The Daily Tip

RSS

Injecting shellcode into processes with Syringe

Posted August 8, 2011 - 2:51 pm

One feature that I believe would greatly complement ShellCodeExec is the ability to inject the shellcode into a process ID of the user’s choosing. This can be particularly useful when on a host that only permits certain processes to initiate outbound connections. With this goal in mind, I set out to implement these techniques in my own general purpose injection utility, which I have dubbed Syringe.
- Quick Read
How to start planning your IPv6 transition

Posted March 28, 2011 - 11:35 am

If you attempt to make the move straight over to IPv6 without knowing what you already have that is IPv6 compliant, you are not only wasting your time, but could bring down your data center like a house of cards.
- Quick Read
Keeping project sponsors engaged

Posted March 21, 2011 - 4:49 pm

Unlike most members of a project team, a project sponsor might not completely understand his or her role. With that in mind, here are some suggestions for keeping sponsors engaged and participating.
- Quick Read
Security tip: How to set up a chroot jail

Posted March 3, 2011 - 4:37 pm

Using packages such as mod_chroot for use with Apache, or Jailkit, an open-source project with a handful of utilities, can make configuring a chroot jail much more efficient and even automated in some cases. Here are some important things to remember when setting up a chroot jail.
- Quick Read
What do the PCI ASV changes mean for you?

Posted February 15, 2011 - 3:38 pm

As an ITworld reader, you're invited to attend a free webinar hosted by SecureState. SecureState's consultants will guide you through the PCI ASV changes and address any questions that you may have.
- Quick Read
Getting value from the project management process

Posted February 14, 2011 - 2:58 pm

Many project teams actually have individuals whose only responsibility is to personally communicate with every member of the team and collect status data. I don't think that could be considered real "visibility" in any project leader's book.
- Quick Read
Why you're probably not ready for DLP software

Posted January 24, 2011 - 9:18 am

9 questions you must ask and answer before deciding on any DLP solution.
- Quick Read
Empowering project teams

Posted January 20, 2011 - 8:46 am

Although it might be accepted that a good leader "empowers" his or her team members, what does that really mean in practice? Here are 4 ways project managers can foster an atmosphere of empowerment.
- Quick Read
ISO 27001 certification: 6 things you need to know

Posted January 17, 2011 - 9:11 am

Be warned: For most organizations, the time and costs associated with ISO 27001 certification are much greater than a consulting firm being onsite for a week. The process involves dedicated effort and, most of the time, culture shock.
- Quick Read
Motivating a project team

Posted January 6, 2011 - 9:37 am

Want to motivate your project team? Forego the stick... and maybe the carrot too.
- Quick Read
Want a bigger budget for your security program? Use metrics

Posted November 22, 2010 - 8:44 am

Good metrics can illustrate the effectiveness and performance of your security program, diagnose trends and issues, determine resource allocation, and secure security budget.
- Quick Read
Want to be a project leader? Hone these 5 traits for project management success

Posted November 18, 2010 - 4:06 pm

Step away from that Gantt chart and start leading your team.
- Quick Read
Project management: The change challenge

Posted October 7, 2010 - 7:50 am

3 steps you can take today to make change more acceptable (if not easier to bear)
- Quick Read
BI debate: ROLAP solutions versus OLAP

Posted September 29, 2010 - 1:21 pm

Many BI tools discussions center upon how best to determine optimal technology for a particular application or set of end users. A common, and often vigorous one, is whether an OLAP solution is appropriate or would a ROLAP (Relational OLAP) option make more sense. Here are some simple evaluation points for these two unique solutions as well as which one is more appropriate or has an advantage.
- Quick Read
Usability testing: 10 tools to make it quick and easy

Posted September 21, 2010 - 7:57 am

These 10 online tools make usability testing quick, easy, and maybe even fun. And, yes, some of them are free.
- Quick Read
Using OSSEC to parse auditd logs

Posted September 20, 2010 - 8:40 am

OSSEC can parse and correlate a large number of log formats, but one feature Security consultant Josh Lochner found lacking is the ability to parse auditd daemon logs. Here he shares a decoder he created to pull information out of the /var/log/audit/audit.log created by the auditd service.
- Quick Read
Essential Joomla! extensions

Posted September 16, 2010 - 7:52 am

Joomla! developers offer up their favorite extensions for the open source Web content management system.
- Quick Read
Gmail Priority Inbox: Tips for managing your email

Posted September 15, 2010 - 7:26 am

On August 30, Google launched (in beta) Priority Inbox for Gmail. The idea is simple: To help you get right to your most important messages. But, of course, there are ways to make it work better, and that's where these tips come in.
- Quick Read
Joomla! jumpstart: 8 tips and best practices from Joomla! developers

Posted September 8, 2010 - 8:05 am

Joomla's ecosystem demands that you let everyone know you do Joomla, says Rob Graham, CEO of consulting firm TrainingCraft. "It's not just a Web CMS, it's a market in itself."
- Quick Read
Got game? How to be great at anything

Posted September 3, 2010 - 7:33 am

Practice, practice, practice ... but only for 90 minutes at a time
- Quick Read
Tool review: Splunk 4

Posted September 2, 2010 - 7:33 am

For one security expert, Splunk proves to be a great tool for watching logs for security issues, fine tuning egress filtering, and system monitoring. And for most small businesses, the free version's 500MB of indexing per day is more than enough.
- Quick Read
Embedded mobile broadband versus dongles or tethering: Which is best?

Posted August 31, 2010 - 7:43 am

4 ways to get online when there's no WiFi in range
- Quick Read
Uninterruptible Power Supply: Using and caring for your desktop UPS

Posted August 26, 2010 - 8:17 am

A desktop UPS is about as close to "set-and-forget" as electronics get... but if the battery runs down, it has turned into just a big surge protector. Here's what you need to do to make sure your desktop UPS will work when you need it.
- Quick Read
Use Puppy Linux 5.0 for secure on-the-go browsing

Posted August 25, 2010 - 7:28 am

For one security expert, being able to drop a bootable USB drive with Puppy Linux onto untrusted systems and use them as a browser, VPN client, and productivity tool has proven very handy.
- Quick Read
Adopt this PCI DSS compliance credo: Trust, but verify

Posted August 23, 2010 - 10:44 am

Yes, verification comes with a price, but it will more than likely be much lower than the price of a highly publicized security breach.
- Quick Read

Join today!

Get FREE access to premium content, in-depth reviews, practical tips

6 IT hiring tips to weed out the duds
Rule #1: Don't hire out of desperation.
4 free tools to simulate a cloud connection
Linux-based WAN emulation tools worth a look.
15 common IT resume mistakes (and how to avoid them)
Learn how to build a better resume.

content

Ask a Question

The Daily Tip

Join today!

Review

Marketplace

Sponsored Links

The IDG Network