Wireless security déjà vu

3 years ago I was alread talking, in conferences and courses, of 802.11b wireless networks security problems and WEP weaknesses.
And in those occasions I used to mention amateur tools like huge directional antennas, most similar to cannons, connected to street-fighting laptops able to intercept and decypher wireless traffic transmitted kilometers away.

After years here we go again, but this time the target is Bluetooth traffic, which I already covered for growing interests about its insecurity.

I definitely decided to present a session about Bluetooth security in the next security conference I'll be invited.
I could get in with a BlueSniper rifle so take care of yours mobile phones and PDAs...

The new big IT Security themes to come

Few days ago someone asked my opinion about what will be hot in IT Security for next 5 years.

My idea, partially explained here, is that beginning since middle 2005 and exploding in 2006-2007 we'll have at least 3 big themes:

1. Endpoint Security


2. VoIP Security


3. Digital Rights Management (DRM)

Whitepaper: Solaris 10 Security Overview

Glenn Brunette just published slides from his presentation about Solaris 10 new security features, already mentioned in previous posts here and here.

The overview is really interesting also analyzing new software partitioning feature of Solaris 10, the Solaris Containers, hot topic on my other blog about virtualization: virtualization.info.

Visio 2003 Connector for Microsoft Baseline Security Analyzer

It's not a secret I'm not a great fan of Microsoft Security Baseline Analizer (MSBA), but I surely am a great fan of Microsoft Visio, needful tool for every good architect or designer, with unpredicted capabilities (and in my humble opinion used just at 10% by most users).

For those who use MSBA, I'd like to mention this Microsoft Visio 2003 Connector for the MBSA, able to map your security scanning on a Visio diagram.

I hope to see this connector updated to work with upcoming MBSA 2.0, where a graphical representation of network data will be much more useful.