RE: Consumer Security Web Site

From: Joshua Feek (jfeek_at_yahoo.com.au)
Date: 06/30/04

  • Next message: Dominick Baier: "RE: Non Admin Rights + Visual Studio"
    Date: Wed, 30 Jun 2004 05:17:38 +0100 (BST)
    To: focus-ms@securityfocus.com
    
    

    How about a mindset change

    Use a passphrase rather than password. A collection of
    meaningless words to the hacker but meaningful for the
    user like BreadMilkandCheese. User will remember it
    and complex for hackers to not be able to guess
    easily.

    --- "James D. Stallard" <james@leafgrove.com> wrote: >
    David
    >
    > Top Idea, this certainly qualifies as 'A Good
    > Thing'.
    >
    > My 2 cents is "how to pick a decent password"
    >
    > There are lots of myths out there on what qualifies
    > as a good password and
    > while all us techies would love our users to pick
    > something really complex
    > (read "nasty") the fact remains that they would
    > rather pick the name of
    > their dog or football team. So, a few tips on
    > choosing something easy to
    > remember and hard to crack, and obfuscating their
    > dogs name might be nice :)
    >
    > Most of my work is Active Directory design related,
    > so a few tips on using
    > GPOs for improving security and securing DNS
    > services would be nice. Perhaps
    > you couls really push the boat out and put in some
    > stuff about Delegation of
    > Administration!
    >
    > Cheers
    >
    > James D. Stallard
    > Active Directory and Infrastructure Technical
    > Architect
    > Leafgrove Limited
    >
    >
    > -----Original Message-----
    > From: David Harper [mailto:david.harper@thermon.com]
    >
    > Sent: 28 June 2004 16:50
    > To: 'focus-ms@securityfocus.com'
    > Subject: Consumer Security Web Site
    >
    > All,
    >
    > I'm putting together a web site for home and small
    > office computer users to
    > address computer and small network security. I'm
    > hoping to eventually have
    > a one-stop site where non-technical consumers can
    > get all the information
    > they need to protect their home and small office
    > systems.
    >
    > So far I'm planning sections on
    > Viruses/Worms/Trojans, Spam, Identity Theft,
    > Cyberstalking, Hacking, Spyware and Adware. Each
    > section is to cover the
    > basics (what it is, how to remove/prevent it, etc.)
    > in a non-technical,
    > friendly-to-the-average-home-user way. I'll also
    > include links to sites
    > like Windows Update and other free tools, with a
    > strong admonition that
    > their computer be checked and patched - now.
    >
    > I'd like to get input from the list on any other
    > sections to include on the
    > web site. What do you see as the most glaring gaps
    > in end-user knowledge?
    > What information, tools, links, etc., would best
    > enable them to secure their
    > systems easily against the most common threats?
    > Also, I'm gearing this
    > toward Microsoft simply because 1) Microsoft runs
    > the vast majority of
    > home/small-office computers, 2) Those using Linux
    > are already pretty
    > computer savvy, and this site is for the novice.
    > Should I expand the focus?
    > Include MACs? What about the buzz on cell phone
    > viruses? Should cell phone
    > security and privacy issues be included, as well?
    >
    > Please keep in mind that this site is for the
    > novice, so explanations of
    > elliptical curve cryptography probably won't fly. I
    > just want to make it as
    > easy as possible for the non-technical user to stay
    > up to date.
    >
    > Your input is greatly appreciated!
    >
    > Thanks,
    > David
    >
    >
    ---------------------------------------------------------------------------
    >
    ---------------------------------------------------------------------------
    >
    >
    >
    >
    >
    ---------------------------------------------------------------------------
    >
    ---------------------------------------------------------------------------
    >
    >

            
            
                    
    ___________________________________________________________ALL-NEW Yahoo! Messenger - sooooo many all-new ways to express yourself http://uk.messenger.yahoo.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: Dominick Baier: "RE: Non Admin Rights + Visual Studio"

    Relevant Pages

    • [NT] Vulnerability in HTML Help Allows Code Execution (MS05-001)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ...
      (Securiteam)
    • [NT] Microsoft JScript Remote Code Execution (MS06-023)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... There is a remote code execution vulnerability in JScript. ... Configure Internet Explorer to prompt before running Active Scripting ...
      (Securiteam)
    • [NT] Cumulative Security Update for Internet Explorer (MS05-052)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... A remote code execution vulnerability exists in the way Internet Explorer ...
      (Securiteam)
    • [NT] Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (MS07-042)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Vulnerability in Microsoft XML Core Services Could Allow Remote Code ... mode sets the security level for the Internet zone to High. ...
      (Securiteam)
    • [NT] Microsoft Data Access Components (MDAC) Function Code Execution (MS06-014)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Microsoft Data Access Components Function Code Execution ... for the Internet security zone to prompt before running ActiveX controls. ...
      (Securiteam)

  • Quantcast