes – 10/02/2011 | Jabablog -- Topsy.com Sat, 12 Feb 2011 11:09:21 +0000 http://blog.jabawoki.com/?p=1799#comment-2293 [...] This post was mentioned on Twitter by Jay Abbott, Jay Abbott. Jay Abbott said: New Trance Mix on my podcast for free download :) http://bit.ly/fAObzc [...] [...] This post was mentioned on Twitter by Jay Abbott, Jay Abbott. Jay Abbott said: New Trance Mix on my podcast for free download :) http://bit.ly/fAObzc [...]

]]> Comment on Black, White or Grey? What colour hat do you wear? by SF http://blog.jabawoki.com/2010/02/25/black-white-or-grey-what-colour-hat-do-you-wear/comment-page-1/#comment-116 SF Mon, 12 Apr 2010 14:26:30 +0000 http://blog.jabawoki.com/?p=1740#comment-116 Just to add the laws that govern these acts make no ref to intent and I think unfairly some people have fallen foul of the law for just being inquisitive shall we say. Perhaps performing a simple directory traversal attempt on a tsunami charity site for example! (one instant) When if they really had a criminal intent\goal they have skills which would not fall so easily ie TOR\cantenna\spoofs etc. An example was required and made... I think motivation and threat capability is often forgotten to easily, which I debated with an ISO27001 lecturer recently in actual fact. The ISO feeling was that it was not a factor in risk criteria. My reply "As Willie Sutton the bank robber said when asked why he robbed banks, 'because that's where the money is'." Just to add the laws that govern these acts make no ref to intent and I think unfairly some people have fallen foul of the law for just being inquisitive shall we say. Perhaps performing a simple directory traversal attempt on a tsunami charity site for example! (one instant) When if they really had a criminal intent\goal they have skills which would not fall so easily ie TOR\cantenna\spoofs etc. An example was required and made… I think motivation and threat capability is often forgotten to easily, which I debated with an ISO27001 lecturer recently in actual fact. The ISO feeling was that it was not a factor in risk criteria. My reply “As Willie Sutton the bank robber said when asked why he robbed banks, ‘because that’s where the money is’.”

]]> Comment on Snort Rocks! by Jabs http://blog.jabawoki.com/2008/07/02/snort-rocks/comment-page-1/#comment-17 Jabs Wed, 26 Nov 2008 19:32:09 +0000 http://blog.jabawoki.com/?p=28#comment-17 "The only issue I had was configuring all of the rules".... Neil, I think you some up the issue quite clearly with that one point. Some would in fact ague that IDS solutions died because of that exact problem, others of course would argue that in the right hands, its a powerful view of your network. “The only issue I had was configuring all of the rules”…. Neil, I think you some up the issue quite clearly with that one point. Some would in fact ague that IDS solutions died because of that exact problem, others of course would argue that in the right hands, its a powerful view of your network.

]]> Comment on Snort Rocks! by Neil http://blog.jabawoki.com/2008/07/02/snort-rocks/comment-page-1/#comment-2 Neil Sat, 25 Oct 2008 01:06:02 +0000 http://blog.jabawoki.com/?p=28#comment-2 I can confirm SNORT's a great piece of kit, particularly if you use port mirroring in which case you could run in stealth mode. The only issue I had was configuring all of the rules, which can be overcome using a third party piece of software like Activeworx Enterprise ( www.activeworx.com ). This also gives you a landscape view of your network, similar to any NMS system. The price tags not alot and if budgets don't allow you to purcahse it just yet, at least use their trial to help you set up the kit. In my oppinion, SNORT combined with third party software is nearly as good as other products like Cisco MARS ( http://www.cisco.com/en/US/products/ps6241/ ). I've been playing with this product for a while now and the biggest difference is the ability for it to update rules upon routers and firewalls (IDS/IPS all in one) if the IDS tripwires are triggered. Now SNORT will do things like TCP resets, but in this day and age these can be overcome. Cisco MARS has been tested by many of my professional friends and they can't break it. I would suggest asking Cisco to loan you some kit and try attacking it yourself, see whether you can break it! Going back to SNORT though, because it's free there shouldn't be any excuse for not using it. Forensically, it could be the missing piece in the puzzle. I can confirm SNORT’s a great piece of kit, particularly if you use port mirroring in which case you could run in stealth mode.

The only issue I had was configuring all of the rules, which can be overcome using a third party piece of software like Activeworx Enterprise ( http://www.activeworx.com ). This also gives you a landscape view of your network, similar to any NMS system. The price tags not alot and if budgets don’t allow you to purcahse it just yet, at least use their trial to help you set up the kit.

In my oppinion, SNORT combined with third party software is nearly as good as other products like Cisco MARS ( http://www.cisco.com/en/US/products/ps6241/ ). I’ve been playing with this product for a while now and the biggest difference is the ability for it to update rules upon routers and firewalls (IDS/IPS all in one) if the IDS tripwires are triggered. Now SNORT will do things like TCP resets, but in this day and age these can be overcome. Cisco MARS has been tested by many of my professional friends and they can’t break it. I would suggest asking Cisco to loan you some kit and try attacking it yourself, see whether you can break it!

Going back to SNORT though, because it’s free there shouldn’t be any excuse for not using it. Forensically, it could be the missing piece in the puzzle.

]]>