<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
   <title>never-ever-****-with-my.net</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/" />
   <link rel="self" type="application/atom+xml" href="http://laurent.delavaissiere.net/blog/atom.xml" />
   <id>tag:laurent.delavaissiere.net,2010:/blog//2</id>
   <updated>2007-05-14T18:24:35Z</updated>
   <subtitle>Sharing information about technology, free software, and IT security primarily!</subtitle>
   <generator uri="http://www.sixapart.com/movabletype/">Movable Type 3.32</generator>

<entry>
   <title>Processing Whois Output Automatically With Perl</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2007/05/processing_whois_output_automa.html" />
   <id>tag:laurent.delavaissiere.net,2007:/blog//2.130</id>
   
   <published>2007-05-14T18:01:58Z</published>
   <updated>2007-05-14T18:24:35Z</updated>
   
   <summary>I found myself in the situation where I had to whois a large number of IP addresses and play with the output in Excel. Thanks to Ben Schmitz&apos;s Net::Whois::IP Perl extension for looking up the whois information for IP addresses...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Tools" scheme="http://www.sixapart.com/ns/types#category" />
   
   <category term="23" label="processing whois output perl script" scheme="http://www.sixapart.com/ns/types#tag" />
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[I found myself in the situation where I had to whois a large number of IP addresses and play with the output in Excel.

Thanks to Ben Schmitz's <a href="http://search.cpan.org/~bschmitz/Net-Whois-IP/IP.pm">Net::Whois::IP</a> Perl extension for looking up the whois information for IP addresses and some Google searching to locate some decent usage example (found in the whois.snortalog file in J&eacute;r&eacute;my Chartier's <a href="http://jeremy.chartier.free.fr/snortalog/">SnortAlog</a>), I could put together the following lame script:

<pre>#!/usr/bin/perl
require "whois.snortalog";
use Net::Whois::IP;
$k = $ARGV[0];
whois();
print $ARGV[0] . "\t" . $inetnum . "\t" . $netname . "\n";</pre>

It expects an IP address in argument and outputs it along with its NetRange and NetName separated by tabulations.

Please post a comment if you improve it (e.g., adding error handling, etc.).]]>
      
   </content>
</entry>
<entry>
   <title>Windows Vista Security Guide</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/11/windows_vista_security_guide.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.109</id>
   
   <published>2006-11-11T11:29:31Z</published>
   <updated>2006-11-11T11:32:17Z</updated>
   
   <summary>Last Wednesday, Microsoft published Windows Vista Security Guide, which provides recommendations to harden computers that use specific security baselines for the following two environments:Enterprise Client (EC)--client computers in this environment are located in a domain that uses Active Directory and...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Best Practices" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Microsoft" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Windows" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[Last Wednesday, Microsoft published <a href="http://www.microsoft.com/technet/windowsvista/security/guide.mspx">Windows Vista Security Guide</a>,  which provides recommendations to harden computers that use specific security baselines for the following two environments:<br /><ol><li><b>Enterprise Client (EC)</b>--client computers in this environment are
located in a domain that uses Active Directory and only need to
communicate with systems running Windows Server&nbsp;2003--implementation of this security baseline is described in <a href="http://www.microsoft.com/technet/windowsvista/security/implementing_security_baseline.mspx">Chapter 1</a>;</li><li><b>Specialized Security--Limited Functionality (SSLF)</b>--concern for
security in this environment is so great that a significant loss of
functionality and manageability is acceptable--implementation of this security baseline is described in <a href="http://www.microsoft.com/technet/windowsvista/security/specialized_security.mspx">Chapter 5</a>.</li></ol>Also, three additional chapters provide recommendations to take advantage of new or enhanced security features:<br /><ul><li><b>Defend Against Malware</b>--<a href="http://www.microsoft.com/technet/windowsvista/security/defend_against_malware.mspx">Chapter 2</a> includes information about how to most effectively use User Account Control (UAC), Windows Defender, Windows Firewall, Windows Security Center, Malicious Software Removal Tool, Software Restriction Policies, and Internet Explorer 7 security features (e.g., Protected Mode, ActiveX Opt-in, Cross-domain scripting attack protection, Security Status Bar, Phishing Filter, etc.);</li><li><b>Protect Sensitive Data</b>--<a href="http://www.microsoft.com/technet/windowsvista/security/protect_sensitive_data.mspx">Chapter 3</a> focuses on encryption and access control technologies that help protect mobile computing environments from potential loss and theft: BitLocker Drive Encryption, Encrypting File System (EFS), Rights Management Services (RMS) and Device control;</li><li><b>Application Compatibility</b>--<a href="http://www.microsoft.com/technet/windowsvista/security/application_compatibility.mspx">Chapter 4</a> provides guidelines to preserve functionality of existing applications when using the new and enhanced security features of Windows Vista.</li></ul>The complete guide can be <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=A3D1BBED-7F35-4E72-BFB5-B84A526C1565&amp;displaylang=en">downloaded</a> along with the GPOAccelerator tool, which automatically creates all the Group Policy objects (GPOs) needed to apply this security guidance.]]>
      
