Newsletters

Welcome to the first release of “Constellation”, Gemini Security Solutions newsletter. Each release will feature current news, tips, tools and opinions that will help you balance information security and business operations. Let us know whether you agree or disagree with what you read at info@geminisecurity.com.

Even better, tell your friends about Constellation! Enjoy!

Peter Hesse
Founder, Gemini Security Solutions, Inc.
pmhesse@geminisecurity.com.

PS. Don’t forget to check out our blog http://securitymusings.com for even more insights and techniques from the Gemini team.

MD5 Considered Dangerous

Late in 2008, the MD5 hash algorithm, known to be weak since 2005, had allowed researchers to get a rogue certification authority certificate issued by a major CA trusted by most. Read our take on the attack and get our instructions for removing an untrustworthy CA from your system.

Firefox 3 and SSL Warnings

Earlier this year we hosted a bit of a debate on whether Firefox’s SSL Warnings were the best way to make users aware of their Web browser security decisions. While Gemini remains split on the issue, Anil Polat provided detailed instructions on making the SSL warning behavior less intrusive, similar to the way Firefox 2 behaved.

Gemini Security Solutions provides world class public key infrastructure (PKI) consulting expertise. What if you don’t even know how to spell PKI, let alone use one? Gemini has written a brief primer on the basics of PKI and a tutorial on sending encrypted email using Outlook 2007.

James Madison University students face a simulated scenario of being hired into an already existing IT infrastructure after the entire network team had previously been fired. Three members of the Gemini team had a great time serving as hackers attacking the simulated infrastructure

PHPdumpASN is a tool which allows you to view and print a human readable version of an ASN.1 file, such as a PKI certificate or CRL, entirely within your web browser and without requiring any software download. Give it a try.