Loi Van Tran

Two very interesting articles Mauchel.
I really liked your myths, as I also think that those who still believes in those myths are living under a rock. You can’t possibly live in the digital age without knowing how to protect yourself from malicious actors. Passwords is most commonly used because it is the cheapest and easiest access control method.

Very interesting post Brent,

I really enjoy reading the articles posted by Krebsonsecurity. Towards the end of this one he highlighted some very important points; victims are not liable for the fraudulent charges on their debit/credit cards, however they must report this to the banks. I know some people that don’t check their credit/debit…[Read more]

Thanks Bilaal,

I’m pretty sure this would come in handy when we try to the Operating Security class’ Windows 7 virtual machines. I will be sure to give it a try on my Windows 7 that is all patched with really no programs on it.

Hi Mengqi,

Thank you for the post. This also seems very interesting to me. That’s a pretty high percentage of organizations (67% out of 128 ) were unable to detect that their system is compromised during a pen test. It’ll be interesting to know which were successful at detecting it.

Well there are several reasons that I can think of that lead the caller to tell me to use the number that was on my caller id. First is, providing a number that is “malicious” would allow it to be traced back to them. Like I did, I googled the number before calling back. I assume they didn’t have the ability to reroute calls directed to that…[Read more]

That is why companies should be really careful when using backdoors, or better not use it at all. If its there, someone will find it and exploit it.

Hey Jason,
I wrote about the same article but from a different site. IT was interesting because the malware was injected into the system using typical admin tools, like the one we used in class metepreter. It made it hard to detect, like you said because it never touches the hard drive. Another reason I believe, is because since most admins…[Read more]

Phishing and social engineering is always tough to beat, especially proper reconnaissance is done. Like what you see here from Facebook and Twitter accounts, customers now prefer to use social media to contact a company’s customer service. Disgruntled customers makes it easy for victims to be approached by a faux customer service rep. My…[Read more]

Dan Berger is absolutely right about, if you do use plastic, you should definitely use credit cards first. I’ve run into trouble with both credit and debit cards, and the bank is definitely takes their sweet time getting your money back. Credit cards on the other hand will reverse the fraudulent transactions in a matter of days.

Amanda,

I like your mentality of being objective instead of subjective. Like you said, forensics professional may not always like what we find, but the bottom line is that we have to present the facts. Another thing that I like from your post is the “trust.” If the profession gets a bad reputation for falsifying records or evidence tampering…[Read more]

I really like what you said about having a strong ethical code and the commitment to act in the most ethical manner. Being an examiner comes with a lot of responsibilities and dilemmas that revolves around doing what is right. For example, an examiner uncovered additional data, that was not requested or subpoenad. What should they do? Whether it…[Read more]

Great Post Andres,

As the other have stated, your approach is refreshing. I would like to extend your breakdown with the addition of moral, concerned with principles of right and wrong behavior and the goodness and badness of human character. We can probably agree that good ethics is good moral character. Believing that the actions that…[Read more]

Bilaal,

Great post and I completely agree with your explanation. I like to think it as, ethics picks up where the laws does not. Ethics provides a minimum standard of acceptable conduct. The person that lacks moral character can easily be tempted to use the information gathered for personal gain. A person with good moral character will do…[Read more]

Digital forensic professionals, like Roberto state, has a judiciary duty to uphold the law in the way the collect, preserve, and analyze the evidence. Evidence collected may contain highly personal information, sensitive data, trade secrets, proprietary information, or things of national security, among others. All can have devastating affects…[Read more]