   </content>
</entry>
<entry>
   <title>NIST on Several Things</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/09/nist_on_several_things.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.100</id>
   
   <published>2006-09-06T16:56:09Z</published>
   <updated>2006-09-06T21:15:44Z</updated>
   
   <summary>End of last week, NIST published four Draft Special Publications on e-mail security, intrusion detection and prevention, web services security, and cell phone forensics....</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Best Practices" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Forensics" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Incident Response" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Technologies" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Web Applications" scheme="http://www.sixapart.com/ns/types#category" />
   
   <category term="1" label="email" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="10" label="forensics" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="9" label="gsm" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="4" label="idp" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="2" label="ids" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="3" label="ips" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="11" label="security" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="7" label="soap" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="8" label="uddi" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="5" label="webservices" scheme="http://www.sixapart.com/ns/types#tag" />
   <category term="6" label="xml" scheme="http://www.sixapart.com/ns/types#tag" />
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[End of last week, <a href="http://csrc.nist.gov/">NIST</a> published four Draft Special Publications on e-mail security, intrusion detection and prevention, web services security, and cell phone forensics.]]>
      <![CDATA[<blockquote>800-45A Guidelines on Electronic Mail Security (<em><a href="http://csrc.nist.gov/publications/drafts/Draft-SP800-45A.pdf">Acrobat PDF</a></em>)--these revised guidelines intend to aid organizations in the installation, configuration, and maintenance of secure mail servers and mail clients.

800-94 Guide to Intrusion Detection and Prevention (IDP) Systems (<em><a href="http://csrc.nist.gov/publications/drafts/Draft-SP800-94.pdf">Acrobat PDF</a></em>)--this new guide seeks to assist organizations in understanding Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) technologies and in designing, implementing, configuring, securing, monitoring, and maintaining Intrusion Detection and Prevention (IDP) solutions.

800-95 Guide to Secure Web Services (<em><a href="http://csrc.nist.gov/publications/drafts/Draft-SP800-95.pdf">Acrobat PDF</a></em>)--this new guide provides detailed information on standards for web services security.  This document explains the security features of XML, SOAP, UDDI, and related open standards in the area of Web services.  It also provides specific recommendations to ensure the security of Web services-based applications. 
 
800-101 Guidelines on Cell Phone Forensics (<em><a href="http://csrc.nist.gov/publications/drafts/Draft-SP800-101.pdf">Acrobat PDF</a></em>)--this new guide outlines general principles and provides technical information intended to aid organizations evolve appropriate policies and procedures for preserving, acquiring, and examining digital evidence found on cell phones.</blockquote>]]>
   </content>
</entry>
<entry>
   <title>Errors in spreadsheets are pandemic</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/06/errors_in_spreadsheets_are_pan.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.73</id>
   
   <published>2006-06-06T22:33:44Z</published>
   <updated>2006-06-06T22:07:06Z</updated>
   
