Comments on: What I’m Working On

By: Dreamlab IT-Security Bulletin - August 2007 at Disenchant’s Blog

Dreamlab IT-Security Bulletin - August 2007 at Disenchant’s Blog — Mon, 03 Sep 2007 21:56:01 +0000

[...] to do a translation of it, even when I think that I’ll never finish it because of too much other stuff where I really think I should work on because the outcome is much higher. So, if you can understand [...]

By: Disenchant

Disenchant — Mon, 20 Aug 2007 16:41:11 +0000

Hi Paul,
you can subscribe to the news feed of my blog. I’ll announce all projects/papers in a separate posting when they become public available.

By the way just out of personal interest, in which of the mentioned topics are you interested?

PS: Just as an information, I finished the “Fix your PHP Code without changing it” paper yesterday and it’s now also ready for review. This means that this and also the “XSIO” paper will be released very soon

By: tenest

tenest — Mon, 20 Aug 2007 14:36:33 +0000

Will you make an announcement when the papers are finished? Or is there a way we can sign up to be notified? There are definitely some topics that I am interested in and would like to see what you have to say.

By: Disenchant

Disenchant — Sun, 19 Aug 2007 21:04:54 +0000

Hi Tony,
yes I read Kevin’s book and I have to say that it’s very good for showing people how mighty social engineering techniques can be but it gives you as a reader from my point of view nothing more than a theoretical overview. The paper I’d like to write is one, that you should read when you already know what SE is. I’ll focus much more on how to do successful SE attacks yourself (and try to make the readers not criminals at the same time ). In this paper I’ll also present an updated version of my attack model of SE because I think that I know some more stuff now then some years before when I made my first presentations on that topic.

Stay curious about the paper but you have to wait some months I think because it’s one of the last projects on my todo list because I’ve too much other things going on at the moment (for example also all the OWASP stuff in Switzerland).

By: Tony Collen

Tony Collen — Sun, 19 Aug 2007 14:42:45 +0000

Kevin Mitnick has a great book called “The Art of Deception” that is all about Social Engineering.