<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>eBlog &#187; security</title>
	<atom:link href="http://emresaglam.com/blog/tag/security/feed" rel="self" type="application/rss+xml" />
	<link>http://emresaglam.com/blog</link>
	<description>My Blog about my life and my thoughts...</description>
	<lastBuildDate>Tue, 01 May 2012 17:56:26 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Some basic statistics on leaked Sony usernames and passwords data.</title>
		<link>http://emresaglam.com/blog/1011</link>
		<comments>http://emresaglam.com/blog/1011#comments</comments>
		<pubDate>Thu, 09 Jun 2011 04:26:26 +0000</pubDate>
		<dc:creator>Emre</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[hacked]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[tips]]></category>

		<guid isPermaLink="false">http://emresaglam.com/blog/?p=1011</guid>
		<description><![CDATA[I spent some time on analyzing password usage using the data that leaked from couple of Sony hacks few days ago. The results are pretty scary. The data size: 38698 users on 2 sites. Top ten most used passwords are: seinfeld password winner 123456 purple sweeps contest princess maggie peanut So if you have a [...]]]></description>
			<content:encoded><![CDATA[<p>I spent some time on analyzing password usage using the data that leaked from couple of Sony hacks few days ago. The results are pretty scary.</p>
<p>The data size: 38698 users on 2 sites.</p>
<p>Top ten most used passwords are:</p>
<ol>
<li>seinfeld</li>
<li>password</li>
<li>winner</li>
<li>123456</li>
<li>purple</li>
<li>sweeps</li>
<li>contest</li>
<li>princess</li>
<li>maggie</li>
<li>peanut</li>
</ol>
<p>So if you have a password that is listed above, you better change it pretty soon.</p>
<p>I also compared how many people were using the same password on two different hacked Sony sites. There were 2421 users who used the same email to register and out of those only 168 users were using different passwords (about 6.5%).</p>
<p><img src="https://spreadsheets.google.com/spreadsheet/oimg?key=0And9-E460tgZdFp2Z1Flc3F6V0QySWZYdkg1eGxXUWc&amp;oid=2&amp;zx=jjsc9jxpiyqu" alt="" /></p>
<p>And who wins the email war? Based on the same data, most of the users were using emails from the following providers:</p>
<table>
<tbody></tbody>
<thead>
<tr>
<th># of users</th>
<th>Provider</th>
</tr>
</thead>
<tbody>
<tr>
<td>11281</td>
<td>yahoo.com</td>
</tr>
<tr>
<td>7250</td>
<td>other email providers</td>
</tr>
<tr>
<td>5077</td>
<td>hotmail.com</td>
</tr>
<tr>
<td>4876</td>
<td>aol.com</td>
</tr>
<tr>
<td>4837</td>
<td>gmail.com</td>
</tr>
<tr>
<td>1600</td>
<td>comcast.net</td>
</tr>
<tr>
<td>1263</td>
<td>msn.com</td>
</tr>
<tr>
<td>920</td>
<td>sbcglobal.net</td>
</tr>
<tr>
<td>676</td>
<td>verizon.net</td>
</tr>
<tr>
<td>478</td>
<td>bellsouth.net</td>
</tr>
<tr>
<td>440</td>
<td>cox.net</td>
</tr>
</tbody>
</table>
<p><img src="https://spreadsheets.google.com/spreadsheet/oimg?key=0And9-E460tgZdFp2Z1Flc3F6V0QySWZYdkg1eGxXUWc&amp;oid=3&amp;zx=8kvnid3omtf7" alt="" /></p>
]]></content:encoded>
			<wfw:commentRss>http://emresaglam.com/blog/1011/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>RawCap: A new network sniffer for Windows without winpcap dependencies</title>
		<link>http://emresaglam.com/blog/996</link>
		<comments>http://emresaglam.com/blog/996#comments</comments>
		<pubDate>Wed, 13 Apr 2011 04:17:31 +0000</pubDate>
		<dc:creator>Emre</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[news]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://emresaglam.com/blog/?p=996</guid>
		<description><![CDATA[Netresec released a new Windows network sniffer tool that looks promising: RawCap. It has no winpcap dependencies and with its small 17kB foot print it does not require installing. (Having said that you still need .NET Framework libraries and DLLs.) Here are the properties of RawCap from their webpage: Can sniff any interface that has [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.netresec.com/?page=Home">Netresec</a> released a new Windows network sniffer tool that looks promising: <a href="http://www.netresec.com/?page=RawCap">RawCap</a>. It has no winpcap dependencies and with its small 17kB foot print it does not require installing. (Having said that you still need .NET Framework libraries and DLLs.)</p>