   <summary><![CDATA[Just as Google releases Spreadsheets (a total non-event for serious Excel users), an interesting discussion surfaced on Slashdot.&nbsp; The article links to an interesting paper by Raymond R. Panko at University of Hawai'i about what is known about spreadsheet errors.&nbsp;...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Google" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Incidents" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Threats" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>Just as Google releases <a href="http://spreadsheets.google.com/">Spreadsheets</a> <em>(a total non-event for serious Excel users)</em>, an interesting discussion <a href="http://hardware.slashdot.org/article.pl?sid=06/06/05/185201">surfaced</a> on Slashdot.&nbsp; The article links to an interesting <a href="http://panko.cba.hawaii.edu/ssr/Mypapers/whatknow.htm">paper</a> by <a href="http://panko.cba.hawaii.edu/">Raymond R. Panko</a> at University of Hawai'i about what is known about spreadsheet errors.&nbsp; The conclusion says:<br /></p><blockquote><p>&quot;All in all, the research done to date in spreadsheet development presents a very disturbing picture.&nbsp; Every study that has attempted to measure errors, without exception, has found them at rates that would be unacceptable in any organization.&nbsp; These error rates, furthermore, are completely consistent with error rates found in other human activities.&nbsp; With such high cell error rates, most large spreadsheets will have multiple errors, and even relatively small &quot;scratch pad&quot; spreadsheets will have a significant probability of error.&quot;</p></blockquote><p>Also, the article links to the European Spreadsheet Risks Interest Group (<a href="http://www.eusprig.org/">EuSpRIG</a>) and its <a href="http://www.eusprig.org/stories.htm">collection</a> of public reports of spreadsheet errors.</p>]]>
      
   </content>
</entry>
<entry>
   <title>Implementing least privilege in Windows applications</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/implementing_least_privilege_i.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.69</id>
   
   <published>2006-05-26T22:47:25Z</published>
   <updated>2006-05-26T23:06:58Z</updated>
   
   <summary><![CDATA[As pointed out by the ISC's Handler's Diary, and further to the ZDNet article reporting that Microsoft considers taking admin rights from employees (link posted last Wednesday), Microsoft published Standard User Analyzer, a tool that &quot;helps developers and IT professionals...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Microsoft" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Windows" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Workstation" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>As <a href="http://isc.sans.org/diary.php?storyid=1362">pointed out</a> by the ISC's Handler's Diary, and further to the ZDNet article <a href="http://www.zdnet.com.au/news/security/soa/Microsoft_considers_taking_admin_rights_from_employees/0,2000061744,39257228,00.htm">reporting</a> that Microsoft considers taking admin rights from employees <em>(link posted last Wednesday)</em>, Microsoft published <a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=df59b474-c0b7-4422-8c70-b0d9d3d2f575&amp;DisplayLang=en">Standard User Analyzer</a>, a tool that <em>&quot;helps developers and IT professionals diagnose issues that would prevent a program from running properly without administrator privileges.&nbsp; On Windows Vista, even administrators run most programs with standard user privileges by default, so it is important to ensure that your application does not have administrator access as a dependency.<br /> <br /> Using the Standard User Analyzer to test your application can identify the following administrator dependencies and return the results in a graphical interface:<br /></em></p><ul><li><em>File access</em></li><li><em>     Registry access</em></li><li><em>     INI files</em></li><li><em>     Token issues</em></li><li><em>     Security privileges </em></li><li><em>     Name space issues </em></li><li><em>Other issues&quot;</em></li></ul>Standard User Analyzer runs on Windows XP, Windows Vista and Windows Server 2003, and requires <br /><a href="http://www.microsoft.com/technet/prodtechnol/windows/appcompatibility/appverifier.mspx">Microsoft Application Verifier</a>, which <em>&quot;</em><em>helps developers identify potential application compatibility, stability, and security issues.&quot;</em>]]>
      
   </content>
</entry>
<entry>
   <title>Deep packet-inspection technology used by NSA</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/deep_packetinspection_technolo.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.60</id>
   
   <published>2006-05-17T18:41:03Z</published>
   <updated>2006-05-17T18:45:16Z</updated>
   
   <summary><![CDATA[Wired published an interesting article on&nbsp;Narus' deep packet-inspection technology said to be the basis of the NSA's internet surveillance:&quot;Narus' product, the Semantic Traffic Analyzer, is a software application that runs on standard IBM or Dell servers using the Linux operating...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Data Privacy" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Surveillance" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Threats" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>Wired <a title="The Ultimate Net Monitoring Tool" href="http://www.wired.com/news/technology/0,70914-0.html?tw=rss.technology">published</a> an interesting article on&nbsp;<a href="http://www.narus.com/">Narus</a>' deep packet-inspection technology said to be the basis of the NSA's internet surveillance:</p><blockquote><p>&quot;Narus' product, the Semantic Traffic Analyzer, is a software application that runs on standard IBM or Dell servers using the Linux operating system. It's renowned within certain circles for its ability to inspect traffic in real time on high-bandwidth pipes, identifying packets of interest as they race by at up to 10 gigabits per second.</p><p>Internet companies can install the analyzers at every entrance and exit point of their networks, at their &quot;cores&quot; or centers, or both. The analyzers communicate with centralized &quot;logic servers&quot; running specialized applications. The combination can keep track of, analyze and record nearly every form of internet communication, whether e-mail, instant message, video streams or VOIP phone calls that cross the network.</p><p>Brasil Telecom and several other Brazilian phone companies are using Narus products to charge each other for VOIP calls they send over one another's IP networks. Internet companies in China and the Middle East use them to block VOIP calls altogether.&quot;</p></blockquote>]]>
      
