<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Unauthorised Blog &#187; Security</title>
	<atom:link href="http://blog.unauthorised.org.nz/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.unauthorised.org.nz</link>
	<description>Deciphering a hacker's mindset</description>
	<lastBuildDate>Sat, 08 Jan 2011 21:58:23 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>My Windows Live Messenger got hacked</title>
		<link>http://blog.unauthorised.org.nz/2009/05/11/my-windows-live-messenger-got-hacked/</link>
		<comments>http://blog.unauthorised.org.nz/2009/05/11/my-windows-live-messenger-got-hacked/#comments</comments>
		<pubDate>Mon, 11 May 2009 10:05:59 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=482</guid>
		<description><![CDATA[What a timely reminder to steer the topic back to security. It embarasses me to admit it, but in all likelihood, my Windows Live Messenger account was hacked. The damage, my contact list was spammed with some acai berry diet pill offer. The spam wasn&#8217;t particularly convincing, as anyone who knows me wouldn&#8217;t consider me [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2009/05/11/my-windows-live-messenger-got-hacked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Monster.com, please let me go</title>
		<link>http://blog.unauthorised.org.nz/2009/01/26/monstercom-please-let-me-go/</link>
		<comments>http://blog.unauthorised.org.nz/2009/01/26/monstercom-please-let-me-go/#comments</comments>
		<pubDate>Mon, 26 Jan 2009 10:33:42 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=375</guid>
		<description><![CDATA[As promised, here is a fairly up-to-date post on a piece of security news. Monster.com, a popular job site, was breached last Friday. The intruder made off with names, phone numbers, email addresses, and passwords of job seekers. Apparently, this is their second major breach. I vaguely remember registering an account with them before. I&#8217;m [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2009/01/26/monstercom-please-let-me-go/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Let&#8217;s bust some frames</title>
		<link>http://blog.unauthorised.org.nz/2008/12/15/lets-bust-some-frames/</link>
		<comments>http://blog.unauthorised.org.nz/2008/12/15/lets-bust-some-frames/#comments</comments>
		<pubDate>Sun, 14 Dec 2008 12:19:52 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=295</guid>
		<description><![CDATA[You may have learn about a form of web attack known as clickjacking. If not, now is a good time. If you own a website, you should seriously consider adding frame busting code to prevent your site from being loaded in a frame. Frame busting can be easily achieved with some simple Javascript: &#60;script type="text/javascript"&#62; [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/12/15/lets-bust-some-frames/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>64 character WPA2 hex key in Ubuntu</title>
		<link>http://blog.unauthorised.org.nz/2008/11/24/64-character-wpa2-hex-key-in-ubuntu/</link>
		<comments>http://blog.unauthorised.org.nz/2008/11/24/64-character-wpa2-hex-key-in-ubuntu/#comments</comments>
		<pubDate>Mon, 24 Nov 2008 08:57:38 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Network security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=217</guid>
		<description><![CDATA[If you&#8217;re security conscious like me and have secured your wireless network with a 64 character WPA2 hex key, you may well know that Ubuntu won&#8217;t accept it. The Network Manager applet will happily accept the first 63 characters but the moment you enter the 64th character, you won&#8217;t be able to save it. This [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/11/24/64-character-wpa2-hex-key-in-ubuntu/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Kiwicon experience</title>
		<link>http://blog.unauthorised.org.nz/2008/10/04/the-kiwicon-experience/</link>
		<comments>http://blog.unauthorised.org.nz/2008/10/04/the-kiwicon-experience/#comments</comments>
		<pubDate>Fri, 03 Oct 2008 15:34:32 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=114</guid>
		<description><![CDATA[I was up in Wellington last weekend for Kiwicon II and I must say the 50 bucks was well worth it. Over the course of two days, I learned that: video conferencing systems are insecure, hackers may be watching you I have a lot more to learn about heap overflows locks do not prevent access, [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/10/04/the-kiwicon-experience/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>HackThisSite</title>
		<link>http://blog.unauthorised.org.nz/2008/09/20/hackthissite/</link>
		<comments>http://blog.unauthorised.org.nz/2008/09/20/hackthissite/#comments</comments>
		<pubDate>Fri, 19 Sep 2008 12:20:12 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/?p=107</guid>
		<description><![CDATA[HackThisSite.org is a fun site if you like hacking. It is a free, safe, and legal training ground for hackers to test and expand their hacking skills. I vaguely remember some of the challenges from a site I visited a few years ago. It could have been HackThisSite but I can&#8217;t be certain. Anyway, I&#8217;m [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/09/20/hackthissite/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Do you know where you are?</title>
		<link>http://blog.unauthorised.org.nz/2008/07/25/do-you-know-where-you-are/</link>
		<comments>http://blog.unauthorised.org.nz/2008/07/25/do-you-know-where-you-are/#comments</comments>
		<pubDate>Thu, 24 Jul 2008 11:30:15 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security vulnerability]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/2008/07/25/do-you-know-where-you-are/</guid>
		<description><![CDATA[Are you sure? There is currently a DNS flaw out in the open waiting to be exploited. The scary thing about this flaw is that you may be completely oblivious to it. You will type a web address into your browser, hit Enter, and arrive at the page you expect. Problem is, are you really [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/07/25/do-you-know-where-you-are/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Quantico Circuit</title>
		<link>http://blog.unauthorised.org.nz/2008/07/11/quantico-circuit/</link>
		<comments>http://blog.unauthorised.org.nz/2008/07/11/quantico-circuit/#comments</comments>
		<pubDate>Thu, 10 Jul 2008 11:40:15 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/2008/07/11/quantico-circuit/</guid>
		<description><![CDATA[I was reading through some security articles today when I came across a mention of the Quantico Circuit. The name sounds intriguing so I searched it up. The telecom company&#8217;s people told Pasdar, who they&#8217;d brought in for the project, that the unusual backdoor conduit was called the &#8220;Quantico Circuit&#8221; and &#8220;should not be firewalled&#8221;. [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/07/11/quantico-circuit/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Thanks Comodo but you&#8217;re driving me mad</title>
		<link>http://blog.unauthorised.org.nz/2008/04/09/thanks-comodo-but-youre-driving-me-mad/</link>
		<comments>http://blog.unauthorised.org.nz/2008/04/09/thanks-comodo-but-youre-driving-me-mad/#comments</comments>
		<pubDate>Wed, 09 Apr 2008 10:33:45 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.unauthorised.org.nz/2008/04/09/thanks-comodo-but-youre-driving-me-mad/</guid>
		<description><![CDATA[Comodo Firewall Pro is a free personal software firewall. While I appreciate the fact that it&#8217;s free, I must say that it has been driving me mad. I wouldn&#8217;t recommend it to anyone at this stage just yet, but I wouldn&#8217;t stop you from trying it either. This whole thing started a few weeks ago [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2008/04/09/thanks-comodo-but-youre-driving-me-mad/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IE PassView</title>
		<link>http://blog.unauthorised.org.nz/2007/12/20/ie-passview/</link>
		<comments>http://blog.unauthorised.org.nz/2007/12/20/ie-passview/#comments</comments>
		<pubDate>Thu, 20 Dec 2007 09:27:40 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Tip]]></category>

