Thousands Of Google Images Infected With Malware

-=- This post is in reply to a comment on the Huffington Post article linked at the bottom of this post-=-

There are multiple reasons that ISPs don't run antispyware/antimalware before traffic reaches customers, many of them probably legal. Like Spifflous mentions, they can do DPI (Deep Packet Inspection­) to see what is in the traffic, but this would probably have privacy issues. How many people want their ISP sniffing their email traffic for Spam or malicious links when it means they also see all of your Banking Documents or other informatio­n in them that you wouldn't want them to see.



ISPs could also run a black list on these sites. It takes a lot of work to keep up with the criminals and keep a constantly changing black list. That said, there are companies that do it. I use OpenDNS which uses crowd sourcing for it's blacklist. I like having control over it. The next question would be who controls the blacklist, and what do you do if your site is wrongfully blocked. How about if your site is correctly blocked because of malware due to being hacked, but you fix it. Who determines what needs to be done to have it unblocked. At what point does blocking sites become censorship­.



If you want a technical reason, DPI slows down internet traffic. Technology is getting better and there are devices that can do DPI in real time, but the cost more. If ISPs did do this, who do you think would end up paying for it?
About Google
Read the Article at HuffingtonPost

ShmooCon, Podcasters and Dojosec oh my!!!

I’ve been meaning to post this for a couple of days, and finally got around to doing a little write-up on them. As I posted earlier, I had the chance to go to my first Hacker convention in Washington DC. In preparation, I did a little bit of research into ShmooCon and started following the Shmoo Group on Twitter. In the process, I picked up a few followers on Twitter. Marcus Carey being one of them. Looking at his information led me to a group of podcasters that were hosting their third annual Podcastersmeetup at ShmooCon. Basically a group of Security oriented podcasters that get together to broadcast live from ShmooCon and meet their listeners. Marcus runs a group called Dojosec that was one of the sponsors for the podcastmeetup and an event afterwards called Firetalks. Afterwards, we all went to the HacDC party and had a great time getting to know people in our field and doing a little networking for the future. All that from a little bit of research before going to a conference.

Intro Post: What is this blog for?

Hello All, :-)

I've been thinking about starting another blog for a while and seeing what I can put into it. For the moment, this is going to be kind of a catchall of thoughts, links, security bytes and whatever else.

I recenlty went to Shmoocon and met some great people there. At one of the after con gatherings, I met some of the DC Security Space bloggers and podcasters. They podcasted from the con and did something called FireTalks that I will go into in a future post. Anyway, one of the ideas behind FireTalks is to give back to the community. Part of giving back is to give insight and to get your ideas out. In this way, you enrich the community and hopefully get something out of in in the process.

Anyway, the idea of giving back and seeing if anyone will even listen is why I am starting this. That and a place to share some of the junk that is floating around in my head. :-)