   </content>
</entry>
<entry>
   <title>Google releases AJAX framework</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/google_releases_ajax_framework.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.59</id>
   
   <published>2006-05-17T15:18:12Z</published>
   <updated>2006-06-06T20:59:10Z</updated>
   
   <summary><![CDATA[Yesterday, Google released its Web Toolkit (GWT):&quot;(...) a Java software development framework that makes writing AJAX applications easy.&nbsp; With GWT, you can develop and debug AJAX applications in the Java language using the Java development tools of your choice.&nbsp; When...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Google" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>Yesterday, Google released its <a href="http://code.google.com/webtoolkit/">Web Toolkit</a> (GWT):</p><blockquote><p>&quot;(...) a Java software development framework that makes writing AJAX applications easy.&nbsp; With GWT, you can develop and debug AJAX applications in the Java language using the Java development tools of your choice.&nbsp; When you deploy your application to production, the GWT compiler translates your Java application to browser-compliant JavaScript and HTML. (...)</p><p>Google Web Toolkit ships with a Java-to-JavaScript compiler and a special web browser that helps you debug your GWT applications. For details on how they work, check out the GWT product overview.&quot;</p></blockquote><p><strong>Update:</strong> running examples are available <a href="http://code.google.com/webtoolkit/documentation/examples/">here</a> (with source code).</p><p><strong>Update 2006/6/6:</strong> an assortment of interesting <a href="http://googlewebtoolkit.blogspot.com/2006/06/assortment-of-gwt-links.html">links</a> is available on the GWT blog.<br /></p>]]>
      
   </content>
</entry>
<entry>
   <title>Multiboot DVD with security live CD&apos;s</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/multiboot_dvd_with_security_li.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.56</id>
   
   <published>2006-05-15T22:36:31Z</published>
   <updated>2006-05-15T21:46:34Z</updated>
   
   <summary><![CDATA[As outlined by Darknet, a multiboot DVD with security-related live CD's has been published.&nbsp; SecureDVD features 10 security distributions (e.g. for intrusion tests, forensics or recovery):BackTrackOperatorPHLAKAuditorL.A.S. Linux - Local Area SecurityKnoppix-STDHelixF.I.R.E.nUbuntuINSERT Rescue Security ToolkitIt is available for download through BitTorrent....]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Forensics" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Live CD" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Tools" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[As <a href="http://www.darknet.org.uk/2006/05/securedvd-multiboot-live-security-distros/">outlined</a> by Darknet, a multiboot DVD with security-related live CD's has been published.&nbsp; <a href="http://www.securedvd.org/">SecureDVD</a> features 10 security <a href="http://www.securedvd.org/distros.html">distributions</a> (e.g. for intrusion tests, forensics or recovery):<br /><ol><li>BackTrack</li><li>Operator</li><li>PHLAK</li><li>Auditor</li><li>L.A.S. Linux - Local Area Security</li><li>Knoppix-STD</li><li>Helix</li><li>F.I.R.E.</li><li>nUbuntu</li><li>INSERT Rescue Security Toolkit</li></ol>It is available for download through <a href="http://www.securedvd.org/secureDVD.iso.torrent">BitTorrent</a>.<br />]]>
      
   </content>
</entry>
<entry>
   <title>Security Risks of Airline Passenger Data</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/security_risks_of_airline_pass.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.54</id>
   
   <published>2006-05-15T22:01:11Z</published>
   <updated>2006-05-15T21:14:28Z</updated>
   
