<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>xentek &#187; Security</title>
	<atom:link href="http://xentek.net/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://xentek.net</link>
	<description></description>
	<lastBuildDate>Sat, 04 Feb 2012 20:52:32 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.4-alpha-19827</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Apple releases Security Update. Fixes DNS Vulnerability</title>
		<link>http://xentek.net/etc/152/apple-releases-security-update-fixes-dns-vulnerability/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=apple-releases-security-update-fixes-dns-vulnerability</link>
		<comments>http://xentek.net/etc/152/apple-releases-security-update-fixes-dns-vulnerability/#comments</comments>
		<pubDate>Fri, 01 Aug 2008 15:49:22 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[patch]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http:/xentek.net/?p=152</guid>
		<description><![CDATA[Apple released Security Update 2008-005, which fixes numerous things. Including the infamous Cache Poisoning DNS Vulnerability, and updates PHP to 5.2.6. Run Software Update now to patch.]]></description>
		<wfw:commentRss>http://xentek.net/etc/152/apple-releases-security-update-fixes-dns-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DNS Exploit, fully explained</title>
		<link>http://xentek.net/etc/146/dns-exploit-fully-explained/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=dns-exploit-fully-explained</link>
		<comments>http://xentek.net/etc/146/dns-exploit-fully-explained/#comments</comments>
		<pubDate>Sun, 27 Jul 2008 15:59:47 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http:/xentek.net/etc/146/dns-exploit-fully-explained/</guid>
		<description><![CDATA[  Ars Technica  has posted a great overview of the DNS Exploit I've  been   talking   about  for the last week or so.   Use  doxpara  to test your DNS provider.  <a href="http://xentek.net/etc/146/dns-exploit-fully-explained/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/146/dns-exploit-fully-explained/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DNS Exploit now in the wild</title>
		<link>http://xentek.net/etc/142/dns-exploit-now-in-the-wild/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=dns-exploit-now-in-the-wild</link>
		<comments>http://xentek.net/etc/142/dns-exploit-now-in-the-wild/#comments</comments>
		<pubDate>Thu, 24 Jul 2008 15:43:42 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[patch]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http:/xentek.net/?p=142</guid>
		<description><![CDATA[You had your chance, but now the previously reported DNS vulnerability has been disclosed publicly, more or less. Dan put up this cryptic post, and the comments basically spell it out. The exploit is known, and it can be performed &#8230; <a href="http://xentek.net/etc/142/dns-exploit-now-in-the-wild/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/142/dns-exploit-now-in-the-wild/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>No, really. Patch your DNS.</title>
		<link>http://xentek.net/etc/137/no-really-patch-your-dns/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=no-really-patch-your-dns</link>
		<comments>http://xentek.net/etc/137/no-really-patch-your-dns/#comments</comments>
		<pubDate>Wed, 16 Jul 2008 17:47:37 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[patch]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http:/xentek.net/?p=137</guid>
		<description><![CDATA[&#8220;First, take the advisory seriously—we&#8217;re not just a bunch of n00b alarmists, if we tell you your DNS house is on fire, and we hand you a fire hose, take it.&#8221; Sage advice from Paul Vixie on the recent DNS &#8230; <a href="http://xentek.net/etc/137/no-really-patch-your-dns/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/137/no-really-patch-your-dns/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Multi-Vendor patch addresses major DNS exploit</title>
		<link>http://xentek.net/etc/122/multi-vendor-patch-addresses-major-dns-exploit/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=multi-vendor-patch-addresses-major-dns-exploit</link>
		<comments>http://xentek.net/etc/122/multi-vendor-patch-addresses-major-dns-exploit/#comments</comments>
		<pubDate>Wed, 09 Jul 2008 01:13:14 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[patch]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[software]]></category>