		<guid isPermaLink="false">http://www.unauthorised.org.nz/blog/?p=26</guid>
		<description><![CDATA[I don&#8217;t like Internet Explorer. The main reason being that it&#8217;s really difficult to clear all the user data. Even when you think you&#8217;ve got it all, some crap will always remain. That is why I use Firefox. Which consequently explains why this site looks better in Firefox than IE. I have always been wary [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2007/12/20/ie-passview/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Forgotten password &#8211; It&#8217;s a security risk!</title>
		<link>http://blog.unauthorised.org.nz/2007/10/29/forgotten-password-its-a-security-risk/</link>
		<comments>http://blog.unauthorised.org.nz/2007/10/29/forgotten-password-its-a-security-risk/#comments</comments>
		<pubDate>Sun, 28 Oct 2007 12:05:13 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Tip]]></category>

		<guid isPermaLink="false">http://www.unauthorised.org.nz/blog/?p=20</guid>
		<description><![CDATA[The forgotten password function on websites is not a feature. It is a security risk! The worst of all are the ones that are able to send your current password to your email account. Let&#8217;s take a moment to consider what is required to accomplish this. The users&#8217; passwords must not have been hashed, as [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2007/10/29/forgotten-password-its-a-security-risk/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Security Alert: Windows animated cursor flaw</title>
		<link>http://blog.unauthorised.org.nz/2007/04/20/security-alert-windows-animated-cursor-flaw/</link>
		<comments>http://blog.unauthorised.org.nz/2007/04/20/security-alert-windows-animated-cursor-flaw/#comments</comments>
		<pubDate>Fri, 20 Apr 2007 11:30:34 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security vulnerability]]></category>

		<guid isPermaLink="false">http://www.unauthorised.org.nz/blog/?p=12</guid>
		<description><![CDATA[This isn&#8217;t the most timely security alert, but just in case you haven&#8217;t already heard. Exploits for these vulnerabilities have been observed in the wild. A flaw was discovered late last year in the way Windows handled animated cursor (.ANI) files. An attacker who successfully exploited the most severe of these vulnerabilities could take complete [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2007/04/20/security-alert-windows-animated-cursor-flaw/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>HOWTO Secure a wireless network</title>
		<link>http://blog.unauthorised.org.nz/2007/03/05/howto-secure-a-wireless-network/</link>
		<comments>http://blog.unauthorised.org.nz/2007/03/05/howto-secure-a-wireless-network/#comments</comments>
		<pubDate>Mon, 05 Mar 2007 09:15:33 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Network security]]></category>
		<category><![CDATA[HowTo]]></category>

		<guid isPermaLink="false">http://www.unauthorised.org.nz/blog/?p=6</guid>
		<description><![CDATA[Wireless network is an ideal solution if you have a laptop that is constantly moving around the house, or if you simply wish to eliminate the miles of cabling that run all over the place. However, if not properly configured, wireless networks are very susceptible to attacks. These networks are possibly the most popular source [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2007/03/05/howto-secure-a-wireless-network/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Alert: Google Desktop XSS flaw</title>
		<link>http://blog.unauthorised.org.nz/2007/02/22/security-alert-google-desktop-xss-flaw/</link>
		<comments>http://blog.unauthorised.org.nz/2007/02/22/security-alert-google-desktop-xss-flaw/#comments</comments>
		<pubDate>Thu, 22 Feb 2007 11:10:22 +0000</pubDate>
		<dc:creator>wired4destruction</dc:creator>
				<category><![CDATA[Security vulnerability]]></category>

		<guid isPermaLink="false">http://www.unauthorised.org.nz/blog/?p=5</guid>
		<description><![CDATA[A cross-site scripting (XSS) vulnerability has been found in the Google Desktop application. The flaw, first discovered in October 2006, enables an attacker to search for and steal data from a user&#8217;s system. Google released an updated version of the Google Desktop client that fixes the flaw earlier this month. If you use Google Desktop, [...]]]></description>
		<wfw:commentRss>http://blog.unauthorised.org.nz/2007/02/22/security-alert-google-desktop-xss-flaw/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