   <summary><![CDATA[The Guardian published an interesting article where their reporter investigated how much information an identity fraudster could get about you from a simple airline stub, picked out of a bin near Heathrow: &quot;We logged on to the BA website, bought...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Data Privacy" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>The Guardian <a href="http://www.guardian.co.uk/g2/story/0,,1766138,00.html">published</a> an interesting article where their reporter investigated how much information an identity fraudster could get about you from a simple airline stub, picked out of a bin near Heathrow: </p><blockquote><p>&quot;We logged on to the BA website, bought a ticket in Broer's name and then, using the frequent flyer number on his boarding pass stub, without typing in a password, were given full access to all his personal details - including his passport number, the date it expired, his nationality (he is Dutch, living in the UK) and his date of birth. The system even allowed us to change the information.</p><p>Using this information and surfing publicly available databases, we were able - within 15 minutes - to find out where Broer lived, who lived there with him, where he worked, which universities he had attended and even how much his house was worth when he bought it two years ago. (This was particularly easy given his unusual name, but it would have been possible even if his name had been John Smith. We now had his date of birth and passport number, so we would have known exactly which John Smith.)&quot;</p></blockquote><p>Actually, as <a href="http://www.schneier.com/blog/archives/2006/05/security_risks_4.html">outlined</a> in comments on Bruce Schneier's posting about this article, you could practice using <a href="http://images.google.com/images?q=boarding+pass">Google Images</a>.<br /> </p>]]>
      
   </content>
</entry>
<entry>
   <title>Bookmarklet to create Movable Type entries</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/05/bookmarklet_to_create_movable.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.53</id>
   
   <published>2006-05-05T19:29:25Z</published>
   <updated>2006-05-07T12:08:54Z</updated>
   
   <summary>One thing I badly miss since my migration to Movable Type is the lack of compatibility with Google Toolbar&apos;s functionalities that facilitate the posting of an article in a single click (e.g. the Send To feature).I searched the web for...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Blogging" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>One thing I badly miss since my migration to Movable Type is the lack of compatibility with Google Toolbar's functionalities that facilitate the posting of an article in a single click (e.g. the <a href="http://www.google.com/support/toolbar/bin/answer.py?answer=31941">Send To</a> feature).</p><p>I searched the web for Google Toolbar Custom buttons, Firefox extensions, etc. but could not find anything. It looks like Google Toolbar's API is only intended to create custom searches, and a quick look to the documentation to craft Firefox extensions gave me a headache.</p><p>Hence, I quickly hacked a <a href="http://en.wikipedia.org/wiki/Bookmarklet">bookmarklet</a> to emulate Google Toolbar's Send To feature (inspiration taken <a href="http://del.icio.us/help/buttons">here</a>). It works fine with Opera and Firefox, except that window focus does not work nicely in Firefox.</p><p>To work with your Movable Type blog, you will need to edit the path to mt.cgi and the number of your blog_id (see bold sections in the HTML code below).</p><p><strong>Update 2006/5/7:</strong> I figured I could have used MT's built-in <a href="http://www.sixapart.com/movabletype/docs/3.2/04_posting_entries/using_quickpost.html">Quickpost</a> bookmarklet, but it is not compatible with the <a href="http://www.movalog.com/plugins/wiki/Ajaxify/EnhancedEntryEditing">EnhancedEntryEditing</a> plugin I use to edit my posts.</p>]]>
      <![CDATA[<pre>&lt;a href=&quot;javascript:var newwindow; newwindow=window.open('<strong>http://path/to/</strong>mt.cgi?__mode=view&amp;_type=entry&amp;blog_id=<strong>1234567890</strong>&amp;title='+encodeURIComponent(document.title)+'&amp;text=&lt;a href=%22'+encodeURIComponent(location.href)+'%22&gt;'+encodeURIComponent(document.title)+'&lt;/a&gt;: &lt;blockquote&gt;%22'+encodeURIComponent(document.getSelection())+'%22&lt;/blockquote&gt;','name','height=600,width=800,left=112,top=84,resizable=yes,scrollbars=yes'); if (window.focus) {newwindow.focus()};&quot; title=&quot;MT this!&quot; onclick=&quot;window.alert('Drag this link to your bookmarks toolbar, or right-click it and choose Bookmark This Link...');return false;&quot; class=&quot;bookmarklet2&quot;&gt;MT this!&lt;/a&gt;</pre>
<p>The easiest is to drag this link: <a title="MT this!" onclick="window.alert('Drag this link to your bookmarks toolbar, or right-click it and choose Bookmark This Link...');return false;" href="javascript:var newwindow; newwindow=window.open('http://path/to/mt.cgi?__mode=view&amp;_type=entry&amp;blog_id=1234567890&amp;title='+encodeURIComponent(document.title)+'&amp;text=&lt;a xhref=%22'+encodeURIComponent(location.href)+'%22&gt;'+encodeURIComponent(document.title)+'&lt;/a&gt;: &lt;blockquote&gt;%22'+encodeURIComponent(document.getSelection())+'%22&lt;/blockquote&gt;','name','height=600,width=800,left=112,top=84,resizable=yes,scrollbars=yes'); if (window.focus) {newwindow.focus()};">MT this!</a> up to your Bookmarks Toolbar, and then right-click on it to edit its properties.</p>]]>
   </content>
</entry>
<entry>
   <title>NIST on Security Log Management</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/04/post.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.51</id>
   
