Ethical Hackers at Work – Pirates Éthiques au Travail

(version francaise ci-bas)

I recame accross one of the two TigerTeam episodes that aired on courttv in december 2007. The show is so great that I think it’s a good thing that they didn’t make this a regular show. We surely wouldn’t want bad eyes to learn techniques from this show!

If you would like to see how a real hacker works, this is as good as it gets.

You can watch the first episode online now.

http://www.trutv.com/video/tiger-team/tiger-team-101-1-of-4.html

* * *

En effectuant des recherches, je suis retombé sur un épisode de TigerTeam: une émission présentée à Courttv en décembre 2007. L’émission était si bonne que je pense qu’ils ont bien fait de ne pas en faire une série. On ne voudrait surtout pas que ce genre de techniques soit enseignée à de mauvaises personnes!

Si vous désirez voir comment une équipe de pirates travaillent, cette émission vous en mettra plein la vue!

Le premier épisode est disponible ici.

http://www.trutv.com/video/tiger-team/tiger-team-101-1-of-4.html

A New Windows – Un Nouveau Windows.

(version francaise ci-bas)

Here is a link that shows what the next Microsoft Windows will look like.

http://itworldcanada.com/articles/windows7/index.htm

* * *

Voici un lien qui présente des images de la prochain mouture de Microsoft Windows.

http://itworldcanada.com/articles/windows7/index.htm

Free Security Webcasts – Webprésentation Gratuite sur la Sécurité

(version francaise ci-bas)

Core Security is offering 3 free (and downloadable) webcasts on security: more precisely, they talk about penetration testing.

I highly recommend them.

http://www.coresecurity.com/Form/generic/campaign/bannerninjitsu

* * *

CoreSecurity offre 3 présentations gratuites (et téléchargeables) portant sur la sécurité: plus précisément sur le penetration testing.

Je les recommande chaudement!

http://www.coresecurity.com/Form/generic/campaign/bannerninjitsu

WAP and WAP2 unsecure? WAP et WAP2 insécures?

(version francaise ci-bas)

Securityandthe.net have released an article concerning the recent discovery by Russian experts working for Elcomsoft of a technique to crack WAP and WAP2 keys.

The distributed password recovery technique requires around 20 computers equiped with dual NVIDIA GeForce GTX280 cards. Their technique uses the video chips to process massive amounts of parallel calculations. Apparently this technique speeds up the process by a hundred times! (Which means a WPA key could be cracked in a few days rather then a few years).

Free Security Magazine – Revue de Sécurité Gratuite

(Version Francaise ci-bas)

I recently came accross this magazine and thought it was really good. The content is great and I could imagine people actually buying it. But you see, that won’t happen because it’s free.

Simply visit http://www.scmagazineus.com and click on subscribe! This magazine can also give you credits for your CISSP certification.

* * *

Je suis récemment tombé sur ce magazine (en anglais) et j’ai trouvé que le contenu était pertinent. Le contenu est si bon que je ne serais pas surpris de voir des gens débourser pour s’y abonner. Ce ne sera toutefois pas le cas puisque cette revue est gratuite!

Visitez simplement http://www.scmagazineus.com et cliquez sur subscribe. Ce magazine peut vous donner des crédits CISSP!

Useful Wan Tools – Outils Wan Pratiques

(Version Francaise ci-bas)

Here are a couple of very useful links. These web sites can all be used to do various checks on your domain names, dns zones as well as do portscans and other security verifications.

http://serversniff.net/

A very interersting site to do checks on your public servers. The information is presented as reports that have lots of details. Great for information gathering

Upgrading Certifications – Maj de Certifications.

(French version soon available)

I recently decided it was time for me to upgrade my Microsoft Certifications.

Much has changed now in the Microsoft Certification program: even the titles are different.

After more then 15 years, Microsoft decided that the infamous MCSE title had to be changed.

The certification paths now give titles such as:

MCTS (Microsoft Certified Technology Specialist) whic is more or less the equivalent of an old MCP certification.

MCITP: Server Administrator (Microsoft Certified IT Professional) which is an upgraded MCSA.

MCITP: Enterprise Administrator which is similar to the MCSE certification.

MCA (Microsoft Certified Architect) this is a new certification that attempts to gain the level of recognition high end certifications have (CCNE for example).

The MCA program looks very exciting. I, for instance, would be more then willing to engage in this program provided that someone had the ~35k to sponsor me.

My first exam is scheduled somewhere in november. More news on this soon.

Published in Windows It Pro.

For those who didn’t know, I am currently being mentionned in the prestigious Windows It Pro magazine under the What’s Hot section (the March 2007 issue).

If you are a subscriber, you can view the article here:

Windows It Pro article

Otherwise it’s available in stores right now.

* * *

Pour ceux qui ne le sauraient pas encore, on parle de moi dans un petit article du prestigieux magazine Windows It Pro (dans la section What’s Hot de l’édition Mars 2007).

Les abonnés au magazine pourront lire l’article ici:

Article de Windows It Pro

Sinon, le magazine est en kiosques maintenant.

Learn To Script With Powershell – part 2

Now that we have set your environment, we are ready to examine a few cool things to do with Powershell.

Commands inside Powershell are called cmdlet (pronounced commandlet)

Here is the first cmdlet you should know:

get-help

This will allow you to see help for any desired command. As you can notice, this command is composed of a verb and a noun. This is the structure of every command in Powershell. Speaking of commands, if you want to see them, type the following:

get-command

Wow! That was easy and is impressive. By the way, in powershell, a command is called a cmdlet (pronounced commandlet) As you’ve probably guessed, the following will get you some help on the get-command cmdlet.

Test Your Internet Connection Speed.

(Version Francaise ci-bas)

There is a lot of internet connection testing websites out there. Some of them even are from ISP’s such as Videotron. While some of them are really nice and accurate, no one closely matches the speednet website.

Try it out and let me know how you like it.

http://www.speedtest.net

(Thanks to my colleague Richard for this one)

Bien qu’il existe de nombreux sites web qui proposent de mesurer la vitesse de votre connexion internet (certains étant même faits par des fournisseurs comme Videotron) aucun de ces sites n’arrive à égaler la convivialité et l’efficacité de speednet.

Essayez-le et faites moi part de vos commentaires.

http://www.speedtest.net

(Merci a mon collègue Richard pour ce lien!)