Kit per il cracking del Wi-Fi key-cracking in vendita in China

A quanto pare alcuni venditori cinesi si stanno dando da fare per vendere un kit che includa tutto il necessario per consentire a chiunque sia interessato al cracking di (semplici) reti WiFI basate sul protocolo di (sicurezza?) WEP.

Il kit (ci cui vedete un'immagine sotto) comprende una ottima scheda wireless, una distro Linux live basata sulle ultime versioni di backtrack e un manuale passo passo che spiega come penetrare la rete WiFi.

L'articolo originale che descrive dettagliatamente il contenuto del kit e il prezzo (circa 24$) lo trovate qui.

Inutile ricordare che questo tipo di attivita' e' assolutamente illegale...anche se e' risaputo che il mondo e' pieno di curiosi...

Microsoft Security Developer Starter Kit

The Microsoft SDL - Developer Starter Kit provides a compliation of baseline developer security training materials on the following core Microsoft Security Development Lifecycle (SDL) topics:

a) secure design principles;

b) secure implementation principles;

c) secure verification principles;

d) SQL injection;

e) cross-site scripting;

f) code analysis;

g)banned application programming interfaces (APIs);

h) buffer overflows;

i) source code annotation language;

j) security code review;

k) compiler defenses;

l) fuzz testing;

m) Microsoft SDL threat modeling principles; and

n) the Microsoft SDL threat modeling tool.

Each set of guidance contains Microsoft Office PowerPoint slides, speaker notes, train-the-trainer audio files, and sample comprehension questions. All materials have limited formatting so that you can leverage the content to achieve broader, enhanced adoption of Microsoft SDL principles in your development organization.

Developer Highway Code (free ebook)

To build software that meets your security objectives, you must integrate security activities into your software development lifecycle. This handbook captures and summarises the key security engineering activities that should be an integral part of your software development processes.
These security engineering activities have been developed by Microsoft patterns & practices to build on, refine and extend core lifecycle activities with a set of security-specific activities. These include identifying security objectives, applying design guidelines for security, threat modelling, security architecture and design reviews, security code reviews and security deployment reviews.