   <published>2006-04-25T22:39:56Z</published>
   <updated>2006-04-25T21:54:28Z</updated>
   
   <summary><![CDATA[As noted in the loganalysis mailing list, NIST published Draft Special Publication 800-92 Guide to Computer Security Log Management (Acrobat PDF):&quot;This document provides detailed information on developing, implementing, and maintaining effective log management practices throughout an enterprise. It includes guidance...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Best Practices" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Incident Response" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[As noted in the <a href="http://marc.theaimsgroup.com/?l=loganalysis&amp;r=1&amp;w=2">loganalysis</a> mailing list, <a href="http://csrc.nist.gov/">NIST</a> published Draft Special Publication 800-92 Guide to Computer Security Log Management (<a href="http://csrc.nist.gov/publications/drafts/DRAFT-SP800-92.pdf"><em>Acrobat PDF</em></a>):<br /><blockquote>&quot;This document provides detailed information on developing, implementing, and maintaining effective log management practices throughout an enterprise. It includes guidance on establishing a centralized log management infrastructure, which includes hardware, software, networks, and media. It also discusses the log management processes that should be put in place at an organization-wide level, including the definition of roles and responsibilities, the creation of feasible logging policies, and the division of responsibilities between system-level and organization-level administrators. Guidance is also provided on log management at the individual system level, such as configuring log generating sources, supporting logging operations, performing log data analysis, and managing long-term data storage.&quot;</blockquote>]]>
      
   </content>
</entry>
<entry>
   <title>Making search engines&apos; life easier with Sitemaps</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/04/making_search_engines_life_eas.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.49</id>
   
   <published>2006-04-23T15:32:20Z</published>
   <updated>2006-10-26T00:04:27Z</updated>
   
   <summary>Sitemaps allow you to inform search engines about your web site&apos;s URLs that are available for crawling. Google developed its own Sitemap Protocol, which can be very easily generated from Movable Type using Cameron Bulock&apos;s template. This template adds the...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Blogging" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Google" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[Sitemaps allow you to inform search engines about your web site's URLs that are available for crawling.

Google developed its own <a href="https://www.google.com/webmasters/sitemaps/">Sitemap Protocol</a>, which can be very easily generated from Movable Type using Cameron Bulock's <a href="http://www.cbulock.com/2005/06/sitemaps_-_latest_update.html">template</a>.  This template adds the main index page, all individual archives as well as monthly and category archive links to a sitemap.

For other search engines, I found out a SEO firm developed <a href="http://www.rorweb.com/">ROR</a>, a search engine independent format, which can be used to generate sitemaps, but also product catalogues, etc.  The format is described <a href="http://www.rorweb.com/spec.htm">here</a>.  Several thousands <a href="http://www.google.com/search?q=inurl%3Aror.xml">web sites</a> use it.

