Patching Adobe Acrobat and Reader

Adobe Reader 9.3.1 is a msp file that can only be applied to Adobe Reader 9.3. So what to do about the users that hadn’t installed 9.3 yet. I really didn’t want them to install 9.3 then have 9.3.1 install immediately after that. That sort of thing sets user revolt in motion. So I searched …

Continue reading ‘Patching Adobe Acrobat and Reader’ »

Dumb Ideas in Pentesting

Today’s SANS Diary reminded me of something that happened a while back. The SANS entry New Risks in Penetration Testing was concerned that reputation scoring for an IP could be effected by pen testing from that IP address. I guess someone is taking the old Senderbase concept and applying it to all traffic. The helpdesk received an …

Continue reading ‘Dumb Ideas in Pentesting’ »

Dear Abby on Password Secrecy

Today’s Dear Abby contained a letter about passwords. It’s the third letter at this link The letter writer warns against sharing your passwords with anyone. The writer recounts instances where a password shared at one point in a relationship becomes a weapon when the relationship turns sour. People, after the divorce is finalized you need …

Continue reading ‘Dear Abby on Password Secrecy’ »