<?xml version="1.0" encoding="UTF-8"?>
<!--Generated by Squarespace Site Server v5.11.5 (http://www.squarespace.com/) on Sun, 01 Aug 2010 03:52:45 GMT--><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0"><channel><title>Noisy Brain Home</title><link>http://pttpsystems.com/noisy-brain/</link><description></description><lastBuildDate>Wed, 30 Jun 2010 02:11:02 +0000</lastBuildDate><copyright></copyright><language>en-US</language><generator>Squarespace Site Server v5.11.5 (http://www.squarespace.com/)</generator><item><title>Two Tools End-of-Life</title><dc:creator>Eric Fredericksen</dc:creator><pubDate>Tue, 29 Jun 2010 22:29:53 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/6/29/two-tools-end-of-life.html</link><guid isPermaLink="false">410025:4488678:8135508</guid><description><![CDATA[<p>Two of the tools on this site have outlived their usefulness. For that reason I am no longer going to support them or provide further downloads. They are</p>
<ul>
<li><a href="http://pttpsystems.com/ping-n-trace/">Ping-N-Trace</a></li>
<li><a href="http://pttpsystems.com/ip-packet-filter-configurator/">IP Packet Filter Configurator</a></li>
</ul>
<p>There is at least one more on the chopping block. I'll decide on that one soon, so stay tuned. :}</p>
<p>Thanks,</p>
<p>Eric</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-8135508.xml</wfw:commentRss></item><item><title>Updated Secure Parcel Delivery</title><dc:creator>Eric Fredericksen</dc:creator><pubDate>Thu, 08 Apr 2010 01:32:49 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/4/7/updated-secure-parcel-delivery.html</link><guid isPermaLink="false">410025:4488678:7262693</guid><description><![CDATA[<p><a title="Have a look" href="http://pttpsystems.com/secure-parcel-delivery/">Secure Parcel Delivery</a> version 1.2 brings a number of long-awaited improvements.</p>
<ul>
<li>Switching to the latest and greatest Cryptographic Service Provider  (CSP)          
<ul>
<li>Microsoft Enhanced RSA and AES Cryptographic Provider</li>
<li>Valid for Windows XP and later</li>
</ul>
</li>
<li>Adding the Advanced Encryption Standard (AES) symmetric cipher to  the fold</li>
<li>Restricting symmetric encryption ciphers and key strengths to those  allowed by FIPS 140-2 (and FIPS 140-3)          
<ul>
<li>See http://en.wikipedia.org/wiki/FIPS_140-2 </li>
<li>Allowed ciphers include triple DES and AES with a minimum key length  of 128 bits</li>
<li>Disabling selection of RC4, RC2, DES, 2-key 3DES</li>
</ul>
</li>
<li>Allowing user selection of RSA key size from 1024 to 16384 bits in  256 bit steps          
<ul>
<li>I suggest you take the default RSA key size of 3072 bits</li>
<li>FIPS 140-3 will require at least 3072 bits (to set a minimum  cryptographic strength of 128 bits overall) but the program will let you  choose keys down to 1024 bits at this time</li>
</ul>
</li>
<li>Consolidation of User and Key interface elements to simplify  configuration</li>
</ul>
<p>This version is 32-bit only and tested on:</p>
<ul>
<li>Windows 7 Professional x64</li>
<li>Windows Vista Business x86</li>
<li>Windows XP SP3 x86</li>
</ul>
<p>Cheers!</p>
<p>-Eric</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-7262693.xml</wfw:commentRss></item><item><title>Software Tool Updates</title><dc:creator>Eric Fredericksen</dc:creator><pubDate>Sat, 03 Apr 2010 23:57:41 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/4/3/software-tool-updates.html</link><guid isPermaLink="false">410025:4488678:7222531</guid><description><![CDATA[<p>I've updated several tools today. The changes include a bug fix and a small expansion of capability as listed below. :)</p>
<p>Oh, and an update to the Secure Parcel Delivery program is on the way.</p>
<p>Cheers!</p>
<p>-Eric</p>
<h3>MyCryptInfo -&gt; version 1.4</h3>
<p>The tool is expanded to detect more block cipher modes of operation. That is, the algorithms employed to make a block cipher encrypt a chunk of data bigger than the native block size. I noticed that some new modes had been added in the Microsoft header files since last I looked. Although these modes don't seem to be available with the Microsoft native Cryptographic Service Providers (CSPs), they must be available in some third party CSPs. The modes added are:</p>
<ul>
<li>CBCI - ANSI CBC Interleaved</li>
<li>CFBP - ANSI CFB Pipelined</li>
<li>OFBP - ANSI OFB Pipelined</li>
<li>CBCOFM - ANSI CBC + OF Masking</li>
<li>CBCOFMI - ANSI CBC + OFM Interleaved</li>
</ul>
<h3>MyNetwork -&gt; version 1.3</h3>
<p>Fixed a bug in the formatting of the lease times for interfaces with DHCP enabled. This turned out to be a 32-bit to 64-bit portability issue on windows.</p>
<h3>MTFileTransfer -&gt; version 1.3</h3>