As I was not happy with the results of ROR's free <a href="http://www.rorweb.com/rormap.htm">sitemap generator</a>, I thought I would adapt Cameron's Movable Type template to ROR format.]]>
      <![CDATA[Help yourself:

<pre>&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;
&lt;!--  This file is a ROR Sitemap for describing this website to the search engines. For details about the ROR format, go to www.rorweb.com.   --&gt;
&lt;rss version=&quot;2.0&quot; xmlns:ror=&quot;http://rorweb.com/0.1/&quot; &gt;
&lt;channel&gt;
  &lt;title&gt;ROR Sitemap for &lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;&lt;/title&gt;
  &lt;link&gt;&lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
  &lt;item&gt;
    &lt;title&gt;ROR Sitemap for &lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;&lt;/title&gt;
    &lt;link&gt;&lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
    &lt;ror:about&gt;sitemap&lt;/ror:about&gt;
    &lt;ror:type&gt;SiteMap&lt;/ror:type&gt;
  &lt;/item&gt;
  &lt;item&gt;
     &lt;link&gt;&lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
     &lt;ror:updatePeriod&gt;day&lt;/ror:updatePeriod&gt;
     &lt;ror:sortOrder&gt;0&lt;/ror:sortOrder&gt;
     &lt;ror:resourceOf&gt;sitemap&lt;/ror:resourceOf&gt;
  &lt;/item&gt;
  &lt;MTArchiveList archive_type=&quot;Individual&quot;&gt;
&lt;item&gt;
     &lt;link&gt;&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
     &lt;ror:type&gt;Article&lt;/ror:type&gt;
     &lt;ror:updated&gt;&lt;$MTArchiveDate format=&quot;%Y-%m-%d&quot;$&gt;&lt;/ror:updated&gt;
     &lt;ror:sortOrder&gt;1&lt;/ror:sortOrder&gt;
     &lt;ror:resourceOf&gt;sitemap&lt;/ror:resourceOf&gt;
  &lt;/item&gt;
  &lt;/MTArchiveList&gt;&lt;MTArchiveList archive_type=&quot;Category&quot;&gt;
&lt;item&gt;
     &lt;link&gt;&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
     &lt;ror:updatePeriod&gt;week&lt;/ror:updatePeriod&gt;
     &lt;ror:sortOrder&gt;2&lt;/ror:sortOrder&gt;
     &lt;ror:resourceOf&gt;sitemap&lt;/ror:resourceOf&gt;
  &lt;/item&gt;
  &lt;/MTArchiveList&gt;&lt;MTArchiveList archive_type=&quot;Monthly&quot;&gt;
&lt;item&gt;
     &lt;link&gt;&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;&lt;/link&gt;
     &lt;ror:updatePeriod&gt;week&lt;/ror:updatePeriod&gt;
     &lt;ror:sortOrder&gt;3&lt;/ror:sortOrder&gt;
     &lt;ror:resourceOf&gt;sitemap&lt;/ror:resourceOf&gt;
  &lt;/item&gt;
  &lt;/MTArchiveList&gt;&lt;/channel&gt;
&lt;/rss&gt;</pre>

To set this up on your Movable Type blog, simply copy the code into a new index template, set it to output as ror.xml, and add the following line in the &lt;head&gt; of your main page:

<pre>&lt;link rel=&quot;alternate&quot; type=&quot;application/rss+xml&quot; title=&quot;ROR&quot; href=&quot;&lt;$MTBlogURL$&gt;ror.xml&quot; /&gt;</pre>

<strong>Update 2006/10/26:</strong> Yahoo! Search introduced <a href="http://siteexplorer.search.yahoo.com/" target="_blank">Site Explorer</a>, which <em>"allows you to explore all the web pages indexed by Yahoo! Search. View the most popular pages from any site, dive into a comprehensive site map, and find pages that link to that site or any page."</em>  The tool is pretty similar to Google's Webmaster tools.  More information is available in <a href="http://help.yahoo.com/help/us/ysearch/siteexplorer/index.html" target="_blank">online help pages</a>.

Once you have registered your web site with Yahoo! Search, you will be able to submit a site feed (or sitemap).  Yahoo! supports RSS and Atom feeds, as well as <em>"a text file containing a list of URLs, each URL at the start of a new line.  The filename of the URL list file must be urllist.txt."</em>

Generating that text file with a Movable Type template is straightforward:

<pre>&lt;$MTBlogURL encode_xml=&quot;1&quot;$&gt;
&lt;MTArchiveList archive_type=&quot;Individual&quot;&gt;
&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;
&lt;/MTArchiveList&gt;&lt;MTArchiveList archive_type=&quot;Category&quot;&gt;
&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;
&lt;/MTArchiveList&gt;&lt;MTArchiveList archive_type=&quot;Monthly&quot;&gt;
&lt;$MTArchiveLink encode_xml=&quot;1&quot;$&gt;
&lt;/MTArchiveList&gt;</pre>