		<guid isPermaLink="false">http:/xentek.net/etc/122/multi-vendor-patch-addresses-major-dns-exploit/</guid>
		<description><![CDATA[ In a rare show of cooperative effort, multiple vendors released a patch today to their DNS implementations, the underlying technology behind connecting domain names to the IP addresses they live on. ...  Here's a  tool to test  to see if you're at risk to the Cache Poisoning exploit.   <a href="http://xentek.net/etc/122/multi-vendor-patch-addresses-major-dns-exploit/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/122/multi-vendor-patch-addresses-major-dns-exploit/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Another Useful WordPress Security Plugin</title>
		<link>http://xentek.net/editorial/116/another-useful-wordpress-security-plugin/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=another-useful-wordpress-security-plugin</link>
		<comments>http://xentek.net/editorial/116/another-useful-wordpress-security-plugin/#comments</comments>
		<pubDate>Tue, 01 Jul 2008 03:40:52 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[editorial]]></category>
		<category><![CDATA[plugin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[wordpress]]></category>
		<category><![CDATA[wp]]></category>

		<guid isPermaLink="false">http:/xentek.net/editorial/116/another-useful-wordpress-security-plugin/</guid>
		<description><![CDATA[  WordPress Exploit Scanner 0.1  has been released, in response to  a comment  on a recent thread about  old versions  of  WordPress sites being hacked . 

...For a brand new plugin that's not bad, but throwing a false negative on such a popular theme is something that will need to be addressed.  <a href="http://xentek.net/editorial/116/another-useful-wordpress-security-plugin/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/editorial/116/another-useful-wordpress-security-plugin/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Better Default Security in WordPress 2.6</title>
		<link>http://xentek.net/articles/111/better-default-security-in-wordpress-26/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=better-default-security-in-wordpress-26</link>
		<comments>http://xentek.net/articles/111/better-default-security-in-wordpress-26/#comments</comments>
		<pubDate>Sun, 22 Jun 2008 17:19:41 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[articles]]></category>
		<category><![CDATA[2.6]]></category>
		<category><![CDATA[Blogging]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http:/xentek.net/?p=111</guid>
		<description><![CDATA[WordPress 2.6 will be more secure out-of-the box including better support for running the admin over SSL and changes to disable the remote publishing protocols by default. We have choosen to disable Atom Publishing Protocol and the variety of XML-RPC &#8230; <a href="http://xentek.net/articles/111/better-default-security-in-wordpress-26/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/articles/111/better-default-security-in-wordpress-26/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Leopard Security In-Depth</title>
		<link>http://xentek.net/etc/98/leopard-security-in-depth/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=leopard-security-in-depth</link>
		<comments>http://xentek.net/etc/98/leopard-security-in-depth/#comments</comments>
		<pubDate>Sat, 07 Jun 2008 02:13:14 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[10.5]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[leopard]]></category>
		<category><![CDATA[Mac OS X]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http:/xentek.net/etc/98/leopard-security-in-depth/</guid>
		<description><![CDATA[ PDF from Apple on  Leopard Security .   Its pretty meaty.  <a href="http://xentek.net/etc/98/leopard-security-in-depth/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/98/leopard-security-in-depth/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Data Sanitization</title>
		<link>http://xentek.net/etc/42/data-sanitization/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=data-sanitization</link>
		<comments>http://xentek.net/etc/42/data-sanitization/#comments</comments>
		<pubDate>Thu, 11 Oct 2007 05:10:08 +0000</pubDate>
		<dc:creator>Eric Marden</dc:creator>
				<category><![CDATA[etcetera]]></category>
		<category><![CDATA[database]]></category>
		<category><![CDATA[fun]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[sql injection]]></category>

		<guid isPermaLink="false">http:/xentek.net/etc/42/data-sanitization/</guid>
		<description><![CDATA[A good lesson from our friends at xkcd.
 <a href="http://xentek.net/etc/42/data-sanitization/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
		<wfw:commentRss>http://xentek.net/etc/42/data-sanitization/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