<p>Fixed the same bug in the formatting of the lease times for interfaces with  DHCP enabled.</p>
<p>&nbsp;</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-7222531.xml</wfw:commentRss></item><item><title>Open Sourcing Some Example Code</title><category>open source</category><category>software</category><category>tcp/ip</category><category>threading</category><category>tool</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Wed, 24 Mar 2010 23:07:14 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/3/24/open-sourcing-some-example-code.html</link><guid isPermaLink="false">410025:4488678:7119247</guid><description><![CDATA[<p>In order to make <a title="...from over on tools and software..." href="http://pttpsystems.com/sockets-and-algorithms/">some examples of thread and TCP/IP server management </a>clearer I  decided to clean up the full, standalone project and <a title="All clear  text, so no digital signature needed ;)" href="../../storage/Example%20Threaded%20Server%20and%20Client.zip">post  it here for your download</a>. The project files build with Visual  Studio 2008 (VC9) for Release and Debug mode on both x86 and x64<span> systems. Note that this project is simply a demonstration of thread and  TCP/<span>IP</span> server</span> management on an MS Windows system. A  full-fledged application would have much more in the way of error  checking, unit tests, and other infrastructure. :)</p>
<p>These are all plain source code files, not  executables, and I'm making them available under the <a class="offsite-link-inline" title="Read this to see what's up" href="http://www.mozilla.org/MPL/" target="_blank">Mozilla trifecta  license</a>.</p>
<p>﻿Cheers!</p>
<p>-Eric</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-7119247.xml</wfw:commentRss></item><item><title>Updated MyCryptInfo</title><category>cryptography</category><category>tool</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Wed, 17 Mar 2010 23:52:28 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/3/17/updated-mycryptinfo.html</link><guid isPermaLink="false">410025:4488678:7046737</guid><description><![CDATA[<p>Today's update is for the <a title="Get your crypto on!" href="http://pttpsystems.com/mycryptinfo/">MyCryptInfo</a> tool that allows you to explore the Microsoft Cryptographic Service Providers (CSPs) on your system. It has been updated to run on 64-bit systems and to include some missing information about the SHA2 hash that is in the AES enabled CSP.</p>
<p>Otherwise the tool hasn't needed to change much.</p>
<p>Have fun, and don't delete any cryptographic containers that you really need!</p>
<p>-Eric</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-7046737.xml</wfw:commentRss></item><item><title>Another Updated Software Tool</title><category>threading</category><category>tool</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Sun, 14 Mar 2010 00:02:07 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/3/13/another-updated-software-tool.html</link><guid isPermaLink="false">410025:4488678:7007546</guid><description><![CDATA[<p>I took time today to update the <a title="Have a look" href="http://pttpsystems.com/threadmonitor/">ThreadMonitor</a> tool and adapt it to 64-bit systems. The 32-bit version still works on 32-bit systems but also works correctly for 32-bit programs on 64-bit systems. However, if you want to monitor a 64-bit program then you'll need to use the 64-bit version of <a title="Have a look" href="http://pttpsystems.com/threadmonitor/">ThreadMonitor</a>.</p>
<p>Oh, I also moved some user interface bits around. The "Company" and "Product" fields have been merged into a single base path and the edit field was made a bit longer. Why? Well, so that it is easier for you to make the path what you want it to be rather than trying to follow my personal registry versioning process.</p>
<p>Enjoy!</p>
<p>-Eric</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-7007546.xml</wfw:commentRss></item><item><title>Updated Software Tools</title><category>firewall</category><category>tcp/ip</category><category>threading</category><category>tool</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Thu, 11 Mar 2010 01:40:15 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/3/10/updated-software-tools.html</link><guid isPermaLink="false">410025:4488678:6973674</guid><description><![CDATA[<p>OK! :) After too much time I have completed updating several tools. The updates include fixing some bugs, modifying the code to run on 64-bit Windows systems, and general stuff like that. The tools updated in this batch include</p>
<ul>
<li><a title="Explore what network stuff is happening" href="http://pttpsystems.com/my-network/">My Network</a></li>