To set this up on your Movable Type blog, simply copy the code into a new index template, set it to output as urllist.txt, and submit it to Yahoo! Search Site Explorer.]]>
   </content>
</entry>
<entry>
   <title>Security incidents in web-based applications</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/04/security_incidents_in_webbased.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.1</id>
   
   <published>2006-04-20T17:34:00Z</published>
   <updated>2006-04-23T14:28:27Z</updated>
   
   <summary>According to the Web Application Security Consortium (WASC), XSS and SQL injection remain the most popular attack vectors being exploited in public incidents. Further details can be found in the Web Hacking Incidents Database (WHID), which was updated today.The chart...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Injection" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Secure Coding" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Technologies" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Threats" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Web Applications" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="XSS" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[<p>According to the Web Application Security Consortium (<a href="http://www.webappsec.org/">WASC</a>), XSS and SQL injection remain the most popular attack vectors being exploited in public incidents.  Further details can be found in the Web Hacking Incidents Database (<a href="http://www.webappsec.org/projects/whid/">WHID</a>), which was updated today.</p><p>The chart below illustrates the number of public incidents registered per year:</p><p align="center"><img border="0" title="(*): Projected number of incidents for year 2006" alt="(*): Projected number of incidents for year 2006" src="http://laurent.delavaissiere.net/blog/images/chart.jpg" />&nbsp;</p><p>A broader list of vulnerabilities is listed in <a href="http://www.owasp.org/documentation/topten.html">OWASP Top Ten</a>, which ranks the most critical web application security flaws. </p>]]>
      
   </content>
</entry>
<entry>
   <title>Security incident investigations within banks</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/04/security_incident_investigatio.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.2</id>
   
   <published>2006-04-20T12:56:00Z</published>
   <updated>2006-04-27T10:21:28Z</updated>
   
   <summary>BankInfoSecurity.com published the first part of an article (free registration required) which provides a general overview of the security investigation process, how it fits within the incident response process, the required preparation process, specific issues in banks that need to...</summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Best Practices" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Incident Response" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Security" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[BankInfoSecurity.com published the first part of an <a href="http://www.bankinfosecurity.com/articles.php?art_id=138">article</a> <em>(free registration required)</em> which provides a general overview of the security investigation process, how it fits within the incident response process, the required preparation process, specific issues in banks that need to be considered and the relationship between this process and security intelligence activities.

<strong>Update 2006/4/27:</strong> Part two has been <a href="http://www.bankinfosecurity.com/articles.php?art_id=139">published</a>.
]]>
      
   </content>
</entry>
<entry>
   <title>MS extends life of Visual Studio freebie</title>
   <link rel="alternate" type="text/html" href="http://laurent.delavaissiere.net/blog/2006/04/ms_extends_life_of_visual_stud.html" />
   <id>tag:laurent.delavaissiere.net,2006:/blog//2.3</id>
   
   <published>2006-04-20T12:42:00Z</published>
   <updated>2006-04-23T03:22:15Z</updated>
   
   <summary><![CDATA[As reported by Computerworld, Microsoft said that: &quot;an entry-level edition of its Visual Studio tools will remain free and available for use without restrictions for developers.&quot;&nbsp; Microsoft also announced &quot;it has worked with partners to create add-ons to Visual Studio...]]></summary>
   <author>
      <name>Laurent</name>
      
   </author>
         <category term="Companies and Products" scheme="http://www.sixapart.com/ns/types#category" />
         <category term="Microsoft" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://laurent.delavaissiere.net/blog/">
      <![CDATA[As <a href="http://www.computerworld.com/developmenttopics/development/story/0,10801,110679,00.html?source=x10">reported</a> by Computerworld, Microsoft said that: <em>&quot;an entry-level edition of its Visual Studio tools will remain free and available for use without restrictions for developers.&quot;</em>&nbsp;  Microsoft also announced <em>&quot;it has worked with partners to create add-ons to <a href="http://msdn.microsoft.com/vstudio/express/">Visual Studio Express</a> to lure both young developers that are just learning how to code and hobbyist developers that code for fun at home.&quot;</em>&nbsp; (i.e. Lego and eBay).]]>
      
   </content>
</entry>

</feed>