<p>Here are the properties of RawCap from their webpage:</p>
<ul>
<li>Can sniff any interface that has got an IP address, including 127.0.0.1 (localhost/loopback)</li>
<li>RawCap.exe is just 17 kB</li>
<li>No external libraries or DLL&#8217;s needed other than .NET Framework 2.0</li>
<li>No installation required, just download RawCap.exe and sniff</li>
<li>Can sniff most interface types, including WiFi and PPP interfaces</li>
<li>Minimal memory and CPU load</li>
<li>Reliable and simple to use</li>
</ul>
<p>For downloading and some screenshots and more information <a href="http://www.netresec.com/?page=RawCap">click here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://emresaglam.com/blog/996/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WOW OTP Goodness</title>
		<link>http://emresaglam.com/blog/875</link>
		<comments>http://emresaglam.com/blog/875#comments</comments>
		<pubDate>Tue, 29 Dec 2009 03:16:16 +0000</pubDate>
		<dc:creator>Emre</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[life]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[wow]]></category>

		<guid isPermaLink="false">http://emresaglam.com/blog/?p=875</guid>
		<description><![CDATA[OK, the title means: World of Warcraft One Time Password Goodness. I just got my OTP generator from Blizzard. It has a nice horde colors touch. The activation was very simple. I was expecting that it would replace my static password, but it didn&#8217;t. Instead it asks your password first (what you know) then it [...]]]></description>
			<content:encoded><![CDATA[<p>OK, the title means: World of Warcraft One Time Password Goodness. <img src='http://emresaglam.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>I just got my OTP generator from Blizzard. It has a nice horde colors touch. The activation was very simple. I was expecting that it would replace my static password, but it didn&#8217;t. Instead it asks your password first (what you know) then it asks the code generated by the token in a second window (what you have).</p>
<p>It&#8217;s very nice to see from a computer game vendor to use <a href="http://en.wikipedia.org/wiki/Two-factor_authentication">two factor authentication</a>. And here is a picture <img src='http://emresaglam.com/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p><a href="http://emresaglam.com/blog/wp-content/uploads/2009/12/OTP.jpg"><img class="aligncenter size-full wp-image-876" title="Token" src="http://emresaglam.com/blog/wp-content/uploads/2009/12/OTP.jpg" alt="" width="640" height="426" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://emresaglam.com/blog/875/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>nmap 5 released!</title>
		<link>http://emresaglam.com/blog/826</link>
		<comments>http://emresaglam.com/blog/826#comments</comments>
		<pubDate>Thu, 16 Jul 2009 19:33:55 +0000</pubDate>
		<dc:creator>Emre</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://emresaglam.com/blog/?p=826</guid>
		<description><![CDATA[nmap version 5 is released today. According to insecure.org it&#8217;s the most important release since 1997. Here is the changelog, Here are the release notes, And here is the download link. I want to mention one more time how much I appreciate all work done on this exceptional product.]]></description>
			<content:encoded><![CDATA[<p><a href="http://nmap.org/">nmap</a> version 5 is released today. According to insecure.org it&#8217;s the most important release since 1997.</p>
<p><a href="http://nmap.org/5/#5changes">Here is the changelog</a>,</p>
<p><a href="http://nmap.org/5/">Here are the release notes</a>,</p>
<p>And <a href="http://nmap.org/download.html">here is the download link</a>.</p>
<p>I want to mention one more time how much I appreciate all work done on this exceptional product. <img src='http://emresaglam.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://emresaglam.com/blog/826/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

