BuildOrBuy Group Network
| www.buildorbuy.org | www.buildorbuy.net |

Security News:

Security must now be a priority for all of us. We can take nothing for granted. Life is too  precious to think otherwise. We must continue to have compassion for our fellow man. Our goal continued Goal with BuildOrBuy is "People Helping People With Education Through Technology". Stay positive, stay focused and be productive! Due Diligence is now the Order of Business!

1. Netcraft - Anti-Phishing Toolbar: Traps suspicious URLs to prevent deception and evaluate fraudulent urls (6/22/2005).
   1. Netcraft News - Lax Security Cited in Massive Credit Card Data Theft: "Inadequate security ..." (6/22/2005)

2. Securing Windows Inside Microsoft's Battle to Deliver Secure Software - eWEEK.com: (4/6/2005)

3. www.StaySafeOnline.info - NCSA's Top Ten Cyber Security Tips: (1/28/2005).

4. www.microsoft.com - Security Tools: Update your Security Toolkit (12/24/2003).

5. www.microsoft.com - What You Should Know About the Security Updates for October 2003: (10/23/2003).

6. Microsoft's new security plan CNET News.com: Better takes more time. Sure. In the mean time... (10/10/2003).

7. SUSserver ~ Software Update Services: (SUS) Software Update Services - (9/11/2003).

8. Download details Software Update Services Server 1.0 with Service Pack 1: SUS Server 1.0 with SP1 requires P3-733, 512 MB's RAM and 6 GBs HD Space; Supports Win2000 & WinServ2003 (9/11/2003).

9. Subscribing to the Microsoft Security Notification Service: Sign Up! (9/11/2003)

10. www.microsoft.com - Protect Your PC: (8/29/2003).

11. Microsoft Baseline Security Analyzer: MBSA Version 1.1.1 (8/12/2003).

12. 823980 - MS03-026 Buffer Overrun in RPC Interface May Allow Code Execution (8/25/2003).

13. Microsoft warns of critical Windows flaw CNET News.com: "the remote procedure call (RPC) process, facilitates such activities such as sharing files and allowing others to use the computer's printer.

    By sending too much data to the RPC process, an attacker can cause the system to grant full access to the system." (7/18/2003)

14. www.secureie.com - Secure IE: Secure Internet Explorer Web Browser (5/9/2003)!
15. Computer Security Show Main Entrance: The ITsecurity Show - The world's largest on-line security exhibition (3/31/2003).
16. Technet In the News: TechNet Announces Formation of CEO Cybersecurity Task Force - Task Force will help shape national cybersecurity policymaking - "The White House's National Strategy to Secure Cyberspace builds a strong foundation for what we must accomplish as a nation. It is now time to begin implementing the recommendations," said Eric Benhamou, co-chair of TechNet¿s CEO Cyber Security Task Force and Chairman of 3Com and Palm. "If our goal is to encourage enterprises in every sector to rapidly adopt known cybersecurity best practices, we believe that a privately led, voluntary initiative is preferable to a government mandate. This task force of TechNet CEOS is uniquely qualified to lead the way." (3/28/2003)
17. www.visualautomation.com - Secure Desktop 6: "Secure Desktop restricts features in Windows, Internet Explorer, Office 2000, and Office XP programs using the registry. Restrict local file access, menu items, and toolbar buttons." (3/27/2003)
18. www.eWeek.com - Feds Move to Secure Net: "...The White House and the new Department of Homeland Security have begun in earnest the process of implementing the plan to secure the nation's critical networks—starting with extensive changes in the federal security infrastructure." (3/22/2003)
19. Windows XP Security Checklist from LabMice.net Live document, continually updated (3/17/2003).
20. The Security Report (TSR), a bi-monthly publication dedicated to Professionals in the Security and Prevention Space: Safety through increased vigilance from Venture Reporter (2/4/2003).
21. Microsoft.com - 3-Step Security Checkup for Your New PC (1/25/2003).
22. How to Maintain Windows Security (7/9/2002).
23. PC PhoneHome: Tracks & Locates Missing PC's (6/11/2002).
24. ExtremeTech.com:  Privacy and Security on your PC (5/28/2002).
25. eEye Digital Security: Macromedia Flash ActiveX Buffer overflow (5/9/2002).
26. Outlook Security Features (5/9/2002).
27. ExtremeTech.com:  New Way to Nab Hackers (5/7/2002).
28. Broadband: ITworld.com - SECURITY STRATEGIES - The Often Overlooked Backdoor (5/7/2002).
29. ExtremeTech.com:  Do-it-Yourself Security (5/2/2002).
30. Microsoft Security Checklist: 7 Steps to Personal Computing Security (4/17/2002).
31. Microsoft.com:  Home and Office User Tips and Tricks - Security Tips (4/10/2002).
32. Microsoft TechNet Online Support: HOW TO: Monitor for Unauthorized User Access in Windows 2000 (2/19/2002).
33. PCGuardian.com:  Encryption software and anti-theft devices - Your computer security specialist (2/15/2002).
34. ExtremeTech.com: Secure Your Software with Hardware (1/31/2002).
35. Spytech Online 2002 - Providing Powerful Security, Monitoring, and Privacy Software (1/31/2002).
36. Shut Off Windows. Turn On Desktop Security - www1.internetwire.com (1/17/2002).
37. Homeland Security Actions (1/10/2002).
38. Subcommittee on Terrorism and Homeland Security (1/10/2002).
39. Texas: Governor Rick Perry - Homeland Security Homepage (1/10/2002).
40. News Link Removed Due To Virus From That Site!!!: The Ultimate Security Research Resource - ITsecurity.com Security News Compendium for the whole of 2001 - 15 MB D/L (1/3/2002).

