EMET 5.1 - Windows 7 64bit - IE 11

Our user machines are deployed with Windows 7 64bit and IE 11 installed.  I notice that when I go to sites that check the browser, the sites respond that "browsers less than version 8 are not supported" or words to that effect.  Usually, the browser works fine and there are no issues.  I have been trying to get Microsoft's EMET to work with this configuration since version 4.0; and I have not been successful.  Internet Explorer crashes with EMET running.

I read that a new version, 5.1, might fix this.  After setting up EMET, and tweaking it to my environment, I checked Internet Explorer, and it still crashes.  Are there fixes or workarounds for this issue?

A Day of Updates: both Nessus Client and Burp

It just happens to be one of those days where everything I use has to be updated.  It started with Nessus, when opening my client I was prompted to download and install the new client.  Nessus has moved from 5.2.4 to 5.2.5.

Later, it was on to auditing a small application, and that meant firing up Burp Suite.  Burp notified that it needed to be updated from 1.5.20 to 1.5.21.

So, if you are using those apps, now is the time to update.

New (In)Secure magazine out

I just received an email today that the new edition (number 37) of (In)Secure magazine is out.

You can get it here.

Latest e-zines released

Two of my favorite e-zines have just released new issues:

I use Ubuntu a lot, though not as much as I would like to.  Full disclosure, I'm using an older distro, 10-something.  I have never been big on Unity, and my next full upgrade may not be pure Ubuntu, but a derivative.  Anyway, I read the Full Circle e-zine, and they just recently released a new issue.

Grab Issue 67 here.

I've been reading (In)Secure Magazine (e-zine) for many years now.  Yes, some of the articles are not the most current, though it would be very tough to put out a "zine" that was "that" timely.  But, I enjoy many of the articles and have learned a lot from reading the magazine.  It's one of those magazines I take with me on flights.

Grab issue 36 here.

I'm always open to reading new ezines.  Feel free to leave a comment on a zine you would recommend.

Updated post on icat

I just updated the post on file name finding with icat. I'm working on a practical assignment and I went back over my post, and can't figure out what I was writing. So, the post has been updated for clarity.

Information Security Magazine - update

Well, I got an email the other day, to download the latest issue of Information Security magazine. I didn't know it went digital. So, at least I've caught up with the magazine. However, it would have been nice to know that the magazine was moving to a digital format. I never saw anything in print or an email.

Label Clarrification

I have two labels that are similar and I wanted to make a distinction.

I'll use the Information Assurance label when referring to the profession or industry.

I'll use the Information Assurance Engineer label when referring to specific tasks, etc.

A little housekeeping

For those of you keeping score at home....

I updated my links section with the blogs I follow in Google Reader. Most of those blogs I read on a daily basis, an believe me; I've learned a TON from reading them. I encourage any reader to follow those blogs, as some they represent some of the brightest names in our field.

I'll try to keep the list current, as I discover more blogs.

AVG Antivirus - upgrade to version 8

I knew it was coming, I just didn't know when. However, this morning was greeted to a pop-up from AVG that I would not be getting updates to the 7.5 version of the software after May 31st. And, I would need to update to version 8.

I just spent a few minutes updating. I encountered no (perceivable) issues as of yet. The only thing I noticed during the upgrade was a note...should version 8 not work properly, you would need to uninstall 8, and re-install version 7.5. So, far, it looks good. In doing a google search, I noticed little icons next to sites. When I mouse over them, the icons tell me if the site is "safe". And, by safe, I believe it means that there is no malicious code on the site. This will bear further investigation.

Flash Player Updates

I read a great blog piece on the update of Flash. What I thought best was a link to Adobe's site where they tell what version you are using and what version to update to.

Updates....

I've updated my links section to add a couple of links. The ISC should be read every day in order to get a good idea of what is current.

Plus, if you don't read Chief's column at "A Day In The Life Of An Information Security Investigator," you should. Absolutely great reading. He's got two great columns up; a picture dump, and a write up of Black Hat and Defcon. I couldn't attend. I wish I could have. Chief's write ups at least let me get a feeling for it.

Pictures From Black Hat and DefCon 2007, 1

Pictures From Black Hat and DefCon 2007, 2

Some Things I've Learned Attending Black Hat & DefCon