InformIT Security Newsletter - Oct 5, 2004

[InformIT Security]

Title: InformIT Security Newsletter - Oct 5, 2004

InformIT Security Newsletter Oct 5, 2004 Win an iPod mini! Solve the Find the Bug Challenge! and you could win an iPod mini and a copy of Adam Barr's brand-new book, Find the Bug: A Book of Incorrect Programs. It's all part of Bookpool's 10th Anniversary Celebration going on now at www.bookpool.com. While there, check out this month's special sales on Addison-Wesley, Prentice Hall PTR, and Cisco Press titles. Visit Our Sponsor Security Reference Guide Your Hosts Cyrus Peikari and Seth Fogie If you haven't heard, a JPG image is no longer a safe format. There are working exploits in the wild that trigger reverse shells, port binds, user adds, and more—all by viewing a malicious JPG in Windows Explorer. Of course, a JPG renamed to *.BMP, *.GIF, *.PNG will also work, so simply filtering out JPG files is ineffective. This week we have an article that deals with another type of trojan threat. In the article, Reverse-Engineering the First Pocket PC Trojan, we take a close look at Brador, the first trojan written for Windows Mobile. You will learn how it works, what it does, and our theories on who wrote it. If you think virus writers are the only bad guys, check out this article titled, The Role of Computer Forensics in Stopping Executive Fraud. In it you are provided a walkthrough of a forensics investigation, from preparation to final reporting. As you can read, computer forensics is tough work where no detail can be ignored. Next we have a short list of 18 tips provided by fellow coders that outline how to write secure code. Short and to the point, this list is a must read for any coder, even if for a refresher of proper coding techniques. Finally, we have updated our security section with a section on DNS and Kerberos. If you are interested in how Kerberos operates or how to implement it, please check out our rather extensive Kerberos section. And as always, feel free to comment on the articles or discussion section! Visit The Security Reference Guide New Content   Articles and Sample Chapters All Articles and Sample Chapters Reverse-Engineering the First Pocket PC Trojan, Part 1 By Cyrus Peikari, Seth Fogie, Ratter/29A, Jonathan Read Tipping the Scales Toward Secure Code By Rebecca Rohan The Role of Computer Forensics in Stopping Executive Fraud By Scott Laliberte, Ajay Gupta   Weblogs All Security Weblogs Hacker Manifesto and the Culture By Seth Fogie JPEG virus worming in through IM By Cyrus Peikari What would you do, if you found illegal porn on a clients computer... By Seth Fogie  Subscribe to the Security Reference Guide RSS feed. New Books and Safari Online Books   Book Store All Security Books Troubleshooting Linux® Firewalls By Michael Shinn, Scott Shinn Published by Addison Wesley Professional � Dec 22, 2004 Premium Member Price: $37.49 USD (Save 25%) Internet Denial of Service: Attack and Defense Mechanisms By Jelena Mirkovic, Sven Dietrich, David Dittrich, Peter Reiher Published by Prentice Hall PTR � Dec 10, 2004 Premium Member Price: $29.99 USD (Save 25%)   Safari Online Books All Security Online Books Defend I.T.: Security by Example Published by Addison Wesley Professional � May 19, 2004			Privacy: What Developers and IT Professionals Should Know Learn how to systematically build privacy safeguards into any application, Web site, or enterprise system, in any environment, on any platform. You'll discover the best practices for building business infrastructure and processes that protect customer privacy. You'll even learn how to help your customer work with you in protecting their own privacy. Find out more. Grab Our Security RSS Feed You can get our Security Reference Guide additions and weblogs in your RSS Aggregator — click here to grab the code! Weblog of the Week: JPEG virus worming in through IM Cyrus reports that the first vestigal attempts at a worm to exploit the previously mentioned JPEG flaw have begun to probe IM networks. Become a Member and Save up to 25% in Our Book Store! Profile yourself with InformIT and you'll receive an additional discount — up to 25% off many titles in the InformIT Book Store. The best part is that this offer will never expire! Safari Clip of the Week Preview an excerpt from Safari, our online subscription service, with a new clip each week! This week, we present Management of Ongoing Identity Theft Prevention and Protection Techniques, including neural networks, Internet charges, rerouting shipments, and postfraud.

� Copyright 2004 Pearson Education, Inc. - InformIT division. All rights reserved. 800 East 96th Street Indianapolis, Indiana 46240 Change your e-mail address or update your profile. To unsubscribe from this newsletter, or from all InformIT newsletters, visit our unsubscribe page and follow the posted instructions. Suggestions, questions, or feedback on the site or the newsletter.