OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Consumer Security Web Site

From: Joshua Feek (jfeekyahoo.com.au)
Date: Tue Jun 29 2004 - 23:17:38 CDT


How about a mindset change

Use a passphrase rather than password. A collection of
meaningless words to the hacker but meaningful for the
user like BreadMilkandCheese. User will remember it
and complex for hackers to not be able to guess
easily.

--- "James D. Stallard" <jamesleafgrove.com> wrote: >
David
>
> Top Idea, this certainly qualifies as 'A Good
> Thing'.
>
> My 2 cents is "how to pick a decent password"
>
> There are lots of myths out there on what qualifies
> as a good password and
> while all us techies would love our users to pick
> something really complex
> (read "nasty") the fact remains that they would
> rather pick the name of
> their dog or football team. So, a few tips on
> choosing something easy to
> remember and hard to crack, and obfuscating their
> dogs name might be nice :)
>
> Most of my work is Active Directory design related,
> so a few tips on using
> GPOs for improving security and securing DNS
> services would be nice. Perhaps
> you couls really push the boat out and put in some
> stuff about Delegation of
> Administration!
>
> Cheers
>
> James D. Stallard
> Active Directory and Infrastructure Technical
> Architect
> Leafgrove Limited
>
>
> -----Original Message-----
> From: David Harper [mailto:david.harperthermon.com]
>
> Sent: 28 June 2004 16:50
> To: 'focus-mssecurityfocus.com'
> Subject: Consumer Security Web Site
>
> All,
>
> I'm putting together a web site for home and small
> office computer users to
> address computer and small network security. I'm
> hoping to eventually have
> a one-stop site where non-technical consumers can
> get all the information
> they need to protect their home and small office
> systems.
>
> So far I'm planning sections on
> Viruses/Worms/Trojans, Spam, Identity Theft,
> Cyberstalking, Hacking, Spyware and Adware. Each
> section is to cover the
> basics (what it is, how to remove/prevent it, etc.)
> in a non-technical,
> friendly-to-the-average-home-user way. I'll also
> include links to sites
> like Windows Update and other free tools, with a
> strong admonition that
> their computer be checked and patched - now.
>
> I'd like to get input from the list on any other
> sections to include on the
> web site. What do you see as the most glaring gaps
> in end-user knowledge?
> What information, tools, links, etc., would best
> enable them to secure their
> systems easily against the most common threats?
> Also, I'm gearing this
> toward Microsoft simply because 1) Microsoft runs
> the vast majority of
> home/small-office computers, 2) Those using Linux
> are already pretty
> computer savvy, and this site is for the novice.
> Should I expand the focus?
> Include MACs? What about the buzz on cell phone
> viruses? Should cell phone
> security and privacy issues be included, as well?
>
> Please keep in mind that this site is for the
> novice, so explanations of
> elliptical curve cryptography probably won't fly. I
> just want to make it as
> easy as possible for the non-technical user to stay
> up to date.
>
> Your input is greatly appreciated!
>
> Thanks,
> David
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>
>
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>

        
        
                
___________________________________________________________ALL-NEW Yahoo! Messenger - sooooo many all-new ways to express yourself http://uk.messenger.yahoo.com

---------------------------------------------------------------------------
---------------------------------------------------------------------------