Testing out CommaFeed to replace Google Reader

In order to replace Google Reader, I've been looking at different platforms and companies.  I had been set on migrating to Feedly until I saw this come across my desk.  CommaFeed is an open source web application that comes pretty close to replicating Google Reader.  Actually, it has a couple of features I did not see in Google Reader (like showing feeds that are non-existent in another color.)  I'm not very social with my news, I use the reader to aggregate it for me.

So far, I'm impressed with CommaFeed; I like it a lot.  The proof will come in the next couple of weeks as I put it through it's paces.  This appeared to be a light weekend, without an influx of many posts; so it is tough to gauge.  But we'll see.  Should I move on to another reader, I'll update this post.

WhiteHat Security's interview with a Blackhat

These links came through my blogreader over the last couple of days.  WhiteHat Security ran an interview with a reformed/converted blackhat hacker.  The interviews give a good insight as to what some companies are not doing right, and help show what should be done to tighten the defenses.  Be warned, some of the language might not be work-safe.

Part 1

Part 2

Part 3

Learning Python - links for learning

I've been slowly learning to code in Python; mostly I've been using Learn Python the Hard Way.  So, it was great to see Mike's post on Writeblocked.org with great useful Python links.  Unfortunately, I missed that episode of the DFIR Online Meetup, but I'm thankful that he posted up all of his links.

Mike's links:
Link to Python resources.

edit 11/5/2013 to add:

A large list from GitHub

Google Developers


Think Python


Classes:
KhanAcadamy
CodeAcademy
MechanicalMooc
Udacity

edit 3/24/2014, to add from Harlan's blog:
World's Best Learning Center
80+ Best Free Python Tutorials/books
List of Free Python Books

Verizon Data Breach Investigations Report and Insider Threats

The 2013 Verizon Data Breach Investigations Report (DBIR) is out and there is lots of excellent information.  I have only had a chance to scan some of the information and read some of the analysis and posts.  One post I took note of came from DarkReading and discussed the Insider Threat numbers.

You can read the post here.

The full 2013 DBIR can be found here.

Hostgator post on an insider attack

Another day, another insider attack.  This one was detailed by Hostgator.  The link is to the post from NakedSecurity and their writeup of the breach - and how the insider got caught.

Here's the story.

TechNiki describes an insider attack

The more companies share about the attacks and breaches, the more the community learns.  This is good for the community for two reasons.  One, we can all learn from actual incidents and two, the bad guys share intelligence - we should too.  So, it was great to read TechNiki's account of an insider attack.  Not good because it happened; but because we learned some of the insider controls that were breached.

This is a great write up, hopefully we can all learn something.

TechNiki's write up.

Breaking radio silence....new job!

I know it has been a while since I have posted here; but lots has changed.  I have left the DoD contracting realm and moved on to a (very) large company where I work on their national incident response team.  The team is big, and my specific group gathers intelligence on the current persistent threats and implements controls to thwart those threats.  Of course, we're all incident handlers at heart, so when the alerts go off, we get dirty in the incident response process.

I absolutely love it.  Along with my other duties, I'll be delving into intrusion detection; something I do not have much experience doing.  Because of who my employer is, I am not at liberty to discuss the specifics of what we do, the incidents we face, and any of the specific threats we are combating.  A), I have a non-disclosure agreement.  B) Obviously, I can't give away secrets that would aid the adversaries.

However, I plan to keep the blog alive, talk incident response, intrusion detection, the state of those niches in incident response, and other current security issues that fit that mold.  Within incident response, I'm passionate about incidents dealing with the trusted insider - so there may be some posts in that vein.

Stay safe.

I wish Google Reader wasn't going away

I'm an avid Google Reader user, I like how the interface is easy to navigate and get right to new posts.  I'm not too social with my posts, I'm not "liking" them, sharing them, or starring them.  Losing that functionality in the past did not bother me.  So, I was not pleased to hear the other day that Google Reader is going away.  I'm looking into alternatives.

Feedly, right now, is my top choice for a replacement.  I especially like that there is an Android application and they are trying to stay close to the Google Reader format.

NewsBlur looks promising too.  However, I was not really looking to pay for usage.  However, $1 a month is not going to break the bank.

The Old Reader is another company that looks promising.  Also, it is another company in the Google Reader vein.

NetVibes looks interesting, but as of yet, I do not see a mobile application yet.

I've tried Pulse, but I think I saw that you can only have 20 feeds in the feedreader portion of the application.  It was visually stunning, but I have way more than 20 feeds that I follow.

There are some other readers listed in a great Gizmodo post.  As I look at other applications, I'll update this post.

I saw a change.org petition that had over 100,000 signatures.  I'm not sure what kind of good that will do.  My wish is that Google would leave the code as is, and just make the nominal, important security patches.

FWIW, my requirements are for a simple reader, I do not need the flashy magazine look.  I would prefer an Android app, so I can peruse articles in my spare time and not be tied to the computer.  I do not need the ability to share/broadcast/like etc., stories.  And, any application where I can port over my feeds would be a plus.  Yes, I know Google has the Google Takeout service, but not every application makes perfect use of it.

Edit 3/19/2013:  Two other readers I have discovered but have not researched:

Bloglines
Fever

New (In)Secure magazine out

I just received an email today that the new edition (number 37) of (In)Secure magazine is out.

You can get it here.

Windows 8 STIG released

The other day, DISA released a Windows 8 STIG.  At the present time, the STIG appears to be entirely manual in process as I do not yet see a SCAP benchmark for it.

So far, in the field, I have not come across any Windows 8 systems.  When I do, I will post my reactions to running an audit against the STIG.