Slow Week

It’s kind of a slow week in security. Of course there’re new vulnerabilities, but no new interesting vectors of attack or anything like that.

So to give a sign of life, I at least updated my blogroll. There are some really great and interesting blogs among them. Here in order of how much I like them:

• Heise Security: I like them because they compile lists like full discosure or bugtraq for me. I’ve long since canceled my subscriptions of the mailing lists themselves. The flamewars (especially on FD) are simply unbearable.
• GNUCITIZEN: Currently on of the best security research blogs. The guys at GNUCITIZEN really know what they are doing and found a couple of high profile vulnerabilities recently. (Hey, if someone from GNUCITIZEN is reading this: Please use better pictures to illustrate you postings 😉
• Michael Howard’s Web Log: Michael over at Microsoft writes about the security aspects in software development (on Windows platforms). While I’m not a developer, it’s still good to be kept up-to-date.
• SecurityBuddha: Everyone in security knows Mark Curphey. He’s one of the grandfathers of the OWASP Guide for example. Apart from being dreadfully funny, he raises lots of valid points.
• RiskAnalys.is: Amazingly, there are not only technical blogs, but also some about the management aspects of security. RiskAnalys.is is all about risk management. It’s written by the guy who invented the FAIR risk analysis approach, btw.
• Ivan Risic’s Blog: Ivan is the original author and developer of ModSecurity. While you know my opinion on Web Application Firewalls, it’s always good to have an eye on your enemy competition fellow combatants 😉
• HiredHacker: One of the newer entries in my RSS reader. I stumbled across the blog when I read about the Firefox vulnerability that was discovered by this guy.
• Security on Digg: This is mostly not very relevant to information security, but from time to time there’re some funny stories.

If nothing more interesting comes up, I’ll post a list of the funny entries in my RSS reader too…

Picture of snail on mouse pad by zenera