Comments for vandeneynde.net http://www.vandeneynde.net Wed, 19 Nov 2008 21:06:02 +0000 http://wordpress.org/?v=2.6.3 Comment on Physical Access always means p0wned by root http://www.vandeneynde.net/2008/05/26/physical-access-always-means-p0wned/#comment-141 root Wed, 28 May 2008 20:59:00 +0000 http://www.vandeneynde.net/?p=57#comment-141 nice angle but nothing new under the sun. once you can read off a disk .. .its game over. glad to see unix defends itself much harder against these practices :-) mod me down ! nice angle but nothing new under the sun. once you can read off a disk .. .its game over. glad to see unix defends itself much harder against these practices :-)

mod me down !

]]> Comment on Privacy Paradox by Karim Vaes http://www.vandeneynde.net/2008/05/18/privacy-paradox/#comment-140 Karim Vaes Tue, 27 May 2008 12:34:26 +0000 http://www.vandeneynde.net/?p=55#comment-140 The difference lies within the concept of data ownership. I am the sole owner of my personal information, so I can choose to publish this (openly). Yet you do not have the permission to do so, unless I would provide you a specific permission of trust to do so. However such a permission of trust is not exchangeable. It's not because I trust you with a certain part of information, that you are allowed to publish this (just because you trust the other party). The difference lies within the concept of data ownership. I am the sole owner of my personal information, so I can choose to publish this (openly). Yet you do not have the permission to do so, unless I would provide you a specific permission of trust to do so. However such a permission of trust is not exchangeable. It’s not because I trust you with a certain part of information, that you are allowed to publish this (just because you trust the other party).

]]> Comment on Using firewire to get into a windows PC by vandeneynde.net » Blog Archive » Physical Access always means p0wned http://www.vandeneynde.net/2008/03/30/using-firewire-to-get-into-a-windows-pc/#comment-139 vandeneynde.net » Blog Archive » Physical Access always means p0wned Mon, 26 May 2008 07:54:19 +0000 http://www.vandeneynde.net/2008/03/30/using-firewire-to-get-into-a-windows-pc/#comment-139 [...] blogged about it before but every now and then someone finds a new physical ‘hack’ into windows. Here [...] [...] blogged about it before but every now and then someone finds a new physical ‘hack’ into windows. Here [...]

]]> Comment on Privacy Paradox by Tom http://www.vandeneynde.net/2008/05/18/privacy-paradox/#comment-137 Tom Mon, 19 May 2008 07:52:27 +0000 http://www.vandeneynde.net/?p=55#comment-137 Hi Benny, That is exactly the point I wanted to make. The default settings should be the 'most private' so users are assisted in thinking about what information to release to the general public. As for employers who background check their potential hires on the Internet. I must admit that I too google every name before I interview them to see what info comes back. This sometimes gives insight in how involved a potential candidate already is in the online infosec community (indicates a sense of passion for the profession). However, this is not the decisive factor, interviewing someone face to face is still the most valuable part of our selection process. Cheers, Tom Hi Benny,

That is exactly the point I wanted to make. The default settings should be the ‘most private’ so users are assisted in thinking about what information to release to the general public.
As for employers who background check their potential hires on the Internet. I must admit that I too google every name before I interview them to see what info comes back. This sometimes gives insight in how involved a potential candidate already is in the online infosec community (indicates a sense of passion for the profession). However, this is not the decisive factor, interviewing someone face to face is still the most valuable part of our selection process.

