2013年2月28日星期四

BLACK HAT ：SSL+WiFi又傳新破解法,Information Security 資安人科技網

當您在網站上使用HTTPS時，真的有宣稱中的這麼安全嗎? 駭客告訴你，NEVER!！在美國BLACK HAT DC 2009的研討會中，Moxie Marlinspike展示了一套名為SSLstrip的無線網路之SSL封包中間人攻擊與解碼的工具，將原本應該是看不懂的亂碼，從中攔截之後變成可以讀的明文，等於是讓SSL失去效用，而用戶當然是不會發覺。同樣的概念也出現在一般的有線網路中，只要放的位置對，一樣有機會達到這個效果，國內就有資安研發廠商已經能夠做到這個功能，深為企業主所愛用。對於SSL類似的攻擊手法其實層出不窮，在2007年與2008年都曾出現過。

Moxie使用這一套工具在公開的無線網路環境中，1天之內就獲取了超過200組的各式各樣帳號密碼，他呼籲要使用更嚴謹的EVSSL(Extended Validation SSL)認證方式，才能夠確保不會受到此手法的侵害，所以，不管是http還是https，建議使用者在公開網路使用帳號密碼，都要格外小心，三思而行。

原文網址:BLACK HAT ：SSL+WiFi又傳新破解法,Information Security 資安人科技網 http://www.informationsecurity.com.tw/article/article_detail.aspx?aid=4843#ixzz2MCZyeHWY

2013年2月17日星期日

System Requirements Lab for Intel by Husdawg - Should I Remove It?

About System Requirements Lab for Intel (from Husdawg)

“The Intel® System Identification Utility responds with not detected when the tool cannot discover the component. Note however that the component may be properly reported in the operating system. If Intel® System Identification Utility does not identify a component you will receive a "not detected" message in the report. If you receive this message utilize the individual component discovery tools or operating system device manager to discover more information on the components installed on your computer. The Intel® System Identification Utility collects hardware and system software information. Information such as CPU, CPU speed, OS version, RAM, Video Card, Sound Card, DirectX version, etc. The Intel® System Identification Utility does not collect any personally identifiable information.”

2013年2月15日星期五

如何設定 UEFI/GPT 型硬碟磁碟分割

2013年2月12日星期二

Ultimate Collection of Best Free Partition Manager Software for Windows - Tweaking with Vishal

2013年2月7日星期四

Command Prompt - Advanced Commands for System Information & Managing Active Tasks | 7 Tutorials

Command Prompt - Advanced Commands for System Information & Managing Active Tasks | 7 Tutorials

You all probably known how to view information about your computer using different tools such as Task Manager or System Information. For this article, we thought it would be useful to learn how to view complete system information directly from theCommand Prompt and how to manage your running processes, with the use of a few advanced commands.

2013年2月5日星期二