Wednesday, January 5, 2011
Chromium-6 Toxin Polluting U.S. Tap Water
According to a recent study, the cancer-causing chromium-6 compound has been found polluting tap water in 31 U.S. cities. Approximately 74 million Americans in 42 states consume water that is polluted with the chromium-6 chemical.
Chromium-6, aka hexavalent chromium, came to be well known to the public from the 2000 biographical film Erin Brockovitch. Chromium-6 comes from industrial processes and facilities used to manufacture pigments, dyes, and chrome plating. It is also frequently discharged from steel and pulp mills.
The EPA does not currently regulate chromium-6 specifically, but total chromium threshold is set at 100 ppb to protect against skin irritation. The EPA is expected to determine if a new level will set sometime this year.
Chromium-6, aka hexavalent chromium, came to be well known to the public from the 2000 biographical film Erin Brockovitch. Chromium-6 comes from industrial processes and facilities used to manufacture pigments, dyes, and chrome plating. It is also frequently discharged from steel and pulp mills.
The EPA does not currently regulate chromium-6 specifically, but total chromium threshold is set at 100 ppb to protect against skin irritation. The EPA is expected to determine if a new level will set sometime this year.
Sunday, January 2, 2011
ArpON - Protect yourself from MITM attacks.
ArpON (Arp handler inspectiON) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle through ARP Spoofing/Poisoning. It detects and blocks also Man In The Middle through ARP Spoofing/Poisoning for DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.
This is possible using two kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static Arp Inspection" the second on DARPI or "Dynamic Arp Inspection" approach. SARPI and DARPI protects both unidirectional, bidirectional and distributed attacks.
This is possible using two kinds of anti ARP Poisoning tecniques: the first is based on SARPI or "Static Arp Inspection" the second on DARPI or "Dynamic Arp Inspection" approach. SARPI and DARPI protects both unidirectional, bidirectional and distributed attacks.
Here's a very quick example of it's usage, we will use SARPI.
arpon -n 10 -g -u 1 -s -i eth0
-n 10 ~ Sets priority
-g ~ Works in logging mode
-u 1 ~ Sets sarpi timeout to 1 minute
-s ~ Manage arp cache statically
You can get ArpON with the apt-get command or visit here
ArpON "Arp handler inspection" version 1.90 (http://arpon.sourceforge.net)
[00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0
[00/02/2011 - 08:32:04 PST] Device: (eth0) MAC: 0:24:21:66:9:5a Inet4: 192.168.1.101 Netmask: 255.255.255.0
[00/02/2011 - 08:32:04 PST] SARPI Start...
[00/02/2011 - 08:32:04 PST] SARPI protects these Arp Cache's entries:
[00/02/2011 - 08:32:04 PST] 1) 192.168.1.1 -> 0:66:78:d6:92:c8
[00/02/2011 - 08:32:04 PST] SARPI Arp Cache refresh timeout: 1 minute.
[00/02/2011 - 08:32:04 PST] SARPI Realtime Protect actived!
-n 10 ~ Sets priority
-g ~ Works in logging mode
-u 1 ~ Sets sarpi timeout to 1 minute
-s ~ Manage arp cache statically
You can get ArpON with the apt-get command or visit here
Saturday, January 1, 2011
Dictionary pack for bruteforcing
Here's a pack of dictionaries I've accumulated, covers a good amount of words.
Subscribe to:
Posts (Atom)