Cheers,

Tom

]]> Comment on Privacy Paradox by Benny http://www.vandeneynde.net/2008/05/18/privacy-paradox/#comment-136 Benny Sun, 18 May 2008 22:14:14 +0000 http://www.vandeneynde.net/?p=55#comment-136 Information can be used for good or for bad purposes. When it's your personal information, it all amounts to who controls it. When a company receives your private information, it's protected by law and they need your permission. Disclosing this information without your consent makes you loose that control. Publishing private information on social networks is up to you, you have more control over WHAT to publish and WHEN. It's a totally other matter then a third party publishing it, because you didn't decide to. It's all about CONTROL and CHOICE. My LinkedIN only disclosed most information to my contacts. The public profile is a lot shorter and skips over the details. My twitter only discloses information only to those I accept. It's my CHOICE who sees my tweeters. But I do agree that a lot of people don't take these steps and the default settings of those sites is allow all. User awareness is an option, but who is going to tell them? Educate your peers (blogging is a start). I know that 90% employers check the received CVs against the user's LinkedIN page for inconsistencies. Even if it is because you failed to keep that page up to date, it makes you look bad. Ye be warned. ;-) Information can be used for good or for bad purposes. When it’s your personal information, it all amounts to who controls it. When a company receives your private information, it’s protected by law and they need your permission. Disclosing this information without your consent makes you loose that control.

Publishing private information on social networks is up to you, you have more control over WHAT to publish and WHEN. It’s a totally other matter then a third party publishing it, because you didn’t decide to. It’s all about CONTROL and CHOICE.

My LinkedIN only disclosed most information to my contacts. The public profile is a lot shorter and skips over the details. My twitter only discloses information only to those I accept. It’s my CHOICE who sees my tweeters.

But I do agree that a lot of people don’t take these steps and the default settings of those sites is allow all. User awareness is an option, but who is going to tell them? Educate your peers (blogging is a start). I know that 90% employers check the received CVs against the user’s LinkedIN page for inconsistencies. Even if it is because you failed to keep that page up to date, it makes you look bad. Ye be warned. ;-)

]]> Comment on Using firewire to get into a windows PC by prins http://www.vandeneynde.net/2008/03/30/using-firewire-to-get-into-a-windows-pc/#comment-134 prins Fri, 04 Apr 2008 11:16:00 +0000 http://www.vandeneynde.net/2008/03/30/using-firewire-to-get-into-a-windows-pc/#comment-134 Interesting Tom, never thought hacking into a PC could be that easy... shall I remove the firewire gate on my PC now ? :) Interesting Tom, never thought hacking into a PC could be that easy…

shall I remove the firewire gate on my PC now ? :)

]]> Comment on New Theme by Erik http://www.vandeneynde.net/2008/01/13/new-theme/#comment-132 Erik Mon, 03 Mar 2008 17:22:28 +0000 http://www.vandeneynde.net/2008/01/13/new-theme/#comment-132 this website needs an update! this website needs an update!

]]> Comment on New Theme by Erik http://www.vandeneynde.net/2008/01/13/new-theme/#comment-131 Erik Mon, 28 Jan 2008 14:08:13 +0000 http://www.vandeneynde.net/2008/01/13/new-theme/#comment-131 New look is great! I love it! New look is great! I love it!

]]> Comment on Free Online Security CheckUp for 3rd party apps by Xavier http://www.vandeneynde.net/2008/01/08/free-online-security-checkup-for-3rd-party-apps/#comment-130 Xavier Fri, 11 Jan 2008 15:09:36 +0000 http://www.vandeneynde.net/2008/01/08/free-online-security-checkup-for-3rd-party-apps/#comment-130 In the same way, Secunia released PSI [1] (Personal Software Inspector). It has still a release candidate status but sounds promising! (if you're ActiveX allergic ;-) [1] https://psi.secunia.com/ In the same way, Secunia released PSI [1] (Personal Software Inspector). It has still a release candidate status but sounds promising! (if you’re ActiveX allergic ;-)
[1] https://psi.secunia.com/

]]> Comment on OpenVPN and Linksys WRT-54G by Erik http://www.vandeneynde.net/2007/09/24/openvpn-and-linksys-wrt-54g/#comment-128 Erik Fri, 28 Sep 2007 06:40:35 +0000 http://www.vandeneynde.net/2007/09/24/openvpn-and-linksys-wrt-54g/#comment-128 Tsss, you always blame it on the beer... you should better blame it on the fact that you can't drink :) I know I know, pot kettle and black ;) Tsss, you always blame it on the beer… you should better blame it on the fact that you can’t drink :)

I know I know, pot kettle and black ;)

]]>