41. Microsoft: Safe Internet Microsoft Privacy and Security Fundamentals (1/2/2002).

Security Priorities:

1. National Infrastructure Protection Center (NIPC) - Home Page

2. ZDNet Tech Update Security (12/18/01).

3. www.activis.com: Managed Security Services (12/18/01).

4. Attack Registry Intelligence Service My Incident List

5. Geek.com: Geek News - Microsoft dangles security by obscurity carrot (12/14/01).

6. Security Administrator (12/14/01).

7. The Register - MS rolls out security obscurity bribe program (12/13/01).

8. SecurityManagement.com: Online (12/13/01).

9. Windows 2000 Magazine Network

10. Microsoft ISA server & Windows 2000 security information

11. US State Department's Travel Warnings

12. Microsoft's Brian Valentine discusses new Strategic Technology Protection Program

13. ITsecurity.com's Security Clinic - Ask The Expert (09/25/01).
14. CetusSoft Security Programs for Windows - Windows Desktop Security
15. ActivatorDesk(tm) - Desktop Security for DSL Cable Broadband Connectivity - First beta release will be available soon!
16. ActivatorDesk(tm) Internet Desktop - Speed and Security for your Windows and Internet
17. ExtremeTech.com: Broadband security (06/12/2001).

1. Security Industry Association
2. ISC West - International Security Conference & Expo: Las Vegas, NV, March 5-7, 2002, Las Vegas, Convention Center.
3. ISC East - International Security Conference & Expo: Orlando, FL, August 14-16, 2002, Orange County, Convention Center
4. Home Automation Show
5. SecurityPointer.com: Computer Security Privacy and Tools
6. SecurityFocus.com

• Password Recovery

1. The Twenty Most Critical Internet Security Vulnerabilities (Updated) by SANS Institute and the National Infrastructure Protection Center (NIPC) ...more.
2. Free Security Guide from NetIQ - "...Insights into Security Dos and Don'ts"
3.   Win2000 - Hotfixes
4. PatchWork - Windows NT Security Checker -
5. GRC.com: PatchWork - FBI Announcement - (March 8th, 2001)
6. What's New in SP2 - Table_01
7. Folder Guard - Security Software for Windows XP-2000-NT-Me-9x

1. Bios
2. Bios Lock
3. Deep Freeze - Complete Windows Protection
4. EksitData.com: Bios Savior (Backup Bios) & PC Guardian (Safety Guard HDD Protector) PCI Card
5. HDD Sheriff
6. PCGuardian. com - Encryption Plus Hard Disk
7. www.scramdisk.com - DriveCrypt Hard Disk Encryption, 256 bit (2/3/2003).

