<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>Security</title><link>http://blogs.crsw.com/mark/category/6.aspx</link><description>Security</description><managingEditor>Mark H. Wagner</managingEditor><dc:language>en-US</dc:language><generator>.Text Version 0.95.2004.102</generator><item><dc:creator>Mark H. Wagner</dc:creator><title>FBI agents crack WEP in 3 minutes</title><link>http://blogs.crsw.com/mark/archive/2005/04/07/836.aspx</link><pubDate>Thu, 07 Apr 2005 10:39:00 GMT</pubDate><guid>http://blogs.crsw.com/mark/archive/2005/04/07/836.aspx</guid><wfw:comment>http://blogs.crsw.com/mark/comments/836.aspx</wfw:comment><comments>http://blogs.crsw.com/mark/archive/2005/04/07/836.aspx#Feedback</comments><slash:comments>27</slash:comments><wfw:commentRss>http://blogs.crsw.com/mark/comments/commentRss/836.aspx</wfw:commentRss><trackback:ping>http://blogs.crsw.com/mark/services/trackbacks/836.aspx</trackback:ping><description>&lt;P&gt;There is an interesting article about how FBI agents crack WEP (wireless encryption) in 3 minutes.&amp;nbsp; The article at TomsNetworking covers this in detail including the tools they used.&amp;nbsp; There is also a list of steps you can take to secure your wireless&amp;nbsp;home network.&lt;/P&gt;
&lt;P&gt;&lt;A target="_blank" href="http://www.tomsnetworking.com/Sections-article111-page1.php"&gt;http://www.tomsnetworking.com/Sections-article111-page1.php&lt;/A&gt;&lt;/P&gt;&lt;img src ="http://blogs.crsw.com/mark/aggbug/836.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>Mark H. Wagner</dc:creator><title>Securing the Username Token with WSE 2.0 by Keith Brown</title><link>http://blogs.crsw.com/mark/archive/2005/03/30/816.aspx</link><pubDate>Wed, 30 Mar 2005 13:26:00 GMT</pubDate><guid>http://blogs.crsw.com/mark/archive/2005/03/30/816.aspx</guid><wfw:comment>http://blogs.crsw.com/mark/comments/816.aspx</wfw:comment><comments>http://blogs.crsw.com/mark/archive/2005/03/30/816.aspx#Feedback</comments><slash:comments>10</slash:comments><wfw:commentRss>http://blogs.crsw.com/mark/comments/commentRss/816.aspx</wfw:commentRss><trackback:ping>http://blogs.crsw.com/mark/services/trackbacks/816.aspx</trackback:ping><description>&lt;P&gt;I have been working to improve my knowledge of WSE and WSE 2.0.&lt;SPAN&gt;  &lt;/SPAN&gt;&lt;A href="http://pluralsight.com/blogs/keith/archive/2005/02/01/5526.aspx" target=_blank&gt;Keith Brown&lt;/A&gt; has an excellent article on &lt;A href="http://msdn.microsoft.com/webservices/default.aspx?pull=/library/en-us/dnwse/html/securusernametoken.asp" target=_blank&gt;Securing the Username Token with WSE 2.0&lt;/A&gt;.&lt;SPAN&gt;  &lt;/SPAN&gt;He also has a post on his &lt;A href="http://pluralsight.com/blogs/keith/archive/2005/02/01/5526.aspx" target=_blank&gt;blog&lt;/A&gt; with comments regarding this article.&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Keith does an excellent job of clearly discussing the &lt;EM&gt;what&lt;/EM&gt;, &lt;EM&gt;why&lt;/EM&gt;, and the &lt;EM&gt;how&lt;/EM&gt; on best-practices for securing user tokens - and why it is so important to do this correctly.  He covers how to mitigate agains issues like brute-force and off-line attacks as well as what not to do.  Clear and concise.&lt;/P&gt;&lt;img src ="http://blogs.crsw.com/mark/aggbug/816.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>Mark H. Wagner</dc:creator><title>Trust Decisions, SSL, and SSL (In)Securities</title><link>http://blogs.crsw.com/mark/archive/2004/08/30/472.aspx</link><pubDate>Mon, 30 Aug 2004 09:10:00 GMT</pubDate><guid>http://blogs.crsw.com/mark/archive/2004/08/30/472.aspx</guid><description>&lt;P&gt;I had a question about SSL and submitted it to both Eric Lippert&amp;nbsp;and Dana Epp.&amp;nbsp; They both promptly answered along with with excellent information.&amp;nbsp; I thought I'd&amp;nbsp;share the information and links.&amp;nbsp; A big thanks to both Eric and Dana!&lt;/P&gt;
&lt;P&gt;Dana Epp's response:&lt;BR&gt;&lt;A href="http://silverstr.ufies.org/blog/archives/000678.html"&gt;http://silverstr.ufies.org/blog/archives/000678.html&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Eric Lippert article:&lt;BR&gt;&lt;A href="http://blogs.msdn.com/ericlippert/archive/2003/09/25/53101.aspx"&gt;http://blogs.msdn.com/ericlippert/archive/2003/09/25/53101.aspx&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;These are both EXCELLENT sites/bloggers and I highly recommend you visit them.&lt;/P&gt;&lt;img src ="http://blogs.crsw.com/mark/aggbug/472.aspx" width = "1" height = "1" /&gt;</description></item><item><dc:creator>Mark H. Wagner</dc:creator><title>Configuring .NET Code Access Security - David Meyers</title><link>http://blogs.crsw.com/mark/archive/2004/02/13/149.aspx</link><pubDate>Fri, 13 Feb 2004 19:52:00 GMT</pubDate><guid>http://blogs.crsw.com/mark/archive/2004/02/13/149.aspx</guid><description>&lt;P&gt;&lt;A href="http://www.internet.com/icom_cgi/print/print.cgi?url=http://www.15seconds.com/issue/040121.htm"&gt;Configuring .NET Code Access Security&lt;/A&gt;&lt;/P&gt;&lt;img src ="http://blogs.crsw.com/mark/aggbug/149.aspx" width = "1" height = "1" /&gt;</description></item></channel></rss>