<li><a title="Simple multithreaded file transfer" href="http://pttpsystems.com/multithreaded-file-transfer/">Multithreaded File Transfer</a></li>
<li><a title="Configure that UPnP compatible router" href="http://pttpsystems.com/upnp-nat-router-configurator/">UPnP NAT Router Configurator</a></li>
</ul>
<p>I'm still working on the IP Packet Sniffer and IP Packet Filter Configurator tools. The Windows OS has had enough changes that their usefulness is in question -- I need to evaluate that. I have hope that I can work out just how munged raw sockets have become.</p>
<p>I'm still working, so come back later. ;)</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-6973674.xml</wfw:commentRss></item><item><title>Crazy, Amazing Bit Rot</title><dc:creator>Eric Fredericksen</dc:creator><pubDate>Wed, 10 Mar 2010 00:48:05 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/3/9/crazy-amazing-bit-rot.html</link><guid isPermaLink="false">410025:4488678:6962195</guid><description><![CDATA[<p>It's true what they say - if you leave software unattended the bits rot and strange things start going wrong. ;)</p>
<p>If you have tried to use any of the software tools under the Tools and Software section on anything later than Windows XP, I apologize. They were last looked at some years ago and there has been some incredible bit rot. Some work on Windows 7 and Vista, and others don't. The raw sockets and packet level tools need the most care and attention, it seems.</p>
<p>Well, perhaps it is fairer to say that Microsoft operating system API's and configurations have seen some drift over the past years and that I was not keeping up. :| Darn me for wanting some free time!</p>
<p id="firstHeading" class="firstHeading">In any case, I'm in the process of picking out the rotten bits, patching, fixing, and generally rehabilitating those thngs. Don't be surprised if I just retire one or two [raw sockets are so pass&eacute; when we can use (Win)PCap ].</p>
<p>Stay tuned!</p>]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-6962195.xml</wfw:commentRss></item><item><title>Data, Data, Everywhere</title><category>compliance</category><category>risk</category><category>security</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Sun, 21 Feb 2010 06:42:07 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/2/21/data-data-everywhere.html</link><guid isPermaLink="false">410025:4488678:6774523</guid><description><![CDATA[Suppose your security system chooses 10,000 controls (vulnerability checks, scripts, signatures, etc -- pick your preferred terminology) that can be applied to some example asset (a server, executive laptop, or whatever). That number could be smaller or it could be larger depending on the system but let’s say that 10,000 is the count after filtering out those controls that don’t apply (e.g., there’s no Apache server on that Windows 7 laptop).
<br/><br/>
Now, suppose that each control returns 100 characters of evidence data. That means you have 1,000,000 characters of data for one full assessment of one system. You are going to store those data in Unicode format because our company is international and hence so are our evidence data. That turns our 1,000,000 characters into 2,000,000 bytes of data.
<br/><br/>
The original story was on the M2GRC blog:  http://m2grc.com/2010/01/18/data-data-everywhere/
<br/><br/>
The full article can also be found here. :)]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-6774523.xml</wfw:commentRss></item><item><title>Malware Slaying</title><category>malware</category><category>potentially unwanted programs</category><category>risk</category><category>risk management</category><category>trojans</category><category>vampires</category><category>worms</category><dc:creator>Eric Fredericksen</dc:creator><pubDate>Sun, 21 Feb 2010 06:37:39 +0000</pubDate><link>http://pttpsystems.com/noisy-brain/2010/2/21/malware-slaying.html</link><guid isPermaLink="false">410025:4488678:6774510</guid><description><![CDATA[Give me a few minutes of your attention and I’ll tell you how some very real "electronic vampires", while not very entertaining, are remarkably similar to fictional vampires. I think you’ll find vampires and malware behave very much alike and that the rules for dealing with vampires are a good guide for dealing with malware.
<br/><br/>
You can find the original story over at the M2GRC blog: http://m2grc.com/2010/02/16/mcafee-the-malware-slayer/ :) 
<br/><br/>
The story can also be found here. :)]]></description><wfw:commentRss>http://pttpsystems.com/noisy-brain/rss-comments-entry-6774510.xml</wfw:commentRss></item></channel></rss>