Win2000 Security

802.11b Wireless Security Issues

WarDriving.com (6/1/2002).

net stumbler dot com - Net Stumbler . com - Proudly Stumbling a Street Near You

Exploiting and Protecting 802.11b Wireless Networks

1. The Center for Internet Security CIS Benchmarks and Scoring Tool for Windows 2000 and Windows NT (7/20/2002).
2. Win2000 - Security Configuration Tool Set (6/11/2002).
3. IPSec: Internet Protocol Security (6/11/2002).
4. Evidence Eliminator - What evidence is on your hard drive (1/22/2002).
5. Worm targets security software - Tech News - CNET.com (1/2/2002).
6. Trusted Computing Forum 2001 Virtual Pressroom (12/27/01).
7. Security Analyzer, WebTrends (NetIQ)
8. Windows 2000 Installation Security Checklist  - EFS Resource Center (12/14/01).
9. Black Hat Briefings and Training - Windows 2000 Security Briefings & Training
10. Windows 2000 Security Handbook
11. NetIQ Corporation - End-to-End Solutions for Managing E-Business Infrastructures (12/13/01).
12. IBM Security Solutions:
13. FoolProof Security, the Leader in PC Security Desktop Security
14. eWEEK: 5 Steps To Enterprise Security (12/10/01).
15. Evidence Eliminator - What evidence is on your hard drive? (12/08/01).
16. LANguard Security Event Log
    Monitor (S.E.L.M.)
17. Order Now! Microsoft Security Toolkit
18. Windows 2000 Installation Security Checklist
19.   Microsoft Personal Security Advisor (MPSA)
20.   Microsoft Security: Strategic Technology Protection Program (STPP) - Get Secure & Stay Secure!
21. Use QChain.exe to Install Multiple Hotfixes with One Reboot - Q296861
22. Qfecheck.exe Verifies the Installation of Windows 2000 Hotfixes - Q282784
23. Microsoft Network Security Hotfix Checker (Hfnetchk.exe) Tool Is - Q303215
24. Windows XP Professional: Secure
25. Pirated Copies Of Windows XP Pose Security Risk - Microsoft (10/30/01).

1. DefenseOfHouston.org: Maximizing Houston's readiness for disasters, including terrorism
2. The ANSER Institute For Homeland Security
3. Journal of Homeland Security
4. U.S. Senate, 107th Congress
5. Governmental Affairs Committee, United States Senate
6. National Infrastructure Protection Center (NIPC)
7. Countermeasures: CERT Security Improvement Modules

1. The Register: FBI 'Magic Lantern' reality check (03/12/2001).
2. msnbc.com: FBI confirms ‘Magic Lantern’ exists (12/12/01).
3. Antivirus Vendors Wary of FBI's Magic Lantern (12/06/01).
4. FBI.gov: Carnivore renamed DCS1000
5. CNET.com - Tech News - House leader concerned about Carnivore (6-14-01)
6. FBI Programs and Initiatives - Carnivore Diagnostic Tool
7. FBI Press Room - Congressional Statement - 2000 - Carnivore Diagnostic Tool
8. FBI Programs and Initiatives - Carnivore Diagnostic Tool
9. Draft Report: Independent Technical Review of the Carnivore System
10. FBI's Wiretaps To Scan E-Mail Spark Concern 
11. Who Watches the Web?
12. Washingtonpost.com: Live Online

1. National Security Agency Site
2. FAS.org - National Security Agency Site
3. EchelonWatch.org
4. ECHELON: America's Secret Global Surveillance Network -- Patrick S. Poole ...more.
5. ECHELON: NSA's Global Electronic Interception
6. The ECHELON System 
7. ACLU.org - Echelon FAQ
8. From InfoWorld.com - SECURITY ADVISOR...

   EUROPEAN PARLIAMENT, Temporary Committee on the ECHELON Interception System (May 4, 2001) 

9. Federation of American Scientists - ECHELON
10. European Parliament Draft.pdf
11. (Or see James Bamford's Body of Secrets, a recently published history of the NSA, starting on page 394.)
12. RandomHouse.com - Body of Secrets 
13. Getting Paranoid? Earthweb IT Management: Security: Early Warning: Keeping on Top of Security Information